---
title: "Who cites AutoDAN: Interpretable — 85 citing papers"
description: "85 papers of the Elamur Research library cite «AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models»…"
canonical: "https://research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [AutoDAN: Interpretable Gradient-Based Adversarial…](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/) / cited by

# Who cites «AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models»

85 papers of our library cite it (of the 149,439 whose bibliographies we read) · 25 with a page here, the most cited first · [← back to «AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models»](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/)

1. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
2. **[SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding](https://md.research.elamur.ai/free/en/papers/xu-2024-safedecoding-defending-against-jailbreak-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.*2024 · 127 citations*
3. **[SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models](https://md.research.elamur.ai/free/en/papers/li-2024-salad-bench-hierarchical-comprehensive-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Lijun Li, Bowen Dong, Ruohui Wang, et al.*2024 · 119 citations*
4. [**Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks arXiv:2404.02151**Maksym Andriushchenko, Francesco Croce, Nicolas Flammarion*2024 · 118 citations*](https://md.research.elamur.ai/free/en/papers/andriushchenko-2024-jailbreaking-leading-safety-aligned-llms/)
5. **[Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM](https://md.research.elamur.ai/free/en/papers/cao-2024-defending-against-alignment-breaking-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Bochuan Cao, Yuanpu Cao, Lu Lin, et al.*2024 · 109 citations*
6. [**Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security arXiv:2401.05459**Yuanchun Li, Hao Wen, Weijun Wang, et al.*2024 · 100 citations*](https://md.research.elamur.ai/free/en/papers/li-2024-personal-llm-agents-insights-survey/)
7. **[PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference](https://md.research.elamur.ai/free/en/papers/ji-2025-pku-saferlhf-multi-level-safety/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Jiaming Ji, Donghai Hong, Borong Zhang, et al.*2025 · 83 citations*
8. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
9. **[The Hidden Risks of Large Reasoning Models: A Safety Assessment of R1](https://md.research.elamur.ai/free/en/papers/zhou-2025-hidden-risks-large-reasoning-models/) [International Joint Conference on Natural Language Processing (IJCNLP)](https://md.research.elamur.ai/free/en/venues/ijcnlp/)**Kaiwen Zhou, Chengzhi Liu, Xuandong Zhao, et al.*2025 · 30 citations*
10. **[Defense Against Prompt Injection Attack by Leveraging Attack Techniques](https://md.research.elamur.ai/free/en/papers/chen-2025-defense-against-prompt-injection-attack/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yulin Chen, Haoran Li, Zihao Zheng, et al.*2025 · 24 citations*
11. **[LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts](https://md.research.elamur.ai/free/en/papers/ren-2025-llms-know-their-vulnerabilities-uncover/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qibing Ren, Hao Li, Dongrui Liu, et al.*2025 · 18 citations*
12. **[Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective](https://md.research.elamur.ai/free/en/papers/li-2025-revisiting-jailbreaking-large-language-models/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.*2025 · 17 citations*
13. **[from Benign import Toxic: Jailbreaking the Language Model via Adversarial Metaphors](https://md.research.elamur.ai/free/en/papers/yan-2025-benign-import-toxic-jailbreaking-language/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Yan, Sheng Sun, Zenghao Duan, et al.*2025 · 12 citations*
14. **[Automated Progressive Red Teaming](https://md.research.elamur.ai/free/en/papers/jiang-2025-automated-progressive-red-teaming/) [International Conference on Computational Linguistics (COLING)](https://md.research.elamur.ai/free/en/venues/coling/)**Bojian Jiang, Yi Jing, Tong Wu, et al.*2025 · 10 citations*
15. [**Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment arXiv:2501.13080**Melissa Kazemi Rad, Huy Nghiem, Andy Luo, et al.*2025 · 9 citations*](https://md.research.elamur.ai/free/en/papers/rad-2025-refining-input-guardrails-enhancing-llm/)
16. **[Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization](https://md.research.elamur.ai/free/en/papers/xing-2026-are-llms-reliable-rankers-rank/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Tiancheng Xing, Jerry Li, Yixuan Du, et al.*2026 · 2 citations*
17. **[Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World](https://md.research.elamur.ai/free/en/papers/sadasivan-2026-attacker-s-noise-can-manipulate/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Vinu Sankar Sadasivan, Soheil Feizi, Rajiv Mathews, et al.*2026 · 2 citations*
18. **[Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay](https://md.research.elamur.ai/free/en/papers/wang-2026-be-your-own-red-teamer/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Hao Wang, Yanting Wang, Hao Li, et al.*2026 · 1 citation*
19. **[Knowing-but-Doing: Diagnosing and Defending Role-Play-Driven LLMs Jailbreaks via Moral Disengagement](https://md.research.elamur.ai/free/en/papers/qin-2026-knowing-but-doing-diagnosing-defending/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Haiming Qin, Jianxun Lian, Qimin Zhong, et al.*2026 · 1 citation*
20. **[PARASITE: Conditional System Prompt Poisoning to Hijack LLMs](https://md.research.elamur.ai/free/en/papers/pham-2026-parasite-conditional-system-prompt-poisoning/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Viet Pham, Thai Le*2026 · 1 citation*
21. **[Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment](https://md.research.elamur.ai/free/en/papers/xue-2026-deactivating-refusal-triggers-understanding-mitigating/) [Workshop on Trustworthy NLP](https://md.research.elamur.ai/free/en/venues/trustnlp/)**Zhiyu Xue, Zimo Qi, Guangliang Liu, et al.*2026*
22. **[Detection of Adversarial Prompts with Model Predictive Entropy](https://md.research.elamur.ai/free/en/papers/rubenbauer-2026-detection-adversarial-prompts-model-predictive/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Franziska Rubenbauer, Sebastian Steindl, Patrick Levi, et al.*2026*
23. **[Probing the Plasticity and Correlation of LLM Value Systems: LLM Value Rankings are Not Stable](https://md.research.elamur.ai/free/en/papers/tang-2026-probing-plasticity-correlation-llm-value/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhenheng Tang, Qihua Pan, Jingya Shen, et al.*2026*
24. **[Silencing the Guardrails: Inference-Time Jailbreaking via Dynamic Contextual Representation Ablation](https://md.research.elamur.ai/free/en/papers/xing-2026-silencing-guardrails-inference-time-jailbreaking/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Wenpeng Xing, Moran Fang, Guangtai Wang, et al.*2026*
25. **[TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense](https://md.research.elamur.ai/free/en/papers/liu-2026-trajguard-streaming-hidden-state-trajectory/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Cheng Liu, Xiaolei Liu, Xingyu Li, et al.*2026*

60 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/) — AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models