Elamur Research⌕
☰
home / authors / Xiaogeng Liu / cited by

Who cites Xiaogeng Liu

446 citations of their works from 423 papers of our library (of the 149,439 whose bibliographies we read) · 113 with a page here, the most cited first · page 1 of 2 · 1–100 · ← Xiaogeng Liu

1 2

  1. A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the UglyarXiv:2312.02003Yifan Yao, Jinhao Duan, Kaidi Xu, et al.2023 · 1,186 citations
  2. Qwen2.5-VL Technical ReportarXiv:2502.13923Shuai Bai, Keqin Chen, Xuejing Liu, et al.2025 · 1,031 citations
  3. LLaVA-OneVision: Easy Visual Task TransferarXiv:2408.03326Bo Li, Yuanhan Zhang, Dong Guo, et al.2024 · 477 citations
  4. Security and Privacy Challenges of Large Language Models: A SurveyACM Computing SurveysBadhan Chandra Das, M. Hadi Amini, Yanzhao Wu2024 · 424 citations
  5. Qwen3-VL Technical ReportarXiv:2511.21631Shuai Bai, Yuxuan Cai, Ruizhe Chen, et al.2025 · 370 citations
  6. HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust RefusalarXiv:2402.04249Mantas Mazeika, Long Phan, Xuwang Yin, et al.2024 · 330 citations
  7. Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time ScalingarXiv:2412.05271Zhe Chen, Weiyun Wang, Yue Cao, et al.2024 · 287 citations
  8. JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language ModelsConference on Neural Information Processing Systems (NeurIPS)Patrick Chao, Edoardo Debenedetti, Alexander Robey, et al.2024 · 277 citations
  9. Tree of Attacks: Jailbreaking Black-Box LLMs AutomaticallyConference on Neural Information Processing Systems (NeurIPS)Anay Mehrotra, Manolis Zampetakis, Paul Kassianik, et al.2023 · 251 citations
  10. TrustLLM: Trustworthiness in Large Language ModelsarXiv:2401.05561Yue Huang, Lichao Sun, Haoran Wang, et al.2024 · 237 citations
  11. Qwen2.5-Omni Technical ReportarXiv:2503.20215Jin Xu, Zhifang Guo, Jinzheng He, et al.2025 · 227 citations
  12. InternVL3: Exploring Advanced Training and Test-Time Recipes for Open-Source Multimodal ModelsarXiv:2504.10479Jinguo Zhu, Weiyun Wang, Zhe Chen, et al.2025 · 216 citations
  13. How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMsAnnual Meeting of the Association for Computational Linguistics (ACL)Yi Zeng, Hongpeng Lin, Jingwen Zhang, et al.2024 · 203 citations
  14. Refusal in Language Models Is Mediated by a Single DirectionarXiv:2406.11717Andy Arditi, Oscar Obeso, Aaquib Syed, et al.2024 · 196 citations
  15. InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and EfficiencyarXiv:2508.18265Weiyun Wang, Zhangwei Gao, Lixin Gu, et al.2025 · 179 citations
  16. SmoothLLM: Defending Large Language Models Against Jailbreaking AttacksarXiv:2310.03684Alexander Robey, Eric Wong, Hamed Hassani, et al.2023 · 164 citations
  17. DeepInception: Hypnotize Large Language Model to Be JailbreakerarXiv:2311.03191Xuan Li, Zhanke Zhou, Jianing Zhu, et al.2023 · 141 citations
  18. Jailbreak and Guard Aligned Language Models with Only Few In-Context DemonstrationsarXiv:2310.06387Zeming Wei, Yifei Wang, Ang Li, et al.2023 · 130 citations
  19. SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware DecodingAnnual Meeting of the Association for Computational Linguistics (ACL)Zhangchen Xu, Fengqing Jiang, Luyao Niu, et al.2024 · 127 citations
  20. SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language ModelsFindings of the Association for Computational LinguisticsLijun Li, Bowen Dong, Ruohui Wang, et al.2024 · 119 citations
  21. Certifying LLM Safety against Adversarial PromptingarXiv:2309.02705Aounon Kumar, Chirag Agarwal, Suraj Srinivas, et al.2023 · 113 citations
  22. Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMAnnual Meeting of the Association for Computational Linguistics (ACL)Bochuan Cao, Yuanpu Cao, Lu Lin, et al.2024 · 109 citations
  23. WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language ModelsConference on Neural Information Processing Systems (NeurIPS)Liwei Jiang, Kavel Rao, Seungju Han, et al.2024 · 92 citations
  24. GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement LearningarXiv:2507.01006GLM-V Team, Wenyi Hong, Wenmeng Yu, et al.2025 · 89 citations
  25. Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM AssessmentConference on Empirical Methods in Natural Language Processing (EMNLP)Vyas Raina, Adian Liusie, Mark Gales2024 · 86 citations
  26. PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human PreferenceAnnual Meeting of the Association for Computational Linguistics (ACL)Jiaming Ji, Donghai Hong, Borong Zhang, et al.2025 · 83 citations
  27. ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMsarXiv:2402.11753Fengqing Jiang, Zhangchen Xu, Luyao Niu, et al.2024 · 83 citations
  28. The Art of Saying No: Contextual Noncompliance in Language ModelsConference on Neural Information Processing Systems (NeurIPS)Faeze Brahman, Sachin Kumar, Vidhisha Balachandran, et al.2024 · 56 citations
  29. mDPO: Conditional Preference Optimization for Multimodal Large Language ModelsConference on Empirical Methods in Natural Language Processing (EMNLP)Fei Wang, Wenxuan Zhou, James Y. Huang, et al.2024 · 50 citations
  30. MAmmoTH-VL: Eliciting Multimodal Reasoning with Instruction Tuning at ScaleAnnual Meeting of the Association for Computational Linguistics (ACL)Jiawei Guo, Tianyu Zheng, Yizhi Li, et al.2025 · 40 citations
  31. NVIDIA Nemotron Nano 2: An Accurate and Efficient Hybrid Mamba-Transformer Reasoning ModelarXiv:2508.14444NVIDIA: Aarti Basant, Abhijit Khairnar, Abhijit Paithankar, et al.2025 · 39 citations
  32. Attacking Vision-Language Computer Agents via Pop-upsAnnual Meeting of the Association for Computational Linguistics (ACL)Yanzhe Zhang, Tao Yu, Diyi Yang2025 · 32 citations
  33. VLSBench: Unveiling Visual Leakage in Multimodal SafetyAnnual Meeting of the Association for Computational Linguistics (ACL)Xuhao Hu, Dongrui Liu, Hao Li, et al.2025 · 32 citations
  34. Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction AmplificationConference on Empirical Methods in Natural Language Processing (EMNLP)Boyang Zhang, Yicong Tan, Yun Shen, et al.2025 · 29 citations
  35. Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red TeamingarXiv:2501.18837Mrinank Sharma, Meg Tong, Jesse Mu, et al.2025 · 29 citations
  36. Nemotron 3 Nano: Open, Efficient Mixture-of-Experts Hybrid Mamba-Transformer Model for Agentic ReasoningarXiv:2512.20848NVIDIA: Aaron Blakeman, Aaron Grattafiori, Aarti Basant, et al.2025 · 27 citations
  37. Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual UnderstandingAnnual Meeting of the Association for Computational Linguistics (ACL)Haneul Yoo, Yongjin Yang, Hwaran Lee2025 · 26 citations
  38. CAMEL-Bench: A Comprehensive Arabic LMM BenchmarkFindings of the Association for Computational LinguisticsSara Ghaboura, Ahmed Heakl, Omkar Thawakar, et al.2025 · 22 citations
  39. Intention Analysis Makes LLMs A Good Jailbreak DefenderInternational Conference on Computational Linguistics (COLING)Yuqi Zhang, Liang Ding, Lefei Zhang, et al.2025 · 21 citations
  40. Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from JailbreakingConference on Empirical Methods in Natural Language Processing (EMNLP)Junda Zhu, Lingyong Yan, Shuaiqiang Wang, et al.2025 · 21 citations
  41. AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety DetectionAnnual Meeting of the Association for Computational Linguistics (ACL)Weidi Luo, Shenghong Dai, Xiaogeng Liu, et al.2025 · 20 citations
