---
title: "Who cites Michael Backes — 459 papers of our library"
description: "459 papers of the Elamur Research library cite the works of Michael Backes, found in their bibliographies · page 1 of 2 · 1–100; the most cited first."
canonical: "https://research.elamur.ai/free/en/authors/michael-backes/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/michael-backes/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / [Michael Backes](https://md.research.elamur.ai/free/en/authors/michael-backes/) / cited by

# Who cites Michael Backes

490 citations of their works from 459 papers of our library (of the 149,439 whose bibliographies we read) · 109 with a page here, the most cited first · page 1 of 2 · 1–100 · [← Michael Backes](https://md.research.elamur.ai/free/en/authors/michael-backes/)

**1** [2](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/page/2/) [next →](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/page/2/)

1. [**A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly arXiv:2312.02003**Yifan Yao, Jinhao Duan, Kaidi Xu, et al.*2023 · 1,186 citations*](https://md.research.elamur.ai/free/en/papers/yao-2023-survey-large-language-model-llm/)
2. [**OpenAI o1 System Card arXiv:2412.16720**OpenAI, Aaron Jaech, Adam Kalai, et al.*2024 · 1,110 citations*](https://md.research.elamur.ai/free/en/papers/openai-2024-openai-o1-system-card/)
3. **[Security and Privacy Challenges of Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/das-2024-security-privacy-challenges-large-language/) [ACM Computing Surveys](https://md.research.elamur.ai/free/en/venues/acm-computing-surveys/)**Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu*2024 · 424 citations*
4. [**Tulu 3: Pushing Frontiers in Open Language Model Post-Training arXiv:2411.15124**Nathan Lambert, Jacob Morrison, Valentina Pyatkin, et al.*2024 · 423 citations*](https://md.research.elamur.ai/free/en/papers/lambert-2024-tulu-3-pushing-frontiers-open/)
5. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
6. **[JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/chao-2024-jailbreakbench-open-robustness-benchmark-jailbreaking/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.*2024 · 277 citations*
7. **[Tree of Attacks: Jailbreaking Black-Box LLMs Automatically](https://md.research.elamur.ai/free/en/papers/mehrotra-2023-tree-attacks-jailbreaking-black-box/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.*2023 · 251 citations*
8. [**LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Dataset arXiv:2309.11998**Lianmin Zheng, Wei-Lin Chiang, Ying Sheng, et al.*2023 · 242 citations*](https://md.research.elamur.ai/free/en/papers/zheng-2023-lmsys-chat-1m-large-scale/)
9. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 237 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/)
10. [**Baseline Defenses for Adversarial Attacks Against Aligned Language Models arXiv:2309.00614**Neel Jain, Avi Schwarzschild, Yuxin Wen, et al.*2023 · 236 citations*](https://md.research.elamur.ai/free/en/papers/jain-2023-baseline-defenses-adversarial-attacks-against/)
11. [**Refusal in Language Models Is Mediated by a Single Direction arXiv:2406.11717**Andy Arditi, Oscar Obeso, Aaquib Syed, et al.*2024 · 196 citations*](https://md.research.elamur.ai/free/en/papers/arditi-2024-refusal-language-models-mediated-single/)
12. [**LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods arXiv:2412.05579**Haitao Li, Qian Dong, Junjie Chen, et al.*2024 · 195 citations*](https://md.research.elamur.ai/free/en/papers/li-2024-llms-judges-comprehensive-survey-llm/)
13. [**Multilingual Jailbreak Challenges in Large Language Models arXiv:2310.06474**Yue Deng, Wenxuan Zhang, Sinno Jialin Pan, et al.*2023 · 192 citations*](https://md.research.elamur.ai/free/en/papers/deng-2023-multilingual-jailbreak-challenges-large-language/)
