Some text is shown in its original language while the English translation is being prepared.
Oct 12 · Monday
All papers Found 13 papers Another 336 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Organized first” shows papers with tags or public deep readings first. Each group is ordered by original publication date, newest first, with undated papers last. “Latest publication” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and deep readings are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出推理通道预填与输出前缀组合攻击以越狱推理模型
Published Sep 24
Evaluated models Gemini 3 Flash Preview 、 DeepSeek V4 Flash 、 Claude Haiku 4.5 提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控
Published Sep 23
Evaluated models openai/gpt-oss-20b 、 google/gemma-4-26B-A4B-it 、 deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4 Abstract 论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。
提出 plan injection 攻击，植入良性伪装计划以绕过思维链监视器
Published Sep 15
Evaluated models Qwen2.5-Coder-7B-Instruct 、 Qwen3-8B 、 DeepSeek-R1-0528 and others6 Abstract 论文指出模型会将外部上下文中的伪装计划改写为自身推理，使思维链监视器失效甚至反向合理化恶意行为。
提出任意字母置换密码越狱，无需微调即可诱导有害输出
Published Sep 9
Evaluated models Claude Sonnet 4 、 Claude Sonnet 4.5 、 Gemini 3 Flash (preview) and others7 Abstract 前沿大模型无需微调即可通过提示词学会字母置换密码，进而绕过分类器与对齐，作者呼吁关注能力提升带来的安全风险。
揭示推理加深引发的对齐坍塌，用 Reasoning Trap 放大越狱
Published Sep 8
Evaluated models Qwen3-8B 、 Qwen3-14B 、 Llama2-7B and others8 Abstract 更深推理提升题目准确率，同时提高扰动下的相对损失。作者研究扩展推理是否以对齐稳健性为代价，提出 ALR、RT 与 RRA。 。
提出隐蔽后门攻击 AKRASIA，在推理代码模型提示中植入触发器并伪装思维链
Published Sep 1
Evaluated models Claude-Sonnet-5 、 GPT-5.5 、 Gemini-3.5-flash and others7 Abstract 论文针对推理代码大模型提出了隐蔽推断期后门攻击 AKRASIA，揭示了模型思维链可被利用进行欺骗性伪装的安全隐患。
利用加密思维块的跨模型重放，诱导弱模型逐字转写专有推理链
Published Aug 11
Evaluated models Claude Opus 4.8 、 Claude Sonnet 4.6 、 Claude Haiku 4.5 and others13 Abstract 论文揭示了客户端加密思维块跨模型互换漏洞，提出了低成本提取方法并给出防御方案。
提出针对 Agent 护栏的推理扩展拒绝服务攻击
Published Jun 12
Evaluated models TS-Guard-8B 、 Qwen3.5-9B 、 DeepSeek-V3.2 and others11 提出层级遗传算法 HGA，扰动题目逻辑结构诱发推理模型过度思考
Published May 13
Evaluated models DeepSeek-R1 (671B) 、 Qwen3-Thinking 、 GPT-o3 and others5 Abstract HGA 在黑盒推理模型上用逻辑扰动拉长输出，作者称可从小代理迁移，查询成本是其局限。
提出 AdversarialCoT 单文档检索投毒以操纵 RAG 推理答案
Published Apr 14
Evaluated models DeepSeek-R1 、 Qwen3 、 GLM4.5 and others5 Attacks arXiv 2512.05853 · Dec 6, 2025 提出视觉推理序列攻击 VRSA，以图像序列越狱多模态大模型
Published Dec 6, 2025
Evaluated models DeepSeek-VL2-tiny 、 InternVL-3.5-8B 、 LLaVA-1.6-Mistral-7B and others8 Attacks arXiv 2510.17904 · Oct 19, 2025 提出 BreakFun ，用模拟代码执行中的对象实例化越狱模型
Published Oct 19, 2025
Evaluated models GPT-4.1 Mini 、 Gemini 2.5 Flash 、 Claude-3.5 Sonnet and others16 Attacks arXiv 2510.11570 · Oct 14, 2025 提出四种阶段转换攻击，绕过推理模型的安全推理护栏
Published Oct 14, 2025
Evaluated models gpt-oss-20b 、 gpt-oss-120b 、 Qwen3-4B-Thinking-2507 and others10 You have reached the end