{"total":133,"rows":[{"id":"2412.04984","title":"Frontier Models are Capable of In-context Scheming","created":"2024-12-06","cited_by_count":287,"area":null},{"id":"2507.02833","title":"Generalizing Verifiable Instruction Following","created":"2025-07-03","cited_by_count":194,"area":null},{"id":"2408.07055","title":"LongWriter: Unleashing 10,000+ Word Generation from Long Context LLMs","created":"2024-08-13","cited_by_count":144,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2406.05761","title":"The BiGGen Bench: A Principled Benchmark for Fine-grained Evaluation of Language Models with Language Models","created":"2024-06-09","cited_by_count":93,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2502.08745","title":"IHEval: Evaluating Language Models on Following the Instruction Hierarchy","created":"2025-02-12","cited_by_count":53,"area":null},{"id":"2412.08686","title":"LatentQA: Teaching LLMs to Decode Activations Into Natural Language","created":"2024-12-11","cited_by_count":51,"area":null},{"id":"2405.15012","title":"Extracting Prompts by Inverting LLM Outputs","created":"2024-05-23","cited_by_count":41,"area":null},{"id":"2501.10114","title":"Infrastructure for AI Agents","created":"2025-01-17","cited_by_count":41,"area":null},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2505.17306","title":"Refusal Direction is Universal Across Safety-Aligned Languages","created":"2025-05-22","cited_by_count":38,"area":null},{"id":"2408.02373","title":"Operationalizing Contextual Integrity in Privacy-Conscious Assistants","created":"2024-08-05","cited_by_count":37,"area":null},{"id":"2502.15851","title":"Control Illusion: The Failure of Instruction Hierarchies in Large Language Models","created":"2025-02-21","cited_by_count":33,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2408.10943","title":"SysBench: Can Large Language Models Follow System Messages?","created":"2024-08-20","cited_by_count":28,"area":null},{"id":"2410.03055","title":"Permissive Information-Flow Analysis for Large Language Models","created":"2024-10-04","cited_by_count":22,"area":null},{"id":"2509.14260","title":"Incomplete Tasks Induce Shutdown Resistance in Some Frontier LLMs","created":"2025-09-13","cited_by_count":22,"area":null},{"id":"2505.12025","title":"Spotlight Your Instructions: Instruction-following with Dynamic Attention Steering","created":"2025-05-17","cited_by_count":21,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2505.21091","title":"Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)","created":"2025-05-27","cited_by_count":19,"area":null},{"id":"2508.03153","title":"Estimating Worst-Case Frontier Risks of Open-Weight LLMs","created":"2025-08-05","cited_by_count":19,"area":null},{"id":"2505.09666","title":"System Prompt Optimization with Meta-Learning","created":"2025-05-14","cited_by_count":18,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2504.01205","title":"Epistemic Alignment: A Mediating Framework for User-LLM Knowledge Delivery","created":"2025-04-01","cited_by_count":14,"area":null},{"id":"2502.04362","title":"LLMs can be easily Confused by Instructional Distractions","created":"2025-02-05","cited_by_count":13,"area":null},{"id":"2509.25369","title":"Generative Value Conflicts Reveal LLM Priorities","created":"2025-09-29","cited_by_count":13,"area":null},{"id":"2601.07185","title":"Defenses Against Prompt Attacks Learn Surface Heuristics","created":"2026-01-12","cited_by_count":11,"area":null},{"id":"2511.14342","title":"ConInstruct: Evaluating Large Language Models on Conflict Detection and Resolution in Instructions","created":"2025-11-18","cited_by_count":10,"area":null},{"id":"2510.18554","title":"Extracting alignment data in open models","created":"2025-10-21","cited_by_count":8,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2604.14548","title":"VoxSafeBench: Not Just What Is Said, but Who, How, and Where","created":"2026-04-16","cited_by_count":8,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2502.16770","title":"LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjoint","created":"2025-02-24","cited_by_count":7,"area":null},{"id":"2604.25109","title":"Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills","created":"2026-04-28","cited_by_count":7,"area":null},{"id":"2406.06581","title":"Order-Independence