---
title: "Who cites Pinjia He — 168 papers of our library"
description: "168 papers of the Elamur Research library cite the works of Pinjia He, found in their bibliographies; the most cited first."
canonical: "https://research.elamur.ai/free/en/authors/pinjia-he/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/pinjia-he/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / [Pinjia He](https://md.research.elamur.ai/free/en/authors/pinjia-he/) / cited by

# Who cites Pinjia He

173 citations of their works from 168 papers of our library (of the 149,439 whose bibliographies we read) · 54 with a page here, the most cited first · [← Pinjia He](https://md.research.elamur.ai/free/en/authors/pinjia-he/)

1. [**A Survey on Large Language Models for Code Generation arXiv:2406.00515**Juyong Jiang, Fan Wang, Jiasi Shen, et al.*2024 · 367 citations*](https://md.research.elamur.ai/free/en/papers/jiang-2024-survey-large-language-models-code/)
2. [**AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models arXiv:2310.04451**Xiaogeng Liu, Nan Xu, Muhao Chen, et al.*2023 · 350 citations*](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/)
3. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 237 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/)
4. **[How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs](https://md.research.elamur.ai/free/en/papers/zeng-2024-how-johnny-can-persuade-llms/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yi Zeng, Hongpeng Lin, Jingwen Zhang, et al.*2024 · 203 citations*
5. [**Multilingual Jailbreak Challenges in Large Language Models arXiv:2310.06474**Yue Deng, Wenxuan Zhang, Sinno Jialin Pan, et al.*2023 · 192 citations*](https://md.research.elamur.ai/free/en/papers/deng-2023-multilingual-jailbreak-challenges-large-language/)
6. [**Low-Resource Languages Jailbreak GPT-4 arXiv:2310.02446**Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach*2023 · 183 citations*](https://md.research.elamur.ai/free/en/papers/yong-2023-low-resource-languages-jailbreak-gpt/)
7. [**GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts arXiv:2309.10253**Jiahao Yu, Xingwei Lin, Zheng Yu, et al.*2023 · 169 citations*](https://md.research.elamur.ai/free/en/papers/yu-2023-gptfuzzer-red-teaming-large-language/)
8. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
9. [**Detecting Language Model Attacks with Perplexity arXiv:2308.14132**Gabriel Alon, Michael Kamfonas*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/alon-2023-detecting-language-model-attacks-perplexity/)
10. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
11. **[Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization](https://md.research.elamur.ai/free/en/papers/zhang-2024-defending-large-language-models-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhexin Zhang, Junxiao Yang, Pei Ke, et al.*2024 · 113 citations*
12. **[Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM](https://md.research.elamur.ai/free/en/papers/cao-2024-defending-against-alignment-breaking-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Bochuan Cao, Yuanpu Cao, Lu Lin, et al.*2024 · 109 citations*
13. **[R-Judge: Benchmarking Safety Risk Awareness for LLM Agents](https://md.research.elamur.ai/free/en/papers/yuan-2024-r-judge-benchmarking-safety-risk/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Tongxin Yuan, Zhiwei He, Lingzhong Dong, et al.*2024 · 106 citations*
14. **[Not All Countries Celebrate Thanksgiving: On the Cultural Dominance in Large Language Models](https://md.research.elamur.ai/free/en/papers/wang-2024-not-all-countries-celebrate-thanksgiving/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wenxuan Wang, Wenxiang Jiao, Jingyuan Huang, et al.*2024 · 96 citations*
15. **[WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models](https://md.research.elamur.ai/free/en/papers/jiang-2024-wildteaming-scale-wild-jailbreaks-adversarially/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Liwei Jiang, Kavel Rao, Seungju Han, et al.*2024 · 92 citations*
16. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
17. **[Agent-FLAN: Designing Data and Methods of Effective Agent Tuning for Large Language Models](https://md.research.elamur.ai/free/en/papers/chen-2024-agent-flan-designing-data-methods/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zehui Chen, Kuikun Liu, Qiuchen Wang, et al.*2024 · 64 citations*
18. **[Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understanding](https://md.research.elamur.ai/free/en/papers/yoo-2025-code-switching-red-teaming-llm/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Haneul Yoo, Yongjin Yang, Hwaran Lee*2025 · 26 citations*
19. **[Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training](https://md.research.elamur.ai/free/en/papers/yuan-2025-refuse-whenever-you-feel-unsafe/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.*2025 · 19 citations*
