DefensesarXiv 2609.37054
ACTR：对齐推理与回答以提升推理大语言模型的多语言安全
提出 ACTR，只更新安全思考神经元以对齐推理与回答的安全类别
- arXiv
- 2609.37054
- Published
- Setting
- Models and APIs
- Evaluated models
- Qwen3-8B, Gemma4-12B-it
- DefensesModel hardening
- AttacksJailbreaks
- ComponentReasoning chains
All papers
Filter5
System type
Attack surface / entry point
Layer
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
Another 215papers do not have category tags yet and are not included in filtered results.
- DefensesarXiv 2609.36603
SED：面向 LLM 智能体的免训练持续安全策略学习框架
提出免训练框架 SED，将有害智能体轨迹蒸馏为可检索安全策略
- arXiv
- 2609.36603
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- DeepSeek-V4-Flash, GLM-5.2, Kimi K3
- DefensesInstruction–data separation
- AttacksPrompt injection
- ComponentMemory
- DefensesarXiv 2609.34519
EOPSA：高效在策略自蒸馏安全对齐方法
提出 EOPSA，用 TRR 截断与安全类过滤做在策略自蒸馏安全对齐
- arXiv
- 2609.34519
- Published
- Setting
- Models and APIs
- Evaluated models
- Qwen3-1.7B, Qwen3-4B, Qwen3-14B and others5
- DefensesModel hardening
- AttacksJailbreaks
- ComponentReasoning chains
- OtherarXiv 2609.12413
SoK 综述：智能体 AI 时代的越狱攻击、防御与实践考量
系统梳理智能体执行链路中的越狱攻击与防御并比较推理时防御
- arXiv
- 2609.12413
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- Qwen3.5-4B, Llama-3.1-8B-Instruct
- AttacksJailbreaks
- ComponentMemory
AbstractSoK 将越狱重放到智能体流水线，并用两种模型检验回复层防御的边际与代价。
Mia 等人把越狱安全从单轮回复扩展到智能体的规划、记忆、工具和智能体间通信，并问既有结论在更强原生对齐下是否还成立。
- AttacksarXiv 2606.09084
研究者提出 Context-Fractured Decomposition 攻击
提出 CFD 跨会话分解攻击，利用工件来源缺口绕过工具型 Agent 的本地检查
- arXiv
- 2606.09084
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Evaluated models
- GPT-4.1, GPT-5-nano, Claude-3.5-Sonnet and others6
- AttacksJailbreaks
- TechniqueDormant triggers
- ComponentMemory
AbstractCFD 用无指令 artifact 把越狱拆到跨会话。
CFD针对工具型 LLM 智能体：利用 artifact 来源不被跟踪这一部署失败模式，把有害目标拆开后延迟组合。
- AttacksarXiv 2603.12277
Prompt injection is role confusion
提出 CoT Forgery，经用户消息或工具输出注入伪造推理
- arXiv
- 2603.12277
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Attacker
- Black-box
- Evaluated models
- gpt-oss-20b, gpt-oss-120b, o4-mini and others11
- AttacksJailbreaks
- TechniqueReasoning-chain manipulation
- ComponentReasoning chains
Abstract提示注入被作者解释为角色感知失败：听起来像某角色，就在表示里成为该角色。
作者把提示注入解释成角色感知失败：标签划出的权限没有进入模型的内部几何。
论文提出多轮在线骚扰 Agent 基准
提出多轮在线骚扰 Agent 基准，评测记忆、规划与微调越狱
- arXiv
- 2510.14207
- Published
- Layer
- Application layer
- Setting
- Multi-agent systems
- Evaluated models
- LLaMA-3.1-8B-Instruct, Qwen3-30B-A3B-Instruct, DeepSeekMoE-16B and others4
- AttacksJailbreaks
- ComponentFine-tuning and open weights
You have reached the end