{"total":13,"rows":[{"id":"2508.12398","title":"Where to Start Alignment? Diffusion Large Language Model May Demand a Distinct Position","created":"2025-08-17","cited_by_count":11,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2511.04316","title":"AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research","created":"2025-11-06","cited_by_count":6,"area":"safety"},{"id":"2505.22037","title":"Jailbreak Distillation: Renewable Safety Benchmarking","created":"2025-05-28","cited_by_count":5,"area":"safety"},{"id":"2506.17299","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","created":"2025-06-17","cited_by_count":4,"area":"safety"},{"id":"2509.00391","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","created":"2025-08-30","cited_by_count":3,"area":"safety"},{"id":"2510.02422","title":"Dynamic Jailbreaking Attack","created":"2025-10-02","cited_by_count":3,"area":"safety"},{"id":"2510.02999","title":"NonTextual Target Attack","created":"2025-10-03","cited_by_count":3,"area":"safety"},{"id":"2601.13359","title":"Sockpuppetting: Jailbreaking LLMs by Combining Prefilling with Optimization","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2604.24983","title":"Adaptive Prompt Embedding Optimization for LLM Jailbreaking","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.20286","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2608.10621","title":"ProbGuard: Calibrated Safety Risk Estimation from LLM Output Distributions","created":"2026-08-11","cited_by_count":0,"area":"safety"}],"next_cursor":null}