Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 240 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出推理通道预填与输出前缀组合攻击以越狱推理模型
Published Sep 24
Evaluated models Gemini 3 Flash Preview , DeepSeek V4 Flash , Claude Haiku 4.5 提出任意字母置换密码越狱,无需微调即可诱导有害输出
Published Sep 9
Evaluated models Claude Sonnet 4 , Claude Sonnet 4.5 , Gemini 3 Flash (preview) and others7 Abstract 前沿大模型无需微调即可通过提示词学会字母置换密码,进而绕过分类器与对齐,作者呼吁关注能力提升带来的安全风险。
揭示推理加深引发的对齐坍塌,用 Reasoning Trap 放大越狱
Published Sep 8
Evaluated models Qwen3-8B , Qwen3-14B , Llama2-7B and others8 Abstract 更深推理提升题目准确率,同时提高扰动下的相对损失。作者研究扩展推理是否以对齐稳健性为代价,提出 ALR、RT 与 RRA。 。
提出多流扰动攻击,交织有害与良性任务绕过思考型 LLM 安全对齐
Published Mar 10
Evaluated models Qwen3 1.7B , Qwen3 4B , Qwen3 8B and others11 Abstract 多流扰动用任务交织测试 thinking 模式,作者称它同时冲击内容安全与推理稳定性。多流扰动攻击把有害任务与良性任务织进同一提示词,测试 thinking 模式的内容安全与推理稳定性。作者认为,交织多任务会拉长思考,使安全检测面对被打散的有害意图,并可能把推理用于合理化,或陷入崩溃与重复。方法不访问梯度。
Attacks arXiv 2512.05853 · Dec 6, 2025 提出视觉推理序列攻击 VRSA,以图像序列越狱多模态大模型
Published Dec 6, 2025
Evaluated models DeepSeek-VL2-tiny , InternVL-3.5-8B , LLaVA-1.6-Mistral-7B and others8 Attacks arXiv 2510.17904 · Oct 19, 2025 提出 BreakFun ,用模拟代码执行中的对象实例化越狱模型
Published Oct 19, 2025
Evaluated models GPT-4.1 Mini , Gemini 2.5 Flash , Claude-3.5 Sonnet and others16 Attacks arXiv 2510.11570 · Oct 14, 2025 提出四种阶段转换攻击,绕过推理模型的安全推理护栏
Published Oct 14, 2025
Evaluated models gpt-oss-20b , gpt-oss-120b , Qwen3-4B-Thinking-2507 and others10 You have reached the end