---
title: "Who cites Automatically Auditing Large — 73 citing papers"
description: "73 papers of the Elamur Research library cite «Automatically Auditing Large Language Models via Discrete Optimization», found in their…"
canonical: "https://research.elamur.ai/free/en/papers/jones-2023-automatically-auditing-large-language-models/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/jones-2023-automatically-auditing-large-language-models/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [Automatically Auditing Large Language Models via…](https://md.research.elamur.ai/free/en/papers/jones-2023-automatically-auditing-large-language-models/) / cited by

# Who cites «Automatically Auditing Large Language Models via Discrete Optimization»

73 papers of our library cite it (of the 149,439 whose bibliographies we read) · 34 with a page here, the most cited first · [← back to «Automatically Auditing Large Language Models via Discrete Optimization»](https://md.research.elamur.ai/free/en/papers/jones-2023-automatically-auditing-large-language-models/)

1. [**Universal and Transferable Adversarial Attacks on Aligned Language Models arXiv:2307.15043**Andy Zou, Zifan Wang, Nicholas Carlini, et al.*2023 · 1,005 citations*](https://md.research.elamur.ai/free/en/papers/zou-2023-universal-transferable-adversarial-attacks-aligned/)
2. **[Jailbroken: How Does LLM Safety Training Fail?](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbroken-llm-safety-training-fail/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Alexander Wei, Nika Haghtalab, Jacob Steinhardt*2023 · 688 citations*
3. [**Jailbreaking Black Box Large Language Models in Twenty Queries arXiv:2310.08419**Patrick Chao, Alexander Robey, Edgar Dobriban, et al.*2023 · 553 citations*](https://md.research.elamur.ai/free/en/papers/chao-2023-jailbreaking-black-box-large-language/)
4. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
5. **[Tree of Attacks: Jailbreaking Black-Box LLMs Automatically](https://md.research.elamur.ai/free/en/papers/mehrotra-2023-tree-attacks-jailbreaking-black-box/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.*2023 · 251 citations*
6. **[Visual Adversarial Examples Jailbreak Aligned Large Language Models](https://md.research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/) [Proceedings of the AAAI Conference on Artificial Intelligence](https://md.research.elamur.ai/free/en/venues/proceedings-of-the-aaai-conference-on-artificial-intelligence/)**Xiangyu Qi, Kaixuan Huang, Ashwinee Panda, et al.*2023 · 240 citations*
7. **[How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs](https://md.research.elamur.ai/free/en/papers/zeng-2024-how-johnny-can-persuade-llms/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yi Zeng, Hongpeng Lin, Jingwen Zhang, et al.*2024 · 202 citations*
8. [**Low-Resource Languages Jailbreak GPT-4 arXiv:2310.02446**Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach*2023 · 183 citations*](https://md.research.elamur.ai/free/en/papers/yong-2023-low-resource-languages-jailbreak-gpt/)
9. [**AI Alignment: A Comprehensive Survey arXiv:2310.19852**Jiaming Ji, Tianyi Qiu, Boyuan Chen, et al.*2023 · 173 citations*](https://md.research.elamur.ai/free/en/papers/ji-2023-ai-alignment-comprehensive-survey/)
10. [**Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation arXiv:2310.06987**Yangsibo Huang, Samyak Gupta, Mengzhou Xia, et al.*2023 · 169 citations*](https://md.research.elamur.ai/free/en/papers/huang-2023-catastrophic-jailbreak-open-source-llms/)
11. [**GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher arXiv:2308.06463**Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.*2023 · 168 citations*](https://md.research.elamur.ai/free/en/papers/yuan-2023-gpt-4-too-smart-safe/)
12. **[Are aligned neural networks adversarially aligned?](https://md.research.elamur.ai/free/en/papers/carlini-2023-aligned-neural-networks-adversarially-aligned/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Nicholas Carlini, Milad Nasr, Christopher A. Choquette-Choo, et al.*2023 · 157 citations*
13. [**Detecting Language Model Attacks with Perplexity arXiv:2308.14132**Gabriel Alon, Michael Kamfonas*2023 · 141 citations*](https://md.research.elamur.ai/free/en/papers/alon-2023-detecting-language-model-attacks-perplexity/)
14. **[SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding](https://md.research.elamur.ai/free/en/papers/xu-2024-safedecoding-defending-against-jailbreak-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 127 citations*
15. [**The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning arXiv:2403.03218**Nathaniel Li, Alexander Pan, Anjali Gopal, et al.*2024 · 127 citations*](https://md.research.elamur.ai/free/en/papers/li-2024-wmdp-benchmark-measuring-reducing-malicious/)
