{"total":49,"rows":[{"id":"2512.21008","title":"GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs","created":"2025-12-24","cited_by_count":11,"area":"safety"},{"id":"2605.01687","title":"MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety","created":"2026-05-03","cited_by_count":8,"area":"safety"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2510.19169","title":"OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Models","created":"2025-10-22","cited_by_count":3,"area":"safety"},{"id":"2602.04195","title":"Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2602.10179","title":"When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models","created":"2026-02-10","cited_by_count":2,"area":"safety"},{"id":"2511.19009","title":"Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2511.19171","title":"Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2602.07107","title":"ShallowJail: Steering Jailbreaks against Large Language Models","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2603.23171","title":"Adaptively Robust LLM Monitoring via Activation Watermarking","created":"2026-03-24","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2603.29038","title":"Trojan-Speak: Bypassing Constitutional Classifiers with No Jailbreak Tax via Adversarial Finetuning","created":"2026-03-30","cited_by_count":1,"area":"safety"},{"id":"2604.16542","title":"TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts","created":"2026-04-17","cited_by_count":1,"area":"safety"},{"id":"2605.00689","title":"BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2605.30693","title":"Triaging Threats to Specialized Guardrails","created":"2026-05-29","cited_by_count":1,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2606.11409","title":"Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.29887","title":"SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing","created":"2026-06-29","cited_by_count":1,"area":"safety"},{"id":"2607.18056","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","created":"2026-07-20","cited_by_count":1,"area":"safety"},{"id":"2608.07430","title":"Diffusion LLMs as Targets and Adversaries: Mechanistic Safety Exploits","created":"2026-08-07","cited_by_count":1,"area":"safety"},{"id":"2512.13703","title":"Safe2Harm: Semantic Isomorphism Attacks for Jailbreaking Large Language Models","created":"2025-12-05","cited_by_count":0,"area":"safety"},{"id":"2603.16192","title":"Structured Semantic Cloaking for Jailbreak Attacks on Large Language Models","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.25716","title":"Cross-Lingual Jailbreak Detection via Semantic Codebooks","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2605.13411","title":"Model-Agnostic Lifelong LLM Safety via Externalized Attack-Defense Co-Evolution","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2605.22373","title":"Boundary-targeted Membership Inference Attacks on Safety Classifiers","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2606.13737","title":"FreoStream:Enhancing Stream Guardrails via Future-Aware Reasoning and Safety-Aligned Optimization","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2606.15531","title":"Greedy Coordinate Diffusion: Effective and Semantically Coherent Adversarial Attacks via Diffusion Guidance","created":"2026-06-14","cited_by_count":0,"area":"safety"},{"id":"2606.27632","title":"Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2607.17779","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","created":"2026-07-20","cited_by_count":0,"area":"safety"},{"id":"2608.00973","title":"Mind the Gap: Zero-Query Jailbreaks via Filter-Generator Discrepancy in Text-to-Image Systems","created":"2026-08-02","cited_by_count":0,"area":"safety"},{"id":"2608.10171","title":"Generating Attacks for LLMs with GFlowNets","created":"2026-08-10","cited_by_count":0,"area":"safety"},{"id":"2608.10279","title":"Withholding the Completing Chunk: Exact Release-Boundary Equivalence for Production Streaming Guardrails","created":"2026-08-10","cited_by_count":0,"area":"safety"},{"id":"2608.17360","title":"Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets","created":"2026-08-18","cited_by_count":0,"area":"safety"},{"id":"2608.27548","title":"Nemotron 3.5 Content Safety Moderator: A Compact Multimodal, Multilingual, and Reasoning Enabled Content Safety Moderator","created":"2026-08-27","cited_by_count":0,"area":"safety"},{"id":"2608.30703","title":"SingProbe Technical Report","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.01046","title":"HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.05797","title":"Safety Monitors Mostly Catch What the Model Already Refuses","created":"2026-09-05","cited_by_count":0,"area":"safety"},{"id":"2609.08410","title":"Compositional Multilingual and Behavioral Attribute Steering","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.32801","title":"PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agents","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2610.07532","title":"Safeguarding LLMs via Model-Agnostic Latent Safety Signals from Dark Knowledge","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.11915","title":"Not Every Change Is Necessary: Recoverable Drift in Large Language Model Unlearning","created":"2026-10-08","cited_by_count":0,"area":"safety"},{"id":"2610.14443","title":"Specification-Based Testing of Large Language Models","created":"2026-10-10","cited_by_count":0,"area":"safety"},{"id":"2610.15218","title":"Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Models","created":"2026-10-10","cited_by_count":0,"area":"safety"},{"id":"2610.16761","title":"Separating Prompt Harmfulness from Interaction Safety via Partial Generation","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}