{"total":496,"rows":[{"id":"2411.15124","title":"Tulu 3: Pushing Frontiers in Open Language Model Post-Training","created":"2024-11-22","cited_by_count":1053,"area":"lr"},{"id":"2410.18451","title":"Skywork-Reward: Bag of Tricks for Reward Modeling in LLMs","created":"2024-10-24","cited_by_count":327,"area":"lr"},{"id":"2410.12784","title":"JudgeBench: A Benchmark for Evaluating LLM-based Judges","created":"2024-10-16","cited_by_count":318,"area":null},{"id":"2407.21772","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","created":"2024-07-31","cited_by_count":243,"area":null},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2503.04957","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","created":"2025-03-06","cited_by_count":102,"area":"agents"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2411.11296","title":"Steering Language Model Refusal with Sparse Autoencoders","created":"2024-11-18","cited_by_count":95,"area":"mechinterp"},{"id":"2510.18874","title":"Retaining by Doing: The Role of On-Policy Data in Mitigating Forgetting","created":"2025-10-21","cited_by_count":94,"area":null},{"id":"2502.12659","title":"The Hidden Risks of Large Reasoning Models: A Safety Assessment of R1","created":"2025-02-18","cited_by_count":91,"area":"lr"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2505.11475","title":"HelpSteer3-Preference: Open Human-Annotated Preference Data across Diverse Tasks and Languages","created":"2025-05-16","cited_by_count":75,"area":"alignment"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2504.04377","title":"PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages","created":"2025-04-06","cited_by_count":59,"area":null},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2506.07022","title":"AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint","created":"2025-06-08","cited_by_count":49,"area":"safety"},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2601.11516","title":"Building Production-Ready Probes For Gemini","created":"2026-01-16","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2501.12895","title":"Test-Time Preference Optimization: On-the-Fly Alignment via Iterative Textual Feedback","created":"2025-01-22","cited_by_count":41,"area":"alignment"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2508.18076","title":"Neither Valid nor Reliable? Investigating the Use of LLMs as Judges","created":"2025-08-25","cited_by_count":39,"area":null},{"id":"2505.17306","title":"Refusal Direction is Universal Across Safety-Aligned Languages","created":"2025-05-22","cited_by_count":38,"area":null},{"id":"2502.11689","title":"Improve LLM-as-a-Judge Ability as a General Ability","created":"2025-02-17","cited_by_count":37,"area":"lr"},{"id":"2410.08968","title":"Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements","created":"2024-10-11","cited_by_count":36,"area":"alignment"},{"id":"2409.15268","title":"Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarking","created":"2024-09-23","cited_by_count":35,"area":"alignment"},{"id":"2410.17578","title":"MM-Eval: A Multilingual Meta-Evaluation Benchmark for LLM-as-a-Judge and Reward Models","created":"2024-10-23","cited_by_count":35,"area":"alignment"},{"id":"2503.01807","title":"Large-Scale Data Selection for Instruction Tuning","created":"2025-03-03","cited_by_count":35,"area":null},{"id":"2511.19663","title":"Fara-7B: An Efficient Agentic Model for Computer Use","created":"2025-11-24","cited_by_count":35,"area":"agents"},{"id":"2507.11097","title":"The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs","created":"2025-07-15","cited_by_count":34,"area":"inference"},{"id":"2505.10833","title":"MergeBench: A Benchmark for Merging Domain-Specialized LLMs","created":"2025-05-16","cited_by_count":33,"area":null},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2507.06187","title":"The Delta Learning Hypothesis: Preference Tuning on Weak Data can Yield Strong Gains","created":"2025-07-08","cited_by_count":28,"area":null},{"id":"2508.01710","title":"CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications","created":"2025-08-03","cited_by_count":27,"area":"agents"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2602.02132","title":"There Is More to Refusal in Large Language Models than a Single Direction","created":"2026-02-02","cited_by_count":26,"area":"mechinterp"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2603.06594","title":"A Coin Flip for Safety: LLM Judges Fail to Reliably Measure Adversarial Robustness","created":"2026-02-04","cited_by_count":20,"area":"safety"},{"id":"2410.01524","title":"HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Models","created":"2024-10-02","cited_by_count":19,"area":"distill"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2506.16507","title":"Robust Reward Modeling via Causal