14. [**Low-Resource Languages Jailbreak GPT-4 arXiv:2310.02446**Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach*2023 · 183 citations*](https://md.research.elamur.ai/free/en/papers/yong-2023-low-resource-languages-jailbreak-gpt/)
15. [**AI Alignment: A Comprehensive Survey arXiv:2310.19852**Jiaming Ji, Tianyi Qiu, Boyuan Chen, et al.*2023 · 173 citations*](https://md.research.elamur.ai/free/en/papers/ji-2023-ai-alignment-comprehensive-survey/)
16. [**Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation arXiv:2310.06987**Yangsibo Huang, Samyak Gupta, Mengzhou Xia, et al.*2023 · 169 citations*](https://md.research.elamur.ai/free/en/papers/huang-2023-catastrophic-jailbreak-open-source-llms/)
17. **[WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs](https://md.research.elamur.ai/free/en/papers/han-2024-wildguard-open-one-stop-moderation/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Seungju Han, Kavel Rao, Allyson Ettinger, et al.*2024 · 165 citations*
18. [**Justice or Prejudice? Quantifying Biases in LLM-as-a-Judge arXiv:2410.02736**Jiayi Ye, Yanbo Wang, Yue Huang, et al.*2024 · 148 citations*](https://md.research.elamur.ai/free/en/papers/ye-2024-justice-prejudice-quantifying-biases-llm/)
19. [**Magpie: Alignment Data Synthesis from Scratch by Prompting Aligned LLMs with Nothing arXiv:2406.08464**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 148 citations*](https://md.research.elamur.ai/free/en/papers/xu-2024-magpie-alignment-data-synthesis-scratch/)
20. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
21. **[Humans or LLMs as the Judge? A Study on Judgement Bias](https://md.research.elamur.ai/free/en/papers/chen-2024-humans-or-llms-as-judge/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Guiming Hardy Chen, Shunian Chen, Ziche Liu, et al.*2024 · 133 citations*
22. [**Olmo 3 arXiv:2512.13961**Team Olmo: Allyson Ettinger, Amanda Bertsch, Bailey Kuehl, et al.*2025 · 130 citations*](https://md.research.elamur.ai/free/en/papers/ettinger-2025-olmo-3/)
23. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
24. **[SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models](https://md.research.elamur.ai/free/en/papers/li-2024-salad-bench-hierarchical-comprehensive-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Lijun Li, Bowen Dong, Ruohui Wang, et al.*2024 · 119 citations*
25. [**Deliberative Alignment: Reasoning Enables Safer Language Models arXiv:2412.16339**Melody Y. Guan, Manas Joglekar, Eric Wallace, et al.*2024 · 115 citations*](https://md.research.elamur.ai/free/en/papers/guan-2024-deliberative-alignment-reasoning-enables-safer/)
26. **[Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization](https://md.research.elamur.ai/free/en/papers/zhang-2024-defending-large-language-models-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhexin Zhang, Junxiao Yang, Pei Ke, et al.*2024 · 113 citations*
27. **[Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM](https://md.research.elamur.ai/free/en/papers/cao-2024-defending-against-alignment-breaking-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Bochuan Cao, Yuanpu Cao, Lu Lin, et al.*2024 · 109 citations*
28. **[A Systematic Survey and Critical Review on Evaluating Large Language Models: Challenges, Limitations, and Recommendations](https://md.research.elamur.ai/free/en/papers/laskar-2024-systematic-survey-critical-review-evaluating/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Md Tahmid Rahman Laskar, Sawsan Alqahtani, M Saiful Bari, et al.*2024 · 105 citations*
29. [**FLASK: Fine-grained Language Model Evaluation based on Alignment Skill Sets arXiv:2307.10928**Seonghyeon Ye, Doyoung Kim, Sungdong Kim, et al.*2023 · 100 citations*](https://md.research.elamur.ai/free/en/papers/ye-2023-flask-fine-grained-language-model/)
30. **[WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models](https://md.research.elamur.ai/free/en/papers/jiang-2024-wildteaming-scale-wild-jailbreaks-adversarially/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Liwei Jiang, Kavel Rao, Seungju Han, et al.*2024 · 92 citations*