20. **[LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts](https://md.research.elamur.ai/free/en/papers/ren-2025-llms-know-their-vulnerabilities-uncover/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qibing Ren, Hao Li, Dongrui Liu, et al.*2025 · 18 citations*
21. **[Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective](https://md.research.elamur.ai/free/en/papers/li-2025-revisiting-jailbreaking-large-language-models/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.*2025 · 17 citations*
22. **[HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States](https://md.research.elamur.ai/free/en/papers/jiang-2025-hiddendetect-detecting-jailbreak-attacks-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yilei Jiang, Xinyan Gao, Tianshuo Peng, et al.*2025 · 15 citations*
23. [**When "Competency" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex Ciphers arXiv:2402.10601**Divij Handa, Zehua Zhang, Amir Saeidi, et al.*2024 · 15 citations*](https://md.research.elamur.ai/free/en/papers/handa-2024-competency-reasoning-opens-door-vulnerability/)
24. **[MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming](https://md.research.elamur.ai/free/en/papers/guo-2025-mtsa-multi-turn-safety-alignment/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Weiyang Guo, Jing Li, Wenya Wang, et al.*2025 · 14 citations*
25. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
26. **[AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhao-2025-adasteer-your-aligned-llm-is/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.*2025 · 11 citations*
27. **[Automated Progressive Red Teaming](https://md.research.elamur.ai/free/en/papers/jiang-2025-automated-progressive-red-teaming/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Bojian Jiang, Yi Jing, Tong Wu, et al.*2025 · 10 citations*
28. **[Beware of Your Po! Measuring and Mitigating AI Safety Risks in Role-Play Fine-Tuning of LLMs](https://md.research.elamur.ai/free/en/papers/zhao-2025-beware-your-po-measuring-mitigating/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Weixiang Zhao, Yulin Hu, Yang Deng, et al.*2025 · 9 citations*
29. **[SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning](https://md.research.elamur.ai/free/en/papers/zhou-2025-safekey-amplifying-aha-moment-insights/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Kaiwen Zhou, Xuandong Zhao, Jayanth Srinivasa, et al.*2025 · 9 citations*
30. **[Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expression](https://md.research.elamur.ai/free/en/papers/peng-2026-logic-jailbreak-efficiently-unlocking-llm/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jingyu Peng, Maolin Wang, Nan Wang, et al.*2026 · 8 citations*
31. **[The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/wu-2025-dark-side-function-calling-pathways/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Zihui Wu, Haichang Gao, Jianping He, et al.*2025 · 8 citations*
32. **[From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction Tuning](https://md.research.elamur.ai/free/en/papers/zhang-2026-completion-editing-unlocking-context-aware/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiajun Zhang, Zeyu Cui, Jiaxi Yang, et al.*2026 · 6 citations*
33. **[HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router](https://md.research.elamur.ai/free/en/papers/mei-2026-hiddenguard-fine-grained-safe-generation/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Lingrui Mei, Shenghua Liu, Yiwei Wang, et al.*2026 · 4 citations*
34. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuan Xin, Dingfan Chen, Linyi Yang, et al.*2026 · 3 citations*
35. **[SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents](https://md.research.elamur.ai/free/en/papers/ying-2026-securewebarena-holistic-security-evaluation-benchmark/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zonghao Ying, Yangguang Shao, Jianle Gan, et al.*2026 · 3 citations*
36. **[Task Matters: Knowledge Requirements Shape LLM Responses to Context–Memory Conflict](https://md.research.elamur.ai/free/en/papers/sun-2026-task-matters-knowledge-requirements-shape/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Kaiser Sun, Fan Bai, Mark Dredze*2026 · 3 citations*
37. **[Too Good to be Bad: On the Failure of LLMs to Role-Play Villains](https://md.research.elamur.ai/free/en/papers/yi-2026-too-good-be-bad-failure/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zihao Yi, Qingxuan Jiang, Ruotian Ma, et al.*2026 · 3 citations*
38. **[TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards](https://md.research.elamur.ai/free/en/papers/xiong-2026-trojail-trajectory-level-optimization-multi/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiqiao Xiong, Ouxiang Li, Zhuo Liu, et al.*2026 · 3 citations*
