---
title: "Who cites Are aligned neural networks adversarially aligned?"
description: "105 papers of the Elamur Research library cite «Are aligned neural networks adversarially aligned?», found in their bibliographies; the most…"
canonical: "https://research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [Are aligned neural networks adversarially aligned?](https://md.research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/) / cited by

# Who cites «Are aligned neural networks adversarially aligned?»

105 papers of our library cite it (of the 149,439 whose bibliographies we read) · 47 with a page here, the most cited first · [← back to «Are aligned neural networks adversarially aligned?»](https://md.research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/)

1. **[Improved Baselines with Visual Instruction Tuning](https://md.research.elamur.ai/free/en/papers/liu-2023-improved-baselines-visual-instruction-tuning/) [IEEE Computer Society Conference on Computer Vision and Pattern Recognition](https://md.research.elamur.ai/free/en/venues/ieee-computer-society-conference-on-computer-vision-and-pattern-recognition/)**Haotian Liu, Chunyuan Li, Yuheng Li, et al.*2023 · 2,614 citations*
2. [**Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context arXiv:2403.05530**Gemini Team, Petko Georgiev, Ving Ian Lei, et al.*2024 · 1,589 citations*](https://md.research.elamur.ai/free/en/papers/gemini-team-2024-gemini-1-5-unlocking-multimodal/)
3. [**Universal and Transferable Adversarial Attacks on Aligned Language Models arXiv:2307.15043**Andy Zou, Zifan Wang, Nicholas Carlini, et al.*2023 · 1,005 citations*](https://md.research.elamur.ai/free/en/papers/zou-2023-universal-transferable-adversarial-attacks-aligned/)
4. **[Explainability for Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/zhao-2023-explainability-large-language-models-survey/) [ACM Transactions on Intelligent Systems and Technology](https://md.research.elamur.ai/free/en/venues/acm-transactions-on-intelligent-systems-and-technology/)**Haiyan Zhao, Hanjie Chen, Fan Yang, et al.*2023 · 790 citations*
5. [**Jailbreaking Black Box Large Language Models in Twenty Queries arXiv:2310.08419**Patrick Chao, Alexander Robey, Edgar Dobriban, et al.*2023 · 553 citations*](https://md.research.elamur.ai/free/en/papers/chao-2023-jailbreaking-black-box-large-language/)
6. [**Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To! arXiv:2310.03693**Xiangyu Qi, Yi Zeng, Tinghao Xie, et al.*2023 · 355 citations*](https://md.research.elamur.ai/free/en/papers/qi-2023-fine-tuning-aligned-language-models/)
7. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
8. [**Challenges and Applications of Large Language Models arXiv:2307.10169**Jean Kaddour, Joshua Harris, Maximilian Mozes, et al.*2023 · 301 citations*](https://md.research.elamur.ai/free/en/papers/kaddour-2023-challenges-applications-large-language-models/)
9. **[JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/chao-2024-jailbreakbench-open-robustness-benchmark-jailbreaking/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.*2024 · 277 citations*
10. **[Visual Adversarial Examples Jailbreak Aligned Large Language Models](https://md.research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/) [Proceedings of the AAAI Conference on Artificial Intelligence](https://md.research.elamur.ai/free/en/venues/proceedings-of-the-aaai-conference-on-artificial-intelligence/)**Xiangyu Qi, Kaixuan Huang, Ashwinee Panda, et al.*2023 · 240 citations*
11. [**Baseline Defenses for Adversarial Attacks Against Aligned Language Models arXiv:2309.00614**Neel Jain, Avi Schwarzschild, Yuxin Wen, et al.*2023 · 236 citations*](https://md.research.elamur.ai/free/en/papers/jain-2023-baseline-defenses-adversarial-attacks-against/)
12. [**Scalable Extraction of Training Data from (Production) Language Models arXiv:2311.17035**Milad Nasr, Nicholas Carlini, Jonathan Hayase, et al.*2023 · 211 citations*](https://md.research.elamur.ai/free/en/papers/nasr-2023-scalable-extraction-training-data-production/)
13. **[How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs](https://md.research.elamur.ai/free/en/papers/zeng-2024-how-johnny-can-persuade-llms/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yi Zeng, Hongpeng Lin, Jingwen Zhang, et al.*2024 · 202 citations*
