{"total":18,"rows":[{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2510.17633","title":"SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering","created":"2025-10-20","cited_by_count":8,"area":"safety"},{"id":"2512.06674","title":"RunawayEvil: Jailbreaking the Image-to-Video Generative Models","created":"2025-12-07","cited_by_count":8,"area":"safety"},{"id":"2603.01228","title":"Towards Policy-Adaptive Image Guardrail: Benchmark and Method","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2510.08158","title":"Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMs","created":"2025-10-09","cited_by_count":3,"area":"safety"},{"id":"2605.05909","title":"Null Space Constrained Contrastive Visual Forgetting for MLLM Unlearning","created":"2026-05-07","cited_by_count":3,"area":"safety"},{"id":"2603.12089","title":"EmbTracker: Traceable Black-box Watermarking for Federated Language Models","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2604.03114","title":"Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMs","created":"2026-04-03","cited_by_count":1,"area":"safety"},{"id":"2506.11253","title":"Lifting Data-Tracing Machine Unlearning to Knowledge-Tracing for Foundation Models","created":"2025-06-12","cited_by_count":0,"area":"safety"},{"id":"2512.02786","title":"FiMMIA: scaling semantic perturbation-based membership inference across modalities","created":"2025-12-02","cited_by_count":0,"area":"safety"},{"id":"2605.07032","title":"A Systematic Investigation of RL-Jailbreaking in LLMs","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.17128","title":"New Wide-Net-Casting Jailbreak Attacks Risk Large Models","created":"2026-05-16","cited_by_count":0,"area":"safety"},{"id":"2605.17658","title":"When a Zero-Shooter Cheats: Improving Age Estimation via Activation Steering","created":"2026-05-17","cited_by_count":0,"area":"safety"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2606.29451","title":"The Platonic Defense: Backdoor Defense for Self-Supervised Encoders in the Era of Large Scale Pre-training","created":"2026-06-28","cited_by_count":0,"area":"safety"},{"id":"2608.24354","title":"Not All Tokens Are Equal: Region-Aware Consistency Repair of Backdoors in MLLMs","created":"2026-08-25","cited_by_count":0,"area":"safety"}],"next_cursor":null}