Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 9 papers
Filter5

Attack type

Jailbreaks9

Attack technique

Gradient and representation optimization17Automated search45Multi-turn escalation23Encoding and obfuscation36Role-play and persuasion21Conversation structure manipulation9Reasoning-chain manipulation6Cross-modal payloads30Defense-targeted5

Impact

Harmful content9

System type

Models and APIs9coding agent0web agent0

Attacker access

Black-box6

Attack surface / entry point

User input9

Layer

Prompt layer8
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 255papers have no tags yet and are not included in filtered results.
Attack type：JailbreaksAttack technique：Conversation structure manipulationSystem type：Models and APIsSystem type：coding agentSystem type：web agentClear all

Another 255papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.36956

    研究者提出 Controlled Decoding Attacks，通过纯文本接口越狱黑盒 LLM

    提出 BLINDBIAS，通过纯文本续写与前缀控制越狱黑盒模型

    arXiv
    2609.36956
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GLM-5, Gemini-3.5-Flash, Qwen3-32B and others4
    Abstract作者认为，隐藏数值概率并不足以消除支持重复采样和前缀续写的解码攻击面。

    BLINDBIAS 是一种针对 sample-only 续写接口的 black-box 解码时越狱框架，研究没有目标数值概率时，采样能否支持逐步控制。

    Paper analysisRead analysis
  5. Analysis and theoryarXiv 2606.04168

    论文提出随机插入攻击，利用自回归一致性绕过 LLM 安全对齐

    解释自回归一致性如何导致浅层安全对齐，并提出随机插入攻击

    arXiv
    2606.04168
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Abstract作者用自回归一致性串起浅层对齐、插入攻击和最坏延续对齐。

    作者把浅层安全对齐和一类续写攻击都归到自回归一致性上。

    Paper analysisRead analysis
  6. InterpretabilityarXiv 2603.08234

    续写与拒答之争：大语言模型中续写触发越狱的机制分析

    分析续写触发越狱的注意力头机制并提出 HCS

    arXiv
    2603.08234
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    LLaMA-2-7B-Chat, Qwen2.5-7B-Instruct
    Abstract作者称越狱来自两类头竞争，HCS 加蒸馏可把该竞争用于推理时干预。

    作者用注意力头机制分析 continuation-triggered jailbreak：同一有害指令下，把 continuation 后缀从指令后面挪到提示词边界外，模型更容易顺着后缀继续生成。

    Paper analysisRead analysis
  8. AttacksarXiv 2510.10271

    MetaBreak：通过特殊 token 操纵越狱在线 LLM 服务

    提出 MetaBreak，用特殊 token 操纵越狱在线 LLM 服务并绕过审核

    arXiv
    2510.10271
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Llama-3.3-70B-Instruct, Qwen-2.5-72B-Instruct, Gemma-2-27B-Instruct and others10

    Abstract利用特殊 token 注入对抗平台模板包裹与审核，多场景验证了越狱有效性与互补性。

    Paper analysisRead analysis
You have reached the end