  42. Jailbreak Large Vision-Language Models Through Multi-Modal LinkageAnnual Meeting of the Association for Computational Linguistics (ACL)Yu Wang, Xiaofei Zhou, Yichen Wang, et al.2025 · 20 citations
  43. Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Lang Gao, Jiahui Geng, Xiangliang Zhang, et al.2025 · 19 citations
  44. LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution ShiftsAnnual Meeting of the Association for Computational Linguistics (ACL)Qibing Ren, Hao Li, Dongrui Liu, et al.2025 · 18 citations
  45. Revisiting Jailbreaking for Large Language Models: A Representation Engineering PerspectiveInternational Conference on Computational Linguistics (COLING)Tianlong Li, Zhenghua Wang, Wenhao Liu, et al.2025 · 17 citations
  46. Nemotron-Cascade 2: Post-Training LLMs with Cascade RL and Multi-Domain On-Policy DistillationarXiv:2603.19220Zhuolin Yang, Zihan Liu, Yang Chen, et al.2026 · 16 citations
  47. HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden StatesAnnual Meeting of the Association for Computational Linguistics (ACL)Yilei Jiang, Xinyan Gao, Tianshuo Peng, et al.2025 · 15 citations
  48. When "Competency" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex CiphersarXiv:2402.10601Divij Handa, Zehua Zhang, Amir Saeidi, et al.2024 · 15 citations
  49. Safety Alignment via Constrained Knowledge UnlearningAnnual Meeting of the Association for Computational Linguistics (ACL)Zesheng Shi, Yucheng Zhou, Jing Li, et al.2025 · 13 citations
  50. VLM2-Bench: A Closer Look at How Well VLMs Implicitly Link Explicit Matching Visual CuesAnnual Meeting of the Association for Computational Linguistics (ACL)Jianshu Zhang, Dongyu Yao, Renjie Pi, et al.2025 · 12 citations
  51. AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak DefenderConference on Empirical Methods in Natural Language Processing (EMNLP)Weixiang Zhao, Jiahe Guo, Yulin Hu, et al.2025 · 11 citations
  52. SaRO: Enhancing LLM Safety through Reasoning-based AlignmentarXiv:2504.09420Yutao Mou, Yuxiao Luo, Shikun Zhang, et al.2025 · 11 citations
  53. Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive ScoringAnnual Meeting of the Association for Computational Linguistics (ACL)Peichun Hua, Hao Li, Shanghao Shi, et al.2026 · 10 citations
  54. Automated Progressive Red TeamingInternational Conference on Computational Linguistics (COLING)Bojian Jiang, Yi Jing, Tong Wu, et al.2025 · 10 citations
  55. Beware of Your Po! Measuring and Mitigating AI Safety Risks in Role-Play Fine-Tuning of LLMsAnnual Meeting of the Association for Computational Linguistics (ACL)Weixiang Zhao, Yulin Hu, Yang Deng, et al.2025 · 9 citations
  56. Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical ExpressionFindings of the Association for Computational LinguisticsJingyu Peng, Maolin Wang, Nan Wang, et al.2026 · 8 citations
  57. The Dark Side of Function Calling: Pathways to Jailbreaking Large Language ModelsInternational Conference on Computational Linguistics (COLING)Zihui Wu, Haichang Gao, Jianping He, et al.2025 · 8 citations
  58. From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction TuningAnnual Meeting of the Association for Computational Linguistics (ACL)Jiajun Zhang, Zeyu Cui, Jiaxi Yang, et al.2026 · 6 citations
  59. GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Xiangdong Hu, Yangyang Jiang, Qin Hu, et al.2026 · 6 citations
  60. AutoSOTA: An End-to-End Automated Research System for State-of-the-Art AI Model DiscoveryarXiv:2604.05550Yu Li, Chenyang Shao, Xinyang Liu, et al.2026 · 5 citations
  61. MiniCPM-o 4.5: Towards Real-Time Full-Duplex Omni-Modal InteractionarXiv:2604.27393Junbo Cui, Bokai Xu, Chongyi Wang, et al.2026 · 5 citations
  62. HAUNTATTACK: When Attack Follows Reasoning as a ShadowFindings of the Association for Computational LinguisticsJingyuan Ma, Rui Li, Zheng Li, et al.2026 · 3 citations
