{"total":244,"rows":[{"id":"2406.14598","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","created":"2024-06-20","cited_by_count":240,"area":"alignment"},{"id":"2409.05907","title":"Programming Refusal with Conditional Activation Steering","created":"2024-09-06","cited_by_count":206,"area":"mechinterp"},{"id":"2408.17003","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","created":"2024-08-30","cited_by_count":134,"area":"alignment"},{"id":"2505.23836","title":"Large Language Models Often Know When They Are Being Evaluated","created":"2025-05-28","cited_by_count":128,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.17420","title":"The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independence","created":"2025-02-24","cited_by_count":115,"area":"alignment"},{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2505.08054","title":"FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning","created":"2025-05-12","cited_by_count":58,"area":"lr"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2409.20370","title":"The Perfect Blend: Redefining RLHF with Mixture of Judges","created":"2024-09-30","cited_by_count":43,"area":"alignment"},{"id":"2502.09674","title":"The Hidden Dimensions of LLM Alignment: A Multi-Dimensional Analysis of Orthogonal Safety Directions","created":"2025-02-13","cited_by_count":41,"area":"lr"},{"id":"2503.05021","title":"Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety","created":"2025-03-06","cited_by_count":39,"area":"lr"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2411.16955","title":"Probing the limitations of multimodal language models for chemistry and materials research","created":"2024-11-25","cited_by_count":32,"area":"mllm"},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2507.04250","title":"Just Enough Shifts: Mitigating Over-Refusal in Aligned Language Models with Targeted Representation Fine-Tuning","created":"2025-07-06","cited_by_count":24,"area":"alignment"},{"id":"2507.00971","title":"Reasoning as an Adaptive Defense for Safety","created":"2025-07-01","cited_by_count":23,"area":"lr"},{"id":"2503.05139","title":"Every FLOP Counts: Scaling a 300B Mixture-of-Experts LING LLM without Premium GPUs","created":"2025-03-07","cited_by_count":22,"area":"moe"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2501.14940","title":"CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models","created":"2025-01-24","cited_by_count":20,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2601.15588","title":"YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models","created":"2026-01-22","cited_by_count":19,"area":"lr"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2505.15710","title":"Advancing LLM Safe Alignment with Safety Representation Ranking","created":"2025-05-21","cited_by_count":16,"area":"safety"},{"id":"2510.27062","title":"Consistency Training Helps Stop Sycophancy and Jailbreaks","created":"2025-10-31","cited_by_count":16,"area":"safety"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2412.06748","title":"Refusal Tokens: A Simple Way to Calibrate Refusals in Large Language Models","created":"2024-12-09","cited_by_count":14,"area":null},{"id":"2506.07736","title":"RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards","created":"2025-06-09","cited_by_count":14,"area":"lr"},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2505.20925","title":"Multi-objective Large Language Model Alignment with Hierarchical Experts","created":"2025-05-27","cited_by_count":13,"area":"alignment"},{"id":"2511.22662","title":"Difficulties with Evaluating a Deception Detector for AIs","created":"2025-11-27","cited_by_count":13,"area":null},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2510.26396","title":"A Pragmatic View of AI Personhood","created":"2025-10-30","cited_by_count":12,"area":"agents"},{"id":"2502.14828","title":"Fundamental Limitations in Pointwise Defences of LLM Finetuning APIs","created":"2025-02-20","cited_by_count":10,"area":null},{"id":"2504.06011","title":"Llama-3-Nanda-10B-Chat: An Open Generative Large Language Model for Hindi","created":"2025-04-08","cited_by_count":10,"area":null},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2512.10150","title":"Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learning","created":"2025-12-10","cited_by_count":10,"area":"alignment"},{"id":"2603.01246","title":"Defensive Refusal Bias: How Safety Alignment Fails Cyber Defenders","created":"2026-03-01","cited_by_count":10,"area":"alignment"},{"id":"2410.19406","title":"An Auditing Test To Detect Behavioral Shift in Language Models","created":"2024-10-25","cited_by_count":9,"area":null},{"id":"2501.05396","title":"FairCoder: Probing LLM Bias in High-Stakes Decision Making via Coding Tasks","created":"2025-01-09","cited_by_count":9,"area":null},{"id":"2506.00643","title":"SATA-BENCH: Select All That Apply Benchmark for Multiple Choice Questions","created":"2025-05-31","cited_by_count":9,"area":null},{"id":"2509.23286","title":"A2D: Any-Order, Any-Step Safety Alignment for Diffusion Language Models","created":"2025-09-27","cited_by_count":9,"area":"diffusion"},{"id":"2510.17017","title":"SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents","created":"2025-10-19","cited_by_count":9,"area":"agents"},{"id":"2410.12999","title":"POROver: Improving Safety and Reducing Overrefusal in Large Language Models with Overgeneration and Preference Optimization","created":"2024-10-16","cited_by_count":8,"area":"alignment"},{"id":"2510.17633","title":"SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering","created":"2025-10-20","cited_by_count":8,"area":"safety"},{"id":"2412.15035","title":"LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies","created":"2024-12-19","cited_by_count":7,"area":null},{"id":"2501.10639","title":"Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks","created":"2025-01-18","cited_by_count":7,"area":"alignment"},{"id":"2505.19690","title":"Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models","created":"2025-05-26","cited_by_count":7,"area":"lr"},{"id":"2509.19212","title":"Steering