{"total":472,"rows":[{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2502.12025","title":"SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities","created":"2025-02-17","cited_by_count":136,"area":"lr"},{"id":"2408.17003","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","created":"2024-08-30","cited_by_count":134,"area":"alignment"},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129,"area":"mllm"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2411.11296","title":"Steering Language Model Refusal with Sparse Autoencoders","created":"2024-11-18","cited_by_count":95,"area":"mechinterp"},{"id":"2505.23416","title":"KVzip: Query-Agnostic KV Cache Compression with Context Reconstruction","created":"2025-05-29","cited_by_count":95,"area":"inference"},{"id":"2409.01586","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","created":"2024-09-03","cited_by_count":92,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79,"area":"safety"},{"id":"2502.02384","title":"STAIR: Improving Safety Alignment with Introspective Reasoning","created":"2025-02-04","cited_by_count":77,"area":"lr"},{"id":"2408.09600","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","created":"2024-08-18","cited_by_count":72,"area":"alignment"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2410.16033","title":"TreeBoN: Enhancing Inference-Time Alignment with Speculative Tree-Search and Best-of-N Sampling","created":"2024-10-18","cited_by_count":61,"area":"lr"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2505.08054","title":"FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning","created":"2025-05-12","cited_by_count":58,"area":"lr"},{"id":"2510.26243","title":"Angular Steering: Behavior Control via Rotation in Activation Space","created":"2025-10-30","cited_by_count":53,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2506.02867","title":"Demystifying Reasoning Dynamics with Mutual Information: Thinking Tokens are Information Peaks in LLM Reasoning","created":"2025-06-03","cited_by_count":51,"area":"lr"},{"id":"2506.07022","title":"AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint","created":"2025-06-08","cited_by_count":49,"area":"safety"},{"id":"2505.17612","title":"Distilling LLM Agent into Small Models with Retrieval and Code Tools","created":"2025-05-23","cited_by_count":47,"area":"lr"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2406.18664","title":"Evaluating Copyright Takedown Methods for Language Models","created":"2024-06-26","cited_by_count":43,"area":null},{"id":"2503.03710","title":"Improving LLM Safety Alignment with Dual-Objective Optimization","created":"2025-03-05","cited_by_count":43,"area":"alignment"},{"id":"2504.16980","title":"Safety Pretraining: Toward the Next Generation of Safe AI","created":"2025-04-23","cited_by_count":43,"area":null},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2503.05021","title":"Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety","created":"2025-03-06","cited_by_count":39,"area":"lr"},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2410.09760","title":"Targeted Vaccine: Safety Alignment for Large Language Models against Harmful Fine-Tuning via Layer-wise Perturbation","created":"2024-10-13","cited_by_count":37,"area":"alignment"},{"id":"2412.12497","title":"NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning","created":"2024-12-17","cited_by_count":37,"area":"alignment"},{"id":"2502.12970","title":"Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking","created":"2025-02-18","cited_by_count":34,"area":"lr"},{"id":"2504.02922","title":"Overcoming Sparsity Artifacts in Crosscoders to Interpret Chat-Tuning","created":"2025-04-03","cited_by_count":34,"area":null},{"id":"2507.11097","title":"The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs","created":"2025-07-15","cited_by_count":34,"area":"inference"},{"id":"2407.18369","title":"AI Safety in Generative AI Large Language Models: A Survey","created":"2024-07-06","cited_by_count":33,"area":null},{"id":"2407.15211","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","created":"2024-07-21","cited_by_count":30,"area":"mllm"},{"id":"2503.17682","title":"Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback","created":"2025-03-22","cited_by_count":30,"area":"mllm"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2505.18807","title":"Mitigating Deceptive Alignment via Self-Monitoring","created":"2025-05-24","cited_by_count":29,"area":"lr"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2509.09660","title":"Steering MoE LLMs via Expert (De)Activation","created":"2025-09-11","cited_by_count":26,"area":"moe"},{"id":"2510.04040","title":"FaithCoT-Bench: Benchmarking Instance-Level Faithfulness of Chain-of-Thought Reasoning","created":"2025-10-05","cited_by_count":26,"area":"lr"},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2503.17239","title":"SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging","created":"2025-03-21","cited_by_count":25,"area":"alignment"},{"id":"2505.14667","title":"SAFEPATH: Preventing Harmful Reasoning in Chain-of-Thought via Early Alignment","created":"2025-05-20","cited_by_count":24,"area":"lr"},{"id":"2507.18631","title":"Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignment","created":"2025-07-24","cited_by_count":24,"area":"alignment"},{"id":"2502.12202","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","created":"2025-02-16","cited_by_count":22,"area":"lr"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2501.18100","title":"Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation","created":"2025-01-30","cited_by_count":20,"area":null},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2505.16186","title":"SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning","created":"2025-05-22","cited_by_count":20,"area":"lr"},{"id":"2506.05346","title":"Why