  63. Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?Findings of the Association for Computational LinguisticsYuan Xin, Dingfan Chen, Linyi Yang, et al.2026 · 3 citations
  64. SafeMT: Multi-turn Safety for Multimodal Language ModelsAnnual Meeting of the Association for Computational Linguistics (ACL)Han Zhu, Juntao Dai, Jiaming Ji, et al.2026 · 3 citations
  65. ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and FeedbackFindings of the Association for Computational LinguisticsYutao Mou, Zhangchi Xue, Lijun Li, et al.2026 · 3 citations
  66. Universal Jailbreak Suffixes Are Strong Attention HijackersTransactions of the Association for Computational Linguistics (TACL)Matan Ben-Tov, Mor Geva, Mahmood Sharif2026 · 3 citations
  67. Unraveling LLM Jailbreaks Through Safety Knowledge NeuronsConference of the European Chapter of the Association for Computational Linguistics (EACL)Chongwen Zhao, Yutong Ke, Kaizhu Huang2026 · 3 citations
  68. Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token OptimizationAnnual Meeting of the Association for Computational Linguistics (ACL)Tiancheng Xing, Jerry Li, Yixuan Du, et al.2026 · 2 citations
  69. Attacker's Noise Can Manipulate Your Audio-based LLM in the Real WorldConference of the European Chapter of the Association for Computational Linguistics (EACL)Vinu Sankar Sadasivan, Soheil Feizi, Rajiv Mathews, et al.2026 · 2 citations
  70. In-Context Representation HijackingAnnual Meeting of the Association for Computational Linguistics (ACL)Itay Yona, Amir Sarid, Michael Karasik, et al.2026 · 2 citations
  71. Persona Jailbreaking in Large Language ModelsFindings of the Association for Computational LinguisticsJivnesh Sandhan, Fei Cheng, Tushar Sandhan, et al.2026 · 2 citations
  72. PsychEthicsBench: Evaluating Large Language Models Against Australian Mental Health EthicsFindings of the Association for Computational LinguisticsYaling Shen, Stephanie Fong, Yiwen Jiang, et al.2026 · 2 citations
  73. Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA ExpertsAnnual Meeting of the Association for Computational Linguistics (ACL)Christos Ziakas, Nicholas Loo, Nishita Jain, et al.2026 · 2 citations
  74. RedCoder: Automated Multi-Turn Red Teaming for Code LLMsAnnual Meeting of the Association for Computational Linguistics (ACL)Wenjie Jacky Mo, Qin Liu, Xiaofei Wen, et al.2026 · 2 citations
  75. XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding AssistantsAnnual Meeting of the Association for Computational Linguistics (ACL)Adam Štorek, Mukur Gupta, Noopur Bhatt, et al.2026 · 2 citations
  76. Activation-Guided Local Editing for Jailbreaking AttacksAnnual Meeting of the Association for Computational Linguistics (ACL)Jiecong Wang, Haoran Li, Hao Peng, et al.2026 · 1 citation
  77. Adversarial Decoding: Generating Readable Documents for Adversarial ObjectivesFindings of the Association for Computational LinguisticsCollin Zhang, Tingwei Zhang, Vitaly Shmatikov2026 · 1 citation
  78. Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience ReplayFindings of the Association for Computational LinguisticsHao Wang, Yanting Wang, Hao Li, et al.2026 · 1 citation
  79. Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations ReasoningAnnual Meeting of the Association for Computational Linguistics (ACL)Rui Pu, Chaozhuo Li, Rui Ha, et al.2026 · 1 citation
  80. BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream CamouflageFindings of the Association for Computational LinguisticsKalyan Nakka, Nitesh Saxena2026 · 1 citation
  81. From Attack Surfaces to Actual Operations: A Survey of Modern LLM JailbreaksFindings of the Association for Computational LinguisticsRuikang Zhou, Changsheng Sun, Mark Huasong Meng2026 · 1 citation