Multimodal Large Language Models Decoding for Context-Aware Safety","created":"2025-09-23","cited_by_count":7,"area":"mllm"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2406.15753","title":"The Perils of Optimizing Learned Reward Functions: Low Training Error Does Not Guarantee Low Regret","created":"2024-06-22","cited_by_count":6,"area":"alignment"},{"id":"2505.23473","title":"EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructions","created":"2025-05-29","cited_by_count":6,"area":"alignment"},{"id":"2508.11222","title":"ORFuzz: Fuzzing the \"Other Side\" of LLM Safety -- Testing Over-Refusal","created":"2025-08-15","cited_by_count":6,"area":"safety"},{"id":"2510.00857","title":"ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs","created":"2025-10-01","cited_by_count":6,"area":null},{"id":"2510.04320","title":"Read the Scene, Not the Script: Outcome-Aware Safety for LLMs","created":"2025-10-05","cited_by_count":6,"area":"alignment"},{"id":"2511.04316","title":"AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research","created":"2025-11-06","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2602.22303","title":"Training Agents to Self-Report Misbehavior","created":"2026-02-25","cited_by_count":6,"area":"agents"},{"id":"2606.01317","title":"SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces","created":"2026-05-31","cited_by_count":6,"area":"agents"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2608.24777","title":"StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing","created":"2026-08-25","cited_by_count":6,"area":"agents"},{"id":"2411.11853","title":"Chat Bankman-Fried: an Exploration of LLM Alignment in Finance","created":"2024-11-01","cited_by_count":5,"area":"alignment"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2505.21347","title":"OVERT: A Benchmark for Over-Refusal Evaluation on Text-to-Image Models","created":"2025-05-27","cited_by_count":5,"area":"safety"},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2510.11570","title":"Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrails","created":"2025-10-13","cited_by_count":5,"area":"lr"},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2412.06843","title":"Semantic Loss Guided Data Efficient Supervised Fine Tuning for Safe Responses in LLMs","created":"2024-12-07","cited_by_count":4,"area":null},{"id":"2504.09604","title":"Mitigating Many-Shot Jailbreaking","created":"2025-04-13","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2508.20151","title":"IntentionReasoner: Facilitating Adaptive LLM Safeguards through Intent Reasoning and Selective Query Refinement","created":"2025-08-27","cited_by_count":4,"area":"lr"},{"id":"2510.13698","title":"Attention Misses Visual Risk: Risk-Adaptive Steering for Multimodal Safety Alignment","created":"2025-10-15","cited_by_count":4,"area":"alignment"},{"id":"2601.17642","title":"Health-ORSC-Bench: A Benchmark for Measuring Over-Refusal and Safety Completion in Health Context","created":"2026-01-25","cited_by_count":4,"area":"alignment"},{"id":"2605.09278","title":"EquiMem: Calibrating Shared Memory in Multi-Agent Debate via Game-Theoretic Equilibrium","created":"2026-05-10","cited_by_count":4,"area":"agents"},{"id":"2605.16282","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","created":"2026-04-11","cited_by_count":4,"area":"agents"},{"id":"2605.28591","title":"Models That Know How Evaluations Are Designed Score Safer","created":"2026-05-27","cited_by_count":4,"area":null},{"id":"2406.04220","title":"BEADs: Bias Evaluation Across Domains","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2504.10496","title":"ArXivBench: When You Should Avoid Using ChatGPT for Academic Writing","created":"2025-04-06","cited_by_count":3,"area":"lr"},{"id":"2505.13581","title":"RAR: Setting Knowledge Tripwires for Retrieval Augmented Rejection","created":"2025-05-19","cited_by_count":3,"area":"rag"},{"id":"2506.02460","title":"MidPO: Dual Preference Optimization for Safety and Helpfulness in Large Language Models via a Mixture of Experts Framework","created":"2025-06-03","cited_by_count":3,"area":"alignment"},{"id":"2506.04462","title":"Watermarking Degrades Alignment in Language Models: Analysis and Mitigation","created":"2025-06-04","cited_by_count":3,"area":"alignment"},{"id":"2506.08399","title":"SafeCoT: Improving VLM Safety with Minimal Reasoning","created":"2025-06-10","cited_by_count":3,"area":"lr"},{"id":"2507.03167","title":"Where Do Reasoning Models Refuse?","created":"2025-07-03","cited_by_count":3,"area":"lr"},{"id":"2510.05310","title":"RAG Makes Guardrails Unsafe? Investigating Robustness of Guardrails under RAG-style Contexts","created":"2025-10-06","cited_by_count":3,"area":"safety"},{"id":"2512.06201","title":"K2-V2: A 360-Open, Reasoning-Enhanced LLM","created":"2025-12-05","cited_by_count":3,"area":"lr"},{"id":"2601.03699","title":"RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.07013","title":"Steering to Say No: Configurable Refusal via Activation Steering in Vision Language Models","created":"2026-01-31","cited_by_count":3,"area":"mllm"},{"id":"2602.08813","title":"Robust Policy Optimization to Prevent Catastrophic Forgetting","created":"2026-02-09","cited_by_count":3,"area":"alignment"},{"id":"2602.16729","title":"Intent Laundering: AI Safety Datasets Are Not What They Seem","created":"2026-02-17","cited_by_count":3,"area":null},{"id":"2603.03323","title":"Discern Truth from Falsehood: Reducing Over-Refusal via Contrastive Refinement","created":"2026-02-10","cited_by_count":3,"area":"safety"},{"id":"2603.26676","title":"Evaluating Human-AI Safety: A Framework for Measuring Harmful Capability Uplift","created":"2026-03-06","cited_by_count":3,"area":null}],"next_cursor":"100"}