31. **[The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts](https://md.research.elamur.ai/free/en/papers/shen-2024-language-barrier-dissecting-safety-challenges/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Lingfeng Shen, Weiting Tan, Sihao Chen, et al.*2024 · 88 citations*
32. [**A Survey of Large Language Models in Medicine: Progress, Application, and Challenge arXiv:2311.05112**Hongjian Zhou, Fenglin Liu, Boyang Gu, et al.*2023 · 87 citations*](https://md.research.elamur.ai/free/en/papers/zhou-2023-survey-large-language-models-medicine/)
33. **[Detoxifying Large Language Models via Knowledge Editing](https://md.research.elamur.ai/free/en/papers/wang-2024-detoxifying-large-language-models-knowledge/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Mengru Wang, Ningyu Zhang, Ziwen Xu, et al.*2024 · 84 citations*
34. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
35. [**Humans or LLMs as the Judge? A Study on Judgement Biases arXiv:2402.10669**Guiming Hardy Chen, Shunian Chen, Ziche Liu, et al.*2024 · 78 citations*](https://md.research.elamur.ai/free/en/papers/chen-2024-humans-llms-judge-study-judgement/)
36. **[Factuality of Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/wang-2024-factuality-large-language-models-survey/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Yuxia Wang, Minghan Wang, Muhammad Arslan Manzoor, et al.*2024 · 77 citations*
37. [**OR-Bench: An Over-Refusal Benchmark for Large Language Models arXiv:2405.20947**Justin Cui, Wei-Lin Chiang, Ion Stoica, et al.*2024 · 76 citations*](https://md.research.elamur.ai/free/en/papers/cui-2024-bench-over-refusal-benchmark-large/)
38. **[ClashEval: Quantifying the tug-of-war between an LLM's internal prior and external evidence](https://md.research.elamur.ai/free/en/papers/wu-2024-clasheval-quantifying-tug-war-between/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Kevin Wu, Eric Wu, James Zou*2024 · 65 citations*
39. [**Evaluation of OpenAI o1: Opportunities and Challenges of AGI arXiv:2409.18486**Tianyang Zhong, Zhengliang Liu, Yi Pan, et al.*2024 · 64 citations*](https://md.research.elamur.ai/free/en/papers/zhong-2024-evaluation-openai-o1-opportunities-challenges/)
40. [**Revolutionizing Finance with LLMs: An Overview of Applications and Insights arXiv:2401.11641**Huaqin Zhao, Zhengliang Liu, Zihao Wu, et al.*2024 · 63 citations*](https://md.research.elamur.ai/free/en/papers/zhao-2024-revolutionizing-finance-llms-overview-applications/)
41. [**MLLM-as-a-Judge: Assessing Multimodal LLM-as-a-Judge with Vision-Language Benchmark arXiv:2402.04788**Dongping Chen, Ruoxi Chen, Shilin Zhang, et al.*2024 · 60 citations*](https://md.research.elamur.ai/free/en/papers/chen-2024-mllm-judge-assessing-multimodal-llm/)
42. **[The Art of Saying No: Contextual Noncompliance in Language Models](https://md.research.elamur.ai/free/en/papers/brahman-2024-art-saying-no-contextual-noncompliance/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Faeze Brahman, Sachin Kumar, Vidhisha Balachandran, et al.*2024 · 56 citations*
43. **[AEGIS2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails](https://md.research.elamur.ai/free/en/papers/ghosh-2025-aegis2-0-diverse-ai-safety/) [Conference of the North American Chapter of the Association for Computational Linguistics (NAACL)](https://md.research.elamur.ai/free/en/venues/naacl/)**Shaona Ghosh, Prasoon Varshney, Makesh Narsimhan Sreedhar, et al.*2025 · 53 citations*
44. **[NormAd: A Framework for Measuring the Cultural Adaptability of Large Language Models](https://md.research.elamur.ai/free/en/papers/rao-2025-normad-framework-measuring-cultural-adaptability/) [Conference of the North American Chapter of the Association for Computational Linguistics (NAACL)](https://md.research.elamur.ai/free/en/venues/naacl/)**Abhinav Rao, Akhila Yerukola, Vishwa Shah, et al.*2025 · 46 citations*
