{"total":223,"rows":[{"id":"2411.15124","title":"Tulu 3: Pushing Frontiers in Open Language Model Post-Training","created":"2024-11-22","cited_by_count":1053,"area":"lr"},{"id":"2412.13663","title":"Smarter, Better, Faster, Longer: A Modern Bidirectional Encoder for Fast, Memory Efficient, and Long Context Finetuning and Inference","created":"2024-12-18","cited_by_count":554,"area":null},{"id":"2410.18451","title":"Skywork-Reward: Bag of Tricks for Reward Modeling in LLMs","created":"2024-10-24","cited_by_count":327,"area":"lr"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2502.12025","title":"SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities","created":"2025-02-17","cited_by_count":136,"area":"lr"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2504.13203","title":"X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents","created":"2025-04-15","cited_by_count":125,"area":"agents"},{"id":"2407.12043","title":"The Art of Saying No: Contextual Noncompliance in Language Models","created":"2024-07-02","cited_by_count":105,"area":null},{"id":"2411.11296","title":"Steering Language Model Refusal with Sparse Autoencoders","created":"2024-11-18","cited_by_count":95,"area":"mechinterp"},{"id":"2510.18874","title":"Retaining by Doing: The Role of On-Policy Data in Mitigating Forgetting","created":"2025-10-21","cited_by_count":94,"area":null},{"id":"2507.06134","title":"OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety","created":"2025-07-08","cited_by_count":75,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2503.15754","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","created":"2025-03-20","cited_by_count":43,"area":"safety"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2503.01807","title":"Large-Scale Data Selection for Instruction Tuning","created":"2025-03-03","cited_by_count":35,"area":null},{"id":"2505.10833","title":"MergeBench: A Benchmark for Merging Domain-Specialized LLMs","created":"2025-05-16","cited_by_count":33,"area":null},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2411.03343","title":"What Features in Prompts Jailbreak LLMs? Investigating the Mechanisms Behind Attacks","created":"2024-11-02","cited_by_count":29,"area":"safety"},{"id":"2503.16431","title":"OpenAI's Approach to External Red Teaming for AI Models and Systems","created":"2025-01-24","cited_by_count":28,"area":"safety"},{"id":"2507.06187","title":"The Delta Learning Hypothesis: Preference Tuning on Weak Data can Yield Strong Gains","created":"2025-07-08","cited_by_count":28,"area":null},{"id":"2511.01805","title":"Accumulating Context Changes the Beliefs of Language Models","created":"2025-11-03","cited_by_count":28,"area":null},{"id":"2504.09420","title":"SaRO: Enhancing LLM Safety through Reasoning-based Alignment","created":"2025-04-13","cited_by_count":26,"area":"lr"},{"id":"2502.07077","title":"Multi-turn Evaluation of Anthropomorphic Behaviours in Large Language Models","created":"2025-02-10","cited_by_count":25,"area":null},{"id":"2505.14667","title":"SAFEPATH: Preventing Harmful Reasoning in Chain-of-Thought via Early Alignment","created":"2025-05-20","cited_by_count":24,"area":"lr"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2507.00971","title":"Reasoning as an Adaptive Defense for Safety","created":"2025-07-01","cited_by_count":23,"area":"lr"},{"id":"2502.12202","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","created":"2025-02-16","cited_by_count":22,"area":"lr"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2505.12025","title":"Spotlight Your Instructions: Instruction-following with Dynamic Attention Steering","created":"2025-05-17","cited_by_count":21,"area":null},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2605.11887","title":"Qwen-Scope: Turning Sparse Features into Development Tools for Large Language Models","created":"2026-05-12","cited_by_count":21,"area":"mechinterp"},{"id":"2503.17979","title":"Trade-offs in Large Reasoning Models: An Empirical Analysis of Deliberative and Adaptive Reasoning over Foundational Capabilities","created":"2025-03-23","cited_by_count":20,"area":"lr"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2410.03769","title":"SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Tasks","created":"2024-10-02","cited_by_count":18,"area":"alignment"},{"id":"2505.14633","title":"Will