Rubrics","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2601.15588","title":"YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models","created":"2026-01-22","cited_by_count":19,"area":"lr"},{"id":"2506.17368","title":"SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs via Stable Safety-critical Expert Identification","created":"2025-06-20","cited_by_count":18,"area":"alignment"},{"id":"2507.19060","title":"PurpCode: Reasoning for Safer Code Generation","created":"2025-07-25","cited_by_count":18,"area":"lr"},{"id":"2410.18027","title":"Cross-lingual Transfer of Reward Models in Multilingual Alignment","created":"2024-10-23","cited_by_count":17,"area":"alignment"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2503.16870","title":"Sparse Logit Sampling: Accelerating Knowledge Distillation in LLMs","created":"2025-03-21","cited_by_count":16,"area":"distill"},{"id":"2505.20087","title":"Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models","created":"2025-05-26","cited_by_count":16,"area":"lr"},{"id":"2509.26238","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","created":"2025-09-30","cited_by_count":16,"area":"safety"},{"id":"2510.27062","title":"Consistency Training Helps Stop Sycophancy and Jailbreaks","created":"2025-10-31","cited_by_count":16,"area":"safety"},{"id":"2604.03147","title":"Valence-Arousal Subspace in LLMs: Circular Emotion Geometry and Multi-Behavioral Control","created":"2026-04-03","cited_by_count":16,"area":null},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2410.02381","title":"MetaMetrics: Calibrating Metrics For Generation Tasks Using Human Preferences","created":"2024-10-03","cited_by_count":15,"area":null},{"id":"2412.03235","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","created":"2024-12-04","cited_by_count":15,"area":"safety"},{"id":"2507.14987","title":"AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning","created":"2025-07-20","cited_by_count":15,"area":"alignment"},{"id":"2508.06249","title":"In-Training Defenses against Emergent Misalignment in Language Models","created":"2025-08-08","cited_by_count":15,"area":"alignment"},{"id":"2509.24384","title":"HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment","created":"2025-09-29","cited_by_count":15,"area":"safety"},{"id":"2606.28733","title":"Agentic Abstention: Do Agents Know When to Stop Instead of Act?","created":"2026-06-27","cited_by_count":15,"area":"agents"},{"id":"2504.07467","title":"Defense against Prompt Injection Attacks via Mixture of Encodings","created":"2025-04-10","cited_by_count":14,"area":"safety"},{"id":"2504.17130","title":"Steering the CensorShip: Uncovering Representation Vectors for LLM \"Thought\" Control","created":"2025-04-23","cited_by_count":14,"area":"lr"},{"id":"2505.13772","title":"Krikri: Advancing Open Large Language Models for Greek","created":"2025-05-19","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2601.02346","title":"Falcon-H1R: Pushing the Reasoning Frontiers with a Hybrid Model for Efficient Test-Time Scaling","created":"2026-01-05","cited_by_count":13,"area":"lr"},{"id":"2412.13702","title":"Typhoon 2: A Family of Open Text and Multimodal Thai Large Language Models","created":"2024-12-18","cited_by_count":12,"area":"mllm"},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2505.15389","title":"Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Study","created":"2025-05-21","cited_by_count":12,"area":"mllm"},{"id":"2505.21605","title":"SoSBench: Benchmarking Safety Alignment on Six Scientific Domains","created":"2025-05-27","cited_by_count":12,"area":"alignment"},{"id":"2509.23614","title":"PSG-Agent: Personality-Aware Safety Guardrail for LLM-based Agents","created":"2025-09-28","cited_by_count":12,"area":"agents"},{"id":"2605.24834","title":"Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflection","created":"2026-05-24","cited_by_count":12,"area":"safety"},{"id":"2412.19512","title":"Safeguard Fine-Tuned LLMs Through Pre- and Post-Tuning Model Merging","created":"2024-12-27","cited_by_count":11,"area":null},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2505.12763","title":"Rethinking Reward Model Evaluation Through the Lens of Reward Overoptimization","created":"2025-05-19","cited_by_count":11,"area":"alignment"},{"id":"2506.21463","title":"Aligning Spoken Dialogue Models from User Interactions","created":"2025-06-26","cited_by_count":11,"area":"alignment"},{"id":"2508.03121","title":"RegMean++: Enhancing Effectiveness and Generalization of Regression Mean for Model Merging","created":"2025-08-05","cited_by_count":11,"area":null},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2601.07185","title":"Defenses Against Prompt Attacks Learn Surface Heuristics","created":"2026-01-12","cited_by_count":11,"area":null},{"id":"2601.07349","title":"Reward Modeling from Natural Language Human Feedback","created":"2026-01-12","cited_by_count":11,"area":"alignment"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"}],"next_cursor":"100"}