{"total":20,"rows":[{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2502.07218","title":"LLM Unlearning via Neural Activation Redirection","created":"2025-02-11","cited_by_count":41,"area":"safety"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2410.13691","title":"Jailbreaking LLM-Controlled Robots","created":"2024-10-17","cited_by_count":6,"area":"safety"},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2506.07356","title":"Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks","created":"2025-06-09","cited_by_count":2,"area":"safety"},{"id":"2602.06911","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","created":"2026-02-06","cited_by_count":2,"area":"safety"},{"id":"2509.25843","title":"ASGuard: Activation-Scaling Guard to Mitigate Targeted Jailbreaking Attack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2511.07107","title":"MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs","created":"2025-11-10","cited_by_count":1,"area":"safety"},{"id":"2512.04144","title":"RippleBench: Capturing Ripple Effects Using Existing Knowledge Repositories","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2603.05772","title":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2604.12817","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","created":"2026-04-14","cited_by_count":1,"area":"safety"},{"id":"2605.08496","title":"Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms","created":"2026-05-08","cited_by_count":1,"area":"safety"},{"id":"2609.16204","title":"Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration","created":"2026-09-14","cited_by_count":1,"area":"safety"},{"id":"2605.24550","title":"Jailbreak to Protect: Buffering and Reinforcing via Temporary Jailbreaking for Safe Fine-Tuning in Large Language Models","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2607.17152","title":"How Jailbreak Attacks Inform Safety Alignment: A Defender-Centric, Shapley-Based Evaluation of Jailbreak Contributions","created":"2026-07-19","cited_by_count":0,"area":"safety"},{"id":"2608.25390","title":"Refusal geometry reflects refusal training: diverse refusal prefixes can raise stable rank and weaken refusal vector ablation attacks","created":"2026-08-26","cited_by_count":0,"area":"safety"}],"next_cursor":null}