--- title: "Xiaogeng Liu — author profile and papers — Elamur Research" description: "Xiaogeng Liu, University of Wisconsin–Madison: 3 papers on Elamur Research (2023–2025), h-index 10 — affiliations, topics, co-authors and…" canonical: "https://research.elamur.ai/free/en/authors/xiaogeng-liu/" --- [Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/xiaogeng-liu/) [home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / Xiaogeng Liu # Xiaogeng Liu Xiaogeng Liu has 3 papers in our library, in 2023–2025, most of them on [Bias, fairness & safety](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/), [Language models & pretraining](https://md.research.elamur.ai/free/en/topics/language-models/); often with [Chaowei Xiao](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/), [Muhao Chen](https://md.research.elamur.ai/free/en/authors/muhao-chen/), [Hao Li](https://md.research.elamur.ai/free/en/authors/hao-li/). 3 papers in our library · 2023–2025 [OpenAlex](https://openalex.org/A5063002956) · [ORCID](https://orcid.org/0009-0008-7677-2310) · [**h-index 10**](https://openalex.org/authors/A5063002956) · [43 works](https://openalex.org/works?filter=author.id:A5063002956) · [385 citations](https://openalex.org/works?filter=author.id:A5063002956&sort=cited_by_count:desc) OpenAlex, 2026-10-14 [📄 3 works in our library](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/#papers) · [🔗 Cited 446 times in our library](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/cited-by/) · [2 more in our library without a page yet](#also) · [⭐ Paper Stars ranking: #4435](https://md.research.elamur.ai/free/en/paper-stars/page/45/#star-4435) The profile is the library's match of the name; two people with one name are not always told apart. Elsewhere: [Google Scholar](https://scholar.google.com/citations?view_op=search_authors&mauthors=Xiaogeng+Liu) · [Semantic Scholar](https://www.semanticscholar.org/search?q=Xiaogeng+Liu) · [dblp](https://dblp.org/search?q=Xiaogeng+Liu) · [ACL Anthology](https://aclanthology.org/search/?q=Xiaogeng+Liu) ## Affiliations [🎓**University of Wisconsin–Madison** Madison · United States 2023–2025 · 5 papers*current*](https://md.research.elamur.ai/free/en/universities/university-of-wisconsin-madison/) · [🎓**Johns Hopkins University** Baltimore · United States 2025 · 1 paperEmployment*current*](https://md.research.elamur.ai/free/en/universities/johns-hopkins-university/) · [🎓**Nanjing University of Finance and Economics** Nanjing · China 2006–2021 · 10 papers](https://ror.org/031y8am81) · [🎓**Huazhong University of Science and Technology** Wuhan · China 2021–2023 · 5 papers](https://md.research.elamur.ai/free/en/universities/huazhong-university-of-science-and-technology/) · [🎓**South China Agricultural University** Guangzhou · China 2019–2020 · 3 papers](https://ror.org/05v9jqt67) From the bylines of their papers (OpenAlex, 2026-10-14), ORCID and Wikidata; institutions on papers are matched by machine. 1 more institution on single bylines are not listed. ## Fields, topics and concepts Of its works in our library, with the number of works on each. 📚 Shelves 6 The field of science this work belongs to (OpenAlex fields).[Artificial Intelligence · 3 works](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · [Arts and Humanities · 3 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/) · [Computer Science · 3 works](https://md.research.elamur.ai/free/en/shelves/computer-science/) · [Language and Linguistics · 3 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/language-and-linguistics/) · [Safety Research · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/safety-research/) · [Social Sciences · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/) 🧭 Topics 2 Research subjects and languages the work is about.[Bias, fairness & safety · 2 works](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/) · [Language models & pretraining · 1 work](https://md.research.elamur.ai/free/en/topics/language-models/) ## Works by year ### 2020s [**2025** 2 papers](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/year/2025/) · [**2023** 1 paper](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/year/2023/) ## Papers The most cited first (OpenAlex and our library). 1. **[AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/)** *(2023 · 350 citations)* Jailbreak attacks push safety-aligned LLMs into answering requests they should refuse. Earlier approaches fall into two camps. Hand-written prompts, such as the "Do-Anything-Now (DAN)" family, scale poorly and lose effectiveness as models are updated. Gradient-guided token search, such as GCG, produces gibberish… 2. **[AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection](https://md.research.elamur.ai/free/en/papers/luo-2025-agrail-lifelong-agent-guardrail-effective/)** *(2025 · 20 citations)* LLM-based agents that run shell commands, browse websites or query databases can cause harm in two ways. Task-specific risks break rules that an administrator sets for a given job, such as access restrictions on medical records. Systemic risks threaten confidentiality, integrity or availability, for example through… 3. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/)** *(2025 · 16 citations)* Lightweight prompt guard classifiers screen LLM inputs for prompt injection, but they often learn a shortcut. ## All works 5 works of theirs in our library, the most cited first; 3 with a page here, the others link their original until we summarise them. 1. [**AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models arXiv:2310.04451**Xiaogeng Liu, Nan Xu, Muhao Chen, et al.*2023 · 350 citations*](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/) 2. **[JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks ↗](https://arxiv.org/abs/2404.03027) arXiv:2404.03027 · no summary yet**Weidi Luo et al.*2024 · 66 citations* 3. **[MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding ↗](https://arxiv.org/abs/2406.09411) arXiv (Cornell University) · no summary yet**Fei Wang et al.*2024 · 48 citations* 4. **[AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection](https://md.research.elamur.ai/free/en/papers/luo-2025-agrail-lifelong-agent-guardrail-effective/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Weidi Luo, Shenghong Dai, Xiaogeng Liu, et al.*2025 · 20 citations* 5. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Hao Li, Xiaogeng Liu, Ning Zhang, et al.*2025 · 16 citations* ## Co-authors here 8 co-authors with a page, the most papers together first. - [Chaowei Xiao](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/) ×3 - [Muhao Chen](https://md.research.elamur.ai/free/en/authors/muhao-chen/) ×2 - [Hao Li](https://md.research.elamur.ai/free/en/authors/hao-li/) - [Huan Sun](https://md.research.elamur.ai/free/en/authors/huan-sun/) - [Nan Xu](https://md.research.elamur.ai/free/en/authors/nan-xu/) - [Ning Zhang](https://md.research.elamur.ai/free/en/authors/ning-zhang/) - [Suman Banerjee](https://md.research.elamur.ai/free/en/authors/suman-banerjee/) - [Weidi Luo](https://md.research.elamur.ai/free/en/authors/weidi-luo/) ## Venues Where their works here were published, the most works first, with the editions of those that have a page. - [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/) ×2: [ACL 2025](https://md.research.elamur.ai/free/en/venues/acl/2025/) ×2 ## Cited by Papers of our library cite their works 446 times (of the 149,439 papers whose bibliographies we read); [113 citing papers with a page here →](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/cited-by/). Updated 30 October 2026