14. [**Low-Resource Languages Jailbreak GPT-4 arXiv:2310.02446**Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach*2023 · 183 citations*](https://md.research.elamur.ai/free/en/papers/yong-2023-low-resource-languages-jailbreak-gpt/)
15. [**Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation arXiv:2310.06987**Yangsibo Huang, Samyak Gupta, Mengzhou Xia, et al.*2023 · 169 citations*](https://md.research.elamur.ai/free/en/papers/huang-2023-catastrophic-jailbreak-open-source-llms/)
16. **[WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs](https://md.research.elamur.ai/free/en/papers/han-2024-wildguard-open-one-stop-moderation/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Seungju Han, Kavel Rao, Allyson Ettinger, et al.*2024 · 165 citations*
17. [**SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks arXiv:2310.03684**Alexander Robey, Eric Wong, Hamed Hassani, et al.*2023 · 164 citations*](https://md.research.elamur.ai/free/en/papers/robey-2023-smoothllm-defending-large-language-models/)
18. **[FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts](https://md.research.elamur.ai/free/en/papers/gong-2023-figstep-jailbreaking-large-vision-language/) [Proceedings of the AAAI Conference on Artificial Intelligence](https://md.research.elamur.ai/free/en/venues/proceedings-of-the-aaai-conference-on-artificial-intelligence/)**Yichen Gong, Delong Ran, Jinyuan Liu, et al.*2023 · 163 citations*
19. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
20. [**Large Language Model Alignment: A Survey arXiv:2309.15025**Tianhao Shen, Renren Jin, Yufei Huang, et al.*2023 · 124 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-large-language-model-alignment-survey/)
21. [**Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training arXiv:2401.05566**Evan Hubinger, Carson Denison, Jesse Mu, et al.*2024 · 123 citations*](https://md.research.elamur.ai/free/en/papers/hubinger-2024-sleeper-agents-training-deceptive-llms/)
22. [**LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked arXiv:2308.07308**Mansi Phute, Alec Helbling, Matthew Hull, et al.*2023 · 119 citations*](https://md.research.elamur.ai/free/en/papers/phute-2023-llm-self-defense-self-examination/)
23. [**Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models arXiv:2310.02949**Xianjun Yang, Xiao Wang, Qi Zhang, et al.*2023 · 103 citations*](https://md.research.elamur.ai/free/en/papers/yang-2023-shadow-alignment-ease-subverting-safely/)
24. [**Safety Alignment Should Be Made More Than Just a Few Tokens Deep arXiv:2406.05946**Xiangyu Qi, Ashwinee Panda, Kaifeng Lyu, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/qi-2024-safety-alignment-should-made-more/)
25. **[WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models](https://md.research.elamur.ai/free/en/papers/jiang-2024-wildteaming-scale-wild-jailbreaks-adversarially/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Liwei Jiang, Kavel Rao, Seungju Han, et al.*2024 · 92 citations*
26. [**AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models arXiv:2310.15140**Sicheng Zhu, Ruiyi Zhang, Bang An, et al.*2023 · 90 citations*](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/)
27. [**Foundational Challenges in Assuring Alignment and Safety of Large Language Models arXiv:2404.09932**Usman Anwar, Abulhair Saparov, Javier Rando, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/anwar-2024-foundational-challenges-assuring-alignment-safety/)
28. **[Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment](https://md.research.elamur.ai/free/en/papers/raina-2024-is-llm-as-judge-robust/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Vyas Raina, Adian Liusie, Mark Gales*2024 · 86 citations*
29. **[Improving Alignment and Robustness with Circuit Breakers](https://md.research.elamur.ai/free/en/papers/zou-2024-improving-alignment-robustness-circuit-breakers/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Andy Zou, Long Phan, Justin Wang, et al.*2024 · 83 citations*
30. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
31. [**Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models arXiv:2307.14539**Erfan Shayegani, Yue Dong, Nael Abu-Ghazaleh*2023 · 81 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-jailbreak-pieces-compositional-adversarial-attacks/)
32. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
33. [**A Mechanistic Understanding of Alignment Algorithms: A Case Study on DPO and Toxicity arXiv:2401.01967**Andrew Lee, Xiaoyan Bai, Itamar Pres, et al.*2024 · 64 citations*](https://md.research.elamur.ai/free/en/papers/lee-2024-mechanistic-understanding-alignment-algorithms-case/)
34. **[Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmetic](https://md.research.elamur.ai/free/en/papers/bhardwaj-2024-language-models-are-homer-simpson/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rishabh Bhardwaj, Duc Anh Do, Soujanya Poria*2024 · 59 citations*
35. **[The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm](https://md.research.elamur.ai/free/en/papers/aakanksha-2024-multilingual-alignment-prism-aligning-global/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Aakanksha, Arash Ahmadian, Beyza Ermis, et al.*2024 · 49 citations*
36. [**Understanding Catastrophic Forgetting in Language Models via Implicit Inference arXiv:2309.10105**Suhas Kotha, Jacob Mitchell Springer, Aditi Raghunathan*2023 · 45 citations*](https://md.research.elamur.ai/free/en/papers/kotha-2023-understanding-catastrophic-forgetting-language-models/)
37. [**Language Model Alignment in Multilingual Trolley Problems arXiv:2407.02273**Zhijing Jin, Max Kleiman-Weiner, Giorgio Piatti, et al.*2024 · 23 citations*](https://md.research.elamur.ai/free/en/papers/jin-2024-language-model-alignment-multilingual-trolley/)
38. **[LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts](https://md.research.elamur.ai/free/en/papers/ren-2025-llms-know-their-vulnerabilities-uncover/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qibing Ren, Hao Li, Dongrui Liu, et al.*2025 · 18 citations*
39. **[Jailbreaking LLMs with Arabic Transliteration and Arabizi](https://md.research.elamur.ai/free/en/papers/ghanim-2024-jailbreaking-llms-arabic-transliteration-arabizi/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Mansour Al Ghanim, Saleh Almohaimeed, Mengxin Zheng, et al.*2024 · 16 citations*
40. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
41. **[AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhao-2025-adasteer-your-aligned-llm-is/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.*2025 · 11 citations*
42. **[HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router](https://md.research.elamur.ai/free/en/papers/mei-2026-hiddenguard-fine-grained-safe-generation/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Lingrui Mei, Shenghua Liu, Yiwei Wang, et al.*2026 · 4 citations*
43. **[Do Images Speak Louder than Words? Investigating the Effect of Textual Misinformation in VLMs](https://md.research.elamur.ai/free/en/papers/zhang-2026-do-images-speak-louder-than/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Chi Zhang, Wenxuan Ding, Jiale Liu, et al.*2026 · 2 citations*
44. **[CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks](https://md.research.elamur.ai/free/en/papers/zhang-2026-crossguard-safeguarding-mllms-against-joint/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xu Zhang, Hao Li, Zhichao Lu*2026*
45. **[ECHA: Jailbreaking LVLMs via the Mismatch between Implicit Semantic Reconstruction and Explicit Safety Alignment](https://md.research.elamur.ai/free/en/papers/xu-2026-echa-jailbreaking-lvlms-mismatch-between/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Chenxing Xu, Junyong Jiang, Zehu Zhang, et al.*2026*
46. **[Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection](https://md.research.elamur.ai/free/en/papers/shao-2026-leave-my-images-alone-preventing/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zedian Shao, Hongbin Liu, Yuepeng Hu, et al.*2026*
47. **[MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models](https://md.research.elamur.ai/free/en/papers/makwana-2026-mlingualfc-evaluating-jailbreak-vulnerabilities-multilingual/) [Workshop on Multilinguality in the Era of Large Language Models](https://md.research.elamur.ai/free/en/venues/mellm/)**Rishabh Makwana, Mamta Mamta, Deeksha Varshney, et al.*2026*

58 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/) — Are aligned neural networks adversarially aligned?