45. **[SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning](https://md.research.elamur.ai/free/en/papers/jia-2024-soul-unlocking-power-second-order/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Jinghan Jia, Yihua Zhang, Yimeng Zhang, et al.*2024 · 46 citations*
46. [**SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Models arXiv:2311.08370**Bertie Vidgen, Nino Scherrer, Hannah Rose Kirk, et al.*2023 · 42 citations*](https://md.research.elamur.ai/free/en/papers/vidgen-2023-simplesafetytests-test-suite-identifying-critical/)
47. [**Introducing v0.5 of the AI Safety Benchmark from MLCommons arXiv:2404.12241**Bertie Vidgen, Adarsh Agrawal, Ahmed M. Ahmed, et al.*2024 · 38 citations*](https://md.research.elamur.ai/free/en/papers/vidgen-2024-introducing-v0-5-ai-safety/)
48. **[Unveiling Privacy Risks in LLM Agent Memory](https://md.research.elamur.ai/free/en/papers/wang-2025-unveiling-privacy-risks-llm-agent/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Bo Wang, Weiyi He, Shenglai Zeng, et al.*2025 · 33 citations*
49. [**SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety arXiv:2404.05399**Paul Rottger, Fabio Pernisi, Bertie Vidgen, et al.*2024 · 33 citations*](https://md.research.elamur.ai/free/en/papers/rottger-2024-safetyprompts-systematic-review-open-datasets/)
50. **[Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification](https://md.research.elamur.ai/free/en/papers/zhang-2025-breaking-agents-compromising-autonomous-llm/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Boyang Zhang, Yicong Tan, Yun Shen, et al.*2025 · 29 citations*
51. [**Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming arXiv:2501.18837**Mrinank Sharma, Meg Tong, Jesse Mu, et al.*2025 · 29 citations*](https://md.research.elamur.ai/free/en/papers/sharma-2025-constitutional-classifiers-defending-against-universal/)
52. **[Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understanding](https://md.research.elamur.ai/free/en/papers/yoo-2025-code-switching-red-teaming-llm/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Haneul Yoo, Yongjin Yang, Hwaran Lee*2025 · 26 citations*
53. **[Transforming Science with Large Language Models: A Survey on AI-assisted Scientific Discovery, Experimentation, Content Generation, and Evaluation](https://md.research.elamur.ai/free/en/papers/eger-2025-transforming-science-large-language-models/) [ACM Computing Surveys](https://md.research.elamur.ai/free/en/venues/acm-computing-surveys/)**Steffen Eger, Yong Cao, Jennifer D'Souza, et al.*2025 · 25 citations*
54. **[Intention Analysis Makes LLMs A Good Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhang-2025-intention-analysis-makes-llms-good/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Yuqi Zhang, Liang Ding, Lefei Zhang, et al.*2025 · 21 citations*
55. **[AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection](https://md.research.elamur.ai/free/en/papers/luo-2025-agrail-lifelong-agent-guardrail-effective/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Weidi Luo, Shenghong Dai, Xiaogeng Liu, et al.*2025 · 20 citations*
56. **[Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training](https://md.research.elamur.ai/free/en/papers/yuan-2025-refuse-whenever-you-feel-unsafe/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.*2025 · 19 citations*
57. **[Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models](https://md.research.elamur.ai/free/en/papers/gao-2025-shaping-safety-boundaries-understanding-defending/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Lang Gao, Jiahui Geng, Xiangliang Zhang, et al.*2025 · 19 citations*
58. **[Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective](https://md.research.elamur.ai/free/en/papers/li-2025-revisiting-jailbreaking-large-language-models/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.*2025 · 17 citations*
59. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Hao Li, Xiaogeng Liu, Ning Zhang, et al.*2025 · 16 citations*
