Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter4

Attack type

Jailbreaks54Prompt injection20Poisoning and backdoors11Extraction and theft4Detection evasion8

Attack technique

Automated search6Encoding and obfuscation2Role-play and persuasion3Conversation structure manipulation2Reasoning-chain manipulation1Side channels4

Impact

Data and privacy leaks3

System type

Models and APIs3

Attacker access

Black-box3

Attack surface / entry point

User input3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 247papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Encoding and obfuscationAttack technique：Conversation structure manipulationAttack technique：Reasoning-chain manipulationClear all

Another 247papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.04985

    研究揭示 Jev 作为应用决策层的安全与隐私风险

    评估应用决策层的输入注入与隐私推断风险

    arXiv
    2610.04985
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box, Gray-box
    Evaluated models
    Jev, NanoJev
    AbstractJev 的类型化决策可被输入与训练操纵，也会泄露信息，并同时支持检测与滥用。

    Jev 是 TypeSafe 的 System One 模型，把应用 state 和固定问题变成 Choice、Noul 或 Score 的类型化决策与概率。作者用官方 API 和可改训练的 NanoJev，考察它作为决策层时的操纵、泄露与双重用途。

    Paper analysisRead analysis
  2. AttacksarXiv 2608.09867

    Researchers steal proprietary LLM inference chains via cross-model compatibility of encrypted inference blocks

    利用加密思维块的跨模型重放，诱导弱模型逐字转写专有推理链

    arXiv
    2608.09867
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Claude Opus 4.8, Claude Sonnet 4.6, Claude Haiku 4.5 and others13

    Abstract论文揭示了客户端加密思维块跨模型互换漏洞，提出了低成本提取方法并给出防御方案。

    Paper analysisRead analysis
  3. AttacksarXiv 2604.01039

    Evaluating and hardening LLM system instructions against encoding attack extraction

    Extract system instructions with encoding and structured requests, and harden them by rewriting with CoT

    arXiv
    2604.01039
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GPT-4.1-mini, GPT-3.5-turbo, Gemini-2.5-flash and others7
    AbstractEncoded requests can elicit system instructions after a direct refusal.

    This work evaluates and hardens the confidentiality of LLM system instructions under encoded extraction. The authors are concerned with: when direct extraction has been rejected, whether the model still surrenders protected content when the same request is rewritten as a formatting or encoding task.

    Paper analysisRead analysis
  4. AttacksarXiv 2601.01296

    Aggressive compression enables LLM weight stealing

    提出面向渗出的权重压缩，评估推理服务器权重窃取可行性

    arXiv
    2601.01296
    Published
    Layer
    Infrastructure layer
    Setting
    Models and APIs
    Attacker
    White-box
    Evaluated models
    Qwen2-1.5B, Qwen2-7B, Qwen2.5-1.5B and others8
    Abstract作者用残差量化加微调压缩权重，并称法医水印便宜且微调后仍可解码。

    这篇工作把 LLM 权重渗出看成 APT：攻击者已有未加密权重，但必须把完整权重藏进推理 API 的合法输出。作者认为可压缩性是被忽略的因素，因为推理量化要求解压后仍能低开销前向，而偷权重的人可以接受事后微调。

    Paper analysisRead analysis
You have reached the end