Elamur Research⌕
☰
home / authors / Michael Backes / cited by

Who cites Michael Backes

490 citations of their works from 459 papers of our library (of the 149,439 whose bibliographies we read) · 109 with a page here, the most cited first · page 1 of 2 · 1–100 · ← Michael Backes

1 2

  1. A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the UglyarXiv:2312.02003Yifan Yao, Jinhao Duan, Kaidi Xu, et al.2023 · 1,186 citations
  2. OpenAI o1 System CardarXiv:2412.16720OpenAI, Aaron Jaech, Adam Kalai, et al.2024 · 1,110 citations
  3. Security and Privacy Challenges of Large Language Models: A SurveyACM Computing SurveysBadhan Chandra Das, M. Hadi Amini, Yanzhao Wu2024 · 424 citations
  4. Tulu 3: Pushing Frontiers in Open Language Model Post-TrainingarXiv:2411.15124Nathan Lambert, Jacob Morrison, Valentina Pyatkin, et al.2024 · 423 citations
  5. HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust RefusalarXiv:2402.04249Mantas Mazeika, Long Phan, Xuwang Yin, et al.2024 · 330 citations
  6. JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language ModelsConference on Neural Information Processing Systems (NeurIPS)Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.2024 · 277 citations
  7. Tree of Attacks: Jailbreaking Black-Box LLMs AutomaticallyConference on Neural Information Processing Systems (NeurIPS)Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.2023 · 251 citations
  8. LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation DatasetarXiv:2309.11998Lianmin Zheng, Wei-Lin Chiang, Ying Sheng, et al.2023 · 242 citations
  9. TrustLLM: Trustworthiness in Large Language ModelsarXiv:2401.05561Yue Huang, Lichao Sun, Haoran Wang, et al.2024 · 237 citations
  10. Baseline Defenses for Adversarial Attacks Against Aligned Language ModelsarXiv:2309.00614Neel Jain, Avi Schwarzschild, Yuxin Wen, et al.2023 · 236 citations
  11. Refusal in Language Models Is Mediated by a Single DirectionarXiv:2406.11717Andy Arditi, Oscar Obeso, Aaquib Syed, et al.2024 · 196 citations
  12. LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation MethodsarXiv:2412.05579Haitao Li, Qian Dong, Junjie Chen, et al.2024 · 195 citations
  13. Multilingual Jailbreak Challenges in Large Language ModelsarXiv:2310.06474Yue Deng, Wenxuan Zhang, Sinno Jialin Pan, et al.2023 · 192 citations
  14. Low-Resource Languages Jailbreak GPT-4arXiv:2310.02446Zheng-Xin Yong, Cristina Menghini, Stephen H. Bach2023 · 183 citations
  15. AI Alignment: A Comprehensive SurveyarXiv:2310.19852Jiaming Ji, Tianyi Qiu, Boyuan Chen, et al.2023 · 173 citations
  16. Catastrophic Jailbreak of Open-source LLMs via Exploiting GenerationarXiv:2310.06987Yangsibo Huang, Samyak Gupta, Mengzhou Xia, et al.2023 · 169 citations
  17. WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMsConference on Neural Information Processing Systems (NeurIPS)Seungju Han, Kavel Rao, Allyson Ettinger, et al.2024 · 165 citations
  18. Justice or Prejudice? Quantifying Biases in LLM-as-a-JudgearXiv:2410.02736Jiayi Ye, Yanbo Wang, Yue Huang, et al.2024 · 148 citations
  19. Magpie: Alignment Data Synthesis from Scratch by Prompting Aligned LLMs with NothingarXiv:2406.08464Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.2024 · 148 citations
  20. DeepInception: Hypnotize Large Language Model to Be JailbreakerarXiv:2311.03191Xuan Li, Zhanke Zhou, Jianing Zhu, et al.2023 · 141 citations
  21. Humans or LLMs as the Judge? A Study on Judgement BiasConference on Empirical Methods in Natural Language Processing (EMNLP)Guiming Hardy Chen, Shunian Chen, Ziche Liu, et al.2024 · 133 citations
  22. Olmo 3arXiv:2512.13961Team Olmo: Allyson Ettinger, Amanda Bertsch, Bailey Kuehl, et al.2025 · 130 citations