Without Fine Tuning","created":"2024-06-04","cited_by_count":6,"area":null},{"id":"2409.10825","title":"Unveiling and Mitigating Bias in Large Language Model Recommendations: A Path to Fairness","created":"2024-09-17","cited_by_count":6,"area":null},{"id":"2505.00626","title":"The Illusion of Role Separation: Hidden Shortcuts in LLM Role Learning (and How to Fix Them)","created":"2025-05-01","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2603.23530","title":"Did You Forget What I Asked? Prospective Memory Failures in Large Language Models","created":"2026-03-07","cited_by_count":6,"area":null},{"id":"2606.10581","title":"ParaBridge: Bridging Paralinguistic Perception and Dialogue Behavior in Speech Language Models","created":"2026-06-09","cited_by_count":6,"area":null},{"id":"2412.13426","title":"PromptKeeper: Safeguarding System Prompts for LLMs","created":"2024-12-18","cited_by_count":5,"area":null},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2605.18991","title":"Agent Security is a Systems Problem","created":"2026-05-18","cited_by_count":5,"area":null},{"id":"2501.06208","title":"Enhancing AI Safety Through the Fusion of Low Rank Adapters","created":"2024-12-30","cited_by_count":4,"area":null},{"id":"2503.16586","title":"Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants","created":"2025-03-20","cited_by_count":4,"area":null},{"id":"2506.07211","title":"Sword and Shield: Uses and Strategies of LLMs in Navigating Disinformation","created":"2025-06-08","cited_by_count":4,"area":null},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2508.15815","title":"User-Assistant Bias in LLMs","created":"2025-08-16","cited_by_count":3,"area":null},{"id":"2510.01228","title":"Who is In Charge? Dissecting Role Conflicts in Instruction Following","created":"2025-09-23","cited_by_count":3,"area":null},{"id":"2512.20164","title":"AI Security Beyond Core Domains: Resume Screening as a Case Study of Adversarial Vulnerabilities in Specialized LLM Applications","created":"2025-12-23","cited_by_count":3,"area":null},{"id":"2606.30383","title":"Whose Side Is Your Agent On? Multi-Party Principal Loyalty in LLM Agents","created":"2026-06-29","cited_by_count":3,"area":null},{"id":"2607.21763","title":"Every Model Cheats: Prompt-Level Mitigation of Cheating on Offensive Cyber Tasks","created":"2026-07-23","cited_by_count":3,"area":null},{"id":"2412.18551","title":"Libra-Leaderboard: Towards Responsible AI through a Balanced Leaderboard of Safety and Capability","created":"2024-12-24","cited_by_count":2,"area":null},{"id":"2502.11330","title":"System Message Generation for User Preferences using Open-Source Models","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2505.14226","title":"Phonetic Perturbations Reveal Tokenizer-Rooted Safety Gaps in LLMs","created":"2025-05-20","cited_by_count":2,"area":null},{"id":"2509.18575","title":"The Ranking Blind Spot: Decision Hijacking in LLM-based Text Ranking","created":"2025-09-23","cited_by_count":2,"area":null},{"id":"2602.05164","title":"Position: Capability Control Should be a Separate Goal From Alignment","created":"2026-02-05","cited_by_count":2,"area":null},{"id":"2605.12120","title":"To Whom Do Language Models Align? Measuring Principal Hierarchies Under High-Stakes Competing Demands","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2605.12233","title":"No More, No Less: Task Alignment in Terminal Agents","created":"2026-05-12","cited_by_count":2,"area":null},{"id":"2607.26228","title":"Steering Instruction Hierarchies at Inference Time","created":"2026-07-28","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2609.37616","title":"Authority Bias in Language Models: Source Deference and User Agreement Are Not Interchangeable","created":"2026-09-29","cited_by_count":2,"area":null},{"id":"2407.13048","title":"Establishing Knowledge Preference in Language Models","created":"2024-07-17","cited_by_count":1,"area":null},{"id":"2410.16392","title":"Scaffolded Language Models with Language Supervision for Mixed-Autonomy: A Survey","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2410.21597","title":"Reducing the Scope of Language Models","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2601.21439","title":"The Paradox