Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter3

Attack type

Jailbreaks39Prompt injection34Poisoning and backdoors55Extraction and theft2Detection evasion8

Attack technique

Automated search6Encoding and obfuscation1Role-play and persuasion3Side channels4Dormant triggers1
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Encoding and obfuscationAttack technique：Dormant triggersClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.33985

    研究：众包微调数据投毒可放大专有指令抽取

    提出主题锚点投毒，放大众包微调后的专有指令提取

    arXiv
    2609.33985
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Qwen2.5-7B-Instruct, Qwen2.5-14B-Instruct, Llama-3.1-8B-Instruct and others4

    Abstract论文提出基于主题锚点的数据中毒攻击，证明低比例的中毒样本可在黑盒条件下隐蔽放大微调指令泄漏。

    Paper analysisRead analysis
  2. AttacksarXiv 2604.01039

    评估与加固 LLM 系统指令以抵御编码攻击提取

    用编码与结构化请求抽取系统指令，并用 CoT 改写加固

    arXiv
    2604.01039
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GPT-4.1-mini, GPT-3.5-turbo, Gemini-2.5-flash and others7
    Abstract编码式请求可在直接拒答后引出系统指令。

    这项工作评测并加固 LLM 系统指令在编码式抽取下的保密性。作者关心的是：直接抽取已被拒绝时，把同一请求改写成格式化或编码任务，模型是否仍交出受保护内容。

    Paper analysisRead analysis
You have reached the end