{"total":90,"rows":[{"id":"2502.21321","title":"LLM Post-Training: A Deep Dive into Reasoning Large Language Models","created":"2025-02-28","cited_by_count":135,"area":"lr"},{"id":"2503.00555","title":"Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable","created":"2025-03-01","cited_by_count":122,"area":"lr"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2509.26354","title":"Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents","created":"2025-09-30","cited_by_count":62,"area":"agents"},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2412.12497","title":"NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning","created":"2024-12-17","cited_by_count":37,"area":"alignment"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2412.11041","title":"Separate the Wheat from the Chaff: A Post-Hoc Approach to Safety Re-Alignment for Fine-Tuned Language Models","created":"2024-12-15","cited_by_count":20,"area":"alignment"},{"id":"2501.18100","title":"Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation","created":"2025-01-30","cited_by_count":20,"area":null},{"id":"2506.08473","title":"AsFT: Anchoring Safety During LLM Fine-Tuning Within Narrow Safety Basin","created":"2025-06-10","cited_by_count":19,"area":null},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2508.03153","title":"Estimating Worst-Case Frontier Risks of Open-Weight LLMs","created":"2025-08-05","cited_by_count":19,"area":null},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2502.08301","title":"Compromising Honesty and Harmlessness in Language Models via Deception Attacks","created":"2025-02-12","cited_by_count":17,"area":null},{"id":"2503.20807","title":"Fundamental Safety-Capability Trade-offs in Fine-tuning Large Language Models","created":"2025-03-24","cited_by_count":17,"area":null},{"id":"2508.06249","title":"In-Training Defenses against Emergent Misalignment in Language Models","created":"2025-08-08","cited_by_count":15,"area":"alignment"},{"id":"2412.16504","title":"Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions","created":"2024-12-21","cited_by_count":14,"area":"safety"},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2506.12707","title":"SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression","created":"2025-06-15","cited_by_count":13,"area":"inference"},{"id":"2507.21182","title":"SDD: Self-Degraded Defense against Malicious Fine-tuning","created":"2025-07-27","cited_by_count":13,"area":"alignment"},{"id":"2506.15606","title":"LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning","created":"2025-06-18","cited_by_count":12,"area":"safety"},{"id":"2510.20956","title":"Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training","created":"2025-10-23","cited_by_count":12,"area":"lr"},{"id":"2510.27172","title":"Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Scheduler","created":"2025-10-31","cited_by_count":12,"area":null},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.17196","title":"Shape it Up! Restoring LLM Safety during Finetuning","created":"2025-05-22","cited_by_count":11,"area":"alignment"},{"id":"2508.07172","title":"Gradient Surgery for Safe LLM Fine-Tuning","created":"2025-08-10","cited_by_count":11,"area":"alignment"},{"id":"2508.17158","title":"Towards Safeguarding LLM Fine-tuning APIs against Cipher Attacks","created":"2025-08-23","cited_by_count":11,"area":null},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2506.05451","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","created":"2025-06-05","cited_by_count":10,"area":"safety"},{"id":"2506.20702","title":"The Singapore Consensus on Global AI Safety Research Priorities","created":"2025-06-25","cited_by_count":10,"area":null},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2507.16302","title":"Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning","created":"2025-07-22","cited_by_count":9,"area":"diffusion"},{"id":"2510.14301","title":"A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space","created":"2025-10-16","cited_by_count":9,"area":"alignment"},{"id":"2505.23760","title":"Model Immunization from a Condition Number Perspective","created":"2025-05-29","cited_by_count":8,"area":null},{"id":"2508.20697","title":"Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning","created":"2025-08-28","cited_by_count":8,"area":null},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2502.13593","title":"Toward Robust Non-Transferable Learning: A Survey and Benchmark","created":"2025-02-19","cited_by_count":7,"area":null},{"id":"2509.06795","title":"Anchoring Refusal Direction: Mitigating Safety Risks in Tuning via Projection Constraint","created":"2025-09-08","cited_by_count":7,"area":null},{"id":"2602.06258","title":"GRP-Obliteration: Unaligning LLMs With a Single Unlabeled Prompt","created":"2026-02-05","cited_by_count":7,"area":"alignment"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2505.14185","title":"Safety Subspaces are Not Linearly Distinct: A Fine-Tuning Case Study","created":"2025-05-20","cited_by_count":6,"area":"alignment"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2510.10085","title":"Pharmacist: Safety Alignment Data Curation for Large Language Models against Harmful Fine-tuning","created":"2025-10-11","cited_by_count":6,"area":"alignment"},{"id":"2603.00498","title":"Antibody: Strengthening Defense Against Harmful Fine-Tuning for Large Language Models via Attenuating Harmful Gradient Influence","created":"2026-02-28","cited_by_count":6,"area":"safety"},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2505.16567","title":"Watch