{"total":43,"rows":[{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2409.00137","title":"Emerging Vulnerabilities in Frontier Models: Multi-Turn Jailbreak Attacks","created":"2024-08-29","cited_by_count":16,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2504.03174","title":"Multi-lingual Multi-turn Automated Red Teaming for LLMs","created":"2025-04-04","cited_by_count":13,"area":"safety"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2507.22063","title":"RedCoder: Automated Multi-Turn Red Teaming for Code LLMs","created":"2025-06-25","cited_by_count":9,"area":"safety"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2510.03417","title":"NEXUS: Network Exploration for eXploiting Unsafe Sequences in Multi-Turn LLM Jailbreaks","created":"2025-10-03","cited_by_count":7,"area":"safety"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2508.03936","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","created":"2025-08-05","cited_by_count":6,"area":"safety"},{"id":"2509.10546","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","created":"2025-09-07","cited_by_count":6,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2508.04451","title":"Automatic LLM Red Teaming","created":"2025-08-06","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.08859","title":"Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models","created":"2025-10-09","cited_by_count":4,"area":"safety"},{"id":"2601.05742","title":"The Echo Chamber Multi-Turn LLM Jailbreak","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2409.04822","title":"Exploring Straightforward Conversational Red-Teaming","created":"2024-09-07","cited_by_count":3,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.01315","title":"Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System","created":"2025-05-02","cited_by_count":2,"area":"safety"},{"id":"2506.17881","title":"GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication","created":"2025-06-22","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2508.06755","title":"Many-Turn Jailbreaking","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2511.01375","title":"Align to Misalign: Automatic LLM Jailbreak with Meta-Optimized LLM Judges","created":"2025-11-03","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2504.06577","title":"Bypassing Safety Guardrails in LLMs Using Humor","created":"2025-04-09","cited_by_count":1,"area":"safety"},{"id":"2508.00555","title":"Activation-Guided Local Editing for Jailbreaking Attacks","created":"2025-08-01","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2601.02670","title":"Break Me If You Can: Self-Jailbreaking of Aligned LLMs via Lexical Insertion Prompting","created":"2026-01-06","cited_by_count":1,"area":"safety"},{"id":"2604.25921","title":"One Word at a Time: Incremental Completion Decomposition Breaks LLM Safety","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2604.24082","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2606.24267","title":"Pigeonholing: how bad prompts hurt models, causing collapse and mistakes","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2610.16305","title":"ATTCK-R: Knowledge-Aware Long-Horizon Jailbreaking for Protected LLMs","created":"2026-10-12","cited_by_count":0,"area":"safety"},{"id":"2610.19587","title":"Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMs","created":"2026-10-14","cited_by_count":0,"area":"safety"}],"next_cursor":null}