Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack type

Detection evasion2

Attack technique

Reasoning-chain manipulation2Defense-targeted3Dormant triggers0

System component

Monitors2
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack type：Detection evasionAttack technique：Reasoning-chain manipulationAttack technique：Dormant triggersSystem component：MonitorsClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.27542

    Researchers use control token injection to delete gpt-oss-20b's reasoning chain and bypass chain-of-thought monitoring

    提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控

    arXiv
    2609.27542
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    openai/gpt-oss-20b, google/gemma-4-26B-A4B-it, deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4

    Abstract论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。

    Paper analysisRead analysis
  2. AttacksarXiv 2609.15989

    Researchers propose plan injection attack that can bypass chain-of-thought monitoring

    提出 plan injection 攻击，植入良性伪装计划以绕过思维链监视器

    arXiv
    2609.15989
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Gray-box
    Evaluated models
    Qwen2.5-Coder-7B-Instruct, Qwen3-8B, DeepSeek-R1-0528 and others6

    Abstract论文指出模型会将外部上下文中的伪装计划改写为自身推理，使思维链监视器失效甚至反向合理化恶意行为。

    Paper analysisRead analysis
You have reached the end