{"total":19,"rows":[{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2512.07761","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","created":"2025-12-08","cited_by_count":14,"area":"safety"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2509.01444","title":"Strata-Sword: A Hierarchical Safety Evaluation towards LLMs based on Reasoning Complexity of Jailbreak Instructions","created":"2025-09-01","cited_by_count":11,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2605.01687","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","created":"2026-05-03","cited_by_count":8,"area":"safety"},{"id":"2510.03417","title":"NEXUS: Network Exploration for eXploiting Unsafe Sequences in Multi-Turn LLM Jailbreaks","created":"2025-10-03","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2509.10546","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","created":"2025-09-07","cited_by_count":6,"area":"safety"},{"id":"2505.17519","title":"Chain-of-Lure: A Universal Jailbreak Attack Framework using Unconstrained Synthetic Narratives","created":"2025-05-23","cited_by_count":5,"area":"safety"},{"id":"2510.18728","title":"HarmNet: A Framework for Adaptive Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-10-21","cited_by_count":4,"area":"safety"},{"id":"2601.05742","title":"The Echo Chamber Multi-Turn LLM Jailbreak","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2506.17881","title":"GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication","created":"2025-06-22","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2510.15017","title":"Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks","created":"2025-10-16","cited_by_count":2,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2608.04034","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","created":"2026-08-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}