{"total":67,"rows":[{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2410.08827","title":"Do Unlearning Methods Remove Information from Language Model Weights?","created":"2024-10-11","cited_by_count":73,"area":"safety"},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2503.15754","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","created":"2025-03-20","cited_by_count":43,"area":"safety"},{"id":"2503.07885","title":"Safety Guardrails for LLM-Enabled Robots","created":"2025-03-10","cited_by_count":35,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2503.10619","title":"Tempest: Autonomous Multi-Turn Jailbreaking of Large Language Models with Tree Search","created":"2025-03-13","cited_by_count":17,"area":"safety"},{"id":"2409.00137","title":"Emerging Vulnerabilities in Frontier Models: Multi-Turn Jailbreak Attacks","created":"2024-08-29","cited_by_count":16,"area":"safety"},{"id":"2512.07761","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","created":"2025-12-08","cited_by_count":14,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2507.02956","title":"A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks","created":"2025-06-29","cited_by_count":10,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2506.00688","title":"Existing Large Language Model Unlearning Evaluations Are Inconclusive","created":"2025-05-31","cited_by_count":8,"area":"safety"},{"id":"2507.01020","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-04-18","cited_by_count":8,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2602.16935","title":"DeepContext: Stateful Real-Time Detection of Multi-Turn Adversarial Intent Drift in LLMs","created":"2026-02-18","cited_by_count":8,"area":"safety"},{"id":"2605.01687","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","created":"2026-05-03","cited_by_count":8,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2510.03417","title":"NEXUS: Network Exploration for eXploiting Unsafe Sequences in Multi-Turn LLM Jailbreaks","created":"2025-10-03","cited_by_count":7,"area":"safety"},{"id":"2510.21910","title":"Adversarial D\\'ej\\`a Vu: Jailbreak Dictionary Learning for Stronger Generalization to Unseen Attacks","created":"2025-10-24","cited_by_count":7,"area":"safety"},{"id":"2511.00203","title":"Diffusion LLMs are Natural Adversaries for any LLM","created":"2025-10-31","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2410.13691","title":"Jailbreaking LLM-Controlled Robots","created":"2024-10-17","cited_by_count":6,"area":"safety"},{"id":"2412.02159","title":"Jailbreak Defense in a Narrow Domain: Limitations of Existing Methods and a New Transcript-Classifier Approach","created":"2024-12-03","cited_by_count":6,"area":"safety"},{"id":"2601.20903","title":"ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack","created":"2026-01-28","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2510.13893","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","created":"2025-10-14","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2411.01084","title":"Plentiful Jailbreaks with String Compositions","created":"2024-11-01","cited_by_count":4,"area":"safety"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2510.08859","title":"Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models","created":"2025-10-09","cited_by_count":4,"area":"safety"},{"id":"2601.05742","title":"The Echo Chamber Multi-Turn LLM Jailbreak","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2604.07727","title":"TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense","created":"2026-04-09","cited_by_count":4,"area":"safety"},{"id":"2411.16642","title":"Preventing Jailbreak Prompts as Malicious Tools for Cybercriminals: A Cyber Defense Perspective","created":"2024-11-25","cited_by_count":3,"area":"safety"},{"id":"2502.10487","title":"Fast Proxies for LLM Robustness Evaluation","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2508.16889","title":"ObjexMT: Objective Extraction and Metacognitive Calibration for LLM-as-a-Judge under Multi-Turn Jailbreaks","created":"2025-08-23","cited_by_count":3,"area":"safety"},{"id":"2510.17947","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.01315","title":"Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System","created":"2025-05-02","cited_by_count":2,"area":"safety"},{"id":"2506.17881","title":"GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication","created":"2025-06-22","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2510.15017","title":"Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks","created":"2025-10-16","cited_by_count":2,"area":"safety"},{"id":"2606.02423","title":"Investigating and Alleviating Harm Amplification in LLM Interactions","created":"2026-06-01","cited_by_count":2,"area":"safety"},{"id":"2509.08729","title":"X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates","created":"2025-09-10","cited_by_count":1,"area":"safety"},{"id":"2511.03271","title":"Let the Bees Find the Weak Spots: A Path Planning Perspective on Multi-Turn Jailbreak Attacks against LLMs","created":"2025-11-05","cited_by_count":1,"area":"safety"},{"id":"2601.03265","title":"Jailbreak-Zero: A Path to Pareto Optimal Red Teaming for Large Language Models","created":"2025-12-18","cited_by_count":1,"area":"safety"},{"id":"2603.00823","title":"A Comprehensive Evaluation of LLM Unlearning Robustness under Multi-Turn Interaction","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.18239","title":"Multilingual jailbreaking of LLMs using low-resource languages","created":"2026-05-18","cited_by_count":1,"area":"safety"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2511.02376","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-11-04","cited_by_count":0,"area":"safety"},{"id":"2604.10326","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","created":"2026-04-11","cited_by_count":0,"area":"safety"},{"id":"2605.11730","title":"Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and Mitigation","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2606.00003","title":"Learning from Mistakes: Can LLM Self-Recover after Misalignment?","created":"2026-03-25","cited_by_count":0,"area":"safety"},{"id":"2606.20746","title":"Amplify, Don't Create: Temporal Accumulation for Slow-Burn Prompt Injection","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2607.11151","title":"AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.20820","title":"Certified Multi-Turn Robustness for LLM Safety via Compositional Bounds and Safety Persistence","created":"2026-08-21","cited_by_count":0,"area":"safety"},{"id":"2609.36657","title":"Constitutional adapters: Inference-time interventions for misalignment and misuse","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}