{"list":"other","total":58,"rows":[{"id":"2310.04451","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","created":"2023-10-03","cited_by_count":785},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672},{"id":"2309.10253","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","created":"2023-09-19","cited_by_count":560},{"id":"2305.13860","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","created":"2023-05-23","cited_by_count":498},{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192},{"id":"2307.08715","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","created":"2023-07-16","cited_by_count":183},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173},{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156},{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127},{"id":"2310.13345","title":"An LLM can Fool Itself: A Prompt-Based Adversarial Attack","created":"2023-10-20","cited_by_count":116},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106},{"id":"2402.16914","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","created":"2024-02-25","cited_by_count":101},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94},{"id":"2311.09827","title":"Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinking","created":"2023-11-16","cited_by_count":81},{"id":"2405.18166","title":"Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editing","created":"2024-05-28","cited_by_count":79},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56},{"id":"2402.15911","title":"PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails","created":"2024-02-24","cited_by_count":52},{"id":"2309.05274","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","created":"2023-09-11","cited_by_count":51},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48},{"id":"2403.08424","title":"Distract Large Language Models for Automatic Jailbreak Attack","created":"2024-03-13","cited_by_count":45},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35},{"id":"2311.11509","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","created":"2023-11-20","cited_by_count":33},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32},{"id":"2405.14023","title":"WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response","created":"2024-05-22","cited_by_count":29},{"id":"2405.13077","title":"GPT-4 Jailbreaks Itself with Near-Perfect Success Using Self-Explanation","created":"2024-05-21","cited_by_count":25},{"id":"2408.04811","title":"h4rm3l: A language for Composable Jailbreak Attack Synthesis","created":"2024-08-09","cited_by_count":24},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21},{"id":"2405.13068","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","created":"2024-05-20","cited_by_count":18},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18},{"id":"2406.19845","title":"Virtual Context: Enhancing Jailbreak Attacks with Special Token Injection","created":"2024-06-28","cited_by_count":17},{"id":"2312.06315","title":"GPTBIAS: A Comprehensive Framework for Evaluating Bias in Large Language Models","created":"2023-12-11","cited_by_count":16},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14},{"id":"2203.10714","title":"A Prompting-based Approach for Adversarial Example Generation and Robustness Enhancement","created":"2022-03-21","cited_by_count":12},{"id":"2408.02416","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","created":"2024-08-05","cited_by_count":9},{"id":"2406.13662","title":"Jailbreaking Large Language Models Through Alignment Vulnerabilities in Out-of-Distribution Settings","created":"2024-06-19","cited_by_count":8},{"id":"2407.16205","title":"Reasoning as a Weapon: Adaptive Dual-Path Jailbreak Attack on Large Language Models","created":"2024-07-23","cited_by_count":8},{"id":"2409.07503","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","created":"2024-09-11","cited_by_count":8},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7},{"id":"2406.08754","title":"StructuralSleight: Automated Jailbreak Attacks on Large Language Models Utilizing Uncommon Text-Organization Structures","created":"2024-06-13","cited_by_count":7},{"id":"2402.13517","title":"Round Trip Translation Defence against Large Language Model Jailbreaking Attacks","created":"2024-02-21","cited_by_count":6},{"id":"2407.14644","title":"Human-Interpretable Adversarial Prompt Attack on Large Language Models with Situational Context","created":"2024-07-19","cited_by_count":6},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5},{"id":"2405.20015","title":"Efficient LLM-Jailbreaking via Multimodal-LLM Jailbreak","created":"2024-05-30","cited_by_count":4},{"id":"2306.05659","title":"COVER: A Heuristic Greedy Adversarial Attack on Prompt-based Learning in Language Models","created":"2023-06-09","cited_by_count":3},{"id":"2404.02650","title":"Towards detecting unanticipated bias in Large Language Models","created":"2024-04-03","cited_by_count":3},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3},{"id":"2408.02651","title":"Can Reinforcement Learning Unlock the Hidden Dangers in Aligned Large Language Models?","created":"2024-08-05","cited_by_count":1}],"next_cursor":null}