  23. Jailbreak and Guard Aligned Language Models with Only Few In-Context DemonstrationsarXiv:2310.06387Zeming Wei, Yifei Wang, Ang Li, et al.2023 · 130 citations
  24. SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language ModelsFindings of the Association for Computational LinguisticsLijun Li, Bowen Dong, Ruohui Wang, et al.2024 · 119 citations
  25. Deliberative Alignment: Reasoning Enables Safer Language ModelsarXiv:2412.16339Melody Y. Guan, Manas Joglekar, Eric Wallace, et al.2024 · 115 citations
  26. Defending Large Language Models Against Jailbreaking Attacks Through Goal PrioritizationAnnual Meeting of the Association for Computational Linguistics (ACL)Zhexin Zhang, Junxiao Yang, Pei Ke, et al.2024 · 113 citations
  27. Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMAnnual Meeting of the Association for Computational Linguistics (ACL)Bochuan Cao, Yuanpu Cao, Lu Lin, et al.2024 · 109 citations
  28. A Systematic Survey and Critical Review on Evaluating Large Language Models: Challenges, Limitations, and RecommendationsConference on Empirical Methods in Natural Language Processing (EMNLP)Md Tahmid Rahman Laskar, Sawsan Alqahtani, M Saiful Bari, et al.2024 · 105 citations
  29. FLASK: Fine-grained Language Model Evaluation based on Alignment Skill SetsarXiv:2307.10928Seonghyeon Ye, Doyoung Kim, Sungdong Kim, et al.2023 · 100 citations
  30. WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language ModelsConference on Neural Information Processing Systems (NeurIPS)Liwei Jiang, Kavel Rao, Seungju Han, et al.2024 · 92 citations
  31. The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual ContextsFindings of the Association for Computational LinguisticsLingfeng Shen, Weiting Tan, Sihao Chen, et al.2024 · 88 citations
  32. A Survey of Large Language Models in Medicine: Progress, Application, and ChallengearXiv:2311.05112Hongjian Zhou, Fenglin Liu, Boyang Gu, et al.2023 · 87 citations
  33. Detoxifying Large Language Models via Knowledge EditingAnnual Meeting of the Association for Computational Linguistics (ACL)Mengru Wang, Ningyu Zhang, Ziwen Xu, et al.2024 · 84 citations
  34. Survey of Vulnerabilities in Large Language Models Revealed by Adversarial AttacksarXiv:2310.10844Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.2023 · 83 citations
  35. Humans or LLMs as the Judge? A Study on Judgement BiasesarXiv:2402.10669Guiming Hardy Chen, Shunian Chen, Ziche Liu, et al.2024 · 78 citations
  36. Factuality of Large Language Models: A SurveyConference on Empirical Methods in Natural Language Processing (EMNLP)Yuxia Wang, Minghan Wang, Muhammad Arslan Manzoor, et al.2024 · 77 citations
  37. OR-Bench: An Over-Refusal Benchmark for Large Language ModelsarXiv:2405.20947Justin Cui, Wei-Lin Chiang, Ion Stoica, et al.2024 · 76 citations
  38. ClashEval: Quantifying the tug-of-war between an LLM's internal prior and external evidenceConference on Neural Information Processing Systems (NeurIPS)Kevin Wu, Eric Wu, James Zou2024 · 65 citations
  39. Evaluation of OpenAI o1: Opportunities and Challenges of AGIarXiv:2409.18486Tianyang Zhong, Zhengliang Liu, Yi Pan, et al.2024 · 64 citations
  40. Revolutionizing Finance with LLMs: An Overview of Applications and InsightsarXiv:2401.11641Huaqin Zhao, Zhengliang Liu, Zihao Wu, et al.2024 · 63 citations
  41. MLLM-as-a-Judge: Assessing Multimodal LLM-as-a-Judge with Vision-Language BenchmarkarXiv:2402.04788Dongping Chen, Ruoxi Chen, Shilin Zhang, et al.2024 · 60 citations
  42. The Art of Saying No: Contextual Noncompliance in Language ModelsConference on Neural Information Processing Systems (NeurIPS)Faeze Brahman, Sachin Kumar, Vidhisha Balachandran, et al.2024 · 56 citations