39. **[Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese](https://md.research.elamur.ai/free/en/papers/zaghouani-2026-beyond-english-evasion-human-annotated/) [Workshop on the Role of Resources in the Age of Large Language Models](https://md.research.elamur.ai/free/en/venues/resourceful/)**Wajdi Zaghouani, Kholoud Khalil Aldous, Yicheng Gao*2026 · 2 citations*
40. **[Modeling LLM Unlearning as an Asymmetric Two-Task Learning Problem](https://md.research.elamur.ai/free/en/papers/xiao-2026-modeling-llm-unlearning-as-asymmetric/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zeguan Xiao, Siqing Li, Yong Wang, et al.*2026 · 2 citations*
41. **[Persona Jailbreaking in Large Language Models](https://md.research.elamur.ai/free/en/papers/sandhan-2026-persona-jailbreaking-large-language-models/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jivnesh Sandhan, Fei Cheng, Tushar Sandhan, et al.*2026 · 2 citations*
42. **[Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts](https://md.research.elamur.ai/free/en/papers/ziakas-2026-red-bandit-test-time-adaptation/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Christos Ziakas, Nicholas Loo, Nishita Jain, et al.*2026 · 2 citations*
43. **[SHAPE: Unifying Safety, Helpfulness and Pedagogy for Educational LLMs](https://md.research.elamur.ai/free/en/papers/zhao-2026-shape-unifying-safety-helpfulness-pedagogy/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Sihang Zhao, Kangrui Yu, Youliang Yuan, et al.*2026 · 2 citations*
44. [**STEP3-VL-10B Technical Report arXiv:2601.09668**Ailin Huang, Chengyuan Yao, Chunrui Han, et al.*2026 · 2 citations*](https://md.research.elamur.ai/free/en/papers/huang-2026-step3-vl-10b-technical/)
45. **[When Seeing Overrides Knowing: Disentangling Knowledge Conflicts in Vision-Language Models](https://md.research.elamur.ai/free/en/papers/ortu-2026-when-seeing-overrides-knowing-disentangling/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Francesco Ortu, Zhijing Jin, Diego Doimo, et al.*2026 · 2 citations*
46. **[Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning](https://md.research.elamur.ai/free/en/papers/pu-2026-beyond-surface-level-detection-cognitive/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Pu, Chaozhuo Li, Rui Ha, et al.*2026 · 1 citation*
47. **[BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage](https://md.research.elamur.ai/free/en/papers/nakka-2026-bitbypass-new-direction-jailbreaking-aligned/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Kalyan Nakka, Nitesh Saxena*2026 · 1 citation*
48. **[From Attack Surfaces to Actual Operations: A Survey of Modern LLM Jailbreaks](https://md.research.elamur.ai/free/en/papers/zhou-2026-attack-surfaces-actual-operations-survey/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ruikang Zhou, Changsheng Sun, Mark Huasong Meng*2026 · 1 citation*
49. **[LCO: LLM-based Constraint Optimization for Safer Agentic LLMs in Real-world Tasks](https://md.research.elamur.ai/free/en/papers/wan-2026-lco-llm-based-constraint-optimization/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jiayong Wan, Jiawei Chen, Zhaoxia Yin, et al.*2026*
50. **[Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models](https://md.research.elamur.ai/free/en/papers/nihal-2026-pattern-enhanced-multi-turn-jailbreaking/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ragib Amin Nihal, Rui Wen, Kazuhiro Nakadai, et al.*2026*
51. **[SafetyMem: Adaptive Jailbreak Defense via Dual-Component Safety Memory](https://md.research.elamur.ai/free/en/papers/wang-2026-safetymem-adaptive-jailbreak-defense-dual/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Hao Wang, Ziyi Ni, Huacan Wang, et al.*2026*
52. **[TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense](https://md.research.elamur.ai/free/en/papers/liu-2026-trajguard-streaming-hidden-state-trajectory/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Cheng Liu, Xiaolei Liu, Xingyu Li, et al.*2026*
53. **[When Efficiency Meets Safety: A Benchmark Security Analysis of KV Cache Compression in Large Language Models](https://md.research.elamur.ai/free/en/papers/ma-2026-when-efficiency-meets-safety-benchmark/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiaoxiao Ma, Kuofeng Gao, Zeyi Lu, et al.*2026*
54. **[Jailbreak Attack for Large Language Models: A Survey (面向大语言模型的越狱攻击综述)](https://md.research.elamur.ai/free/en/papers/li-2024-jailbreak-attack-large/) [Journal of Computer Research and Development](https://md.research.elamur.ai/free/en/venues/journal-of-computer-research-and-development/)**Nan Li (李南), Yidong Ding (丁益东), Haoyu Jiang (江浩宇), et al.*2024*

114 more citing papers of our library have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/authors/pinjia-he/) — Pinjia He