{"total":63,"rows":[{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2601.11893","title":"Taming Various Privilege Escalation in LLM-Based Agent Systems: A Mandatory Access Control Framework","created":"2026-01-17","cited_by_count":54,"area":"agents"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2509.14285","title":"A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks","created":"2025-09-16","cited_by_count":11,"area":"agents"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2509.25624","title":"STAC: When Innocent Tools Form Dangerous Chains for LLM Agents","created":"2025-09-30","cited_by_count":8,"area":"agents"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2512.20168","title":"Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography","created":"2025-12-23","cited_by_count":8,"area":"mllm"},{"id":"2505.07610","title":"Concept-Level Explainability for Auditing & Steering LLM Responses","created":"2025-05-12","cited_by_count":6,"area":"safety"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2603.01291","title":"JailNewsBench: Multi-Lingual and Regional Benchmark for Fake News Generation under Jailbreak Attacks","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2510.26096","title":"ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models","created":"2025-10-30","cited_by_count":4,"area":"safety"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2602.11495","title":"Jailbreaking Leaves a Trace: Understanding and Detecting Jailbreak Attacks from Internal Representations of Large Language Models","created":"2026-02-12","cited_by_count":4,"area":"safety"},{"id":"2605.29960","title":"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2506.09396","title":"Reasoning as a Resource: Optimizing Fast and Slow Thinking in Code Generation Models","created":"2025-06-11","cited_by_count":3,"area":"lr"},{"id":"2601.03600","title":"ALERT: Zero-shot LLM Jailbreak Detection via Internal Discrepancy Amplification","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2604.14865","title":"Segment-Level Coherence for Robust Harmful Intent Probing in LLMs","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2606.05743","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","created":"2026-06-04","cited_by_count":3,"area":"agents"},{"id":"2506.07356","title":"Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks","created":"2025-06-09","cited_by_count":2,"area":"safety"},{"id":"2603.17305","title":"Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations","created":"2026-03-18","cited_by_count":2,"area":"lr"},{"id":"2604.16824","title":"SafeDream: Safety World Model for Proactive Early Jailbreak Detection","created":"2026-04-18","cited_by_count":2,"area":"wm"},{"id":"2605.24817","title":"RouteScan: A Non-Intrusive Approach to Auditing MoE LLMs Safety via Expert Routing Telemetry","created":"2026-05-24","cited_by_count":2,"area":"moe"},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2601.19174","title":"SHIELD: An Auto-Healing Agentic Defense Framework for LLM Resource Exhaustion Attacks","created":"2026-01-27","cited_by_count":1,"area":"agents"},{"id":"2606.14517","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","created":"2026-06-12","cited_by_count":1,"area":"agents"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2508.07139","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","created":"2025-08-10","cited_by_count":0,"area":"alignment"},{"id":"2508.18665","title":"Membership Inference Attacks on In-Context Examples in LLM-based Recommender Systems","created":"2025-08-26","cited_by_count":0,"area":"safety"},{"id":"2509.16268","title":"Digging Into the Internal: Causality-Based Analysis of LLM Function Calling","created":"2025-09-18","cited_by_count":0,"area":"agents"},{"id":"2602.06630","title":"TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2602.09629","title":"Stop Testing Attacks, Start Diagnosing Defenses: The Four-Checkpoint Framework Reveals Where LLM Safety Breaks","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2603.15397","title":"SFCoT: Safer Chain-of-Thought via Active Safety Evaluation and Calibration","created":"2026-03-16","cited_by_count":0,"area":"lr"},{"id":"2604.01473","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","created":"2026-04-01","cited_by_count":0,"area":"safety"},{"id":"2604.12548","title":"DeepSeek Robustness Against Semantic-Character Dual-Space Mutated Prompt Injection","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2604.18248","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","created":"2026-04-20","cited_by_count":0,"area":"safety"},{"id":"2605.02187","title":"Rewriting the Response Path: Silent Tampering and Provider-Signed Defense in BYOK LLM Agents","created":"2026-05-04","cited_by_count":0,"area":"agents"},{"id":"2605.05415","title":"Information Theoretic Adversarial Training of Large Language Models","created":"2026-05-06","cited_by_count":0,"area":"safety"},{"id":"2605.09225","title":"The Art of the Jailbreak: Formulating Jailbreak Attacks for LLM Security Beyond Binary Scoring","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2606.26377","title":"Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2608.20378","title":"Truth Lies Deep: Countering Semantic Camouflage via Latent Intent Verification","created":"2026-06-27","cited_by_count":0,"area":"alignment"},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.21484","title":"HE-Guardrail: A Homomorphic Guardrail Against Jailbreak Attacks for Encrypted Large Language Model Inference","created":"2026-09-18","cited_by_count":0,"area":"safety"},{"id":"2609.28197","title":"PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety","created":"2026-09-23","cited_by_count":0,"area":"agents"},{"id":"2609.39902","title":"CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion","created":"2026-09-30","cited_by_count":0,"area":"alignment"},{"id":"2610.06122","title":"Benchmarking Jailbreak Guardrails for Embodied Agents","created":"2026-10-05","cited_by_count":0,"area":"agents"}],"next_cursor":null}