  43. AEGIS2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM GuardrailsConference of the North American Chapter of the Association for Computational Linguistics (NAACL)Shaona Ghosh, Prasoon Varshney, Makesh Narsimhan Sreedhar, et al.2025 · 53 citations
  44. NormAd: A Framework for Measuring the Cultural Adaptability of Large Language ModelsConference of the North American Chapter of the Association for Computational Linguistics (NAACL)Abhinav Rao, Akhila Yerukola, Vishwa Shah, et al.2025 · 46 citations
  45. SOUL: Unlocking the Power of Second-Order Optimization for LLM UnlearningConference on Empirical Methods in Natural Language Processing (EMNLP)Jinghan Jia, Yihua Zhang, Yimeng Zhang, et al.2024 · 46 citations
  46. SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language ModelsarXiv:2311.08370Bertie Vidgen, Nino Scherrer, Hannah Rose Kirk, et al.2023 · 42 citations
  47. Introducing v0.5 of the AI Safety Benchmark from MLCommonsarXiv:2404.12241Bertie Vidgen, Adarsh Agrawal, Ahmed M. Ahmed, et al.2024 · 38 citations
  48. Unveiling Privacy Risks in LLM Agent MemoryAnnual Meeting of the Association for Computational Linguistics (ACL)Bo Wang, Weiyi He, Shenglai Zeng, et al.2025 · 33 citations
  49. SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model SafetyarXiv:2404.05399Paul Rottger, Fabio Pernisi, Bertie Vidgen, et al.2024 · 33 citations
  50. Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction AmplificationConference on Empirical Methods in Natural Language Processing (EMNLP)Boyang Zhang, Yicong Tan, Yun Shen, et al.2025 · 29 citations
  51. Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red TeamingarXiv:2501.18837Mrinank Sharma, Meg Tong, Jesse Mu, et al.2025 · 29 citations
  52. Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual UnderstandingAnnual Meeting of the Association for Computational Linguistics (ACL)Haneul Yoo, Yongjin Yang, Hwaran Lee2025 · 26 citations
  53. Transforming Science with Large Language Models: A Survey on AI-assisted Scientific Discovery, Experimentation, Content Generation, and EvaluationACM Computing SurveysSteffen Eger, Yong Cao, Jennifer D'Souza, et al.2025 · 25 citations
  54. Intention Analysis Makes LLMs A Good Jailbreak DefenderInternational Conference on Computational Linguistics (COLING)Yuqi Zhang, Liang Ding, Lefei Zhang, et al.2025 · 21 citations
  55. AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety DetectionAnnual Meeting of the Association for Computational Linguistics (ACL)Weidi Luo, Shenghong Dai, Xiaogeng Liu, et al.2025 · 20 citations
  56. Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal TrainingAnnual Meeting of the Association for Computational Linguistics (ACL)Youliang Yuan, Wenxiang Jiao, Wenxuan Wang, et al.2025 · 19 citations
  57. Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Lang Gao, Jiahui Geng, Xiangliang Zhang, et al.2025 · 19 citations
  58. Revisiting Jailbreaking for Large Language Models: A Representation Engineering PerspectiveInternational Conference on Computational Linguistics (COLING)Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.2025 · 17 citations
  59. PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for FreeAnnual Meeting of the Association for Computational Linguistics (ACL)Hao Li, Xiaogeng Liu, Ning Zhang, et al.2025 · 16 citations
  60. Jailbreaking LLMs with Arabic Transliteration and ArabiziConference on Empirical Methods in Natural Language Processing (EMNLP)Mansour Al Ghanim, Saleh Almohaimeed, Mengxin Zheng, et al.2024 · 16 citations
  61. ChemAgent: Self-updating Library in Large Language Models Improves Chemical ReasoningarXiv:2501.06590Xiangru Tang, Tianyu Hu, Muyang Ye, et al.2025 · 15 citations
  62. Rethinking Reflection in Pre-TrainingarXiv:2504.04022Essential AI: Darsh J Shah, Peter Rushton, Somanshu Singla, et al.2025 · 15 citations