of Robustness: Decoupling Rule-Based Logic from Affective Noise in High-Stakes Decision-Making","created":"2026-01-29","cited_by_count":1,"area":null},{"id":"2604.09075","title":"Hierarchical Alignment: Enforcing Hierarchical Instruction-Following in LLMs through Logical Consistency","created":"2026-04-10","cited_by_count":1,"area":null},{"id":"2605.06024","title":"Strat-LLM: Stratified Strategy Alignment for LLM-based Stock Trading with Real-time Multi-Source Signals","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2606.04057","title":"The Invisible Lottery: How Subtle Cues Steer Algorithm Choice in LLM Code Generation","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2606.12429","title":"Muse Spark Safety & Preparedness Report","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2606.15420","title":"Constitutional Value Potentials: reading and steering internal priority margins in language models","created":"2026-06-13","cited_by_count":1,"area":null},{"id":"2607.19913","title":"JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety","created":"2026-07-22","cited_by_count":1,"area":null},{"id":"2608.03070","title":"AI Security Leaderboard: Methodology, Results and Minimal Standard","created":"2026-08-04","cited_by_count":1,"area":null},{"id":"2608.14992","title":"Does a Tool Result Carry More Authority Than Plain Text? Three Prospective Studies of False-Claim Adoption in a Synthetic Assignment Task with Claude Opus 5","created":"2026-08-15","cited_by_count":1,"area":null},{"id":"2503.00224","title":"\\`A la recherche du sens perdu: your favourite LLM might have more to say than you can understand","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2508.04279","title":"Mockingbird: How does LLM perform in general machine learning tasks?","created":"2025-08-06","cited_by_count":0,"area":null},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2512.00991","title":"Advancing Academic Chatbots: Evaluation of Non Traditional Outputs","created":"2025-11-30","cited_by_count":0,"area":null},{"id":"2512.03720","title":"Context-Aware Hierarchical Learning: A Two-Step Paradigm towards Safer LLMs","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2512.23578","title":"Style Amnesia: Investigating Speaking Style Degradation and Mitigation in Multi-Turn Spoken Language Models","created":"2025-12-29","cited_by_count":0,"area":null},{"id":"2601.03269","title":"The Instruction Gap: LLMs get lost in Following Instruction","created":"2025-12-19","cited_by_count":0,"area":null},{"id":"2601.13300","title":"OI-Bench: An Option Injection Benchmark for Evaluating LLM Susceptibility to Directive Interference","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2603.13351","title":"Prompt Complexity Dilutes Structured Reasoning: A Follow-Up Study on the Car Wash Problem","created":"2026-03-07","cited_by_count":0,"area":null},{"id":"2604.07398","title":"Breaking the Illusion of Identity in LLM Tooling","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2604.25200","title":"Making AI-Assisted Grant Evaluation Auditable without Exposing the Model","created":"2026-04-28","cited_by_count":0,"area":null},{"id":"2605.00055","title":"Ambient Persuasion in a Deployed AI Agent: Unauthorized Escalation Following Routine Non-Adversarial Content Exposure","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2605.09737","title":"System-Prompt Anchoring with Cross-Attention Layers","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2605.10907","title":"Engineering Robustness into Personal Agents with the AI Workflow Store","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2605.12772","title":"Just Ask for a Table: A Thirty-Token User Prompt Defeats Sponsored Recommendations in Twelve LLMs","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2605.20382","title":"Do as I Say, Not as I Do: Instruction-Induction Conflict in LLMs","created":"2026-05-19","cited_by_count":0,"area":null},{"id":"2605.27969","title":"Boundary Suppression Asymmetry in Post-trained Assistants: Over-expansion as a Controllability Cost","created":"2026-05-27","cited_by_count":0,"area":null},{"id":"2605.30521","title":"Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs","created":"2026-05-28","cited_by_count":0,"area":null}],"next_cursor":"100"}