{"total":30,"rows":[{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2510.17006","title":"Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization","created":"2025-10-19","cited_by_count":3,"area":"safety"},{"id":"2601.03600","title":"ALERT: Zero-shot LLM Jailbreak Detection via Internal Discrepancy Amplification","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2509.23362","title":"Dual-Space Smoothness for Robust and Balanced LLM Unlearning","created":"2025-09-27","cited_by_count":2,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2510.17000","title":"Bits Leaked per Query: Information-Theoretic Bounds on Adversarial Attacks against LLMs","created":"2025-10-19","cited_by_count":1,"area":"safety"},{"id":"2510.22628","title":"Sentra-Guard: A Real-Time Multilingual Defense Against Adversarial LLM Prompts","created":"2025-10-26","cited_by_count":1,"area":"safety"},{"id":"2511.12217","title":"AlignTree: Efficient Defense Against LLM Jailbreak Attacks","created":"2025-11-15","cited_by_count":1,"area":"safety"},{"id":"2511.19171","title":"Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2512.03356","title":"From static to adaptive: immune memory-based jailbreak detection for large language models","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2602.07107","title":"ShallowJail: Steering Jailbreaks against Large Language Models","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2603.05772","title":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2603.28817","title":"GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models","created":"2026-03-28","cited_by_count":1,"area":"safety"},{"id":"2601.19487","title":"LLM-VA: Resolving the Jailbreak-Overrefusal Trade-off via Vector Alignment","created":"2026-01-27","cited_by_count":0,"area":"safety"},{"id":"2602.06630","title":"TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2602.13321","title":"Detecting Jailbreak Attempts in Clinical Training LLMs Through Automated Linguistic Feature Extraction","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2602.19396","title":"Hiding in Plain Text: Detecting Concealed Jailbreaks via Activation Disentanglement","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2604.28129","title":"Latent Adversarial Detection: Adaptive Probing of LLM Activations for Multi-Turn Attack Detection","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.00123","title":"Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.24535","title":"Steering Beyond the Support: Adversarial Training on Unsupervised Jailbroken Activation Simulation","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2606.26377","title":"Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2608.10933","title":"SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense","created":"2026-08-11","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.20129","title":"Local Sparsity Enables Unsupervised LLM Safety Detection","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2609.21484","title":"HE-Guardrail: A Homomorphic Guardrail Against Jailbreak Attacks for Encrypted Large Language Model Inference","created":"2026-09-18","cited_by_count":0,"area":"safety"}],"next_cursor":null}