Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter2

Attack technique

Encoding and obfuscation1Conversation structure manipulation1
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack technique：Conversation structure manipulationClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. InterpretabilityarXiv 2609.24801

    研究用 XAI 归因分析 Prompt Guard 2，同义词替换可翻转其提示注入判定

    用词级归因指导同义词替换，翻转提示注入检测并验证越狱

    arXiv
    2609.24801
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    Prompt Guard 2 (86M), Llama 3.1 8B

    Abstract作者称检测靠分散的词法线索。

    Paper analysisRead analysis
  2. InterpretabilityarXiv 2603.08234

    续写与拒答之争：大语言模型中续写触发越狱的机制分析

    分析续写触发越狱的注意力头机制并提出 HCS

    arXiv
    2603.08234
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    LLaMA-2-7B-Chat, Qwen2.5-7B-Instruct
    Abstract作者称越狱来自两类头竞争，HCS 加蒸馏可把该竞争用于推理时干预。

    作者用注意力头机制分析 continuation-triggered jailbreak：同一有害指令下，把 continuation 后缀从指令后面挪到提示词边界外，模型更容易顺着后缀继续生成。

    Paper analysisRead analysis
You have reached the end