{"total":95,"rows":[{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2407.04069","title":"A Systematic Survey and Critical Review on Evaluating Large Language Models: Challenges, Limitations, and Recommendations","created":"2024-07-04","cited_by_count":85,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2504.16980","title":"Safety Pretraining: Toward the Next Generation of Safe AI","created":"2025-04-23","cited_by_count":43,"area":null},{"id":"2406.17864","title":"AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policies","created":"2024-06-25","cited_by_count":37,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2405.17814","title":"FAIntbench: A Holistic and Precise Benchmark for Bias Evaluation in Text-to-Image Models","created":"2024-05-28","cited_by_count":22,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2407.08422","title":"On the (In)Security of LLM App Stores","created":"2024-07-11","cited_by_count":14,"area":null},{"id":"2509.13281","title":"RepIt: Steering Language Models with Concept-Specific Refusal Vectors","created":"2025-09-16","cited_by_count":12,"area":null},{"id":"2411.02317","title":"Defining and Evaluating Physical Safety for Large Language Models","created":"2024-11-04","cited_by_count":9,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2603.01919","title":"Real Money, Fake Models: Deceptive Model Claims in Shadow APIs","created":"2026-03-02","cited_by_count":8,"area":null},{"id":"2605.19537","title":"The Silent Hyperparameter: Quantifying the Impact of Inference Backends on LLM Reproducibility","created":"2026-05-19","cited_by_count":8,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2405.20404","title":"JoPA:Explaining Large Language Model's Generation via Joint Prompt Attribution","created":"2024-05-30","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2508.05464","title":"Bench-2-CoP: Can We Trust Benchmarking for EU AI Compliance?","created":"2025-08-07","cited_by_count":6,"area":null},{"id":"2510.02768","title":"A Granular Study of Safety Pretraining under Model Abliteration","created":"2025-10-03","cited_by_count":6,"area":null},{"id":"2509.00117","title":"Embodied AI: Emerging Risks and Opportunities for Policy Action","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2608.28945","title":"Automated Researchers Can Mitigate Well-characterized Alignment Failures","created":"2026-08-28","cited_by_count":5,"area":null},{"id":"2503.05856","title":"This Is Your Doge, If It Please You: Exploring Deception and Robustness in Mixture of LLMs","created":"2025-03-07","cited_by_count":4,"area":null},{"id":"2512.23701","title":"Eliciting Behaviors in Multi-Turn Conversations","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2603.29805","title":"From Density Matrices to Phase Transitions in Deep Learning: Spectral Early Warnings and Interpretability","created":"2026-03-31","cited_by_count":4,"area":null},{"id":"2412.02626","title":"Time-Reversal Provides Unsupervised Feedback to LLMs","created":"2024-12-03","cited_by_count":3,"area":null},{"id":"2504.21700","title":"XBreaking: Understanding how LLMs security alignment can be broken","created":"2025-04-30","cited_by_count":3,"area":null},{"id":"2505.13899","title":"Causes and Consequences of Representational Similarity in Machine Learning Models","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2602.14135","title":"ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI","created":"2026-02-15","cited_by_count":3,"area":null},{"id":"2602.16729","title":"Intent Laundering: AI Safety Datasets Are Not What They Seem","created":"2026-02-17","cited_by_count":3,"area":null},{"id":"2603.26676","title":"Evaluating Human-AI Safety: A Framework for Measuring Harmful Capability Uplift","created":"2026-03-06","cited_by_count":3,"area":null},{"id":"2605.23168","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","created":"2026-05-22","cited_by_count":3,"area":null},{"id":"2606.11270","title":"Quantifying Subliminal Behavioral Transfer Ratios in Language Model Distillation","created":"2026-06-09","cited_by_count":3,"area":null},{"id":"2507.07248","title":"MedRiskEval: Medical Risk Evaluation Benchmark of Language Models, On the Importance of User Perspectives in Healthcare Settings","created":"2025-07-09","cited_by_count":2,"area":null},{"id":"2510.03969","title":"How Catastrophic is Your LLM? Certifying Risk in Conversation","created":"2025-10-04","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2603.27332","title":"Unsafe by Reciprocity: How Generation-Understanding Coupling Undermines Safety in Unified Multimodal Models","created":"2026-03-28","cited_by_count":2,"area":null},{"id":"2605.08313","title":"Seed Hijacking of LLM Sampling and Quantum Random Number Defense","created":"2026-05-08","cited_by_count":2,"area":null},{"id":"2606.01034","title":"A Finite-Calibration Regime Map for LLM Judge Panels","created":"2026-05-31","cited_by_count":2,"area":null},{"id":"2606.29623","title":"SCARCE: Scalable Cascade Analysis for Rare-event Characterisation via Embeddings","created":"2026-06-28","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2508.06057","title":"AGI for the Earth, the path, possibilities and how to evaluate intelligence of models that work with Earth Observation Data?","created":"2025-08-08","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2511.08484","title":"Patching LLM Like Software: A Lightweight Method for Improving Safety Policy in Large Language Models","created":"2025-11-11","cited_by_count":1,"area":null},{"id":"2511.10661","title":"Sequential Bayesian Evaluation of Large Language Model Behavior","created":"2025-11-04","cited_by_count":1,"area":null},{"id":"2602.02557","title":"The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2604.07655","title":"Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMs","created":"2026-04-08","cited_by_count":1,"area":null},{"id":"2604.11120","title":"Persona Non Grata: Single-Method Safety Evaluation Is Incomplete for Persona-Imbued LLMs","created":"2026-04-13","cited_by_count":1,"area":null},{"id":"2605.09875","title":"Cross-Family Universality of Behavioral Axes via Anchor-Projected Representations","created":"2026-05-11","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2606.10154","title":"Quality Is Not a Safety Proxy Under Quantization","created":"2026-06-08","cited_by_count":1,"area":null},{"id":"2606.25592","title":"VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2607.13039","title":"Safeguard-Conditioned Uplift: Measuring Utility-Risk Frontiers for Dual-Use Biology Assistants","created":"2026-06-12","cited_by_count":1,"area":null},{"id":"2608.13482","title":"Synthetic Persona Pretraining: Alignment from Token Zero","created":"2026-08-13","cited_by_count":1,"area":null},{"id":"2609.00092","title":"Safin-1: Safety from Within through Memory-Native State Evolution","created":"2026-08-31","cited_by_count":1,"area":null},{"id":"2609.15017","title":"PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift","created":"2026-09-14","cited_by_count":1,"area":null},{"id":"2503.00224","title":"\\`A la recherche du sens perdu: your favourite LLM might have more to say than you can understand","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2506.06933","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2602.11717","title":"Beyond Parameter Arithmetic: Sparse Complementary Fusion for Distribution-Aware Model Merging","created":"2026-02-12","cited_by_count":0,"area":null},{"id":"2602.15238","title":"Closing the Distribution Gap in Adversarial Training for LLMs","created":"2026-02-16","cited_by_count":0,"area":null},{"id":"2603.00369","title":"Policy Compliance of User Requests in Natural Language for AI Systems","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2604.01108","title":"Adversarial Moral Stress Testing of Large Language Models","created":"2026-04-01","cited_by_count":0,"area":null},{"id":"2604.04364","title":"Context is All You Need","created":"2026-04-06","cited_by_count":0,"area":null},{"id":"2604.20704","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","created":"2026-04-22","cited_by_count":0,"area":null},{"id":"2605.14087","title":"Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.20241","title":"Geometry-Lite: Interpretable Safety Probing via Layer-Wise Margin Geometry","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2605.20262","title":"Residual Paving: Diagnosing the Routing Bottleneck in Selective Refusal Editing","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2605.24414","title":"JT-SAFE-V2: Safety-by-Design Foundation Model with World-Context Data","created":"2026-05-23","cited_by_count":0,"area":null},{"id":"2605.24883","title":"Inverting the Shield: Systematically Generating Safety Tests from Policy Specifications","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2606.00947","title":"Silent Failures in Federated Personalization of Foundation Models","created":"2026-05-31","cited_by_count":0,"area":null},{"id":"2606.09165","title":"Reliable to Expressive: A Curriculum for Rubric-Following Safety Judges","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.20626","title":"Efficient Safety Benchmarking via Item Response Theory","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2607.01859","title":"Safety Targeted Embedding Exploit via Refinement","created":"2026-07-02","cited_by_count":0,"area":null},{"id":"2607.20791","title":"Refusal-Gated Decoding: Preserving Refusal Behavior Under High-Temperature Sampling","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2607.24769","title":"LLM Scheming Inversely Scales with Pretraining Language Coverage","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2607.28617","title":"AISPA: User-Centric System Prompt Auditing for Large Language Model Applications","created":"2026-07-30","cited_by_count":0,"area":null},{"id":"2608.17836","title":"Leveraging Association Context Retrieval in Knowledge Edit- ing to Build White-Box Attacks on LLMs","created":"2026-08-18","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.00665","title":"Triple-Bottom-Line Sustainability of Language Models for Edge AI: A Comparison Between SLMs and Quantized LLMs","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.01210","title":"Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judges","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.02707","title":"Door-in-the-Face Requests and Refusal Behaviour in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2609.08637","title":"Navigating the digital spectrum: Assessing political bias, stability, and downstream fairness in Large Language Models","created":"2026-09-08","cited_by_count":0,"area":null},{"id":"2609.11018","title":"Defining AI Agents: A Compendium of Criteria, Metrics, and Benchmarks","created":"2026-09-10","cited_by_count":0,"area":null},{"id":"2609.22153","title":"SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2609.22260","title":"Causal Localization of the Refusal Direction in Audio Language Models","created":"2026-09-06","cited_by_count":0,"area":null},{"id":"2609.35028","title":"VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.35261","title":"Imprint Reader: From Weight-Update Readout to Behavioral Intervention","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.38718","title":"MetaSteer: Context-Conditioned, nonlinear Steering via Attention-Projection Adaptation","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2609.39788","title":"Safety of Latent Communication in Multi-Agent Systems","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.01282","title":"Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logistics","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.01428","title":"Generalization Is Stability, Not Accuracy: Multi-Axis Evaluation of LLMs","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.04676","title":"Extracting Persona Subspaces Through Iterative Nullspace Projection For Modulation","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.17820","title":"Same Attack, Different Judge: A First Controlled Adversarial Comparison of Jev, LLM Judges, and Purpose-Built Safety Classifiers","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}