{"total":59,"rows":[{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2406.06144","title":"Language Models Resist Alignment: Evidence From Data Compression","created":"2024-06-10","cited_by_count":53,"area":null},{"id":"2406.11036","title":"garak: A Framework for Security Probing Large Language Models","created":"2024-06-16","cited_by_count":49,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2410.17040","title":"Arabic Dataset for LLM Safeguard Evaluation","created":"2024-10-22","cited_by_count":17,"area":null},{"id":"2601.18076","title":"Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming","created":"2026-01-26","cited_by_count":15,"area":"safety"},{"id":"2504.17130","title":"Steering the CensorShip: Uncovering Representation Vectors for LLM \"Thought\" Control","created":"2025-04-23","cited_by_count":14,"area":"lr"},{"id":"2511.21990","title":"A Safety and Security Framework for Real-World Agentic Systems","created":"2025-11-27","cited_by_count":13,"area":"agents"},{"id":"2502.15620","title":"Paradigms of AI Evaluation: Mapping Goals, Methodologies and Culture","created":"2025-02-21","cited_by_count":11,"area":null},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2509.07604","title":"K2-Think: A Parameter-Efficient Reasoning System","created":"2025-09-09","cited_by_count":11,"area":"lr"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2504.20965","title":"AegisLLM: Scaling Agentic Systems for Self-Reflective Defense in LLM Security","created":"2025-04-29","cited_by_count":10,"area":"agents"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2405.15902","title":"Hacc-Man: An Arcade Game for Jailbreaking LLMs","created":"2024-05-24","cited_by_count":4,"area":"safety"},{"id":"2503.01493","title":"Sherkala-Chat: Building a State-of-the-Art LLM for Kazakh in a Moderately Resourced Setting","created":"2025-03-03","cited_by_count":4,"area":null},{"id":"2504.19855","title":"The Automation Advantage in AI Red Teaming","created":"2025-04-28","cited_by_count":4,"area":"safety"},{"id":"2503.16456","title":"Position: Beyond Assistance -- Reimagining LLMs as Ethical and Adaptive Co-Creators in Mental Health Care","created":"2025-02-21","cited_by_count":3,"area":null},{"id":"2512.06201","title":"K2-V2: A 360-Open, Reasoning-Enhanced LLM","created":"2025-12-05","cited_by_count":3,"area":"lr"},{"id":"2512.20164","title":"AI Security Beyond Core Domains: Resume Screening as a Case Study of Adversarial Vulnerabilities in Specialized LLM Applications","created":"2025-12-23","cited_by_count":3,"area":null},{"id":"2603.07466","title":"Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI","created":"2026-03-08","cited_by_count":3,"area":null},{"id":"2604.21159","title":"Adaptive Instruction Composition for Automated LLM Red-Teaming","created":"2026-04-22","cited_by_count":3,"area":"safety"},{"id":"2409.17458","title":"RED QUEEN: Safeguarding Large Language Models against Concealed Multi-Turn Jailbreaking","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2412.18551","title":"Libra-Leaderboard: Towards Responsible AI through a Balanced Leaderboard of Safety and Capability","created":"2024-12-24","cited_by_count":2,"area":null},{"id":"2505.00467","title":"Red Teaming Large Language Models for Healthcare","created":"2025-05-01","cited_by_count":2,"area":"safety"},{"id":"2505.12583","title":"A Comprehensive Survey on Physical Risk Control in the Era of Foundation Model-enabled Robotics","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2506.04975","title":"Evaluating Chinese Large Language Models: The Influence of Persona Assignment on Stereotypes and Safeguards","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2604.18976","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","created":"2026-04-21","cited_by_count":2,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2510.09699","title":"VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands","created":"2025-10-09","cited_by_count":1,"area":"mllm"},{"id":"2511.03271","title":"Let the Bees Find the Weak Spots: A Path Planning Perspective on Multi-Turn Jailbreak Attacks against LLMs","created":"2025-11-05","cited_by_count":1,"area":"safety"},{"id":"2511.14195","title":"N-GLARE: An Non-Generative Latent Representation-Efficient LLM Safety Evaluator","created":"2025-11-18","cited_by_count":1,"area":"safety"},{"id":"2603.20925","title":"Profit is the Red Team: Stress-Testing Agents in Strategic Economic Interactions","created":"2026-03-21","cited_by_count":1,"area":"agents"},{"id":"2606.11425","title":"JailbreakOPT: Tool-Assisted Iterative Jailbreak Prompt Optimization","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2506.18213","title":"A Conceptual Framework for AI Capability Evaluations","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2507.08014","title":"Mass-Scale Analysis of In-the-Wild Conversations Reveals Complexity Bounds on LLM Jailbreaking","created":"2025-07-06","cited_by_count":0,"area":"safety"},{"id":"2511.23174","title":"Are LLMs Good Safety Agents or a Propaganda Engine?","created":"2025-11-28","cited_by_count":0,"area":"safety"},{"id":"2601.05467","title":"STELP: Secure Transpilation and Execution of LLM-Generated Programs","created":"2026-01-09","cited_by_count":0,"area":"agents"},{"id":"2602.18483","title":"Red Teaming LLMs as Socio-Technical Practice: From Exploration and Data Creation to Evaluation","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2603.11001","title":"RCTs for Frontier AI Governance: Methodological Challenges and Solutions for Human Uplift Studies","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2605.04572","title":"From Parameter Dynamics to Risk Scoring : Quantifying Sample-Level Safety Degradation in LLM Fine-tuning","created":"2026-05-06","cited_by_count":0,"area":"alignment"},{"id":"2605.11730","title":"Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and Mitigation","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.12565","title":"Persona-Conditioned Adversarial Prompting (PCAP): Multi-Identity Red-Teaming for Enhanced Adversarial Prompt Discovery","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2606.11316","title":"Sch\\\"utzen: Evaluating LLM Safety in Bulgarian and German Contexts","created":"2026-06-09","cited_by_count":0,"area":"safety"},{"id":"2608.00042","title":"Trustworthiness Costs of Domain Adaptation in Small Language Models:A Cross-Architecture Empirical Study","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2608.05045","title":"Gradient Immunity: Null-Space Resistance to Malicious Fine-Tuning","created":"2026-08-05","cited_by_count":0,"area":"alignment"},{"id":"2608.07862","title":"SurakshaEval: An Indic Safety Benchmark for Multilingual LLMs","created":"2026-08-08","cited_by_count":0,"area":null},{"id":"2609.15383","title":"Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2609.33073","title":"Algorithmic Harms Associated with Generative Model-Augmented Recommendation Systems","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.35308","title":"Epistemic Policy Divergence in Multi-Turn LLM Contamination: A Protocol-Gradient Investigation","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}