---
title: "Who cites Ying Zhang — 168 papers of our library"
description: "168 papers of the Elamur Research library cite the works of Ying Zhang, found in their bibliographies; the most cited first."
canonical: "https://research.elamur.ai/free/en/authors/ying-zhang/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/ying-zhang/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / [Ying Zhang](https://md.research.elamur.ai/free/en/authors/ying-zhang/) / cited by

# Who cites Ying Zhang

168 citations of their works from 168 papers of our library (of the 141,840 whose bibliographies we read) · 26 with a page here, the most cited first · [← Ying Zhang](https://md.research.elamur.ai/free/en/authors/ying-zhang/)

1. [**Unleashing the potential of prompt engineering for large language models arXiv:2310.14735 · Patterns 6(6) 101,260 (2025)**Banghao Chen, Zhaofeng Zhang, Nicolas Langrene, et al.*2023 · 536 citations*](https://md.research.elamur.ai/free/en/papers/chen-2023-unleashing-potential-prompt-engineering-large/)
2. **[Security and Privacy Challenges of Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/das-2024-security-privacy-challenges-large-language/) [ACM Computing Surveys](https://md.research.elamur.ai/free/en/venues/acm-computing-surveys/)**Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu*2024 · 422 citations*
3. [**AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models arXiv:2310.04451**Xiaogeng Liu, Nan Xu, Muhao Chen, et al.*2023 · 334 citations*](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/)
4. [**Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To! arXiv:2310.03693**Xiangyu Qi, Yi Zeng, Tinghao Xie, et al.*2023 · 331 citations*](https://md.research.elamur.ai/free/en/papers/qi-2023-fine-tuning-aligned-language-models/)
5. [**"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models arXiv:2308.03825**Xinyue Shen, Zeyuan Chen, Michael Backes, et al.*2023 · 320 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-anything-now-characterizing-evaluating-wild/)
6. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 312 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
7. **[Tree of Attacks: Jailbreaking Black-Box LLMs Automatically](https://md.research.elamur.ai/free/en/papers/mehrotra-2023-tree-attacks-jailbreaking-black-box/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.*2023 · 245 citations*
8. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 226 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/)
9. [**Prompt Injection attack against LLM-integrated Applications arXiv:2306.05499**Yi Liu; Gelei Deng; Yuekang Li; Kailong Wang; Zihao Wang; Xiaofeng Wang; Tianwei Zhang; Yepang Liu; Haoyu Wang; Yan Zheng; Leo Yu Zhang;, Yang Liu*2023 · 197 citations*](https://md.research.elamur.ai/free/en/papers/liu-2023-prompt-injection-attack-against-llm/)
10. [**RoleLLM: Benchmarking, Eliciting, and Enhancing Role-Playing Abilities of Large Language Models arXiv:2310.00746**Zekun Moore Wang, Zhongyuan Peng, Haoran Que, et al.*2023 · 186 citations*](https://md.research.elamur.ai/free/en/papers/wang-2023-rolellm-benchmarking-eliciting-enhancing-role/)
11. [**Multilingual Jailbreak Challenges in Large Language Models arXiv:2310.06474**Yue Deng, Wenxuan Zhang, Sinno Jialin Pan, et al.*2023 · 183 citations*](https://md.research.elamur.ai/free/en/papers/deng-2023-multilingual-jailbreak-challenges-large-language/)
12. [**Evaluating Large Language Models: A Comprehensive Survey arXiv:2310.19736**Zishan Guo, Renren Jin, Chuang Liu, et al.*2023 · 178 citations*](https://md.research.elamur.ai/free/en/papers/guo-2023-evaluating-large-language-models-comprehensive/)
13. [**Low-Resource Languages Jailbreak GPT-4 arXiv:2310.02446**Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach*2023 · 168 citations*](https://md.research.elamur.ai/free/en/papers/yong-2023-low-resource-languages-jailbreak-gpt/)
14. [**Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation arXiv:2310.06987**Yangsibo Huang, Samyak Gupta, Mengzhou Xia, et al.*2023 · 162 citations*](https://md.research.elamur.ai/free/en/papers/huang-2023-catastrophic-jailbreak-open-source-llms/)
15. [**GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts arXiv:2309.10253**Jiahao Yu, Xingwei Lin, Zheng Yu, et al.*2023 · 162 citations*](https://md.research.elamur.ai/free/en/papers/yu-2023-gptfuzzer-red-teaming-large-language/)
16. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 138 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
17. **[SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding](https://md.research.elamur.ai/free/en/papers/xu-2024-safedecoding-defending-against-jailbreak-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 126 citations*
18. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 125 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
19. **[SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models](https://md.research.elamur.ai/free/en/papers/li-2024-salad-bench-hierarchical-comprehensive-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Lijun Li, Bowen Dong, Ruohui Wang, et al.*2024 · 114 citations*
20. **[Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization](https://md.research.elamur.ai/free/en/papers/zhang-2024-defending-large-language-models-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhexin Zhang, Junxiao Yang, Pei Ke, et al.*2024 · 112 citations*
21. [**FireAct: Toward Language Agent Fine-tuning arXiv:2310.05915**Baian Chen, Chang Shu, Ehsan Shareghi, et al.*2023 · 96 citations*](https://md.research.elamur.ai/free/en/papers/chen-2023-fireact-toward-language-agent-fine/)
22. **[Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment](https://md.research.elamur.ai/free/en/papers/raina-2024-is-llm-as-judge-robust/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Vyas Raina, Adian Liusie, Mark Gales*2024 · 85 citations*
23. **[Detoxifying Large Language Models via Knowledge Editing](https://md.research.elamur.ai/free/en/papers/wang-2024-detoxifying-large-language-models-knowledge/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Mengru Wang, Ningyu Zhang, Ziwen Xu, et al.*2024 · 84 citations*
24. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
25. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
26. [**HAMSA: Hijacking Aligned Compact Models via Stealthy Automation arXiv:2508.16484**Alexey Krylov, Iskander Vagizov, Dmitrii Korzh, et al.*2025 · 1 citation*](https://md.research.elamur.ai/free/en/papers/krylov-2025-hamsa-hijacking-aligned-compact-models/)

142 more citing papers of our library have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/authors/ying-zhang/) — Ying Zhang