{"total":153,"rows":[{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2506.07022","title":"AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint","created":"2025-06-08","cited_by_count":49,"area":"safety"},{"id":"2601.11516","title":"Building Production-Ready Probes For Gemini","created":"2026-01-16","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2603.06594","title":"A Coin Flip for Safety: LLM Judges Fail to Reliably Measure Adversarial Robustness","created":"2026-02-04","cited_by_count":20,"area":"safety"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2509.26238","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","created":"2025-09-30","cited_by_count":16,"area":"safety"},{"id":"2510.27062","title":"Consistency Training Helps Stop Sycophancy and Jailbreaks","created":"2025-10-31","cited_by_count":16,"area":"safety"},{"id":"2412.03235","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","created":"2024-12-04","cited_by_count":15,"area":"safety"},{"id":"2509.24384","title":"HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment","created":"2025-09-29","cited_by_count":15,"area":"safety"},{"id":"2504.07467","title":"Defense against Prompt Injection Attacks via Mixture of Encodings","created":"2025-04-10","cited_by_count":14,"area":"safety"},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2605.24834","title":"Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflection","created":"2026-05-24","cited_by_count":12,"area":"safety"},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2510.09694","title":"Kelp: A Streaming Safeguard for Large Models via Latent Dynamics-Guided Risk Detection","created":"2025-10-09","cited_by_count":9,"area":"safety"},{"id":"2411.14398","title":"Lightweight Safety Guardrails Using Fine-tuned BERT Embeddings","created":"2024-11-21","cited_by_count":8,"area":"safety"},{"id":"2505.19773","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","created":"2025-05-26","cited_by_count":8,"area":"safety"},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2510.10994","title":"Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety","created":"2025-10-13","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2601.20903","title":"ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack","created":"2026-01-28","cited_by_count":6,"area":"safety"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2505.21347","title":"OVERT: A Benchmark for Over-Refusal Evaluation on Text-to-Image Models","created":"2025-05-27","cited_by_count":5,"area":"safety"},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2502.16174","title":"Efficient LLM Moderation with Multi-Layer Latent Prototypes","created":"2025-02-22","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2505.12368","title":"CAPTURE: Context-Aware Prompt Injection Testing and Robustness Enhancement","created":"2025-05-18","cited_by_count":4,"area":"safety"},{"id":"2506.12299","title":"QGuard:Question-based Zero-shot Guard for Multi-modal LLM Safety","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2510.27087","title":"Characterizing Selective Refusal Bias in Large Language Models","created":"2025-10-31","cited_by_count":4,"area":"safety"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2502.12464","title":"SafeRoute: Adaptive Model Selection for Efficient and Accurate Safety Guardrails in Large Language Models","created":"2025-02-18","cited_by_count":3,"area":"safety"},{"id":"2510.02999","title":"NonTextual Target Attack","created":"2025-10-03","cited_by_count":3,"area":"safety"},{"id":"2510.05310","title":"RAG Makes Guardrails Unsafe? Investigating Robustness of Guardrails under RAG-style Contexts","created":"2025-10-06","cited_by_count":3,"area":"safety"},{"id":"2510.13351","title":"Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems","created":"2025-10-15","cited_by_count":3,"area":"safety"},{"id":"2511.12497","title":"SGuard-v1: Safety Guardrail for Large Language Models","created":"2025-11-16","cited_by_count":3,"area":"safety"},{"id":"2602.04581","title":"Trust The Typical","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2602.20170","title":"CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation","created":"2026-02-09","cited_by_count":3,"area":"safety"},{"id":"2604.03962","title":"Predict, Don't React: Value-Based Safety Forecasting for LLM Streaming","created":"2026-04-05","cited_by_count":3,"area":"safety"},{"id":"2604.08867","title":"AudioGuard: Toward Comprehensive Audio Safety Protection Across Diverse Threat Models","created":"2026-04-10","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.19766","title":"PAM: Training Policy-Aligned Moderation Filters at Scale","created":"2025-05-26","cited_by_count":2,"area":"safety"},{"id":"2507.05980","title":"Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps","created":"2025-07-08","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2512.02711","title":"CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer","created":"2025-12-02","cited_by_count":2,"area":"safety"},{"id":"2512.19011","title":"Do You Really Need a GPU to Guard Your LLM? CPU-Class Classifiers and Multi-Stage Pipelines for Safety Enforcement at Scale","created":"2025-12-22","cited_by_count":2,"area":"safety"},{"id":"2602.03328","title":"GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2604.18976","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","created":"2026-04-21","cited_by_count":2,"area":"safety"},{"id":"2605.05277","title":"GLiNER Guard: Unified Encoder Family for Production LLM Safety and Privacy","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2606.02423","title":"Investigating and Alleviating Harm Amplification in LLM Interactions","created":"2026-06-01","cited_by_count":2,"area":"safety"},{"id":"2606.25487","title":"How Reliable Is Your Jailbreak Judge? Calibration and Adversarial Robustness of Automated ASR Scoring","created":"2026-06-24","cited_by_count":2,"area":"safety"},{"id":"2607.13075","title":"The Entanglement Wall: Activation-Space Probes as Risk Detectors, Not Context Adjudicators","created":"2026-07-12","cited_by_count":2,"area":"safety"},{"id":"2608.08029","title":"Do All LLMs Know When They're Being Harmful? A Reproducibility Study of Latent-Space Safety Probes Across Model Families","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2511.19009","title":"Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2512.03356","title":"From static to adaptive: immune memory-based jailbreak detection for large language models","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2601.09321","title":"SpatialJB: How Text Distribution Art Becomes the \"Jailbreak Key\" for LLM Guardrails","created":"2026-01-14","cited_by_count":1,"area":"safety"},{"id":"2602.15853","title":"A Lightweight Explainable Guardrail for Prompt Safety","created":"2026-01-24","cited_by_count":1,"area":"safety"},{"id":"2603.13933","title":"OmniCompliance-100K: A Multi-Domain, Rule-Grounded, Real-World Safety Compliance Dataset","created":"2026-03-14","cited_by_count":1,"area":"safety"},{"id":"2604.17053","title":"Jailbreaking Large Language Models with Morality Attacks","created":"2026-04-18","cited_by_count":1,"area":"safety"},{"id":"2605.12869","title":"Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis","created":"2026-05-13","cited_by_count":1,"area":"safety"},{"id":"2605.30693","title":"Triaging Threats to Specialized Guardrails","created":"2026-05-29","cited_by_count":1,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2606.02959","title":"Gate AI: LLM Security Benchmark Evaluation Methodology and Results","created":"2026-06-01","cited_by_count":1,"area":"safety"},{"id":"2606.04483","title":"Voices Across Registers: Corpus-Conditioned Vernacular Jailbreaks against Aligned LLMs via Fanfiction Subgenres","created":"2026-06-03","cited_by_count":1,"area":"safety"},{"id":"2606.09890","title":"PreAct-Bench: Benchmarking Predictive Monitoring in LLMs","created":"2026-06-03","cited_by_count":1,"area":"safety"},{"id":"2606.12342","title":"ALIGNBEAM : Inference-Time Alignment Transfer via Cross-Vocabulary Logit Mixing","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2606.19887","title":"FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming","created":"2026-06-18","cited_by_count":1,"area":"safety"},{"id":"2606.27210","title":"Paved with True Intents: Intent-Aware Training Improves LLM Safety Classification Across Training Regimes","created":"2026-06-25","cited_by_count":1,"area":"safety"},{"id":"2606.29887","title":"SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing","created":"2026-06-29","cited_by_count":1,"area":"safety"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"},{"id":"2608.03201","title":"When Refusal Looks Safe: The Refusal-Cue Shortcut in Safety Guard Models","created":"2026-08-04","cited_by_count":1,"area":"safety"},{"id":"2608.04415","title":"Social Pressure Breaks Majority Voting in LLM Safety Panels","created":"2026-08-05","cited_by_count":1,"area":"safety"},{"id":"2608.14577","title":"HarmProfile: Characterizing Harmful Distributions in Frontier LLMs","created":"2026-06-11","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}