  63. What Happened in LLMs Layers when Trained for Fast vs. Slow Thinking: A Gradient PerspectiveAnnual Meeting of the Association for Computational Linguistics (ACL)Ming Li, Yanhong Li, Tianyi Zhou2025 · 15 citations
  64. Multi-Attribute Steering of Language Models via Targeted InterventionAnnual Meeting of the Association for Computational Linguistics (ACL)Duy Nguyen, Archiki Prasad, Elias Stengel-Eskin, et al.2025 · 11 citations
  65. Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive ScoringAnnual Meeting of the Association for Computational Linguistics (ACL)Peichun Hua, Hao Li, Shanghao Shi, et al.2026 · 10 citations
  66. Multiple LLM Agents Debate for Equitable Cultural AlignmentAnnual Meeting of the Association for Computational Linguistics (ACL)Dayeon Ki, Rachel Rudinger, Tianyi Zhou, et al.2025 · 10 citations
  67. Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and AlignmentarXiv:2501.13080Melissa Kazemi Rad, Huy Nghiem, Andy Luo, et al.2025 · 9 citations
  68. SafeKey: Amplifying Aha-Moment Insights for Safety ReasoningConference on Empirical Methods in Natural Language Processing (EMNLP)Kaiwen Zhou, Xuandong Zhao, Jayanth Srinivasa, et al.2025 · 9 citations
  69. Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical ExpressionFindings of the Association for Computational LinguisticsJingyu Peng, Maolin Wang, Nan Wang, et al.2026 · 8 citations
  70. The Dark Side of Function Calling: Pathways to Jailbreaking Large Language ModelsInternational Conference on Computational Linguistics (COLING)Zihui Wu, Haichang Gao, Jianping He, et al.2025 · 8 citations
  71. CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language ModelsFindings of the Association for Computational LinguisticsZhenhong Zhou, Zherui Li, Jie Zhang, et al.2026 · 7 citations
  72. Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement LearningConference on Empirical Methods in Natural Language Processing (EMNLP)Wenbin Hu, Haoran Li, Huihao Jing, et al.2025 · 7 citations
  73. Shared Imagination: LLMs Hallucinate AlikearXiv:2407.16604Yilun Zhou, Caiming Xiong, Silvio Savarese, et al.2024 · 7 citations
  74. From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction TuningAnnual Meeting of the Association for Computational Linguistics (ACL)Jiajun Zhang, Zeyu Cui, Jiaxi Yang, et al.2026 · 6 citations
  75. GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Xiangdong Hu, Yangyang Jiang, Qin Hu, et al.2026 · 6 citations
  76. False Sense of Security: Why Probing-based Malicious Input Detection Fails to GeneralizeFindings of the Association for Computational LinguisticsCheng Wang, Zeming Wei, Qin Liu, et al.2026 · 5 citations
  77. LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-DisjointAnnual Meeting of the Association for Computational Linguistics (ACL)Qianli Ma, Dongrui Liu, Qian Chen, et al.2025 · 5 citations
  78. BLUR: A Bi-Level Optimization Approach for LLM UnlearningConference of the European Chapter of the Association for Computational Linguistics (EACL)Hadi Reisizadeh, Jinghan Jia, Zhiqi Bu, et al.2026 · 4 citations
  79. GrAInS: Gradient-based Attribution for Inference-Time Steering of LLMs and VLMsAnnual Meeting of the Association for Computational Linguistics (ACL)Duy Nguyen, Archiki Prasad, Elias Stengel-Eskin, et al.2026 · 4 citations
  80. Spotlight Your Instructions: Instruction-following with Dynamic Attention SteeringConference of the European Chapter of the Association for Computational Linguistics (EACL)Praveen Venkateswaran, Danish Contractor2026 · 4 citations
  81. Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language ModelsarXiv:2412.15265Yingshui Tan, Boren Zheng, Baihui Zheng, et al.2024 · 4 citations
