{"total":243,"rows":[{"id":"2410.10629","title":"SANA: Efficient High-Resolution Image Synthesis with Linear Diffusion Transformers","created":"2024-10-14","cited_by_count":340,"area":"diffusion"},{"id":"2501.18427","title":"SANA 1.5: Efficient Scaling of Training-Time and Inference-Time Compute in Linear Diffusion Transformer","created":"2025-01-30","cited_by_count":165,"area":"lr"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129,"area":"mllm"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2601.10156","title":"ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback","created":"2026-01-15","cited_by_count":72,"area":"agents"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2504.04377","title":"PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages","created":"2025-04-06","cited_by_count":59,"area":null},{"id":"2506.10805","title":"Detecting High-Stakes Interactions with Activation Probes","created":"2025-06-12","cited_by_count":53,"area":null},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2503.03710","title":"Improving LLM Safety Alignment with Dual-Objective Optimization","created":"2025-03-05","cited_by_count":43,"area":"alignment"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2508.18076","title":"Neither Valid nor Reliable? Investigating the Use of LLMs as Judges","created":"2025-08-25","cited_by_count":39,"area":null},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2512.23738","title":"Enforcing Temporal Constraints for LLM Agents","created":"2025-12-25","cited_by_count":34,"area":"agents"},{"id":"2502.13458","title":"ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails","created":"2025-02-19","cited_by_count":31,"area":"lr"},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2504.01081","title":"ShieldGemma 2: Robust and Tractable Image Content Moderation","created":"2025-04-01","cited_by_count":28,"area":null},{"id":"2508.01710","title":"CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications","created":"2025-08-03","cited_by_count":27,"area":"agents"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2509.03888","title":"False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize","created":"2025-09-04","cited_by_count":19,"area":null},{"id":"2601.15588","title":"YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models","created":"2026-01-22","cited_by_count":19,"area":"lr"},{"id":"2501.10573","title":"The Intrinsic Dimension of Prompts in Internal Representations of Large Language Models","created":"2025-01-17","cited_by_count":17,"area":"mechinterp"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2509.26238","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","created":"2025-09-30","cited_by_count":16,"area":"safety"},{"id":"2603.22928","title":"SoK: The Attack Surface of Agentic AI - Tools and Autonomy","created":"2026-03-24","cited_by_count":16,"area":"rag"},{"id":"2604.07223","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","created":"2026-04-08","cited_by_count":16,"area":"agents"},{"id":"2412.03235","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","created":"2024-12-04","cited_by_count":15,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2602.07918","title":"CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution","created":"2026-02-08","cited_by_count":14,"area":"agents"},{"id":"2410.21331","title":"Beyond Interpretability: The Gains of Feature Monosemanticity on Model Robustness","created":"2024-10-27","cited_by_count":13,"area":null},{"id":"2502.14289","title":"Drift: Decoding-time Personalized Alignments with Implicit User Preferences","created":"2025-02-20","cited_by_count":13,"area":"alignment"},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2507.04947","title":"DC-AR: Efficient Masked Autoregressive Image Generation with Deep Compression Hybrid Tokenizer","created":"2025-07-07","cited_by_count":13,"area":null},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2605.24834","title":"Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflection","created":"2026-05-24","cited_by_count":12,"area":"safety"},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2504.20965","title":"AegisLLM: Scaling Agentic Systems for Self-Reflective Defense in LLM Security","created":"2025-04-29","cited_by_count":10,"area":"agents"},{"id":"2510.00565","title":"Toward Safer Diffusion Language Models: Discovery and Mitigation of Priming Vulnerability","created":"2025-10-01","cited_by_count":10,"area":"diffusion"},{"id":"2503.10242","title":"MinorBench: A hand-built benchmark for content-based risks for children","created":"2025-03-13","cited_by_count":9,"area":null},{"id":"2512.22245","title":"Calibrating LLM Judges: Linear Probes for Fast and Reliable Uncertainty Estimation","created":"2025-12-23","cited_by_count":9,"area":"mechinterp"},{"id":"2609.23959","title":"Open-Jev Judgments on CallScreenBench: Calibrated One-Pass Scam Screening with a Small Language Model","created":"2026-09-21","cited_by_count":8,"area":null},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2410.22587","title":"Toxicity