Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 6 papers
Filter4

Attack type

Jailbreaks6Poisoning and backdoors4Model tampering17Extraction and theft5Detection evasion3

Impact

Harmful content5

System type

Models and APIs6

Attack surface / entry point

User input36Tool responses1Images, audio and video5Weights and gradients5

Layer

Prompt layer3Model layer6Application layer14
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Attack type：JailbreaksAttack surface / entry point：Tool responsesAttack surface / entry point：Weights and gradientsLayer：Model layerClear all

Another 213papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.07125

    PEV 攻击利用嵌入向量加噪越狱六款开源权重模型

    提出 PEV 攻击，在输入嵌入上加高斯噪声越狱开源模型

    arXiv
    2610.07125
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    Llama-3.1-8B-Instruct, Qwen2.5-1.5B-Instruct, Phi-4-mini-3.8B and others6
    AbstractPEV 用 embedding 高斯噪声，在六个模型上越狱 JailbreakBench 全部提示。

    PEV 是对 open-weight LLM 的 embedding 噪声越狱。

    Paper analysisRead analysis
  3. Evaluation and benchmarksarXiv 2602.14161

    When benchmarks lie: evaluating malicious prompt classifiers under real-world distribution shift

    提出 LODO 评测恶意提示探针的跨数据集泛化

    arXiv
    2602.14161
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    Llama-3.1-8B-Instruct, Gemma-3-27B, Qwen-3.5-4B and others5
    Abstract作者称 LODO 露出 CV 高估，数据集身份与安全方向部分重叠，标准域泛化干预关不上。

    LODO 用来检查恶意提示词分类器换成没见过的数据集后，还剩多少检测能力。。

    Paper analysisRead analysis
  5. AttacksarXiv 2509.22067

    论文：激活引导可破坏 LLM 安全对齐，20 个随机向量即可构造通用越狱攻击

    提出激活转向越狱，用随机向量在推理时绕过安全拒答

    arXiv
    2509.22067
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Llama3.1-8B, Llama3.1-70B, Qwen2.5-3B and others8

    Abstract作者称激活转向会系统性破坏 LLM 对齐，良性特征与随机向量均能诱发有害合规，聚合随机向量可构建通用攻击。

    Paper analysisRead analysis
You have reached the end