Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.

Defense type：Detection and filtering System type：Models and APIs Clear all

Another 265papers do not have category tags yet and are not included in filtered results.

DefensesarXiv 2610.07532Oct 6
LADE：用暗知识中的模型无关潜在安全信号防御 LLM 越狱
提出 LADE，用首 token 暗知识在生成前过滤越狱查询
arXiv
2610.07532
Published
Oct 6
Layer
Prompt layer
Setting
Models and APIs
Attacker
White-box
Evaluated models
Llama-2-7B-Chat, Llama-3-8B-Instruct, Qwen2-7B-Instruct and others13
- DefensesDetection and filtering
- AttacksJailbreaks
Abstract作者用 LADE 在生成前过滤有害查询，并称八个模型中六个的 Held-out 平均最好。
LADE 是一种只读首 token 输出概率的防御，用来在生成前挡下可能引出有害回复的查询。
Paper analysisRead analysis
DefensesarXiv 2610.03073Oct 2
SecJev：为 System One 决策模型引入安全专业知识
提出 SecJev，用场景加权训练把决策模型适配为安全类型化判断
arXiv
2610.03073
Published
Oct 2
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
SecJev-0.8B, SecJev-2B, SecJev-4B and others4
- DefensesDetection and filtering
- AttacksPrompt injection
- ComponentGuardrails and judges
AbstractSecJev 用共享打分器做安全决策，0.8B 的 task-macro 超过 Kev-9B。
SecJev 是 0.8B 到 9B 的安全决策模型族，作者称据其所知是首个面向安全的 Jev-like 家族。
Paper analysisRead analysis
DefensesarXiv 2610.02853Oct 2
研究提出基于收缩约束状态空间模型的有界可达性与越狱检测方法
提出收缩约束 SSM 安全头，认证嵌入扰动并检测越狱
arXiv
2610.02853
Published
Oct 2
Layer
Prompt layer
Setting
Models and APIs
Attacker
White-box, Black-box
Evaluated models
ToySSMClassifier, S4 safety head
- DefensesDetection and filtering
- AttacksJailbreaks
- ComponentGuardrails and judges
Abstract收缩给出玩具 LTI 的有界认证。
给 SSM 安全头一个收缩条件，并在越狱检测上使用收缩正则的 S4 头。。
Paper analysisRead analysis
DefensesarXiv 2610.01788Oct 1
SAGE：基于相似度从少量已验证样本中清洗中毒训练数据
提出 SAGE，用少量已核验样本按相似度清洗投毒训练数据
arXiv
2610.01788
Published
Oct 1
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
ResNet-18, VGG-16
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
Paper analysisRead analysis
DefensesarXiv 2610.01058Oct 1
MOMAT：面向量化 LLM 低功耗越狱防御的多图集混合框架
提出 MOMAT 多图集检索与轻量判定，防御量化模型越狱
arXiv
2610.01058
Published
Oct 1
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Llama2-13B, Llama2-7B, Mistral-7B
- DefensesDetection and filtering
- AttacksJailbreaks
- ComponentGuardrails and judges
Paper analysisRead analysis
DefensesarXiv 2610.00883Oct 1
DeBERTa-ConPara：面向部署的 AI 生成文本检测，推理端 Unicode 归一化提升对抗鲁棒性
提出推理时 Unicode 归一化的检测器，识别遭字符级扰动的 AI 生成文本
arXiv
2610.00883
Published
Oct 1
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
microsoft/deberta-v3-large, deberta-v3-base, bert-large-cased and others4
- DefensesDetection and filtering
- AttacksDetection evasion
- ComponentGuardrails and judges
Abstract推理时归一化消除两类 Unicode 攻击，训练时归一化则会删掉对抗监督。
DeBERTa-ConPara 是一个面向部署的 AI 文本检测器：DeBERTa-v3-large 在多数据集原始文本上训练，推理前做确定性 Unicode 归一化，用一个固定阈值面对没有目标域标签的场景。
Paper analysisRead analysis
DefensesarXiv 2609.39107Sep 30
MASCRDM：面向大语言模型训练过程的合规风险检测与缓解多智能体系统
