{"total":240,"rows":[{"id":"2411.16594","title":"From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judge","created":"2024-11-25","cited_by_count":494,"area":null},{"id":"2412.05579","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","created":"2024-12-07","cited_by_count":465,"area":null},{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369,"area":"agents"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2409.05907","title":"Programming Refusal with Conditional Activation Steering","created":"2024-09-06","cited_by_count":206,"area":"mechinterp"},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.12659","title":"The Hidden Risks of Large Reasoning Models: A Safety Assessment of R1","created":"2025-02-18","cited_by_count":91,"area":"lr"},{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2410.08847","title":"Unintentional Unalignment: Likelihood Displacement in Direct Preference Optimization","created":"2024-10-11","cited_by_count":67,"area":"alignment"},{"id":"2410.09102","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","created":"2024-10-09","cited_by_count":67,"area":"safety"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2503.24370","title":"Effectively Controlling Reasoning Models through Thinking Intervention","created":"2025-03-31","cited_by_count":65,"area":"lr"},{"id":"2504.04377","title":"PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages","created":"2025-04-06","cited_by_count":59,"area":null},{"id":"2505.08054","title":"FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning","created":"2025-05-12","cited_by_count":58,"area":"lr"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2506.23719","title":"DABstep: Data Agent Benchmark for Multi-step Reasoning","created":"2025-06-30","cited_by_count":46,"area":"lr"},{"id":"2503.03710","title":"Improving LLM Safety Alignment with Dual-Objective Optimization","created":"2025-03-05","cited_by_count":43,"area":"alignment"},{"id":"2503.05021","title":"Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety","created":"2025-03-06","cited_by_count":39,"area":"lr"},{"id":"2412.08608","title":"AdvWave: Stealthy Adversarial Jailbreak Attack against Large Audio-Language Models","created":"2024-12-11","cited_by_count":38,"area":"safety"},{"id":"2505.17306","title":"Refusal Direction is Universal Across Safety-Aligned Languages","created":"2025-05-22","cited_by_count":38,"area":null},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2502.01042","title":"SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals","created":"2025-02-03","cited_by_count":29,"area":"safety"},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2506.08123","title":"QA-LIGN: Aligning LLMs through Constitutionally Decomposed QA","created":"2025-06-09","cited_by_count":28,"area":"alignment"},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27,"area":"lr"},{"id":"2506.17209","title":"Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency","created":"2025-06-20","cited_by_count":27,"area":"safety"},{"id":"2601.14004","title":"Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models","created":"2026-01-20","cited_by_count":27,"area":"mechinterp"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2501.18438","title":"o3-mini vs DeepSeek-R1: Which One is Safer?","created":"2025-01-30","cited_by_count":24,"area":"lr"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2507.00971","title":"Reasoning as an Adaptive Defense for Safety","created":"2025-07-01","cited_by_count":23,"area":"lr"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2501.14940","title":"CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models","created":"2025-01-24","cited_by_count":20,"area":"alignment"},{"id":"2501.18100","title":"Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation","created":"2025-01-30","cited_by_count":20,"area":null},{"id":"2503.18991","title":"Inverse Reinforcement Learning with Dynamic Reward Scaling for LLM Alignment","created":"2025-03-23","cited_by_count":20,"area":"alignment"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2409.10566","title":"Eureka: Evaluating and Understanding Large Foundation Models","created":"2024-09-13","cited_by_count":18,"area":null},{"id":"2505.18325","title":"Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary","created":"2025-05-23","cited_by_count":18,"area":"safety"},{"id":"2508.07646","title":"Multi-Turn Jailbreaks Are Simpler Than They Seem","created":"2025-08-11","cited_by_count":17,"area":"safety"},{"id":"2607.10059","title":"AgentAbstain: Do LLM Agents Know When Not to Act?","created":"2026-07-11","cited_by_count":17,"area":"agents"},{"id":"2505.15710","title":"Advancing LLM Safe Alignment with Safety Representation Ranking","created":"2025-05-21","cited_by_count":16,"area":"safety"},{"id":"2505.18882","title":"Personalized Safety in LLMs: A Benchmark and A Planning-Based Agent Approach","created":"2025-05-24","cited_by_count":16,"area":"agents"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2508.10599","title":"Adaptive Multi-Subspace Representation Steering for Attribute Alignment in Large Language Models","created":"2025-08-14","cited_by_count":16,"area":"mechinterp"},{"id":"2507.19672","title":"Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges","created":"2025-07-25","cited_by_count":15,"area":"alignment"},{"id":"2512.02445","title":"When Refusals Fail: Unstable Safety Mechanisms in Long-Context LLM Agents","created":"2025-12-02","cited_by_count":15,"area":"agents"},{"id":"2601.18076","title":"Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming","created":"2026-01-26","cited_by_count":15,"area":"safety"},{"id":"2606.28733","title":"Agentic Abstention: Do Agents Know When to Stop Instead of Act?","created":"2026-06-27","cited_by_count":15,"area":"agents"},{"id":"2410.10862","title":"Superficial Safety Alignment Hypothesis","created":"2024-10-07","cited_by_count":14,"area":"alignment"},{"id":"2503.21720","title":"Collab: