---
title: "Who cites Kai Li — 182 papers of our library — Elamur Research"
description: "182 papers of the Elamur Research library cite the works of Kai Li, found in their bibliographies; the most cited first."
canonical: "https://research.elamur.ai/free/en/authors/kai-li/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/kai-li/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / [Kai Li](https://md.research.elamur.ai/free/en/authors/kai-li/) / cited by

# Who cites Kai Li

182 citations of their works from 182 papers of our library (of the 149,439 whose bibliographies we read) · 51 with a page here, the most cited first · [← Kai Li](https://md.research.elamur.ai/free/en/authors/kai-li/)

1. [**Jailbreaking Black Box Large Language Models in Twenty Queries arXiv:2310.08419**Patrick Chao, Alexander Robey, Edgar Dobriban, et al.*2023 · 553 citations*](https://md.research.elamur.ai/free/en/papers/chao-2023-jailbreaking-black-box-large-language/)
2. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
3. **[JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/chao-2024-jailbreakbench-open-robustness-benchmark-jailbreaking/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.*2024 · 277 citations*
4. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 237 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/)
5. **[Combating Misinformation in the Age of LLMs: Opportunities and Challenges](https://md.research.elamur.ai/free/en/papers/chen-2023-combating-misinformation-age-llms-opportunities/) [AI Magazine](https://md.research.elamur.ai/free/en/venues/ai-magazine/)**Canyu Chen, Kai Shu*2023 · 214 citations*
6. [**Refusal in Language Models Is Mediated by a Single Direction arXiv:2406.11717**Andy Arditi, Oscar Obeso, Aaquib Syed, et al.*2024 · 196 citations*](https://md.research.elamur.ai/free/en/papers/arditi-2024-refusal-language-models-mediated-single/)
7. [**AI Alignment: A Comprehensive Survey arXiv:2310.19852**Jiaming Ji, Tianyi Qiu, Boyuan Chen, et al.*2023 · 173 citations*](https://md.research.elamur.ai/free/en/papers/ji-2023-ai-alignment-comprehensive-survey/)
8. [**GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher arXiv:2308.06463**Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.*2023 · 168 citations*](https://md.research.elamur.ai/free/en/papers/yuan-2023-gpt-4-too-smart-safe/)
9. [**SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks arXiv:2310.03684**Alexander Robey, Eric Wong, Hamed Hassani, et al.*2023 · 164 citations*](https://md.research.elamur.ai/free/en/papers/robey-2023-smoothllm-defending-large-language-models/)
10. **[FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts](https://md.research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/) [Proceedings of the AAAI Conference on Artificial Intelligence](https://md.research.elamur.ai/free/en/venues/proceedings-of-the-aaai-conference-on-artificial-intelligence/)**Yichen Gong, Delong Ran, Jinyuan Liu, et al.*2023 · 163 citations*
11. **[A Comprehensive Survey of Small Language Models in the Era of Large Language Models: Techniques, Enhancements, Applications, Collaboration with LLMs, and Trustworthiness](https://md.research.elamur.ai/free/en/papers/wang-2024-comprehensive-survey-small-language-models/) [ACM Transactions on Intelligent Systems and Technology](https://md.research.elamur.ai/free/en/venues/acm-transactions-on-intelligent-systems-and-technology/)**Fali Wang, Zhiwei Zhang, Xianren Zhang, et al.*2024 · 159 citations*
12. **[MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/liu-2023-mm-safetybench-benchmark-safety-evaluation/) [Lecture notes in computer science](https://md.research.elamur.ai/free/en/venues/lecture-notes-in-computer-science/)**Xin Liu, Yichen Zhu, Jindong Gu, et al.*2023 · 152 citations*
13. [**The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learning arXiv:2312.01552**Bill Yuchen Lin, Abhilasha Ravichander, Ximing Lu, et al.*2023 · 150 citations*](https://md.research.elamur.ai/free/en/papers/lin-2023-unlocking-spell-base-llms-rethinking/)
14. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
15. **[The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymization](https://md.research.elamur.ai/free/en/papers/pilan-2022-text-anonymization-benchmark-tab-dedicated/) [Computational Linguistics](https://md.research.elamur.ai/free/en/venues/cl/)**Ildikó Pilán, Pierre Lison, Lilja Øvrelid, et al.*2022 · 131 citations*
16. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
17. **[SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding](https://md.research.elamur.ai/free/en/papers/xu-2024-safedecoding-defending-against-jailbreak-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 127 citations*