提出 MASCRDM，在监督微调中实时检测并缓解偏见
arXiv
2609.39107
Published
Sep 30
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
Qwen3-8B-Base, Llama-3.1-8B
- DefensesModel hardening
- RiskBias and discrimination
AbstractMASCRDM 在 SFT 中按法规图谱检测数据、结构与损失风险，BBQ 总准确率在两模型上最高。
MASCRDM 把 AI 法律规章编成知识图谱，再由五个智能体在 LLM 训练中做实时合规检测与缓解，实验以偏见与歧视为代表风险。
Paper analysisRead analysis
DefensesarXiv 2609.36641Sep 29
从仅结果奖励的强化学习中诱导过程监督
提出 TIPS，用仅结果奖励诱导生成式过程监督
arXiv
2609.36641
Published
Sep 29
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
Qwen3-4B-Thinking-2507, Qwen3-4B-Instruct-2507, Qwen3-8B-Thinking and others8
- DefensesDetection and filtering
- ComponentGuardrails and judges
Abstract结果监督的 GRPO 可诱导步骤验证。
TIPS 用只含结果对错的强化学习训练生成式奖励模型，让步骤级验证出现在思维链里。
Paper analysisRead analysis
DefensesarXiv 2609.36562Sep 29
ThinkingGuard：通过逐步风险归因解码多模态大语言模型中的隐式危害
构建 TriggerBench 并训练 ThinkingGuard，检测图文隐式风险
arXiv
2609.36562
Published
Sep 29
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
ThinkingGuard（Qwen3-VL-8B-Instruct）
- DefensesDetection and filtering
- AttacksJailbreaks
- ComponentGuardrails and judges
AbstractTriggerBench 隔离触发条件，ThinkingGuard 用分步归因在隐式风险检测上取得作者报告的较高平均分。
这篇工作研究多模态隐式风险检测：图文各自良性，风险只在关键元素与触发元素交互时出现。
Paper analysisRead analysis
DefensesarXiv 2609.38239Sep 29
推理层安全：防御对抗性推理与基础设施滥用
用 SCM 合成会话并训练检测器识别推理层滥用
arXiv
2609.38239
Published
Sep 29
Layer
Infrastructure layer
Setting
Models and APIs
Evaluated models
gradient-boosted detector (GBDT/XGBoost)
- DefensesDetection and filtering
- AttacksJailbreaks
Paper analysisRead analysis
DefensesarXiv 2609.34804Sep 28
物理认证联邦学习：为关键水务基础设施的协同异常检测提供安全保障
为协同异常检测提出物理准入门，在聚合前拦截不合规训练批次
arXiv
2609.34804
Published
Sep 28
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
deep reconstruction autoencoder
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
Abstract物理准入为联邦检测增加数据约束，但合规证明不等于无投毒或训练来源证明。
这是一项面向水基础设施联邦异常检测的物理准入防御研究。 作者针对隐藏训练遥测带来的投毒检查问题，结合不变量挖掘、聚合前过滤和零知识抽样证明。
Paper analysisRead analysis
DefensesarXiv 2609.27124Sep 23
Fed-ADR：用恶意编排服务器协同客户端梯度操纵攻击联邦学习
提出 Fed-ADR，用编排服务器协同操纵梯度攻破联邦学习并检测恢复
arXiv
2609.27124
Published
Sep 23
Layer
Training and data layer
Setting
Models and APIs
Attacker
Gray-box
Evaluated models
CNN（MNIST：2 Conv + 3 FC）, CNN（Fashion-MNIST：6 Conv + 1 FC）, ResNet18（CIFAR-10）
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
- TechniqueDefense-targeted
AbstractFed-ADR 用 gray-box 编排攻击绕过多种聚合防御，再用 Hessian 一致性检测和窗口内恢复把准确率拉回。
Fed-ADR 是一套面向联邦学习的攻击、检测与恢复框架：编排服务器改写合谋客户端的梯度，使参数服务器的现有防御把投毒更新当成良性，同时在发现后用历史梯度把全局模型原地修回来。
Paper analysisRead analysis
DefensesarXiv 2609.21484Sep 18
HE-Guardrail：面向加密大模型推理的同态护栏防御越狱攻击
提出 HE-Guardrail，在密文推理中评估越狱护栏并门控回复
arXiv
2609.21484
Published
Sep 18
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Llama-3-8B-Instruct, Llama Guard 3-8B
- DefensesDetection and filtering
- AttacksJailbreaks
