{"total":20,"rows":[{"id":"2410.05451","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","created":"2024-10-07","cited_by_count":210,"area":"alignment"},{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2406.12935","title":"ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates","created":"2024-06-17","cited_by_count":30,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2405.13068","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","created":"2024-05-20","cited_by_count":18,"area":"alignment"},{"id":"2406.14393","title":"Jailbreaking as a Reward Misspecification Problem","created":"2024-06-20","cited_by_count":11,"area":"alignment"},{"id":"2512.20806","title":"Safety Alignment of LMs via Non-cooperative Games","created":"2025-12-23","cited_by_count":8,"area":"alignment"},{"id":"2506.17353","title":"Differentiation-Based Extraction of Proprietary Data from Fine-Tuned LLMs","created":"2025-06-20","cited_by_count":6,"area":"alignment"},{"id":"2404.16020","title":"Investigating Adversarial Trigger Transfer in Large Language Models","created":"2024-04-24","cited_by_count":5,"area":"alignment"},{"id":"2407.03232","title":"Single Character Perturbations Break LLM Alignment","created":"2024-07-03","cited_by_count":4,"area":"alignment"},{"id":"2506.07402","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","created":"2025-06-09","cited_by_count":3,"area":"alignment"},{"id":"2603.03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","created":"2026-03-03","cited_by_count":2,"area":"alignment"},{"id":"2607.07918","title":"Efficient Safety Alignment of Language Models via Latent Personality Traits","created":"2026-07-08","cited_by_count":1,"area":"alignment"},{"id":"2602.00619","title":"Jailbreaking LLMs via Calibration","created":"2026-01-31","cited_by_count":0,"area":"alignment"},{"id":"2605.19966","title":"Detecting Fluent Optimization-Based Adversarial Prompts via Sequential Entropy Changes","created":"2026-05-19","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2608.20378","title":"Truth Lies Deep: Countering Semantic Camouflage via Latent Intent Verification","created":"2026-06-27","cited_by_count":0,"area":"alignment"},{"id":"2609.06934","title":"The Geometry of Refusal: Why Post-Hoc Safety Is Fragile and Pretraining-Time Safety Persists","created":"2026-09-07","cited_by_count":0,"area":"alignment"}],"next_cursor":null}