Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 10 papers Another 265 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 FAB 攻击，向声学基础模型植入可由环境声触发的后门
Published Oct 7
Evaluated models HuBERT-base , WavLM-base Abstract 论文提出了针对声学基模的 FAB 后门攻击，在弱威胁模型下实现了任务无关、物理可触发的后门植入。
提出 PLW，用微调把先前对话敏感触发编码进后续生成图像
Published Oct 5
Evaluated models OmniGen2 , BAGEL-7B Abstract PLW 把先前对话线索写成后续图像中的隐水印，检出随触发、模型和间隔变化。
提出 BadAction，通过动作触发器给交互式视频生成植入后门
Published Sep 30
Evaluated models Astra (Wan2.1-T2V-1.3B) 提出 Information Blackhole 与 AGM，控制点云自编码器后门重建到指定形状
Published Sep 27
Evaluated models FoldingNet , PointDiffusion Abstract AGM 用自适应高斯匹配压制 PCAE 投毒潜码中的源几何，九组设置的 CD-ASD 均下降。这篇工作研究点云自编码器的训练时后门 ：干净输入仍自重建，带触发的输入应重建成攻击者指定形状。分类后门只需把预测推向离散标签。PCAE 把源几何与目标信息编进同一个连续潜空间，残留源几何会把重建拉回源形状。
提出量化条件后门 AGENTQ，使智能体仅在量化后触发恶意工具调用
Published Sep 13
Evaluated models Qwen3.5-2B , Qwen3.5-4B , Qwen3.5-9B and others6 Abstract 论文研究了智能体量化条件后门风险，提出 AGENTQ 在保持效用的同时实现全精度隐蔽与量化后生效。
提出 TrojanWorld，用物理触发器对世界模型智能体植入想象引导后门
Published Sep 7
Evaluated models TD-MPC2 , DreamerV3 , R2-Dreamer Abstract TrojanWorld 揭示了世界模型智能体的供应链后门风险，通过在世界模型中操纵想象可实现对闭环动作的持续控制。
梳理去护栏开源模型的生产、再分发与部署供应链
Published Sep 4 Abstract 这是一份去护栏模型供应链调查，作者将再分发层视为持续供给和下游部署的连接点。10a Labs 调查的是去护栏模型的公开供应链，而非去护栏技术的效果排行榜。 作者关注安全行为被移除后，模型如何继续被复制、转换并接入应用。
提出 RACER，用区域感知一致性对抗微调去除多模态大模型后门
Published Aug 25
Evaluated models LLaVA-1.5-7B , Qwen2-VL-7B , Qwen2.5-VL-7B 提出 Z-PEFT，用逐头谱特征零样本检测 PEFT 后门
Published Aug 3
Evaluated models Z-PEFT , Llama-2-7B , Llama-2-13B and others6 提出结构化 JSON 后门，经投毒 LoRA 在机器人控制中触发恶意动作
Published Apr 5
Evaluated models Llama-3.1-8B-Instruct , Gemma-2-9B-IT , DeepSeek-R1-Distill-Llama-8B and others4 You have reached the end