{"total":33,"rows":[{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2405.16229","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","created":"2024-05-25","cited_by_count":29,"area":"alignment"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2410.18469","title":"Iterative Self-Tuning LLMs for Enhanced Jailbreaking Capabilities","created":"2024-10-24","cited_by_count":17,"area":"alignment"},{"id":"2502.04322","title":"Speak Easy: Eliciting Harmful Jailbreaks from LLMs with Simple Interactions","created":"2025-02-06","cited_by_count":15,"area":"alignment"},{"id":"2502.17254","title":"REINFORCE Adversarial Attacks on Large Language Models: An Adaptive, Distributional, and Semantic Objective","created":"2025-02-24","cited_by_count":15,"area":"alignment"},{"id":"2505.17598","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","created":"2025-05-23","cited_by_count":12,"area":"alignment"},{"id":"2406.14393","title":"Jailbreaking as a Reward Misspecification Problem","created":"2024-06-20","cited_by_count":11,"area":"alignment"},{"id":"2501.16727","title":"xJailbreak: Representation Space Guided Reinforcement Learning for Interpretable LLM Jailbreaking","created":"2025-01-28","cited_by_count":11,"area":"alignment"},{"id":"2501.10639","title":"Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks","created":"2025-01-18","cited_by_count":7,"area":"alignment"},{"id":"2505.24369","title":"Adversarial Preference Learning for Robust LLM Alignment","created":"2025-05-30","cited_by_count":7,"area":"alignment"},{"id":"2502.13946","title":"Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Region","created":"2025-02-19","cited_by_count":6,"area":"alignment"},{"id":"2605.02946","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","created":"2026-05-01","cited_by_count":6,"area":"alignment"},{"id":"2404.16020","title":"Investigating Adversarial Trigger Transfer in Large Language Models","created":"2024-04-24","cited_by_count":5,"area":"alignment"},{"id":"2410.00451","title":"Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language Models","created":"2024-10-01","cited_by_count":4,"area":"alignment"},{"id":"2506.07402","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","created":"2025-06-09","cited_by_count":3,"area":"alignment"},{"id":"2502.11853","title":"StructTransform: A Scalable Attack Surface for Safety-Aligned Large Language Models","created":"2025-02-17","cited_by_count":2,"area":"alignment"},{"id":"2508.14853","title":"Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent","created":"2025-08-20","cited_by_count":2,"area":"alignment"},{"id":"2602.16835","title":"NeST: Neuron Selective Tuning for LLM Safety","created":"2026-02-18","cited_by_count":2,"area":"alignment"},{"id":"2603.03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","created":"2026-03-03","cited_by_count":2,"area":"alignment"},{"id":"2603.04851","title":"Why Is RLHF Alignment Shallow? A Gradient Analysis","created":"2026-03-05","cited_by_count":2,"area":"alignment"},{"id":"2605.26158","title":"Furina: Fragmented Uncertainty-Driven Refusal Instability Attack","created":"2026-05-24","cited_by_count":2,"area":"alignment"},{"id":"2410.11533","title":"Multi-round jailbreak attack on large language models","created":"2024-10-15","cited_by_count":1,"area":"alignment"},{"id":"2603.04355","title":"Efficient Refusal Ablation in LLM through Optimal Transport","created":"2026-03-04","cited_by_count":1,"area":"alignment"},{"id":"2604.15717","title":"Into the Gray Zone: Domain Contexts Can Blur LLM Safety Boundaries","created":"2026-04-17","cited_by_count":1,"area":"alignment"},{"id":"2601.03005","title":"JPU: Bridging Jailbreak Defense and Unlearning via On-Policy Path Rectification","created":"2026-01-06","cited_by_count":0,"area":"alignment"},{"id":"2605.00236","title":"Attention Is Where You Attack","created":"2026-04-30","cited_by_count":0,"area":"alignment"},{"id":"2605.09225","title":"The Art of the Jailbreak: Formulating Jailbreak Attacks for LLM Security Beyond Binary Scoring","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2610.15513","title":"REPRO: Reflective Evolutionary Prompt Optimizer for Automated LLM Red-Teaming","created":"2026-10-11","cited_by_count":0,"area":"alignment"}],"next_cursor":null}