{"total":25,"rows":[{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2602.16935","title":"DeepContext: Stateful Real-Time Detection of Multi-Turn Adversarial Intent Drift in LLMs","created":"2026-02-18","cited_by_count":8,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2509.10546","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","created":"2025-09-07","cited_by_count":6,"area":"safety"},{"id":"2601.20903","title":"ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack","created":"2026-01-28","cited_by_count":6,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2601.05742","title":"The Echo Chamber Multi-Turn LLM Jailbreak","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2510.17947","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2509.05471","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","created":"2025-09-05","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2607.19424","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","created":"2026-07-20","cited_by_count":2,"area":"safety"},{"id":"2511.14195","title":"N-GLARE: An Non-Generative Latent Representation-Efficient LLM Safety Evaluator","created":"2025-11-18","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2608.23028","title":"PsychJail: Exploring Psychological Jailbreaks via Multi-Turn Persuasion of LLM Policies","created":"2026-08-24","cited_by_count":1,"area":"safety"},{"id":"2604.10326","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","created":"2026-04-11","cited_by_count":0,"area":"safety"},{"id":"2605.13411","title":"Model-Agnostic Lifelong LLM Safety via Externalized Attack-Defense Co-Evolution","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.29564","title":"TACS: Trajectory-Aware Candidate Selection for LLM Jailbreak Suffix Optimization","created":"2026-08-30","cited_by_count":0,"area":"safety"},{"id":"2609.03247","title":"Trust Me, I'm Your Developer: Self-Issued Authentication in Large Language Models","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"}],"next_cursor":null}