{"total":20,"rows":[{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":90,"area":"safety"},{"id":"2507.00841","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","created":"2025-07-01","cited_by_count":15,"area":"safety"},{"id":"2509.21761","title":"Backdoor Attribution: Elucidating and Controlling Backdoor in Language Models","created":"2025-09-26","cited_by_count":11,"area":"safety"},{"id":"2506.05451","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","created":"2025-06-05","cited_by_count":10,"area":"safety"},{"id":"2508.02175","title":"Hidden in the Noise: Unveiling Backdoors in Audio LLMs Alignment through Latent Acoustic Pattern Triggers","created":"2025-08-04","cited_by_count":8,"area":"safety"},{"id":"2603.01285","title":"Attention Smoothing Is All You Need For Unlearning","created":"2026-03-01","cited_by_count":7,"area":"safety"},{"id":"2603.23268","title":"SafeSeek: Universal Attribution of Safety Circuits in Language Models","created":"2026-03-24","cited_by_count":5,"area":"safety"},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2509.25843","title":"ASGuard: Activation-Scaling Guard to Mitigate Targeted Jailbreaking Attack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2603.05772","title":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2609.25049","title":"Mitigating LLM Over-Refusal via Dynamic Semantic Routing Calibration","created":"2026-09-06","cited_by_count":1,"area":"safety"},{"id":"2601.15801","title":"Attributing and Exploiting Safety Vectors through Global Optimization in Large Language Models","created":"2026-01-22","cited_by_count":0,"area":"safety"},{"id":"2604.11663","title":"Why Do Large Language Models Generate Harmful Content?","created":"2026-04-13","cited_by_count":0,"area":"safety"},{"id":"2605.00123","title":"Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.27997","title":"Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models","created":"2026-05-27","cited_by_count":0,"area":"safety"},{"id":"2608.27580","title":"LongGuard: Mechanistic Analysis and Training-Free Mitigation of Long-Context Failure in Safety Guardrails","created":"2026-08-27","cited_by_count":0,"area":"safety"},{"id":"2608.30403","title":"Why Are LLM Backdoor Defenses Fragmented? A Feature-Level Explanation with Sparse Autoencoders","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2610.19452","title":"Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection","created":"2026-10-14","cited_by_count":0,"area":"safety"}],"next_cursor":null}