Another 233papers do not have category tags yet and are not included in filtered results.
Proposes SAFE-QE, which filters unsupported hallucinated words in LLM query expansion
AbstractSAFE-QE suppresses expansion hallucinations with reproducibility and coverage selection; the authors say ranking quality shows no visible cost.
Propose KVeil, which adds perturbations to face videos to prevent unauthorized customization from reproducing identity
AbstractKVeil adapts LETHE's reference-reading disruption to the challenge's two stages, ranking first on the leaderboard in both Final columns.
Proposes SWE-DeceptionBench to evaluate LLM deception in the software development lifecycle
Proposes LETHE, which perturbs reference images to block unauthorized image-to-video
LETHE is a protective perturbation added to personal images before publication, used to counter unauthorized image-to-video generation.
Proposing DRYLAB-Bench to evaluate agentic LLMs' high-risk mutation design capability
Trace attention to identify harmfulness to the MLP refusal write pathway and propose Sentinel
The authors reframe jailbreaking and excessive refusal of aligned models as a pathway problem on the residual stream from recognition to writing, and accordingly provide conditional reminders before decoding.
Auditing training labels for label-only backdoors, comparing spaces and statistics, and judging by retraining
The authors ask: can a defender without trusted data decide which training labels to keep, and how much clean data this destroys, and what the final model accuracy is.
Proposes the Cancerous backdoor, which progressively corrupts reasoning using invisible stage tokens.
Cancerous Backdoor Attack changes LLM backdoors from one-time activation to multi-stage reasoning corruption that accumulates progressively with triggers.
Proposes the ISE framework to evaluate the epistemic humility of LLM agents under knowledge conflicts
What the authors want to test is not whether the agent's final answer is correct, but whether, when a knowledge conflict arises, it recognizes the gap in its trajectory, performs bounded tool follow-up, and writes the unresolved uncertainty to the user.
Diagnose whether compliance system rulings change with perturbations to regulatory rules
Use behavioral counterfactuals and activation probes to audit whether compliance rulings rely on the given rules. The authors aim to separate two kinds of seemingly identical correct rulings: those that use the given rules, and those obtained from case surface features or training patterns.
Proposes ReSI, which recursively improves model safety alignment using automatic red teaming and recipe search.
Analyzing why optimizing teaching adaptation metrics collapses tutoring choices and diverges from expert judgment
After turning teaching adaptation metrics into a fine-tuning objective, the metrics rise while scores from trained educators decline.
Using fear activation steering to test the hazard judgment criteria of vision-language models
Proposes LGWM, using an action-conditioned world model to verify GUI agent screen transitions.
Measures citation fragility in AI search, demonstrating that ordinary public posts can enter citations and answers.
AbstractThe authors claim the paper quantifies vulnerabilities in AI search caused by citation preferences and low posting thresholds; tests show public web posts can penetrate AI citations, and they call for auditing the citation supply chain.
提出 IRIS，用意图恢复率区分遮蔽越狱下无害输出的原因
IRIS 把意图恢复当作中间信号，用来解释意图遮蔽提示下为何没有出现有害协助。
提出 LTBD，用可学习分隔符隔离可信指令与不可信数据
LTBD 是一种不改基座权重的提示注入防御：只学习用来标出可信指令与不可信数据边界的四个 token 嵌入。
提出 SSCBench，评测工具调用 Agent 故障注入测试的证据有效性
SSCBench 研究工具使用智能体的故障注入结果，在什么证据条件下可以被解释。
提出 RL-ARC，用推理置信度在强化学习中校准推理模型
RL-ARC 是校准感知的强化学习框架，用推理过程的口头置信度调节答案置信度。
用 BeliefScope 分离固定命题上证据与压力对模型信念的影响
BeliefScope 是一个黑盒行为诊断框架，用来把固定命题上的回答变化拆成证据驱动的修正，和不加新事实的方向性压力。信念修正评测能看到信息基础变化后的更新，谄媚评测能看到用户影响下的顺从或漂移。作者认为，当两种输入都偏向同一结论时，表面偏移本身不能区分来源。