of the Commons: Curating Open-Source Pre-Training Data","created":"2024-10-29","cited_by_count":7,"area":null},{"id":"2505.14035","title":"ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs","created":"2025-05-20","cited_by_count":7,"area":"lr"},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2510.13890","title":"A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness","created":"2025-10-14","cited_by_count":7,"area":null},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2506.00166","title":"Disentangled Safety Adapters Enable Efficient Guardrails and Flexible Inference-Time Alignment","created":"2025-05-30","cited_by_count":6,"area":"alignment"},{"id":"2509.11629","title":"Reasoned Safety Alignment: Ensuring Jailbreak Defense via Answer-Then-Check","created":"2025-09-15","cited_by_count":6,"area":"lr"},{"id":"2512.03994","title":"Training-Free Policy Violation Detection via Activation-Space Whitening in LLMs","created":"2025-12-03","cited_by_count":6,"area":null},{"id":"2603.01228","title":"Towards Policy-Adaptive Image Guardrail: Benchmark and Method","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2606.22873","title":"SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning","created":"2026-06-22","cited_by_count":6,"area":"lr"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2608.09885","title":"SHE: Trajectory-driven Safety Harness Evolution for LLM Agents","created":"2026-08-10","cited_by_count":6,"area":"agents"},{"id":"2411.11853","title":"Chat Bankman-Fried: an Exploration of LLM Alignment in Finance","created":"2024-11-01","cited_by_count":5,"area":"alignment"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2507.09424","title":"DATE-LM: Benchmarking Data Attribution Evaluation for Large Language Models","created":"2025-07-12","cited_by_count":5,"area":null},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2605.08442","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","created":"2026-05-08","cited_by_count":5,"area":"agents"},{"id":"2605.17329","title":"LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails","created":"2026-05-17","cited_by_count":5,"area":"lr"},{"id":"2605.17467","title":"VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2606.15980","title":"Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Staleness","created":"2026-06-14","cited_by_count":5,"area":null},{"id":"2502.16174","title":"Efficient LLM Moderation with Multi-Layer Latent Prototypes","created":"2025-02-22","cited_by_count":4,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2504.21299","title":"BiasGuard: A Reasoning-enhanced Bias Detection Tool For Large Language Models","created":"2025-04-30","cited_by_count":4,"area":"lr"},{"id":"2506.07330","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","created":"2025-06-09","cited_by_count":4,"area":null},{"id":"2508.07063","title":"Towards Safer AI Moderation: Evaluating LLM Moderators Through a Unified Benchmark Dataset and Advocating a Human-First Approach","created":"2025-08-09","cited_by_count":4,"area":null},{"id":"2508.20151","title":"IntentionReasoner: Facilitating Adaptive LLM Safeguards through Intent Reasoning and Selective Query Refinement","created":"2025-08-27","cited_by_count":4,"area":"lr"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2511.00382","title":"Efficiency vs. Alignment: Investigating Safety and Fairness Risks in Parameter-Efficient Fine-Tuning of LLMs","created":"2025-11-01","cited_by_count":4,"area":null},{"id":"2512.03553","title":"Dynamic Content Moderation in Livestreams: Combining Supervised Classification with MLLM-Boosted Similarity Matching","created":"2025-12-03","cited_by_count":4,"area":null},{"id":"2512.18027","title":"CoPE: A Small Language Model for Steerable and Scalable Content Labeling","created":"2025-12-19","cited_by_count":4,"area":null},{"id":"2512.23573","title":"ProGuard: Towards Proactive Multimodal Safeguard","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2603.02219","title":"NExT-Guard: Training-Free Streaming Safeguard without Token-Level Labels","created":"2026-02-10","cited_by_count":4,"area":"mechinterp"},{"id":"2604.18901","title":"Harmful Intent as a Geometrically Recoverable Feature of LLM Residual Streams","created":"2026-04-20","cited_by_count":4,"area":"alignment"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2410.08442","title":"JurEE not Judges: safeguarding llm interactions with small, specialised Encoder Ensembles","created":"2024-10-11","cited_by_count":3,"area":null},{"id":"2502.05772","title":"Effective Black-Box Multi-Faceted Attacks Breach Vision Large Language Model Guardrails","created":"2025-02-09","cited_by_count":3,"area":"safety"},{"id":"2505.21784","title":"Towards Safety Reasoning in LLMs: AI-agentic Deliberation for Policy-embedded CoT Data Creation","created":"2025-05-27","cited_by_count":3,"area":"lr"},{"id":"2510.02999","title":"NonTextual Target Attack","created":"2025-10-03","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}