  82. Audio Jailbreak: An Open Comprehensive Benchmark for Jailbreaking Large Audio-Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Zirui Song, Qian Jiang, Mingxuan Cui, et al.2026 · 3 citations
  83. Universal Jailbreak Suffixes Are Strong Attention HijackersTransactions of the Association for Computational Linguistics (TACL)Matan Ben-Tov, Mor Geva, Mahmood Sharif2026 · 3 citations
  84. Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token OptimizationAnnual Meeting of the Association for Computational Linguistics (ACL)Tiancheng Xing, Jerry Li, Yixuan Du, et al.2026 · 2 citations
  85. Do Images Speak Louder than Words? Investigating the Effect of Textual Misinformation in VLMsConference of the European Chapter of the Association for Computational Linguistics (EACL)Chi Zhang, Wenxuan Ding, Jiale Liu, et al.2026 · 2 citations
  86. Activation-Guided Local Editing for Jailbreaking AttacksAnnual Meeting of the Association for Computational Linguistics (ACL)Jiecong Wang, Haoran Li, Hao Peng, et al.2026 · 1 citation
  87. Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience ReplayFindings of the Association for Computational LinguisticsHao Wang, Yanting Wang, Hao Li, et al.2026 · 1 citation
  88. Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations ReasoningAnnual Meeting of the Association for Computational Linguistics (ACL)Rui Pu, Chaozhuo Li, Rui Ha, et al.2026 · 1 citation
  89. BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream CamouflageFindings of the Association for Computational LinguisticsKalyan Nakka, Nitesh Saxena2026 · 1 citation
  90. Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy BackdoorsAnnual Meeting of the Association for Computational Linguistics (ACL)Rui Yin, Tianxu Han, Naen Xu, et al.2026 · 1 citation
  91. HABIB_TAZ at SemEval-2026 Task 11: Disentangling Formal Logic from Content via Synthetic Training and Multi-Objective OptimizationInternational Workshop on Semantic Evaluation (SemEval)Abdullah Shaikh, Zain Naqi, Taha Zahid, et al.2026 · 1 citation
  92. Knowing When Not to Answer: Lightweight KB-Aligned OOD Detection for Safe RAGAnnual Meeting of the Association for Computational Linguistics (ACL)Ilias Triantafyllopoulos, Renyi Qu, Salvatore Giorgi, et al.2026 · 1 citation
  93. Knowing-but-Doing: Diagnosing and Defending Role-Play-Driven LLMs Jailbreaks via Moral DisengagementFindings of the Association for Computational LinguisticsHaiming Qin, Jianxun Lian, Qimin Zhong, et al.2026 · 1 citation
  94. Reasoning Up the Instruction Ladder for Controllable Language ModelsFindings of the Association for Computational LinguisticsZishuo Zheng, Vidhisha Balachandran, Chan Young Park, et al.2026 · 1 citation
  95. SafeAgent: Safeguarding LLM Agents via an Automated Risk SimulatorAnnual Meeting of the Association for Computational Linguistics (ACL)Xueyang Zhou, Weidong Wang, Lin Lu, et al.2026 · 1 citation
  96. Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language ModelsFindings of the Association for Computational LinguisticsWei Zhao, Zhe Li, Yige Li, et al.2026 · 1 citation
  97. HAMSA: Hijacking Aligned Compact Models via Stealthy AutomationarXiv:2508.16484Alexey Krylov, Iskander Vagizov, Dmitrii Korzh, et al.2025 · 1 citation
  98. Authorization-First Retrieval: Enforcing Least Privilege in Multi-Agent RAG SystemsWorkshop on Trustworthy NLPRohith Namboothiri2026
  99. Evaluating LLMs for Detecting Demographic-Targeted Social Bias: A Comprehensive Benchmark StudyWorkshop of Identity Aware AIAyan Majumdar, Feihao Chen, Jinghui Li, et al.2026
  100. ExpressivityBench: Can LLMs Communicate Implicitly?Findings of the Association for Computational LinguisticsJoshua Tint, Som Sagar, Aditya Taparia, et al.2026

1 2

↑ back to top

This page in Markdown → https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/