AI Tell Lies to Save Sick Children? Litmus-Testing AI Values Prioritization with AIRiskDilemmas","created":"2025-05-20","cited_by_count":18,"area":null},{"id":"2507.09662","title":"Towards Concise and Adaptive Thinking in Large Reasoning Models: A Survey","created":"2025-07-13","cited_by_count":18,"area":"lr"},{"id":"2507.19060","title":"PurpCode: Reasoning for Safer Code Generation","created":"2025-07-25","cited_by_count":18,"area":"lr"},{"id":"2503.10619","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","created":"2025-03-13","cited_by_count":17,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2503.16870","title":"Sparse Logit Sampling: Accelerating Knowledge Distillation in LLMs","created":"2025-03-21","cited_by_count":16,"area":"distill"},{"id":"2510.27062","title":"Consistency Training Helps Stop Sycophancy and Jailbreaks","created":"2025-10-31","cited_by_count":16,"area":"safety"},{"id":"2508.12531","title":"Rethinking Safety in LLM Fine-tuning: An Optimization Perspective","created":"2025-08-17","cited_by_count":14,"area":"lr"},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2506.12707","title":"SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression","created":"2025-06-15","cited_by_count":13,"area":"inference"},{"id":"2510.00938","title":"Large Reasoning Models Learn Better Alignment from Flawed Thinking","created":"2025-10-01","cited_by_count":13,"area":"lr"},{"id":"2509.24296","title":"DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models","created":"2025-09-29","cited_by_count":12,"area":"safety"},{"id":"2510.20956","title":"Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training","created":"2025-10-23","cited_by_count":12,"area":"lr"},{"id":"2504.00441","title":"No Free Lunch with Guardrails","created":"2025-04-01","cited_by_count":11,"area":"safety"},{"id":"2508.03121","title":"RegMean++: Enhancing Effectiveness and Generalization of Regression Mean for Model Merging","created":"2025-08-05","cited_by_count":11,"area":null},{"id":"2509.24393","title":"Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2510.06036","title":"Refusal Falls off a Cliff: How Safety Alignment Fails in Reasoning?","created":"2025-10-07","cited_by_count":11,"area":"lr"},{"id":"2605.15239","title":"Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation","created":"2026-05-14","cited_by_count":11,"area":"lr"},{"id":"2408.11851","title":"SAGE-RT: Synthetic Alignment data Generation for Safety Evaluation and Red Teaming","created":"2024-08-14","cited_by_count":10,"area":"safety"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2410.22143","title":"AmpleGCG-Plus: A Strong Generative Model of Adversarial Suffixes to Jailbreak LLMs with Higher Success Rates in Fewer Attempts","created":"2024-10-29","cited_by_count":10,"area":"safety"},{"id":"2504.13562","title":"DETAM: Defending LLMs Against Jailbreak Attacks via Targeted Attention Modification","created":"2025-04-18","cited_by_count":10,"area":"safety"},{"id":"2510.08240","title":"The Alignment Waltz: Jointly Training Agents to Collaborate for Safety","created":"2025-10-09","cited_by_count":10,"area":"agents"},{"id":"2512.10150","title":"Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learning","created":"2025-12-10","cited_by_count":10,"area":"alignment"},{"id":"2502.19041","title":"Beyond Surface-Level Patterns: An Essence-Driven Defense Framework Against Jailbreak Attacks in LLMs","created":"2025-02-26","cited_by_count":9,"area":"safety"},{"id":"2505.17441","title":"Discovering Forbidden Topics in Language Models","created":"2025-05-23","cited_by_count":9,"area":null},{"id":"2506.06636","title":"SafeLawBench: Towards Safe Alignment of Large Language Models","created":"2025-06-07","cited_by_count":9,"area":"alignment"},{"id":"2511.17408","title":"The Impact of Off-Policy Training Data on Probe Generalisation","created":"2025-11-21","cited_by_count":9,"area":null},{"id":"2410.07571","title":"How Does Vision-Language Adaptation Impact the Safety of Vision Language Models?","created":"2024-10-10","cited_by_count":8,"area":"mllm"},{"id":"2502.13329","title":"Language Models Can