60. **[Jailbreaking LLMs with Arabic Transliteration and Arabizi](https://md.research.elamur.ai/free/en/papers/ghanim-2024-jailbreaking-llms-arabic-transliteration-arabizi/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Mansour Al Ghanim, Saleh Almohaimeed, Mengxin Zheng, et al.*2024 · 16 citations*
61. [**ChemAgent: Self-updating Library in Large Language Models Improves Chemical Reasoning arXiv:2501.06590**Xiangru Tang, Tianyu Hu, Muyang Ye, et al.*2025 · 15 citations*](https://md.research.elamur.ai/free/en/papers/tang-2025-chemagent-self-updating-library-large/)
62. [**Rethinking Reflection in Pre-Training arXiv:2504.04022**Essential AI: Darsh J Shah, Peter Rushton, Somanshu Singla, et al.*2025 · 15 citations*](https://md.research.elamur.ai/free/en/papers/shah-2025-rethinking-reflection-pre-training/)
63. **[What Happened in LLMs Layers when Trained for Fast vs. Slow Thinking: A Gradient Perspective](https://md.research.elamur.ai/free/en/papers/li-2025-what-happened-llms-layers-when/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Ming Li, Yanhong Li, Tianyi Zhou*2025 · 15 citations*
64. **[Multi-Attribute Steering of Language Models via Targeted Intervention](https://md.research.elamur.ai/free/en/papers/nguyen-2025-multi-attribute-steering-language-models/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Duy Nguyen, Archiki Prasad, Elias Stengel-Eskin, et al.*2025 · 11 citations*
65. **[Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring](https://md.research.elamur.ai/free/en/papers/hua-2026-rethinking-jailbreak-detection-large-vision/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Peichun Hua, Hao Li, Shanghao Shi, et al.*2026 · 10 citations*
66. **[Multiple LLM Agents Debate for Equitable Cultural Alignment](https://md.research.elamur.ai/free/en/papers/ki-2025-multiple-llm-agents-debate-equitable/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Dayeon Ki, Rachel Rudinger, Tianyi Zhou, et al.*2025 · 10 citations*
67. [**Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment arXiv:2501.13080**Melissa Kazemi Rad, Huy Nghiem, Andy Luo, et al.*2025 · 9 citations*](https://md.research.elamur.ai/free/en/papers/rad-2025-refining-input-guardrails-enhancing-llm/)
68. **[SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning](https://md.research.elamur.ai/free/en/papers/zhou-2025-safekey-amplifying-aha-moment-insights/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Kaiwen Zhou, Xuandong Zhao, Jayanth Srinivasa, et al.*2025 · 9 citations*
69. **[Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expression](https://md.research.elamur.ai/free/en/papers/peng-2026-logic-jailbreak-efficiently-unlocking-llm/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jingyu Peng, Maolin Wang, Nan Wang, et al.*2026 · 8 citations*
70. **[The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/wu-2025-dark-side-function-calling-pathways/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Zihui Wu, Haichang Gao, Jianping He, et al.*2025 · 8 citations*
71. **[CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models](https://md.research.elamur.ai/free/en/papers/zhou-2026-corba-contagious-recursive-blocking-attacks/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhenhong Zhou, Zherui Li, Jie Zhang, et al.*2026 · 7 citations*
72. **[Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning](https://md.research.elamur.ai/free/en/papers/hu-2025-context-reasoner-incentivizing-reasoning-capability/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Wenbin Hu, Haoran Li, Huihao Jing, et al.*2025 · 7 citations*
73. [**Shared Imagination: LLMs Hallucinate Alike arXiv:2407.16604**Yilun Zhou, Caiming Xiong, Silvio Savarese, et al.*2024 · 7 citations*](https://md.research.elamur.ai/free/en/papers/zhou-2024-shared-imagination-llms-hallucinate-alike/)
74. **[From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction Tuning](https://md.research.elamur.ai/free/en/papers/zhang-2026-completion-editing-unlocking-context-aware/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiajun Zhang, Zeyu Cui, Jiaxi Yang, et al.*2026 · 6 citations*