- ComponentGuardrails and judges
Abstract密文护栏门控 HE-LLM 回复。
把越狱护栏装进同态加密 LLM 推理：服务器不解密，也能按安全决策决定客户端看到目标回复还是拒绝回复。
Paper analysisRead analysis
DefensesarXiv 2609.31694Sep 18
RemTraceNet：不可见水印攻击的少样本取证检测
提出 RemTraceNet，少样本识别图像是否经过指定去除流水线
arXiv
2609.31694
Published
Sep 18
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
RemTraceNet
- DefensesDetection and filtering
- AttacksDetection evasion
Paper analysisRead analysis
DefensesarXiv 2609.10613Sep 8
后验重加权框架解释并缓解多模态大模型上下文越狱
用后验重加权解释多模态上下文越狱，并提出风险门控的良性示例注入防御
arXiv
2609.10613
Published
Sep 8
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Qwen3-VL-2B, Qwen3-VL-4B, Qwen3-VL-8B and others8
- DefensesInstruction–data separation
- AttacksJailbreaks
- ComponentVision
Abstract后验重加权解释上下文越狱的缩放，并支持风险门控的良性示例防御。
Zhang 等把多模态 ICL 越狱写成对齐模型在安全与有害隐模式之间的推理时后验漂移，并据此做风险门控防御。
Paper analysisRead analysis
DefensesarXiv 2609.07063Sep 7
VERITAS：抗投毒的本地差分隐私图学习协议
提出 VERITAS，用双边背书剪除本地隐私图学习中的投毒节点
arXiv
2609.07063
Published
Sep 7
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
GCN, GraphSAGE, GAT
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
AbstractVERITAS 用分级信任的双边背书剪除 LDP 图学习中的投毒节点，并恢复分类准确率。
VERITAS 是面向本地差分隐私图学习的投毒防御协议，按 trust-but-verify 在保持 ϵ-LDP 的同时剪除伪造节点。
Paper analysisRead analysis
DefensesarXiv 2609.06540Sep 6
SRD-GUARD：通过语义改写与多模型联合评分暴露潜在意图的 LLM 防御框架
提出 SRD-GUARD，以语义改写与多模型联合评分拦截包装式越狱
arXiv
2609.06540
Published
Sep 6
Layer
Prompt layer
Setting
Models and APIs
Attacker
Black-box
Evaluated models
Llama-3-8B-Uncensored, DeepSeek-V4-Flash
- DefensesDetection and filtering
- AttacksJailbreaks
- ComponentGuardrails and judges
Paper analysisRead analysis
DefensesarXiv 2609.06346Sep 6
面向后门攻击下持续学习的鲁棒动态扩展：净化与选择性恢复
提出持续学习下的净化与选择性恢复框架，抵御逐任务训练投毒后门
arXiv
2609.06346
Published
Sep 6
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
ViT-B/16
- DefensesModel hardening
- AttacksPoisoning and backdoors
- ComponentVision
Abstract作者报告任务内净化与恢复可配合动态专家防御后门，但保证依赖分离条件。
这是一项面向持续图像分类的后门防御研究：模型只使用当前任务数据，同时需要保留过去知识并避免学习恶意监督。
Paper analysisRead analysis
DefensesarXiv 2609.05797Sep 5
论文发现安全监控器主要拦截模型本就会拒答的请求
评估安全监视器并提出双侧梯级微调以减少会答有害请求的漏检
arXiv
2609.05797
Published
Sep 5
Layer
Prompt layer
Setting
Models and APIs
Evaluated models
Gemma-4-31B-IT, Qwen3-32B, Llama Guard 3 8B and others6
- DefensesDetection and filtering
- RiskInappropriate refusal
- ComponentGuardrails and judges
Abstract论文发现安全监视器大多拦截模型已拒答请求，指出明确度偏差是共性原因，并通过双侧梯级微调提升回答请求的召回表现。
Paper analysisRead analysis
DefensesarXiv 2609.27760Sep 4
FedMAST：用多轴结构痕迹检测并遏制联邦学习后门
提出 FedMAST，用多轴结构痕迹检测并遏制联邦学习后门
arXiv
2609.27760
Published
Sep 4
Layer
Training and data layer
Setting
Models and APIs
Evaluated models
Tiny ResNet-18
- DefensesDetection and filtering
- AttacksPoisoning and backdoors
Paper analysisRead analysis

AI Safety Daily

Read the latest issueOne issue per day, updated as events develop