  82. Reasoning Up the Instruction Ladder for Controllable Language ModelsFindings of the Association for Computational LinguisticsZishuo Zheng, Vidhisha Balachandran, Chan Young Park, et al.2026 · 1 citation
  83. Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language ModelsFindings of the Association for Computational LinguisticsWei Zhao, Zhe Li, Yige Li, et al.2026 · 1 citation
  84. USB: A COMPREHENSIVE AND UNIFIED SAFETY EVALUATION BENCHMARK FOR MULTIMODAL LARGE LANGUAGE MODELSAnnual Meeting of the Association for Computational Linguistics (ACL)Baolin Zheng, Guanlin Chen, Qingyang Teng, et al.2026 · 1 citation
  85. When Helpers Become Hazards: A Benchmark for Analyzing Multimodal LLM-Powered Safety in Daily LifeFindings of the Association for Computational LinguisticsXinyue Lou, Xu Jinan, Jingyi Yin, et al.2026 · 1 citation
  86. HAMSA: Hijacking Aligned Compact Models via Stealthy AutomationarXiv:2508.16484Alexey Krylov, Iskander Vagizov, Dmitrii Korzh, et al.2025 · 1 citation
  87. CachePrune: Teaching LLMs What Not to Follow via KV-Cache EditingAnnual Meeting of the Association for Computational Linguistics (ACL)Rui Wang, Junda Wu, Yu Xia, et al.2026
  88. Calibrating Inference Time Alignment with Sequence-level Risk AccumulationAnnual Meeting of the Association for Computational Linguistics (ACL)Shanwen Tan, Ziyang Dong, Wei Ju, et al.2026
  89. Detecting What Queries Seek: Steering LLM Safety with FFN Output Activation MonitoringAnnual Meeting of the Association for Computational Linguistics (ACL)Xiaohao Luo, Ying Wei, Rui Zhao2026
  90. Enhancing the Transferability of Jailbreak Attacks on Large Language Models via Exploiting Reparameterization InvarianceAnnual Meeting of the Association for Computational Linguistics (ACL)Ao Wang, Xinghao Yang, Yongshun Gong, et al.2026
  91. Evaluating Discriminability of Vision-Language ModelsLanguage Resources and Evaluation Conference (LREC)Masayasu Muraoka, Naoaki Okazaki2026
  92. Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety AlignmentFindings of the Association for Computational LinguisticsZhixue Song, Boyan Han, Yiwei Wang, et al.2026
  93. Jailbreaking Large Language Models with Morality AttacksFindings of the Association for Computational LinguisticsYing Su, Zheng Mingen, Weili Diao, et al.2026
  94. LCO: LLM-based Constraint Optimization for Safer Agentic LLMs in Real-world TasksFindings of the Association for Computational LinguisticsJiayong Wan, Jiawei Chen, Zhaoxia Yin, et al.2026
  95. MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language ModelsWorkshop on Multilinguality in the Era of Large Language ModelsRishabh Makwana, Mamta Mamta, Deeksha Varshney, et al.2026
  96. More Thinking, Less Talking: Internalizing Deliberative Safety into LLM ParametersAnnual Meeting of the Association for Computational Linguistics (ACL)Guan Wang, Xuehai Tang, Biyu Zhou, et al.2026
  97. PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information LeakageWorkshop on Trustworthy NLPKrishna Kanth Nakka, Xue Jiang, Dmitrii Usynin, et al.2026
  98. PII-VisBench: Evaluating Personally Identifiable Information Safety in Vision Language Models Along a Continuum of VisibilityFindings of the Association for Computational LinguisticsG M Shahariar, Zabir Al Nazi, Md Olid Hasan Bhuiyan, et al.2026
  99. Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMsAnnual Meeting of the Association for Computational Linguistics (ACL)Wai Man Si, Mingjie Li, Michael Backes, et al.2026
  100. RAMP: Risk-Aware Multi-Turn Planning for Jailbreak Red-TeamingFindings of the Association for Computational LinguisticsYize Liu, Yunyun Hou, Aina Sui2026

1 2

↑ back to top

This page in Markdown → https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/cited-by/