{"total":40,"rows":[{"id":"2503.03710","title":"Improving LLM Safety Alignment with Dual-Objective Optimization","created":"2025-03-05","cited_by_count":43,"area":"alignment"},{"id":"2407.13833","title":"Phi-3 Safety Post-Training: Aligning Language Models with a \"Break-Fix\" Cycle","created":"2024-07-18","cited_by_count":32,"area":"alignment"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2505.21605","title":"SoSBench: Benchmarking Safety Alignment on Six Scientific Domains","created":"2025-05-27","cited_by_count":12,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2511.19517","title":"Automating Deception: Scalable Multi-Turn LLM Jailbreaks","created":"2025-11-24","cited_by_count":7,"area":"alignment"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2602.06258","title":"GRP-Obliteration: Unaligning LLMs With a Single Unlabeled Prompt","created":"2026-02-05","cited_by_count":7,"area":"alignment"},{"id":"2603.15684","title":"State-Dependent Safety Failures in Multi-Turn Language Model Interaction","created":"2026-03-15","cited_by_count":4,"area":"alignment"},{"id":"2604.27093","title":"Useless but Safe? Benchmarking Utility Recovery with User Intent Clarification in Multi-Turn Conversations","created":"2026-04-29","cited_by_count":3,"area":"alignment"},{"id":"2606.05523","title":"CHASE: Adversarial Red-Blue Teaming for Improving LLM Safety using Reinforcement Learning","created":"2026-06-04","cited_by_count":3,"area":"alignment"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2605.02647","title":"ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming","created":"2026-05-04","cited_by_count":2,"area":"alignment"},{"id":"2605.26158","title":"Furina: Fragmented Uncertainty-Driven Refusal Instability Attack","created":"2026-05-24","cited_by_count":2,"area":"alignment"},{"id":"2511.02356","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","created":"2025-11-04","cited_by_count":1,"area":"alignment"},{"id":"2601.03300","title":"TRYLOCK: Defense-in-Depth Against LLM Jailbreaks via Layered Preference and Representation Engineering","created":"2026-01-06","cited_by_count":1,"area":"alignment"},{"id":"2604.15717","title":"Into the Gray Zone: Domain Contexts Can Blur LLM Safety Boundaries","created":"2026-04-17","cited_by_count":1,"area":"alignment"},{"id":"2604.16358","title":"SaFeR-Steer: Evolving Multi-Turn MLLMs via Synthetic Bootstrapping and Feedback Dynamics","created":"2026-03-18","cited_by_count":1,"area":"alignment"},{"id":"2606.19168","title":"Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection","created":"2026-06-17","cited_by_count":1,"area":"alignment"},{"id":"2512.07059","title":"Replicating TEMPEST at Scale: Multi-Turn Adversarial Attacks Against Trillion-Parameter Frontier Models","created":"2025-12-08","cited_by_count":0,"area":"alignment"},{"id":"2512.18755","title":"MEEA: Mere Exposure Effect-Driven Confrontational Optimization for LLM Jailbreaking","created":"2025-12-21","cited_by_count":0,"area":"alignment"},{"id":"2602.00619","title":"Jailbreaking LLMs via Calibration","created":"2026-01-31","cited_by_count":0,"area":"alignment"},{"id":"2604.02652","title":"Generalization Limits of Reinforcement Learning Alignment","created":"2026-04-03","cited_by_count":0,"area":"alignment"},{"id":"2605.00974","title":"SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking","created":"2026-05-01","cited_by_count":0,"area":"alignment"},{"id":"2605.08277","title":"Mitigating Many-shot Jailbreak Attacks with One Single Demonstration","created":"2026-05-08","cited_by_count":0,"area":"alignment"},{"id":"2605.08878","title":"Why Do Aligned LLMs Remain Jailbreakable: Refusal-Escape Directions, Operator-Level Sources, and Safety-Utility Trade-off","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.09225","title":"The Art of the Jailbreak: Formulating Jailbreak Attacks for LLM Security Beyond Binary Scoring","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2606.10860","title":"Training LLMs to Enforce Multi-Level Instruction Hierarchies via Gravity-Weighted Direct Preference Optimization","created":"2026-06-09","cited_by_count":0,"area":"alignment"},{"id":"2607.00572","title":"HARC: Coupling Harmfulness and Refusal Directions for Robust Safety Alignment","created":"2026-07-01","cited_by_count":0,"area":"alignment"},{"id":"2607.23496","title":"Do LLMs Know Their Vulnerable Scenarios?","created":"2026-07-26","cited_by_count":0,"area":"alignment"},{"id":"2608.08542","title":"When Skills Meet Safety: Benchmarking and Characterizing the Adaptive Jailbreak Robustness of Skill-Merged LLMs","created":"2026-08-09","cited_by_count":0,"area":"alignment"},{"id":"2608.09551","title":"Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models","created":"2026-08-10","cited_by_count":0,"area":"alignment"},{"id":"2609.04022","title":"Representational alignment yields generalizable safety in language models","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.36849","title":"Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.36956","title":"Controlled Decoding Attacks on Black-Box LLMs","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.38389","title":"The Geometry of Harmfulness in Multi-Turn Attacks","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2610.01323","title":"TRACE: Trajectory Return Attribution and Contrastive Erasure for Multi-Turn Safety","created":"2026-10-01","cited_by_count":0,"area":"alignment"},{"id":"2610.15513","title":"REPRO: Reflective Evolutionary Prompt Optimizer for Automated LLM Red-Teaming","created":"2026-10-11","cited_by_count":0,"area":"alignment"}],"next_cursor":null}