---
title: "Who cites How Johnny Can Persuade LLMs — 90 citing papers"
description: "90 papers of the Elamur Research library cite «How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI…"
canonical: "https://research.elamur.ai/free/en/papers/zeng-2024-johnny-persuade-llms-jailbreak-them/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/zeng-2024-johnny-persuade-llms-jailbreak-them/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [How Johnny Can Persuade LLMs to Jailbreak Them…](https://md.research.elamur.ai/free/en/papers/zeng-2024-johnny-persuade-llms-jailbreak-them/) / cited by

# Who cites «How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs»

90 papers of our library cite it (of the 149,439 whose bibliographies we read) · 29 with a page here, the most cited first · [← back to «How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs»](https://md.research.elamur.ai/free/en/papers/zeng-2024-johnny-persuade-llms-jailbreak-them/)

1. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
2. [**"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models arXiv:2308.03825**Xinyue Shen, Zeyuan Chen, Michael Backes, et al.*2023 · 329 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-anything-now-characterizing-evaluating-wild/)
3. **[JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/chao-2024-jailbreakbench-open-robustness-benchmark-jailbreaking/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.*2024 · 277 citations*
4. **[Tree of Attacks: Jailbreaking Black-Box LLMs Automatically](https://md.research.elamur.ai/free/en/papers/mehrotra-2023-tree-attacks-jailbreaking-black-box/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.*2023 · 251 citations*
5. [**GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher arXiv:2308.06463**Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.*2023 · 168 citations*](https://md.research.elamur.ai/free/en/papers/yuan-2023-gpt-4-too-smart-safe/)
6. **[SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding](https://md.research.elamur.ai/free/en/papers/xu-2024-safedecoding-defending-against-jailbreak-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 127 citations*
7. [**Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks arXiv:2404.02151**Maksym Andriushchenko, Francesco Croce, Nicolas Flammarion*2024 · 118 citations*](https://md.research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/)
8. [**Safety Alignment Should Be Made More Than Just a Few Tokens Deep arXiv:2406.05946**Xiangyu Qi, Ashwinee Panda, Kaifeng Lyu, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/qi-2024-safety-alignment-should-made-more/)
9. [**SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal arXiv:2406.14598**Tinghao Xie, Xiangyu Qi, Yi Zeng, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/xie-2024-sorry-bench-systematically-evaluating-large/)
10. [**On Prompt-Driven Safeguarding for Large Language Models arXiv:2401.18018**Chujie Zheng, Fan Yin, Hao Zhou, et al.*2024 · 85 citations*](https://md.research.elamur.ai/free/en/papers/zheng-2024-prompt-driven-safeguarding-large-language/)
11. **[Improving Alignment and Robustness with Circuit Breakers](https://md.research.elamur.ai/free/en/papers/zou-2024-improving-alignment-robustness-circuit-breakers/) [Conference on Neural Information Processing Systems (NeurIPS)](https://md.research.elamur.ai/free/en/venues/neural-information-processing-systems/)**Andy Zou, Long Phan, Justin Wang, et al.*2024 · 83 citations*
12. [**OR-Bench: An Over-Refusal Benchmark for Large Language Models arXiv:2405.20947**Justin Cui, Wei-Lin Chiang, Ion Stoica, et al.*2024 · 76 citations*](https://md.research.elamur.ai/free/en/papers/cui-2024-bench-over-refusal-benchmark-large/)
13. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
14. [**Introducing v0.5 of the AI Safety Benchmark from MLCommons arXiv:2404.12241**Bertie Vidgen, Adarsh Agrawal, Ahmed M. Ahmed, et al.*2024 · 38 citations*](https://md.research.elamur.ai/free/en/papers/vidgen-2024-introducing-v0-5-ai-safety/)
15. **[Attacking Vision-Language Computer Agents via Pop-ups](https://md.research.elamur.ai/free/en/papers/zhang-2025-attacking-vision-language-computer-agents/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yanzhe Zhang, Tao Yu, Diyi Yang*2025 · 32 citations*
16. **[Biased LLMs can Influence Political Decision-Making](https://md.research.elamur.ai/free/en/papers/fisher-2025-biased-llms-can-influence-political/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jillian Fisher, Shangbin Feng, Robert Aron, et al.*2025 · 20 citations*
17. **[LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts](https://md.research.elamur.ai/free/en/papers/ren-2025-llms-know-their-vulnerabilities-uncover/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qibing Ren, Hao Li, Dongrui Liu, et al.*2025 · 18 citations*
18. [**When "Competency" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex Ciphers arXiv:2402.10601**Divij Handa, Zehua Zhang, Amir Saeidi, et al.*2024 · 15 citations*](https://md.research.elamur.ai/free/en/papers/handa-2024-competency-reasoning-opens-door-vulnerability/)
19. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
20. **[Automated Progressive Red Teaming](https://md.research.elamur.ai/free/en/papers/jiang-2025-automated-progressive-red-teaming/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Bojian Jiang, Yi Jing, Tong Wu, et al.*2025 · 10 citations*
21. **[The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/wu-2025-dark-side-function-calling-pathways/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Zihui Wu, Haichang Gao, Jianping He, et al.*2025 · 8 citations*
22. **[HAUNTATTACK: When Attack Follows Reasoning as a Shadow](https://md.research.elamur.ai/free/en/papers/ma-2026-hauntattack-when-attack-follows-reasoning/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jingyuan Ma, Rui Li, Zheng Li, et al.*2026 · 3 citations*
23. **[ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments](https://md.research.elamur.ai/free/en/papers/wang-2026-reasoningguard-safeguarding-large-reasoning-models/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yuquan Wang, Mi Zhang, Yining Wang, et al.*2026 · 1 citation*
24. **[Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language Models](https://md.research.elamur.ai/free/en/papers/zhao-2026-unleashing-unseen-harnessing-benign-datasets/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Wei Zhao, Zhe Li, Yige Li, et al.*2026 · 1 citation*
25. **[DIAG-Sapienza at GSI:detect: Joint Detection and Classification of Gender Stereotypes with Structured Prompting and Fine-Tuning](https://md.research.elamur.ai/free/en/papers/sorokoletova-2026-diag-sapienza-gsi-detect-joint/) [Evaluation Campaign of Natural Language Processing and Speech Tools for Italian. Final Workshop](https://md.research.elamur.ai/free/en/venues/evalita/)**Olga E. Sorokoletova, Emanuele Musumeci, Daniele Nardi*2026*
26. **[More Thinking, Less Talking: Internalizing Deliberative Safety into LLM Parameters](https://md.research.elamur.ai/free/en/papers/wang-2026-more-thinking-less-talking-internalizing/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Guan Wang, Xuehai Tang, Biyu Zhou, et al.*2026*
27. **[Now You Hear Me: Audio Narrative Attacks Against Large Audio–Language Models](https://md.research.elamur.ai/free/en/papers/yu-2026-now-you-hear-me-audio/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Ye Yu, Haibo Jin, Yaoning Yu, et al.*2026*
28. **[Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs](https://md.research.elamur.ai/free/en/papers/si-2026-pruning-unsafe-tickets-resource-efficient/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wai Man Si, Mingjie Li, Michael Backes, et al.*2026*
29. **[Resolving the Security-Auditability Dilemma with Auditable Latent Chain-of-Thought Alignment](https://md.research.elamur.ai/free/en/papers/wang-2026-resolving-security-auditability-dilemma-auditable/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Guan Wang, Biyu Zhou, Xuehai Tang, et al.*2026*

61 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/zeng-2024-johnny-persuade-llms-jailbreak-them/) — How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs