{"total":58,"rows":[{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2503.01829","title":"Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Models","created":"2025-03-03","cited_by_count":27,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2509.24496","title":"LLM DNA: Tracing Model Evolution via Functional Representations","created":"2025-09-29","cited_by_count":15,"area":null},{"id":"2505.18471","title":"Invisible Tokens, Visible Bills: The Urgent Need to Audit Hidden Operations in Opaque LLM Services","created":"2025-05-24","cited_by_count":10,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2507.19598","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","created":"2025-07-25","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2606.25449","title":"Reclaim Evaluation: A Lossy Memory Is Worse Than an Empty One","created":"2026-06-24","cited_by_count":7,"area":null},{"id":"2604.09563","title":"Seven simple steps for log analysis in AI systems","created":"2026-02-13","cited_by_count":6,"area":null},{"id":"2409.03131","title":"Well, that escalated quickly: The Single-Turn Crescendo Attack (STCA)","created":"2024-09-04","cited_by_count":5,"area":null},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2410.12880","title":"Navigating the Cultural Kaleidoscope: A Hitchhiker's Guide to Sensitivity in Large Language Models","created":"2024-10-15","cited_by_count":4,"area":null},{"id":"2512.23701","title":"Eliciting Behaviors in Multi-Turn Conversations","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2410.05306","title":"Towards Assuring EU AI Act Compliance and Adversarial Robustness of LLMs","created":"2024-10-04","cited_by_count":3,"area":null},{"id":"2505.09341","title":"Access Controls Will Solve the Dual-Use Dilemma","created":"2025-05-14","cited_by_count":3,"area":null},{"id":"2512.10100","title":"Robust AI Security and Alignment: A Sisyphean Endeavor?","created":"2025-12-10","cited_by_count":3,"area":null},{"id":"2603.17373","title":"SafeTutors: Benchmarking Pedagogical Safety in AI Tutoring Systems","created":"2026-03-18","cited_by_count":3,"area":null},{"id":"2609.09090","title":"SPINE: Measuring LLM Sycophancy under Sustained Multi-Turn Pressure","created":"2026-09-08","cited_by_count":3,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2510.03969","title":"How Catastrophic is Your LLM? Certifying Risk in Conversation","created":"2025-10-04","cited_by_count":2,"area":null},{"id":"2605.05271","title":"IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots","created":"2026-05-06","cited_by_count":2,"area":null},{"id":"2608.02684","title":"A Blind Spot in Alignment: Quantifying Biosecurity Risks in Large Language Models","created":"2026-08-03","cited_by_count":2,"area":null},{"id":"2410.07962","title":"Towards Assurance of LLM Adversarial Robustness using Ontology-Driven Argumentation","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2602.20813","title":"Pressure Reveals Character: Behavioural Alignment Evaluation at Depth","created":"2026-02-24","cited_by_count":1,"area":null},{"id":"2605.13825","title":"History Anchors: How Prior Behavior Steers LLM Decisions Toward Unsafe Actions","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2607.27951","title":"Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs","created":"2026-07-30","cited_by_count":1,"area":null},{"id":"2608.17445","title":"Decomposition Attacks Across Unlinkable Identities: Limits of Stateful Defenses for LLM Services","created":"2026-08-18","cited_by_count":1,"area":null},{"id":"2608.17605","title":"Multi-turn Conversational AI from Text to Multimodal Interaction: Data, Models, Evaluation, and Open Challenges","created":"2026-08-18","cited_by_count":1,"area":null},{"id":"2505.16888","title":"PARASITE: Conditional System Prompt Poisoning to Hijack LLMs","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2507.19567","title":"Differentiating hype from practical applications of large language models in medicine -- a primer for healthcare professionals","created":"2025-07-25","cited_by_count":0,"area":null},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2601.15824","title":"Introducing the Generative Application Firewall (GAF)","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2603.22214","title":"Evaluating the Reliability and Fidelity of Automated Judgment Systems of Large Language Models","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2605.05630","title":"One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intent","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.20382","title":"Do as I Say, Not as I Do: Instruction-Induction Conflict in LLMs","created":"2026-05-19","cited_by_count":0,"area":null},{"id":"2605.24247","title":"Improving Labeling Consistency with Detailed Constitutional Definitions and AI-Driven Evaluation","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2606.09700","title":"What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.30219","title":"EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failures","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.26820","title":"Forecasting Trajectory-Level Safety Risks in Black-Box Multi-Turn Interactions","created":"2026-07-29","cited_by_count":0,"area":null},{"id":"2608.13840","title":"ASSERT: A Measurement Pipeline for GenAI Audits","created":"2026-08-14","cited_by_count":0,"area":null},{"id":"2608.22230","title":"Whitewashing Hate, Smearing Harmless Content: Annotator-Style Rebuttal Attacks on LLM-Based Moderation","created":"2026-08-23","cited_by_count":0,"area":null},{"id":"2608.23870","title":"Granite.Trust Policy Tools: Shareable, Actionable Policies for Generative AI Applications","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2608.27945","title":"Cross-Session Decomposition Attacks: Scaling Risk and Intent-Aligned Retrieval Defense","created":"2026-08-28","cited_by_count":0,"area":null},{"id":"2608.31105","title":"BLOOM-WILT: Logit Tilting for Behaviour Elicitation in Automated LLM Auditing","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.02707","title":"Door-in-the-Face Requests and Refusal Behaviour in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2609.15383","title":"Divide, Consult, Conquer: Capability Laundering Through Aligned LLMs","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2609.16777","title":"Benchmarking Factual Robustness of LLMs via Multi-conversation Persuasion","created":"2026-09-15","cited_by_count":0,"area":null},{"id":"2609.18649","title":"DyMT-ESB: Dynamic Multi-Turn Evaluation of Social Bias in User-LLM Interactions","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.36434","title":"The Safety Operator: Modulating the Expression of Safety Instructions via Spectral Optimization","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.00371","title":"Deny Without Disabling: Authorization-Paired Evaluation and Control for Multi-Agent Systems","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.04791","title":"Not All Answers Are Contextually Persuadable: Inference Dynamics in Large Language Models under Contextual Influence","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.12758","title":"DistressBench: Evaluating Multi-Dimensional Crisis Support in Large Language Models","created":"2026-10-08","cited_by_count":0,"area":null}],"next_cursor":null}