Controlled Decoding using Mixture of Agents for LLM Alignment","created":"2025-03-27","cited_by_count":14,"area":"agents"},{"id":"2504.17130","title":"Steering the CensorShip: Uncovering Representation Vectors for LLM \"Thought\" Control","created":"2025-04-23","cited_by_count":14,"area":"lr"},{"id":"2505.17815","title":"Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systems","created":"2025-05-23","cited_by_count":14,"area":"lr"},{"id":"2509.22820","title":"MMPB: It's Time for Multi-Modal Personalization","created":"2025-09-26","cited_by_count":14,"area":null},{"id":"2501.17749","title":"Early External Safety Testing of OpenAI's o3-mini: Insights from the Pre-Deployment Evaluation","created":"2025-01-29","cited_by_count":13,"area":"lr"},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2410.15483","title":"Understanding Forgetting in LLM Supervised Fine-Tuning and Preference Learning -- A Convex Optimization Perspective","created":"2024-10-20","cited_by_count":12,"area":"alignment"},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2412.16974","title":"Cannot or Should Not? Automatic Analysis of Refusal Composition in IFT/RLHF Datasets and Refusal Behavior of Black-Box LLMs","created":"2024-12-22","cited_by_count":11,"area":"alignment"},{"id":"2501.19180","title":"Enhancing Model Defense Against Jailbreaks with Proactive Safety Reasoning","created":"2025-01-31","cited_by_count":11,"area":"lr"},{"id":"2510.10205","title":"PIXEL: Adaptive Steering Via Position-wise Injection with eXact Estimated Levels under Subspace Calibration","created":"2025-10-11","cited_by_count":11,"area":"mechinterp"},{"id":"2512.11391","title":"Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization","created":"2025-12-12","cited_by_count":11,"area":"alignment"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2502.15086","title":"Is Safety Standard Same for Everyone? User-Specific Safety Evaluation of Large Language Models","created":"2025-02-20","cited_by_count":10,"area":"safety"},{"id":"2510.02833","title":"Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs","created":"2025-10-03","cited_by_count":10,"area":"alignment"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2411.02317","title":"Defining and Evaluating Physical Safety for Large Language Models","created":"2024-11-04","cited_by_count":9,"area":null},{"id":"2506.06636","title":"SafeLawBench: Towards Safe Alignment of Large Language Models","created":"2025-06-07","cited_by_count":9,"area":"alignment"},{"id":"2510.14301","title":"A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space","created":"2025-10-16","cited_by_count":9,"area":"alignment"},{"id":"2511.08379","title":"SOM Directions are Better than One: Multi-Directional Refusal Suppression in Language Models","created":"2025-11-11","cited_by_count":9,"area":"alignment"},{"id":"2410.07571","title":"How Does Vision-Language Adaptation Impact the Safety of Vision Language Models?","created":"2024-10-10","cited_by_count":8,"area":"mllm"},{"id":"2510.17633","title":"SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering","created":"2025-10-20","cited_by_count":8,"area":"safety"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2604.14548","title":"VoxSafeBench: Not Just What Is Said, but Who, How, and Where","created":"2026-04-16","cited_by_count":8,"area":null},{"id":"2605.01687","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","created":"2026-05-03","cited_by_count":8,"area":"safety"},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2501.17132","title":"ASTRAL: Automated Safety Testing of Large Language Models","created":"2025-01-28","cited_by_count":7,"area":null},{"id":"2502.00735","title":"`From Prompt to Perturbation': An Adaptive Framework for Voice-Based Jailbreaks on Audio LLMs","created":"2025-02-02","cited_by_count":7,"area":"safety"},{"id":"2504.02867","title":"Multi-Agent LLM Judge: automatic personalized LLM judge design for evaluating natural language generation applications","created":"2025-04-01","cited_by_count":7,"area":"agents"},{"id":"2505.00038","title":"HyPerAlign: Interpretable Personalized LLM Alignment via Hypothesis Generation","created":"2025-04-29","cited_by_count":7,"area":"alignment"},{"id":"2510.10994","title":"Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety","created":"2025-10-13","cited_by_count":7,"area":"safety"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2603.11388","title":"Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment","created":"2026-03-12","cited_by_count":7,"area":"alignment"},{"id":"2607.01793","title":"Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification","created":"2026-07-02","cited_by_count":7,"area":"agents"},{"id":"2408.16163","title":"FRACTURED-SORRY-Bench: Framework for Revealing Attacks in Conversational Turns Undermining Refusal Efficacy and Defenses over SORRY-Bench (Automated Multi-shot Jailbreaks)","created":"2024-08-28","cited_by_count":6,"area":"safety"},{"id":"2501.03266","title":"LLM Content Moderation and User Satisfaction: Evidence from Response Refusals in Chatbot Arena","created":"2025-01-04","cited_by_count":6,"area":"safety"},{"id":"2502.13946","title":"Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Region","created":"2025-02-19","cited_by_count":6,"area":"alignment"},{"id":"2503.10192","title":"Red Teaming Contemporary AI Models: Insights from Spanish and Basque Perspectives","created":"2025-03-13","cited_by_count":6,"area":"safety"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2508.00324","title":"R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledge","created":"2025-08-01","cited_by_count":6,"area":"lr"},{"id":"2508.05464","title":"Bench-2-CoP: Can We Trust Benchmarking for EU AI Compliance?","created":"2025-08-07","cited_by_count":6,"area":null},{"id":"2510.00857","title":"ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs","created":"2025-10-01","cited_by_count":6,"area":null}],"next_cursor":"100"}