---
title: "Who cites Jailbreaking Leading — 109 citing papers"
description: "109 papers of the Elamur Research library cite «Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks», found in their…"
canonical: "https://research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [Jailbreaking Leading Safety-Aligned LLMs with…](https://md.research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/) / cited by

# Who cites «Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks»

109 papers of our library cite it (of the 149,439 whose bibliographies we read) · 25 with a page here, the most cited first · [← back to «Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks»](https://md.research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/)

1. [**Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context arXiv:2403.05530**Gemini Team, Petko Georgiev, Ving Ian Lei, et al.*2024 · 1,589 citations*](https://md.research.elamur.ai/free/en/papers/gemini-team-2024-gemini-1-5-unlocking-multimodal/)
2. **[JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/chao-2024-jailbreakbench-open-robustness-benchmark-jailbreaking/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.*2024 · 277 citations*
3. **[Tree of Attacks: Jailbreaking Black-Box LLMs Automatically](https://md.research.elamur.ai/free/en/papers/mehrotra-2023-tree-attacks-jailbreaking-black-box/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.*2023 · 251 citations*
4. [**Refusal in Language Models Is Mediated by a Single Direction arXiv:2406.11717**Andy Arditi, Oscar Obeso, Aaquib Syed, et al.*2024 · 196 citations*](https://md.research.elamur.ai/free/en/papers/arditi-2024-refusal-language-models-mediated-single/)
5. [**SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks arXiv:2310.03684**Alexander Robey, Eric Wong, Hamed Hassani, et al.*2023 · 164 citations*](https://md.research.elamur.ai/free/en/papers/robey-2023-smoothllm-defending-large-language-models/)
6. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
7. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
8. [**Deliberative Alignment: Reasoning Enables Safer Language Models arXiv:2412.16339**Melody Y. Guan, Manas Joglekar, Eric Wallace, et al.*2024 · 115 citations*](https://md.research.elamur.ai/free/en/papers/guan-2024-deliberative-alignment-reasoning-enables-safer/)
9. [**Jailbreak Attacks and Defenses Against Large Language Models: A Survey arXiv:2407.04295**Sibo Yi, Yule Liu, Zhen Sun, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/yi-2024-jailbreak-attacks-defenses-against-large/)
10. [**Safety Alignment Should Be Made More Than Just a Few Tokens Deep arXiv:2406.05946**Xiangyu Qi, Ashwinee Panda, Kaifeng Lyu, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/qi-2024-safety-alignment-should-made-more/)
11. [**SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal arXiv:2406.14598**Tinghao Xie, Xiangyu Qi, Yi Zeng, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/xie-2024-sorry-bench-systematically-evaluating-large/)
12. **[Improving Alignment and Robustness with Circuit Breakers](https://md.research.elamur.ai/free/en/papers/zou-2024-improving-alignment-robustness-circuit-breakers/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Andy Zou, Long Phan, Justin Wang, et al.*2024 · 83 citations*
13. [**Introducing v0.5 of the AI Safety Benchmark from MLCommons arXiv:2404.12241**Bertie Vidgen, Adarsh Agrawal, Ahmed M. Ahmed, et al.*2024 · 38 citations*](https://md.research.elamur.ai/free/en/papers/vidgen-2024-introducing-v0-5-ai-safety/)
14. **[Understanding Jailbreak Success: A Study of Latent Space Dynamics in Large Language Models](https://md.research.elamur.ai/free/en/papers/ball-2026-understanding-jailbreak-success-study-latent/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Sarah Ball, Frauke Kreuter, Nina Panickssery*2026 · 17 citations*
15. **[SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning](https://md.research.elamur.ai/free/en/papers/zhou-2025-safekey-amplifying-aha-moment-insights/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Kaiwen Zhou, Xuandong Zhao, Jayanth Srinivasa, et al.*2025 · 9 citations*
16. **[FanarGuard: A Culturally-Aware Moderation Filter for Arabic Language Models](https://md.research.elamur.ai/free/en/papers/fatehkia-2026-fanarguard-culturally-aware-moderation-filter/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Masoomali Fatehkia, Enes Altinisik, Husrev Taha Sencar*2026 · 5 citations*
17. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuan Xin, Dingfan Chen, Linyi Yang, et al.*2026 · 3 citations*
18. **[Universal Jailbreak Suffixes Are Strong Attention Hijackers](https://md.research.elamur.ai/free/en/papers/tov-2026-universal-jailbreak-suffixes-are-strong/) [Transactions of the Association for Computational Linguistics (TACL)](https://md.research.elamur.ai/free/en/venues/tacl/)**Matan Ben-Tov, Mor Geva, Mahmood Sharif*2026 · 3 citations*
19. **[Unraveling LLM Jailbreaks Through Safety Knowledge Neurons](https://md.research.elamur.ai/free/en/papers/zhao-2026-unraveling-llm-jailbreaks-through-safety/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Chongwen Zhao, Yutong Ke, Kaizhu Huang*2026 · 3 citations*
20. **[In-Context Representation Hijacking](https://md.research.elamur.ai/free/en/papers/yona-2026-context-representation-hijacking/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Itay Yona, Amir Sarid, Michael Karasik, et al.*2026 · 2 citations*
21. **[Adversarial Decoding: Generating Readable Documents for Adversarial Objectives](https://md.research.elamur.ai/free/en/papers/zhang-2026-adversarial-decoding-generating-readable-documents/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Collin Zhang, Tingwei Zhang, Vitaly Shmatikov*2026 · 1 citation*
22. **[Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay](https://md.research.elamur.ai/free/en/papers/wang-2026-be-your-own-red-teamer/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Hao Wang, Yanting Wang, Hao Li, et al.*2026 · 1 citation*
23. **[Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning](https://md.research.elamur.ai/free/en/papers/pu-2026-beyond-surface-level-detection-cognitive/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Pu, Chaozhuo Li, Rui Ha, et al.*2026 · 1 citation*
24. **[From Attack Surfaces to Actual Operations: A Survey of Modern LLM Jailbreaks](https://md.research.elamur.ai/free/en/papers/zhou-2026-attack-surfaces-actual-operations-survey/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ruikang Zhou, Changsheng Sun, Mark Huasong Meng*2026 · 1 citation*
25. **[MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models](https://md.research.elamur.ai/free/en/papers/makwana-2026-mlingualfc-evaluating-jailbreak-vulnerabilities-multilingual/) [Workshop on Multilinguality in the Era of Large Language Models](https://md.research.elamur.ai/free/en/venues/mellm/)**Rishabh Makwana, Mamta Mamta, Deeksha Varshney, et al.*2026*

84 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/) — Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks