{"total":20,"rows":[{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2501.13677","title":"HumorReject: Decoupling LLM Safety from Refusal Prefix via A Little Humor","created":"2025-01-23","cited_by_count":6,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2604.04842","title":"Do No Harm: Exposing Hidden Vulnerabilities of LLMs via Persona-based Client Simulation Attack in Psychological Counseling","created":"2026-04-06","cited_by_count":4,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2508.16325","title":"ConceptGuard: Neuro-Symbolic Safety Guardrails via Sparse Interpretable Jailbreak Concepts","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2511.19009","title":"Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2608.03201","title":"When Refusal Looks Safe: The Refusal-Cue Shortcut in Safety Guard Models","created":"2026-08-04","cited_by_count":1,"area":"safety"},{"id":"2608.14577","title":"HarmProfile: Characterizing Harmful Distributions in Frontier LLMs","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2505.18672","title":"Concept Concentration for Faithful Representation Intervention","created":"2025-05-24","cited_by_count":0,"area":"safety"},{"id":"2605.20286","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2608.13304","title":"Refusing Intent, Not Form: Wrapper-Based Intent-Group Supervision for LLM Safety","created":"2026-08-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}