{"total":31,"rows":[{"id":"2504.10694","title":"The Jailbreak Tax: How Useful are Your Jailbreak Outputs?","created":"2025-04-14","cited_by_count":28,"area":"safety"},{"id":"2506.10949","title":"Monitoring Decomposition Attacks in LLMs with Lightweight Sequential Monitors","created":"2025-06-12","cited_by_count":25,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2503.20279","title":"sudo rm -rf agentic_security","created":"2025-03-26","cited_by_count":8,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2601.07087","title":"When Should We Introduce Safety Interventions During Pretraining?","created":"2026-01-11","cited_by_count":7,"area":"safety"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2603.14707","title":"Visual Confused Deputy: Exploiting and Defending Perception Failures in Computer-Using Agents","created":"2026-03-16","cited_by_count":7,"area":"safety"},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2603.23268","title":"SafeSeek: Universal Attribution of Safety Circuits in Language Models","created":"2026-03-24","cited_by_count":4,"area":"safety"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2605.14454","title":"LiSA: Lifelong Safety Adaptation via Conservative Policy Induction","created":"2026-05-14","cited_by_count":3,"area":"safety"},{"id":"2512.20677","title":"Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models","created":"2025-12-21","cited_by_count":2,"area":"safety"},{"id":"2604.12986","title":"Parallax: Why AI Agents That Think Must Never Act","created":"2026-04-14","cited_by_count":2,"area":"safety"},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2606.02423","title":"Investigating and Alleviating Harm Amplification in LLM Interactions","created":"2026-06-01","cited_by_count":2,"area":"safety"},{"id":"2607.22024","title":"Agent Security Needs Redefinition through a Holistic Framework","created":"2026-07-24","cited_by_count":2,"area":"safety"},{"id":"2606.09890","title":"PreAct-Bench: Benchmarking Predictive Monitoring in LLMs","created":"2026-06-03","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2502.05291","title":"Can LLMs Rank the Harmfulness of Smaller LLMs? We are Not There Yet","created":"2025-02-07","cited_by_count":0,"area":"safety"},{"id":"2604.18248","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","created":"2026-04-20","cited_by_count":0,"area":"safety"},{"id":"2606.09935","title":"GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines","created":"2026-06-07","cited_by_count":0,"area":"safety"},{"id":"2606.12918","title":"MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2607.15977","title":"Refusal is Not Safety! Benchmarking Latent Safety Risks of LLM-Driven Content Humorization","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2609.06966","title":"MOLE: Detecting Insider Threats in AI Agents","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.08256","title":"ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.27336","title":"CART: Closed-Loop Adaptive Red Teaming for Large Language Models","created":"2026-09-23","cited_by_count":0,"area":"safety"},{"id":"2610.06064","title":"TrustMI: Causally controlling how assistants trust their users","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.15153","title":"Can agents whose sole duty is to keep humans alive be hijacked to kill? Delayed multi-turn derived-action trap attacks in simulated high-stakes environments","created":"2026-10-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}