Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.

Another 240papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.15989

    Researchers propose plan injection attack that can bypass chain-of-thought monitoring

    提出 plan injection 攻击,植入良性伪装计划以绕过思维链监视器

    Published
    Attacker
    Gray-box
    Evaluated models
    Qwen2.5-Coder-7B-Instruct, Qwen3-8B, DeepSeek-R1-0528 and others6

    Abstract论文指出模型会将外部上下文中的伪装计划改写为自身推理,使思维链监视器失效甚至反向合理化恶意行为。

    Paper analysisRead analysis
  2. DefensesarXiv 2609.05797

    Paper finds safety monitors mainly block requests the model would already refuse

    评估安全监视器并提出双侧梯级微调以减少会答有害请求的漏检

    Published
    Evaluated models
    Gemma-4-31B-IT, Qwen3-32B, Llama Guard 3 8B and others6

    Abstract论文发现安全监视器大多拦截模型已拒答请求,指出明确度偏差是共性原因,并通过双侧梯级微调提升回答请求的召回表现。

    Paper analysisRead analysis
  3. AttacksarXiv 2609.01023

    Akrasia:针对推理型代码 LLM 的隐蔽后门攻击

    提出隐蔽后门攻击 AKRASIA,在推理代码模型提示中植入触发器并伪装思维链

    Published
    Evaluated models
    Claude-Sonnet-5, GPT-5.5, Gemini-3.5-flash and others7

    Abstract论文针对推理代码大模型提出了隐蔽推断期后门攻击 AKRASIA,揭示了模型思维链可被利用进行欺骗性伪装的安全隐患。

    Paper analysisRead analysis
You have reached the end