Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 4 papers
Filter5

Attack type

Jailbreaks5Prompt injection9Poisoning and backdoors8Extraction and theft4

Impact

Data and privacy leaks4

System type

LLM applications3

Attacker access

Black-box3

Layer

Model layer5Application layer3Training and data layer1

System component

MCP and skills3RAG8Reasoning chains1Fine-tuning and open weights3Vision4Embeddings3Multimodal6
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftLayer：Application layerLayer：Training and data layerSystem component：Reasoning chainsSystem component：EmbeddingsClear all

Another 213papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2609.35699

    论文：蒸馏防御在蒸馏后强化学习下易被攻破

    提出用 API 推理摘要重建轨迹再蒸馏加强化学习，攻破蒸馏防御

    arXiv
    2609.35699
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Qwen2.5-0.5B, Qwen2.5-1.5B, Qwen2.5-3B and others12
    Abstract更现实的蒸馏攻击是蒸馏后再 RL。

    这篇工作修订蒸馏攻击的威胁模型：攻击者经合法 API 收集闭源推理数据，先蒸馏自有模型，再做强化学习。作者认为只在蒸馏后评估防御，会漏掉后续 RL，从而高估防御。

    Paper analysisRead analysis
  3. DefensesarXiv 2609.04767

    SHAQ: Privacy-preserving retrieval in vector databases using shadow queries

    Proposes SHAQ, which replaces document embeddings with shadow query embeddings to defend against embedding inversion.

    arXiv
    2609.04767
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    GTR-T5 encoder, DPR
    AbstractSHAQ replaces document embeddings with shadow query embeddings.

    SHAQ is a defense against EIA for cloud vector databases: instead of directly modifying document embeddings, it replaces them with shadow query embeddings.

    Paper analysisRead analysis
  4. AttacksarXiv 2607.01276

    研究者提出嵌入推断攻击 EIA，可在黑盒 IR 系统中识别所用嵌入模型

    提出嵌入推断攻击 EIA，在黑盒 IR 中识别所用嵌入模型

    arXiv
    2607.01276
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    e5-small, e5-small-v2, e5-base and others19
    AbstractEIA 用无序文档集的差异从候选中识别嵌入模型，并给出 reranker 与阈值下的计数。

    EIA 是在黑盒 IR 上识别所用嵌入模型的攻击。。

    Paper analysisRead analysis
You have reached the end