75. **[GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/hu-2026-gambit-gamified-jailbreak-framework-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiangdong Hu, Yangyang Jiang, Qin Hu, et al.*2026 · 6 citations*
76. **[False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize](https://md.research.elamur.ai/free/en/papers/wang-2026-false-sense-security-why-probing/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Cheng Wang, Zeming Wei, Qin Liu, et al.*2026 · 5 citations*
77. **[LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjoint](https://md.research.elamur.ai/free/en/papers/ma-2025-led-merging-mitigating-safety-utility/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qianli Ma, Dongrui Liu, Qian Chen, et al.*2025 · 5 citations*
78. **[BLUR: A Bi-Level Optimization Approach for LLM Unlearning](https://md.research.elamur.ai/free/en/papers/reisizadeh-2026-blur-bi-level-optimization-approach/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Hadi Reisizadeh, Jinghan Jia, Zhiqi Bu, et al.*2026 · 4 citations*
79. **[GrAInS: Gradient-based Attribution for Inference-Time Steering of LLMs and VLMs](https://md.research.elamur.ai/free/en/papers/nguyen-2026-grains-gradient-based-attribution-inference/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Duy Nguyen, Archiki Prasad, Elias Stengel-Eskin, et al.*2026 · 4 citations*
80. **[Spotlight Your Instructions: Instruction-following with Dynamic Attention Steering](https://md.research.elamur.ai/free/en/papers/venkateswaran-2026-spotlight-your-instructions-instruction-following/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Praveen Venkateswaran, Danish Contractor*2026 · 4 citations*
81. [**Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Models arXiv:2412.15265**Yingshui Tan, Boren Zheng, Baihui Zheng, et al.*2024 · 4 citations*](https://md.research.elamur.ai/free/en/papers/tan-2024-chinese-safetyqa-safety-short/)
82. **[Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language Models](https://md.research.elamur.ai/free/en/papers/song-2026-audio-jailbreak-open-comprehensive-benchmark/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zirui Song, Qian Jiang, Mingxuan Cui, et al.*2026 · 3 citations*
83. **[Universal Jailbreak Suffixes Are Strong Attention Hijackers](https://md.research.elamur.ai/free/en/papers/tov-2026-universal-jailbreak-suffixes-are-strong/) [Transactions of the Association for Computational Linguistics (TACL)](https://md.research.elamur.ai/free/en/venues/tacl/)**Matan Ben-Tov, Mor Geva, Mahmood Sharif*2026 · 3 citations*
84. **[Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization](https://md.research.elamur.ai/free/en/papers/xing-2026-are-llms-reliable-rankers-rank/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Tiancheng Xing, Jerry Li, Yixuan Du, et al.*2026 · 2 citations*
85. **[Do Images Speak Louder than Words? Investigating the Effect of Textual Misinformation in VLMs](https://md.research.elamur.ai/free/en/papers/zhang-2026-do-images-speak-louder-than/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Chi Zhang, Wenxuan Ding, Jiale Liu, et al.*2026 · 2 citations*
86. **[Activation-Guided Local Editing for Jailbreaking Attacks](https://md.research.elamur.ai/free/en/papers/wang-2026-activation-guided-local-editing-jailbreaking/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiecong Wang, Haoran Li, Hao Peng, et al.*2026 · 1 citation*
87. **[Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay](https://md.research.elamur.ai/free/en/papers/wang-2026-be-your-own-red-teamer/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Hao Wang, Yanting Wang, Hao Li, et al.*2026 · 1 citation*
88. **[Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning](https://md.research.elamur.ai/free/en/papers/pu-2026-beyond-surface-level-detection-cognitive/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Pu, Chaozhuo Li, Rui Ha, et al.*2026 · 1 citation*