your steps: Dormant Adversarial Behaviors that Activate upon LLM Finetuning","created":"2025-05-22","cited_by_count":5,"area":"safety"},{"id":"2505.16789","title":"Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguards","created":"2025-05-22","cited_by_count":5,"area":null},{"id":"2507.02332","title":"PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage","created":"2025-07-03","cited_by_count":5,"area":"alignment"},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2506.12299","title":"QGuard:Question-based Zero-shot Guard for Multi-modal LLM Safety","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2602.05228","title":"Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sink","created":"2026-02-05","cited_by_count":4,"area":"alignment"},{"id":"2604.12384","title":"Preventing Safety Drift in Large Language Models via Coupled Weight and Activation Constraints","created":"2026-04-14","cited_by_count":4,"area":"alignment"},{"id":"2510.16255","title":"Detecting Adversarial Fine-tuning with Auditing Agents","created":"2025-10-17","cited_by_count":3,"area":"agents"},{"id":"2512.01899","title":"Provably Safe Model Updates","created":"2025-12-01","cited_by_count":3,"area":null},{"id":"2604.03121","title":"An Independent Safety Evaluation of Kimi K2.5","created":"2026-04-03","cited_by_count":3,"area":"agents"},{"id":"2504.14554","title":"REDEditing: Relationship-Driven Precise Backdoor Poisoning on Text-to-Image Diffusion Models","created":"2025-04-20","cited_by_count":2,"area":"diffusion"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2510.07626","title":"LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics","created":"2025-10-08","cited_by_count":2,"area":"safety"},{"id":"2602.06911","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","created":"2026-02-06","cited_by_count":2,"area":"safety"},{"id":"2602.22246","title":"Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models","created":"2026-02-24","cited_by_count":2,"area":"diffusion"},{"id":"2603.08104","title":"Invisible Safety Threat: Malicious Finetuning for LLM via Steganography","created":"2026-03-09","cited_by_count":2,"area":"alignment"},{"id":"2605.06901","title":"Reflections and New Directions for Human-Centered Large Language Models","created":"2026-05-07","cited_by_count":2,"area":null},{"id":"2605.18309","title":"Alignment Dynamics in LLM Fine-Tuning","created":"2026-05-18","cited_by_count":2,"area":"alignment"},{"id":"2506.00676","title":"SafeTuneBed: A Toolkit for Benchmarking LLM Safety Alignment in Fine-Tuning","created":"2025-05-31","cited_by_count":1,"area":"alignment"},{"id":"2506.18428","title":"How Robust is Model Editing after Fine-Tuning? An Empirical Study on Text-to-Image Diffusion Models","created":"2025-06-23","cited_by_count":1,"area":"diffusion"},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2604.09688","title":"Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps","created":"2026-04-06","cited_by_count":1,"area":null},{"id":"2605.26526","title":"Open-Weight LLM Fine-Tuning Defenses are Susceptible to Simple Attacks","created":"2026-05-26","cited_by_count":1,"area":"safety"},{"id":"2606.00160","title":"DataShield: Safety-degrading Data Filtering for LLM Benign Instruction Fine-Tuning","created":"2026-05-29","cited_by_count":1,"area":null},{"id":"2505.05736","title":"Multimodal Integrated Knowledge Transfer to Large Language Models through Preference Optimization with Biomedical Applications","created":"2025-05-09","cited_by_count":0,"area":"alignment"},{"id":"2506.00062","title":"SafeCOMM: A Study on Safety Degradation in Fine-Tuned Telecom Large Language Models","created":"2025-05-29","cited_by_count":0,"area":"safety"},{"id":"2601.22169","title":"In Vino Veritas and Vulnerabilities: Examining LLM Safety via Drunk Language Inducement","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2602.17546","title":"Learning to Stay Safe: Adaptive Regularization Against Safety Degradation during Fine-Tuning","created":"2026-02-19","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.07754","title":"The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Training","created":"2026-04-09","cited_by_count":0,"area":"alignment"},{"id":"2604.17691","title":"SafeAnchor: Preventing Cumulative Safety Erosion in Continual Domain Adaptation of Large Language Models","created":"2026-04-20","cited_by_count":0,"area":"alignment"},{"id":"2605.10998","title":"Few-Shot Truly Benign DPO Attack for Jailbreaking LLMs","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.14194","title":"GradShield: Alignment Preserving Finetuning","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.15152","title":"Widening the Gap: Exploiting LLM Quantization via Outlier Injection","created":"2026-05-14","cited_by_count":0,"area":null},{"id":"2605.28030","title":"SPARD: Defending Harmful Fine-Tuning Attack via Safety Projection with Relevance-Diversity Data Selection","created":"2026-05-27","cited_by_count":0,"area":"alignment"},{"id":"2606.07970","title":"Defending Against Malicious Finetuning by Scaling Train-time Adversarial Attacks","created":"2026-06-06","cited_by_count":0,"area":"alignment"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2609.22153","title":"SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2610.10345","title":"SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing","created":"2026-10-07","cited_by_count":0,"area":"alignment"}],"next_cursor":null}