18. **[SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models](https://md.research.elamur.ai/free/en/papers/li-2024-salad-bench-hierarchical-comprehensive-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Lijun Li, Bowen Dong, Ruohui Wang, et al.*2024 · 119 citations*
19. [**Safety Alignment Should Be Made More Than Just a Few Tokens Deep arXiv:2406.05946**Xiangyu Qi, Ashwinee Panda, Kaifeng Lyu, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/qi-2024-safety-alignment-should-made-more/)
20. **[WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models](https://md.research.elamur.ai/free/en/papers/jiang-2024-wildteaming-scale-wild-jailbreaks-adversarially/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Liwei Jiang, Kavel Rao, Seungju Han, et al.*2024 · 92 citations*
21. [**AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models arXiv:2310.15140**Sicheng Zhu, Ruiyi Zhang, Bang An, et al.*2023 · 90 citations*](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/)
22. [**Foundational Challenges in Assuring Alignment and Safety of Large Language Models arXiv:2404.09932**Usman Anwar, Abulhair Saparov, Javier Rando, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/anwar-2024-foundational-challenges-assuring-alignment-safety/)
23. [**SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal arXiv:2406.14598**Tinghao Xie, Xiangyu Qi, Yi Zeng, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/xie-2024-sorry-bench-systematically-evaluating-large/)
24. **[Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment](https://md.research.elamur.ai/free/en/papers/raina-2024-is-llm-as-judge-robust/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Vyas Raina, Adian Liusie, Mark Gales*2024 · 86 citations*
25. [**On Prompt-Driven Safeguarding for Large Language Models arXiv:2401.18018**Chujie Zheng, Fan Yin, Hao Zhou, et al.*2024 · 85 citations*](https://md.research.elamur.ai/free/en/papers/zheng-2024-prompt-driven-safeguarding-large-language/)
26. **[Detoxifying Large Language Models via Knowledge Editing](https://md.research.elamur.ai/free/en/papers/wang-2024-detoxifying-large-language-models-knowledge/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Mengru Wang, Ningyu Zhang, Ziwen Xu, et al.*2024 · 84 citations*
27. [**PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models arXiv:2402.07867**Wei Zou, Runpeng Geng, Binghui Wang, et al.*2024 · 80 citations*](https://md.research.elamur.ai/free/en/papers/zou-2024-poisonedrag-knowledge-corruption-attacks-retrieval/)
28. [**Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack arXiv:2404.01833**Mark Russinovich, Ahmed Salem, Ronen Eldan*2024 · 71 citations*](https://md.research.elamur.ai/free/en/papers/russinovich-2024-great-now-write-article-about/)
29. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
30. [**JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks arXiv:2404.03027**Weidi Luo, Siyuan Ma, Xiaogeng Liu, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/luo-2024-jailbreakv-benchmark-assessing-robustness-multimodal/)
31. **[From Automation to Autonomy: A Survey on Large Language Models in Scientific Discovery](https://md.research.elamur.ai/free/en/papers/zheng-2025-automation-autonomy-survey-large/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Tianshi Zheng, Zheye Deng, Hong Ting Tsang, et al.*2025 · 39 citations*
32. [**SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety arXiv:2404.05399**Paul Rottger, Fabio Pernisi, Bertie Vidgen, et al.*2024 · 33 citations*](https://md.research.elamur.ai/free/en/papers/rottger-2024-safetyprompts-systematic-review-open-datasets/)
33. **[Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification](https://md.research.elamur.ai/free/en/papers/zhang-2025-breaking-agents-compromising-autonomous-llm/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Boyang Zhang, Yicong Tan, Yun Shen, et al.*2025 · 29 citations*
34. [**Kosmos: An AI Scientist for Autonomous Discovery arXiv:2511.02824**Ludovico Mitchener; Angela Yiu; Benjamin Chang; Mathieu Bourdenx; Tyler Nadolski; Arvis Sulovari; Eric C. Landsness; Daniel L. Barabasi; Siddharth Narayanan; Nicky Evans; Shriya Reddy; Martha Foiani; Aizad Kamal; Leah P. Shriver; Fang Cao; Asmamaw T. Wassie; Jon M. Laurent; Edwin Melville-Green; Mayk Caldas; Albert Bou; Kaleigh F. Roberts; Sladjana Zagorac; Timothy C. Orr; Miranda E. Orr; Kevin J. Zwezdaryk; Ali E. Ghareeb; Laurie McCoy; Bruna Gomes; Euan A. Ashley; Karen E. Duff; Tonio Buonassisi; Tom Rainforth; Randall J. Bateman; Michael Skarlinski; Samuel G. Rodriques; Michaela M. Hinks;, Andrew D. White*2025 · 29 citations*](https://md.research.elamur.ai/free/en/papers/mitchener-2025-kosmos-ai-scientist-autonomous/)
