Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 11 papers
Filter4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.

Another 232papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.07276

    SAFESHIELD:小语言模型部署时安全的决策组织框架

    提出 SAFESHIELD,组织小语言模型部署时的安全决策

    Published
    Evaluated models
    Qwen3-4B-Instruct
    AbstractSAFESHIELD 用可审计决策轨迹组织 SLM 部署时的四项安全决策,并报告协调依赖影响端到端结果。

    SAFESHIELD 是面向小语言模型的部署时安全框架,把运行时安全从单项审核改写成可检查的决策过程。

    Paper analysisRead analysis
  2. DefensesarXiv 2609.36657

    Constitutional adapters:用推理期干预防御越狱与失准

    提出 Constitutional adapters,蒸馏宪法行为以缓解越狱与失准

    Published
    Evaluated models
    Qwen3.5-4B, Llama-3.1-8B-Instruct, Gemma-4-E4B and others4

    Abstract差分宪法适配器在长上下文和多轮上更稳,并可按 α 换取遵从。

    Paper analysisRead analysis
  3. Cave-Bench:虚假指控下 LLM 智能体最高 60.06% 的运行会破坏正确工作

    提出 CAVE-BENCH,评测智能体在虚假指责下破坏已完成的正确工作

    Published
    Evaluated models
    Claude-Sonnet-5, Claude-Opus-5, GPT-5.6-Sol and others14

    Abstract论文提出了评估智能体在虚假指责下破坏已有正确成果的 CAVE-BENCH,发现强模型易推翻已知证据,提出了门控缓解方案。

    Paper analysisRead analysis
  4. Jev 被用于零样本检测十类对齐失败,中位 AUROC 达 0.886

    提出 RLCDAlignBench,零样本检测多种对齐失败

    Published
    Evaluated models
    Jev (jev-1.13.0)
    Abstract一次通用问题已能给多数对齐失败排序,大的误差来自状态和标签。

    RLCDAlignBench 测量用强化学习做校准决策的 Jev,能否当作对齐失败的零样本检测器。

    Paper analysisRead analysis
  5. DefensesarXiv 2609.24165

    APEXA 为同步辐射数据处理的 LLM 多智能体加装执行完整性护栏

    提出 APEXA,在工具层拒绝无执行支撑的结果并拦截电机命令

    Published
    Evaluated models
    GPT-5-mini, GPT-5.4, Claude Opus 4.7 and others4
    Abstract作者称执行是否发生要由工具层核对,而不能只靠提示词。

    APEXA 是先进光子源上的数据还原框架,用工具层代码约束语言模型智能体的工具调用。

    Paper analysisRead analysis
  6. Emergence World:对长时程多智能体系统开展对抗压力测试

    提出 Emergence World,对长时程多智能体系统开展对抗压力测试

    Published
    Evaluated models
    Claude Opus 4.8, DeepSeek v4 Pro, Gemini 3.5 Flash and others9

    Abstract作者通过长期平行世界实验指出模型对齐不具备可组合性,单模型群体会产生社会奉承、协同退缩及语言不透明等失效。

    Paper analysisRead analysis
  7. 论文揭示大推理模型的对齐崩溃并提出 Reasoning Trap 越狱范式

    揭示推理加深引发的对齐坍塌,用 Reasoning Trap 放大越狱

    Published
    Evaluated models
    Qwen3-8B, Qwen3-14B, Llama2-7B and others8
    Abstract更深推理提升题目准确率,同时提高扰动下的相对损失。

    作者研究扩展推理是否以对齐稳健性为代价,提出 ALR、RT 与 RRA。。

    Paper analysisRead analysis
  8. aiXamine:跨维度评测 LLM 安全、安全(security)与隐私权衡

    提出 aiXamine 黑盒基准,统一评测 LLM 安全、稳健与隐私权衡

    Published
    Evaluated models
    openai/gpt-5-mini, openai/gpt-4o, anthropic/claude-haiku-4.5 and others15
    AbstractaiXamine 用九服务黑盒协议比较百余个模型,作者称单轴信任度进展可能削弱其他轴。

    aiXamine 是一套黑盒评测协议,用来在同一条件下比较 LLM 的 safety、security 与 privacy,而不是再产出一个能力分。

    Paper analysisRead analysis
  9. DefensesarXiv 2607.24017

    多模态大模型注意力中的语义与结构偏差解耦:SPAR 免训练干预方法

    提出 SPAR 免训练注意力干预,削弱多模态模型的结构偏置

    Published
    Evaluated models
    LLaVA-1.5-7B, LLaVA-NeXT
    AbstractSPAR 以结构偏置净化缓解视觉幻觉,结果需区分误导后收益与原始任务例外。

    SPAR 是一种无需训练、直接修改多模态内部注意力的幻觉防御。 作者关注视觉信息被查询不变的注意力偏置稀释,以及误导文本进一步推动模型依赖语言先验的问题。

    Paper analysisRead analysis
  10. DefensesarXiv 2603.04474

    From Spark to Wildfire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration

    Proposing a lineage-graph governance layer to suppress error cascades in multi-agent collaboration

    Published
    AbstractA single seed can solidify into a false consensus along a fixed collaboration graph.

    The authors turn "small errors becoming collective false consensus" in LLM-MAS into a measurable propagation on a graph, and use a plug-in that only changes messages, not topology, to reduce the final infection.

    Paper analysisRead analysis
  11. Red-teaming Claude Opus and ChatGPT security advisors for trusted execution environments

    Evaluating mechanism hallucination and prompt-induced failures in TEE advisors using TEE-REDBENCH

    Published
    Evaluated models
    ChatGPT-5.2, Claude Opus-4.6
    AbstractThe authors used TEE-REDBENCH to test two advisors, stating that failures are transferable and that pipeline controls can reduce their occurrence rate.

    TEE-REDBENCH red-teaming evaluation is used on ChatGPT-5.2 and Claude Opus-4.6 as security advisors for Intel SGX and Arm TrustZone, examining architecture reasoning, remote attestation semantics, mitigation suggestions, and refusals under policy constraints, and testing whether prompt-induced failures transfer across assistants. The authors treat the assistants as stochastic policies.

    Paper analysisRead analysis
You have reached the end