---
title: "Who cites A Wolf in Sheep's Clothing: — 79 citing papers"
description: "79 papers of the Elamur Research library cite «A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language…"
canonical: "https://research.elamur.ai/free/en/papers/ding-2023-wolf-sheep-s-clothing-generalized/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/ding-2023-wolf-sheep-s-clothing-generalized/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [A Wolf in Sheep's Clothing: Generalized Nested…](https://md.research.elamur.ai/free/en/papers/ding-2023-wolf-sheep-s-clothing-generalized/) / cited by

# Who cites «A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily»

79 papers of our library cite it (of the 149,439 whose bibliographies we read) · 24 with a page here, the most cited first · [← back to «A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily»](https://md.research.elamur.ai/free/en/papers/ding-2023-wolf-sheep-s-clothing-generalized/)

1. [**DeepInception: Hypnotize Large Language Model to Be Jailbreaker arXiv:2311.03191**Xuan Li, Zhanke Zhou, Jianing Zhu, et al.*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/li-2023-deepinception-hypnotize-large-language-model/)
2. **[Detoxifying Large Language Models via Knowledge Editing](https://md.research.elamur.ai/free/en/papers/wang-2024-detoxifying-large-language-models-knowledge/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Mengru Wang, Ningyu Zhang, Ziwen Xu, et al.*2024 · 84 citations*
3. **[LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts](https://md.research.elamur.ai/free/en/papers/ren-2025-llms-know-their-vulnerabilities-uncover/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qibing Ren, Hao Li, Dongrui Liu, et al.*2025 · 18 citations*
4. **[Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective](https://md.research.elamur.ai/free/en/papers/li-2025-revisiting-jailbreaking-large-language-models/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.*2025 · 17 citations*
5. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
6. **[AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhao-2025-adasteer-your-aligned-llm-is/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.*2025 · 11 citations*
7. **[Automated Progressive Red Teaming](https://md.research.elamur.ai/free/en/papers/jiang-2025-automated-progressive-red-teaming/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Bojian Jiang, Yi Jing, Tong Wu, et al.*2025 · 10 citations*
8. **[From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction Tuning](https://md.research.elamur.ai/free/en/papers/zhang-2026-completion-editing-unlocking-context-aware/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiajun Zhang, Zeyu Cui, Jiaxi Yang, et al.*2026 · 6 citations*
9. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuan Xin, Dingfan Chen, Linyi Yang, et al.*2026 · 3 citations*
10. **[TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards](https://md.research.elamur.ai/free/en/papers/xiong-2026-trojail-trajectory-level-optimization-multi/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiqiao Xiong, Ouxiang Li, Zhuo Liu, et al.*2026 · 3 citations*
11. **[Activation-Guided Local Editing for Jailbreaking Attacks](https://md.research.elamur.ai/free/en/papers/wang-2026-activation-guided-local-editing-jailbreaking/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiecong Wang, Haoran Li, Hao Peng, et al.*2026 · 1 citation*
12. **[Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning](https://md.research.elamur.ai/free/en/papers/pu-2026-beyond-surface-level-detection-cognitive/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Pu, Chaozhuo Li, Rui Ha, et al.*2026 · 1 citation*
13. **[BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage](https://md.research.elamur.ai/free/en/papers/nakka-2026-bitbypass-new-direction-jailbreaking-aligned/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Kalyan Nakka, Nitesh Saxena*2026 · 1 citation*
14. **[From Attack Surfaces to Actual Operations: A Survey of Modern LLM Jailbreaks](https://md.research.elamur.ai/free/en/papers/zhou-2026-attack-surfaces-actual-operations-survey/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ruikang Zhou, Changsheng Sun, Mark Huasong Meng*2026 · 1 citation*
15. **[Calibrating Inference Time Alignment with Sequence-level Risk Accumulation](https://md.research.elamur.ai/free/en/papers/tan-2026-calibrating-inference-time-alignment-sequence/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Shanwen Tan, Ziyang Dong, Wei Ju, et al.*2026*
16. **[Detecting What Queries Seek: Steering LLM Safety with FFN Output Activation Monitoring](https://md.research.elamur.ai/free/en/papers/luo-2026-detecting-what-queries-seek-steering/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiaohao Luo, Ying Wei, Rui Zhao*2026*
17. **[FineSteer: A Unified Framework for Fine-Grained Inference-Time Steering in Large Language Models](https://md.research.elamur.ai/free/en/papers/weng-2026-finesteer-unified-framework-fine-grained/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zixuan Weng, Jinghuai Zhang, Kunlin Cai, et al.*2026*
18. **[Jailbreaking Large Language Models with Morality Attacks](https://md.research.elamur.ai/free/en/papers/su-2026-jailbreaking-large-language-models-morality/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ying Su, Zheng Mingen, Weili Diao, et al.*2026*
19. **[Probing the Plasticity and Correlation of LLM Value Systems: LLM Value Rankings are Not Stable](https://md.research.elamur.ai/free/en/papers/tang-2026-probing-plasticity-correlation-llm-value/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhenheng Tang, Qihua Pan, Jingya Shen, et al.*2026*
20. **[RAMP: Risk-Aware Multi-Turn Planning for Jailbreak Red-Teaming](https://md.research.elamur.ai/free/en/papers/liu-2026-ramp-risk-aware-multi-turn/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yize Liu, Yunyun Hou, Aina Sui*2026*
21. **[Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models](https://md.research.elamur.ai/free/en/papers/yang-2026-retrieval-augmented-defense-adaptive-controllable/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Guangyu Yang, Jinghong Chen, Jingbiao Mei, et al.*2026*
22. **[Stop Fixating on Prompts: Reasoning Hijacking and Constraint Tightening for Red-Teaming LLM Agents](https://md.research.elamur.ai/free/en/papers/mao-2026-stop-fixating-prompts-reasoning-hijacking/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yanxu Mao, Peipei Liu, Tiehan Cui, et al.*2026*
23. **[Toxic Subword Pruning for Dialogue Response Generation on Large Language Models](https://md.research.elamur.ai/free/en/papers/lu-2026-toxic-subword-pruning-dialogue-response/) [Joint Conference on Lexical and Computational Semantics (*SEM)](https://md.research.elamur.ai/free/en/venues/starsem/)**Hongyuan Adam Lu, Wai Lam*2026*
24. **[When Efficiency Meets Safety: A Benchmark Security Analysis of KV Cache Compression in Large Language Models](https://md.research.elamur.ai/free/en/papers/ma-2026-when-efficiency-meets-safety-benchmark/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiaoxiao Ma, Kuofeng Gao, Zeyi Lu, et al.*2026*

55 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/ding-2023-wolf-sheep-s-clothing-generalized/) — A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily