Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter3

Defense type

Model hardening15Inference-time intervention43Detection and filtering7Instruction–data separation4Monitoring and auditing19Watermarking and provenance13

System type

Models and APIs3

Layer

Prompt layer5Model layer2Application layer53Infrastructure layer2
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
Defense type：Instruction–data separationLayer：Model layerLayer：Infrastructure layerClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. InterpretabilityarXiv 2610.13078

    Attention sees, MLP refuses: tracing the safety pathway from attention to MLP in LLMs

    Trace attention to identify harmfulness to the MLP refusal write pathway and propose Sentinel

    arXiv
    2610.13078
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    Llama-3.1-8B-Instruct, Qwen2.5-7B-Instruct, Qwen3-8B-Instruct and others18
    AbstractAttention updates are more readable for harmfulness, MLP updates write refusal, and Sentinel routes alerts using two-path signals.

    The authors reframe jailbreaking and excessive refusal of aligned models as a pathway problem on the residual stream from recognition to writing, and accordingly provide conditional reminders before decoding.

    Paper analysisRead analysis
  3. DefensesarXiv 2608.25431

    GIFT: Enforcing User Data Isolation in LLM Serving via GPU Information Flow Tracking

    Propose GIFT, isolating user data in shared LLM serving using encryption and GPU information flow tracking

    arXiv
    2608.25431
    Published
    Layer
    Infrastructure layer
    Setting
    Models and APIs
    Evaluated models
    Qwen2.5-14B, Qwen2.5-32B, Qwen2.5-72B and others6
    AbstractGIFT uses cryptographic isolation plus GPU information flow rules to enforce user data isolation on vLLM and DistServe, and reports throughput overhead.

    GIFT is the authors' user data isolation system for shared LLM serving, with GIFT-CC enabling confidential computing. In the conclusion, the authors state it is the first IFT design for this scenario.

    Paper analysisRead analysis
  4. Analysis and theoryarXiv 2506.06404

    研究揭示价值对齐 LLM 的意外危害并提出上下文对齐方法

    分析按 Schwartz 价值对齐后的意外危害，并提出上下文对齐方法

    arXiv
    2506.06404
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    Llama-2 7B, Llama-3.1 8B, Gemma-2 9B and others6
    Abstract价值对齐会随 Schwartz 价值改变有害倾向。

    作者研究按 Schwartz 价值对齐的 LLM 为何在安全评测里更易有害，并用提示做了一个不直说要安全的缓解试验。

    Paper analysisRead analysis
You have reached the end