ControlPed 生成逼真行人危险动作场景，七款端到端驾驶模型 HDScore 从 88.8 降至 47.4
提出 ControlPed 与 HazardPed，生成可控行人危险场景并评测端到端驾驶
- arXiv
- 2610.06171
- Published
- Layer
- Model layer
- Evaluated models
- DiffusionDrive, SSR, VAD and others7
- ComponentVideo
All papers
Filter3
Attack type
Impact
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 262papers have no tags yet and are not included in filtered results.
Another 262papers do not have category tags yet and are not included in filtered results.
- AttacksarXiv 2607.25936
研究提出 RolePlay 框架：利用人设条件放大 LLM 推理成本
提出 RolePlay 框架，用人设条件放大 LLM 单次推理开销
- arXiv
- 2607.25936
- Published
- Layer
- Prompt layer
- Setting
- Models and APIs
- Attacker
- Black-box
- Evaluated models
- DeepSeek-V4-Pro, Gemini-3.5-Flash, Qwen-3.5-Plus and others5
- AttacksDenial of service
- TechniqueRole-play and persuasion
- ComponentReasoning chains
- AttacksarXiv 2606.14517
Researchers disclose a reasoning-amplified denial-of-service attack against LLM agent guardrails
提出针对 Agent 护栏的推理扩展拒绝服务攻击
- arXiv
- 2606.14517
- Published
- Layer
- Application layer
- Setting
- AI Agent
- Attacker
- Black-box
- Evaluated models
- TS-Guard-8B, Qwen3.5-9B, DeepSeek-V3.2 and others11
- AttacksDenial of service
- TechniqueReasoning-chain manipulation
- ComponentGuardrails and judges
- AttacksarXiv 2605.30040
研究揭示 LLM 按 token 计费可被服务商系统性虚报
构造可通过计费审计的 token 虚报，使服务商系统性超收
- arXiv
- 2605.30040
- Published
- Layer
- Infrastructure layer
- Setting
- Models and APIs
- Evaluated models
- PALACE domain-adapted auditor
- AttacksDetection evasion
- TechniqueDefense-targeted
- ComponentMonitors
Abstract不诚实提供方可在三种 token 审计上虚报并通过检查，作者认为需改用提供方不控制的证据。
不透明 LLM 的按 token 计费里，现有审计核验的是提供方可控的证据，不诚实提供方可以虚报并通过检查。。
- AttacksarXiv 2605.13338
研究者提出层级遗传算法黑盒攻击，诱导推理模型过度思考
提出层级遗传算法 HGA，扰动题目逻辑结构诱发推理模型过度思考
- arXiv
- 2605.13338
- Published
- Layer
- Prompt layer
- Setting
- Models and APIs
- Attacker
- Black-box
- Evaluated models
- DeepSeek-R1 (671B), Qwen3-Thinking, GPT-o3 and others5
- AttacksDenial of service
- TechniqueAutomated search
- ComponentReasoning chains
AbstractHGA 在黑盒推理模型上用逻辑扰动拉长输出，作者称可从小代理迁移，查询成本是其局限。
VideoSTF 揭示视频大模型输出重复问题
提出 VIDEO STF 评测视频大模型输出重复并压力测试时序扰动
- arXiv
- 2602.10639
- Published
- Layer
- Prompt layer
- Setting
- Models and APIs
- Evaluated models
- LLaVA-Video-7B-Qwen2, LLaVA-Video-7B-Qwen2-Video-Only, LLaVA-NeXT-Video-7B and others10
- AttacksDenial of service
- ComponentVideo
AbstractVIDEO STF 把输出重复做成可测、可被时间扰动放大、并可黑盒诱导的失败。
VIDEO STF 测量 VideoLLM 的输出重复，并把时间变换用作 black-box 诱导。
You have reached the end