Predict Their Own Behavior","created":"2025-02-18","cited_by_count":8,"area":"lr"},{"id":"2506.11938","title":"Improving Large Language Model Safety with Contrastive Representation Learning","created":"2025-06-13","cited_by_count":8,"area":"mechinterp"},{"id":"2507.11500","title":"ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning","created":"2025-07-14","cited_by_count":8,"area":"alignment"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2512.20806","title":"Safety Alignment of LMs via Non-cooperative Games","created":"2025-12-23","cited_by_count":8,"area":"alignment"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2506.11083","title":"RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates","created":"2025-06-04","cited_by_count":7,"area":"agents"},{"id":"2507.21652","title":"UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases","created":"2025-07-29","cited_by_count":7,"area":"lr"},{"id":"2510.21910","title":"Adversarial D\\'ej\\`a Vu: Jailbreak Dictionary Learning for Stronger Generalization to Unseen Attacks","created":"2025-10-24","cited_by_count":7,"area":"safety"},{"id":"2410.01088","title":"Exploring Empty Spaces: Human-in-the-Loop Data Augmentation","created":"2024-10-01","cited_by_count":6,"area":"safety"},{"id":"2504.00446","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","created":"2025-04-01","cited_by_count":6,"area":"safety"},{"id":"2506.05446","title":"Sentinel: SOTA model to protect against prompt injections","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2509.11629","title":"Reasoned Safety Alignment: Ensuring Jailbreak Defense via Answer-Then-Check","created":"2025-09-15","cited_by_count":6,"area":"lr"},{"id":"2509.21155","title":"Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Models","created":"2025-09-25","cited_by_count":6,"area":null},{"id":"2510.04320","title":"Read the Scene, Not the Script: Outcome-Aware Safety for LLMs","created":"2025-10-05","cited_by_count":6,"area":"alignment"},{"id":"2510.21285","title":"When Models Outthink Their Safety: Unveiling and Mitigating Self-Jailbreak in Large Reasoning Models","created":"2025-10-24","cited_by_count":6,"area":"lr"},{"id":"2602.03429","title":"DiscoverLLM: From Executing Intents to Discovering Them","created":"2026-02-03","cited_by_count":6,"area":null},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2505.22037","title":"Jailbreak Distillation: Renewable Safety Benchmarking","created":"2025-05-28","cited_by_count":5,"area":"safety"},{"id":"2508.20766","title":"Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injection","created":"2025-08-28","cited_by_count":5,"area":"alignment"},{"id":"2601.08951","title":"PluriHarms: Benchmarking the Full Spectrum of Human Judgments on AI Harm","created":"2026-01-13","cited_by_count":5,"area":null},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2506.17299","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","created":"2025-06-17","cited_by_count":4,"area":"safety"},{"id":"2508.12072","title":"Mitigating Jailbreaks with Intent-Aware LLMs","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2509.24269","title":"AdvChain: Adversarial Chain-of-Thought Tuning for Robust Safety Alignment of Large Reasoning Models","created":"2025-09-29","cited_by_count":4,"area":"lr"},{"id":"2511.07482","title":"Alignment-Constrained Dynamic Pruning for LLMs: Identifying and Preserving Alignment-Critical Circuits","created":"2025-11-09","cited_by_count":4,"area":null},{"id":"2602.05943","title":"Orthogonal Model Merging","created":"2026-02-05","cited_by_count":4,"area":null},{"id":"2605.28591","title":"Models That Know How Evaluations Are Designed Score Safer","created":"2026-05-27","cited_by_count":4,"area":null},{"id":"2606.32038","title":"Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision","created":"2026-06-30","cited_by_count":4,"area":null},{"id":"2607.07916","title":"Persona Cartography: Charting Language Model Personality Traits in Weight Space","created":"2026-07-08","cited_by_count":4,"area":null},{"id":"2502.17541","title":"Dataset Featurization: Uncovering Natural Language Features through Unsupervised Data Reconstruction","created":"2025-02-24","cited_by_count":3,"area":null}],"next_cursor":"100"}