89. **[BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage](https://md.research.elamur.ai/free/en/papers/nakka-2026-bitbypass-new-direction-jailbreaking-aligned/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Kalyan Nakka, Nitesh Saxena*2026 · 1 citation*
90. **[Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy Backdoors](https://md.research.elamur.ai/free/en/papers/yin-2026-compiling-activation-steering-into-weights/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Yin, Tianxu Han, Naen Xu, et al.*2026 · 1 citation*
91. **[HABIB_TAZ at SemEval-2026 Task 11: Disentangling Formal Logic from Content via Synthetic Training and Multi-Objective Optimization](https://md.research.elamur.ai/free/en/papers/shaikh-2026-habib-taz-semeval-2026-task/) [International Workshop on Semantic Evaluation (SemEval)](https://md.research.elamur.ai/free/en/venues/semeval/)**Abdullah Shaikh, Zain Naqi, Taha Zahid, et al.*2026 · 1 citation*
92. **[Knowing When Not to Answer: Lightweight KB-Aligned OOD Detection for Safe RAG](https://md.research.elamur.ai/free/en/papers/triantafyllopoulos-2026-knowing-when-not-answer-lightweight/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Ilias Triantafyllopoulos, Renyi Qu, Salvatore Giorgi, et al.*2026 · 1 citation*
93. **[Knowing-but-Doing: Diagnosing and Defending Role-Play-Driven LLMs Jailbreaks via Moral Disengagement](https://md.research.elamur.ai/free/en/papers/qin-2026-knowing-but-doing-diagnosing-defending/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Haiming Qin, Jianxun Lian, Qimin Zhong, et al.*2026 · 1 citation*
94. **[Reasoning Up the Instruction Ladder for Controllable Language Models](https://md.research.elamur.ai/free/en/papers/zheng-2026-reasoning-up-instruction-ladder-controllable/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zishuo Zheng, Vidhisha Balachandran, Chan Young Park, et al.*2026 · 1 citation*
95. **[SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator](https://md.research.elamur.ai/free/en/papers/zhou-2026-safeagent-safeguarding-llm-agents-automated/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xueyang Zhou, Weidong Wang, Lin Lu, et al.*2026 · 1 citation*
96. **[Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/zhao-2026-unleashing-unseen-harnessing-benign-datasets/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Wei Zhao, Zhe Li, Yige Li, et al.*2026 · 1 citation*
97. [**HAMSA: Hijacking Aligned Compact Models via Stealthy Automation arXiv:2508.16484**Alexey Krylov, Iskander Vagizov, Dmitrii Korzh, et al.*2025 · 1 citation*](https://md.research.elamur.ai/free/en/papers/krylov-2025-hamsa-hijacking-aligned-compact-models/)
98. **[Authorization-First Retrieval: Enforcing Least Privilege in Multi-Agent RAG Systems](https://md.research.elamur.ai/free/en/papers/namboothiri-2026-authorization-first-retrieval-enforcing-least/) [Workshop on Trustworthy NLP](https://md.research.elamur.ai/free/en/venues/trustnlp/)**Rohith Namboothiri*2026*
99. **[Evaluating LLMs for Detecting Demographic-Targeted Social Bias: A Comprehensive Benchmark Study](https://md.research.elamur.ai/free/en/papers/majumdar-2026-evaluating-llms-detecting-demographic-targeted/) [Workshop of Identity Aware AI](https://md.research.elamur.ai/free/en/venues/iaai/)**Ayan Majumdar, Feihao Chen, Jinghui Li, et al.*2026*
100. **[ExpressivityBench: Can LLMs Communicate Implicitly?](https://md.research.elamur.ai/free/en/papers/tint-2026-expressivitybench-can-llms-communicate-implicitly/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Joshua Tint, Som Sagar, Aditya Taparia, et al.*2026*

**1** [2](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/page/2/) [next →](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/page/2/)

- [← back to](https://md.research.elamur.ai/free/en/authors/michael-backes/) — Michael Backes