35. **[AI4Research: A Survey of Artificial Intelligence for Scientific Research](https://md.research.elamur.ai/free/en/papers/chen-2025-ai4research-survey-artificial-intelligence/) [Science China Information Sciences](https://md.research.elamur.ai/free/en/venues/science-china-information-sciences/)**Qiguang Chen, Mingda Yang, Libo Qin, et al.*2025 · 21 citations*
36. **[Safety Alignment via Constrained Knowledge Unlearning](https://md.research.elamur.ai/free/en/papers/shi-2025-safety-alignment-constrained-knowledge-unlearning/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zesheng Shi, Yucheng Zhou, Jing Li, et al.*2025 · 13 citations*
37. **[AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhao-2025-adasteer-your-aligned-llm-is/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.*2025 · 11 citations*
38. **[A Survey of Inductive Reasoning for Large Language Models](https://md.research.elamur.ai/free/en/papers/chen-2026-survey-inductive-reasoning-large-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Kedi Chen, Dezhao Ruan, Yuhao Dan, et al.*2026 · 10 citations*
39. [**Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment arXiv:2501.13080**Melissa Kazemi Rad, Huy Nghiem, Andy Luo, et al.*2025 · 9 citations*](https://md.research.elamur.ai/free/en/papers/rad-2025-refining-input-guardrails-enhancing-llm/)
40. **[False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize](https://md.research.elamur.ai/free/en/papers/wang-2026-false-sense-security-why-probing/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Cheng Wang, Zeming Wei, Qin Liu, et al.*2026 · 5 citations*
41. **[CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning](https://md.research.elamur.ai/free/en/papers/yi-2026-ctrap-embedding-collapse-trap-safeguard/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Biao Yi, Tiansheng Huang, Baolei Zhang, et al.*2026 · 3 citations*
42. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuan Xin, Dingfan Chen, Linyi Yang, et al.*2026 · 3 citations*
43. **[In-Distribution Steering: Balancing Control and Coherence in Language Model Generation](https://md.research.elamur.ai/free/en/papers/vogels-2026-distribution-steering-balancing-control-coherence/) [Language Resources and Evaluation Conference (LREC)](https://md.research.elamur.ai/free/en/venues/lrec/)**Arthur Vogels, Benjamin Wong, Yann Choho, et al.*2026 · 1 citation*
44. **[Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/zhao-2026-unleashing-unseen-harnessing-benign-datasets/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Wei Zhao, Zhe Li, Yige Li, et al.*2026 · 1 citation*
45. **[Enhancing the Transferability of Jailbreak Attacks on Large Language Models via Exploiting Reparameterization Invariance](https://md.research.elamur.ai/free/en/papers/wang-2026-enhancing-transferability-jailbreak-attacks-large/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Ao Wang, Xinghao Yang, Yongshun Gong, et al.*2026*
46. **[Judging Instruction Responses in a Low-Resource Language: A Case Study on Basque](https://md.research.elamur.ai/free/en/papers/ponce-2026-judging-instruction-responses-low-resource/) [Language Resources and Evaluation Conference (LREC)](https://md.research.elamur.ai/free/en/venues/lrec/)**David Ponce, Harritxu Gete, Thierry Etchegoyhen, et al.*2026*
47. **[Now You Hear Me: Audio Narrative Attacks Against Large Audio–Language Models](https://md.research.elamur.ai/free/en/papers/yu-2026-now-you-hear-me-audio/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Ye Yu, Haibo Jin, Yaoning Yu, et al.*2026*
48. **[Probing the Plasticity and Correlation of LLM Value Systems: LLM Value Rankings are Not Stable](https://md.research.elamur.ai/free/en/papers/tang-2026-probing-plasticity-correlation-llm-value/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhenheng Tang, Qihua Pan, Jingya Shen, et al.*2026*
49. **[Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs](https://md.research.elamur.ai/free/en/papers/si-2026-pruning-unsafe-tickets-resource-efficient/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wai Man Si, Mingjie Li, Michael Backes, et al.*2026*
50. **[Silencing the Guardrails: Inference-Time Jailbreaking via Dynamic Contextual Representation Ablation](https://md.research.elamur.ai/free/en/papers/xing-2026-silencing-guardrails-inference-time-jailbreaking/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Wenpeng Xing, Moran Fang, Guangtai Wang, et al.*2026*
51. **[Jailbreak Attack for Large Language Models: A Survey (面向大语言模型的越狱攻击综述)](https://md.research.elamur.ai/free/en/papers/li-2024-jailbreak-attack-large/) [Journal of Computer Research and Development](https://md.research.elamur.ai/free/en/venues/journal-of-computer-research-and-development/)**Nan Li (李南), Yidong Ding (丁益东), Haoyu Jiang (江浩宇), et al.*2024*

131 more citing papers of our library have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/authors/kai-li/) — Kai Li