LLM Safety Guardrails Collapse After Fine-tuning: A Similarity Analysis Between Alignment and Fine-tuning Datasets","created":"2025-06-05","cited_by_count":20,"area":"alignment"},{"id":"2410.16531","title":"Bayesian scaling laws for in-context learning","created":"2024-10-21","cited_by_count":19,"area":"safety"},{"id":"2506.08473","title":"AsFT: Anchoring Safety During LLM Fine-Tuning Within Narrow Safety Basin","created":"2025-06-10","cited_by_count":19,"area":null},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2508.07173","title":"Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models","created":"2025-08-10","cited_by_count":18,"area":"safety"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2505.15710","title":"Advancing LLM Safe Alignment with Safety Representation Ranking","created":"2025-05-21","cited_by_count":16,"area":"safety"},{"id":"2510.27062","title":"Consistency Training Helps Stop Sycophancy and Jailbreaks","created":"2025-10-31","cited_by_count":16,"area":"safety"},{"id":"2502.04040","title":"Safety Reasoning with Guidelines","created":"2025-02-06","cited_by_count":15,"area":"lr"},{"id":"2502.04322","title":"Speak Easy: Eliciting Harmful Jailbreaks from LLMs with Simple Interactions","created":"2025-02-06","cited_by_count":15,"area":"alignment"},{"id":"2502.17254","title":"REINFORCE Adversarial Attacks on Large Language Models: An Adaptive, Distributional, and Semantic Objective","created":"2025-02-24","cited_by_count":15,"area":"alignment"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2507.14987","title":"AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning","created":"2025-07-20","cited_by_count":15,"area":"alignment"},{"id":"2510.04309","title":"Activation Steering with a Feedback Controller","created":"2025-10-05","cited_by_count":15,"area":"alignment"},{"id":"2511.06626","title":"Spilling the Beans: Teaching LLMs to Self-Report Their Hidden Objectives","created":"2025-11-10","cited_by_count":15,"area":"agents"},{"id":"2410.10862","title":"Superficial Safety Alignment Hypothesis","created":"2024-10-07","cited_by_count":14,"area":"alignment"},{"id":"2502.01208","title":"On Almost Surely Safe Alignment of Large Language Models at Inference-Time","created":"2025-02-03","cited_by_count":14,"area":"alignment"},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2509.21651","title":"Can AI Perceive Physical Danger and Intervene?","created":"2025-09-25","cited_by_count":14,"area":null},{"id":"2407.16637","title":"Course-Correction: Safety Alignment Using Synthetic Preferences","created":"2024-07-23","cited_by_count":13,"area":"alignment"},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2506.01317","title":"T-SHIRT: Token-Selective Hierarchical Data Selection for Instruction Tuning","created":"2025-06-02","cited_by_count":13,"area":null},{"id":"2507.13966","title":"Bottom-up Domain-specific Superintelligence: A Reliable Knowledge Graph is What We Need","created":"2025-07-18","cited_by_count":13,"area":"lr"},{"id":"2507.21182","title":"SDD: Self-Degraded Defense against Malicious Fine-tuning","created":"2025-07-27","cited_by_count":13,"area":"alignment"},{"id":"2510.05571","title":"Presenting a Paper is an Art: Self-Improvement Aesthetic Agents for Academic Presentations","created":"2025-10-07","cited_by_count":13,"area":null},{"id":"2507.07341","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","created":"2025-07-09","cited_by_count":12,"area":"safety"},{"id":"2509.24296","title":"DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models","created":"2025-09-29","cited_by_count":12,"area":"safety"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2501.16727","title":"xJailbreak: Representation Space Guided Reinforcement Learning for Interpretable LLM Jailbreaking","created":"2025-01-28","cited_by_count":11,"area":"alignment"},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.17196","title":"Shape it Up! Restoring LLM Safety during Finetuning","created":"2025-05-22","cited_by_count":11,"area":"alignment"},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2508.07172","title":"Gradient Surgery for Safe LLM Fine-Tuning","created":"2025-08-10","cited_by_count":11,"area":"alignment"},{"id":"2508.12398","title":"Where to Start Alignment? Diffusion Large Language Model May Demand a Distinct Position","created":"2025-08-17","cited_by_count":11,"area":"safety"},{"id":"2509.24393","title":"Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2512.11391","title":"Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization","created":"2025-12-12","cited_by_count":11,"area":"alignment"},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2601.21900","title":"TraceRouter: Robust Safety for Large Foundation Models via Path-Level Intervention","created":"2026-01-29","cited_by_count":11,"area":"mechinterp"},{"id":"2408.10668","title":"Probing the Safety Response Boundary of Large Language Models via Unsafe Decoding Path Generation","created":"2024-08-20","cited_by_count":10,"area":"safety"},{"id":"2502.14828","title":"Fundamental Limitations in Pointwise Defences of LLM Finetuning APIs","created":"2025-02-20","cited_by_count":10,"area":null}],"next_cursor":"100"}