16. [**Large Language Model Alignment: A Survey arXiv:2309.15025**Tianhao Shen, Renren Jin, Yufei Huang, et al.*2023 · 124 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-large-language-model-alignment-survey/)
17. [**Model evaluation for extreme risks arXiv:2305.15324**Toby Shevlane, Sebastian Farquhar, Ben Garfinkel, et al.*2023 · 104 citations*](https://md.research.elamur.ai/free/en/papers/shevlane-2023-model-evaluation-extreme-risks/)
18. [**AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models arXiv:2310.15140**Sicheng Zhu, Ruiyi Zhang, Bang An, et al.*2023 · 90 citations*](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/)
19. [**Foundational Challenges in Assuring Alignment and Safety of Large Language Models arXiv:2404.09932**Usman Anwar, Abulhair Saparov, Javier Rando, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/anwar-2024-foundational-challenges-assuring-alignment-safety/)
20. [**ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs arXiv:2402.11753**Fengqing Jiang, Zhangchen Xu, Luyao Niu, et al.*2024 · 83 citations*](https://md.research.elamur.ai/free/en/papers/jiang-2024-artprompt-ascii-art-based-jailbreak/)
21. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
22. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
23. [**Explore, Establish, Exploit: Red Teaming Language Models from Scratch arXiv:2306.09442**Stephen Casper, Jason Lin, Joe Kwon, et al.*2023 · 52 citations*](https://md.research.elamur.ai/free/en/papers/casper-2023-explore-establish-exploit-red-teaming/)
24. [**When "Competency" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex Ciphers arXiv:2402.10601**Divij Handa, Zehua Zhang, Amir Saeidi, et al.*2024 · 15 citations*](https://md.research.elamur.ai/free/en/papers/handa-2024-competency-reasoning-opens-door-vulnerability/)
25. **[AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender](https://md.research.elamur.ai/free/en/papers/zhao-2025-adasteer-your-aligned-llm-is/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.*2025 · 11 citations*
26. **[Automated Progressive Red Teaming](https://md.research.elamur.ai/free/en/papers/jiang-2025-automated-progressive-red-teaming/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Bojian Jiang, Yi Jing, Tong Wu, et al.*2025 · 10 citations*
27. [**Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment arXiv:2501.13080**Melissa Kazemi Rad, Huy Nghiem, Andy Luo, et al.*2025 · 9 citations*](https://md.research.elamur.ai/free/en/papers/rad-2025-refining-input-guardrails-enhancing-llm/)
28. **[Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts](https://md.research.elamur.ai/free/en/papers/ziakas-2026-red-bandit-test-time-adaptation/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Christos Ziakas, Nicholas Loo, Nishita Jain, et al.*2026 · 2 citations*
29. **[Breaking the Code: Security Assessment of AI Code Agents Through Systematic Jailbreaking Attacks](https://md.research.elamur.ai/free/en/papers/saha-2026-breaking-code-security-assessment-ai/) [Transactions of the Association for Computational Linguistics (TACL)](https://md.research.elamur.ai/free/en/venues/tacl/)**Shoumik Saha, Jifan Chen, Sam Mayers, et al.*2026*
30. **[Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment](https://md.research.elamur.ai/free/en/papers/xue-2026-deactivating-refusal-triggers-understanding-mitigating/) [Workshop on Trustworthy NLP](https://md.research.elamur.ai/free/en/venues/trustnlp/)**Zhiyu Xue, Zimo Qi, Guangliang Liu, et al.*2026*
31. **[Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection](https://md.research.elamur.ai/free/en/papers/shao-2026-leave-my-images-alone-preventing/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zedian Shao, Hongbin Liu, Yuepeng Hu, et al.*2026*
32. **[Probing the Plasticity and Correlation of LLM Value Systems: LLM Value Rankings are Not Stable](https://md.research.elamur.ai/free/en/papers/tang-2026-probing-plasticity-correlation-llm-value/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhenheng Tang, Qihua Pan, Jingya Shen, et al.*2026*
33. **[RST-Guarder: Enhancing Long-Context Robustness for Safeguards via RST Parsing and Probabilistic Inference](https://md.research.elamur.ai/free/en/papers/zhang-2026-rst-guarder-enhancing-long-context/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xu Zhang, Xiaojun Wan*2026*
34. **[SPARTA: Evaluating Reasoning Segmentation Robustness through Black-Box Adversarial Paraphrasing in Text Autoencoder Latent Space](https://md.research.elamur.ai/free/en/papers/zinkovich-2026-sparta-evaluating-reasoning-segmentation-robustness/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Viktoriia Zinkovich, Anton Antonov, Andrei Spiridonov, et al.*2026*

39 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/jones-2023-automatically-auditing-large-language-models/) — Automatically Auditing Large Language Models via Discrete Optimization