activity
20212026
most citedRing-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?

4 citations · 12 across the 19 of their papers we have counts for

collaborators
Showing cs.CRShow all

8 papers · 1 filter

cs.CR2026

Diagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak Attacks

Yixin Tan, Chia-Yi Hsu, Jiayang Liu +2

Automated jailbreak attacks rely on evaluation feedback to optimize adversarial prompts, but existing methods often lack fine-grained diagnostic information. We propose Jev-Guided…

cs.CR2026

Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher

Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu

Third-party skills can expose LLM agents to malicious instructions hidden by encoding. We introduce Ciphered Skill Injection (CSI), which embeds such instructions in skill files fo…

cs.CR2026

Daydreaming: Stealing Hidden Agent Skills through Black-Box Task Interaction

Yu-Lin Tsai, Yu-An Lu, Ci-Yang Tsai +3

Agent skills bundle instructions, reference data, and executable helpers that let a general agent perform specialized tasks. Hosted providers can keep these files secret while sell…

cs.CR2026

RAS: Measuring LLM Safety Through Refusal Alignment

Chang-Chieh Huang, Yan-Lun Chen, Chia-Mu Yu +1

Safety evaluation of large language models (LLMs) is commonly performed by querying models with unsafe or jailbreak prompts and judging whether their outputs violate a safety polic…

cs.CR2026

CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts

Po-Han Cheng, Chia-Mu Yu, Ying-Dar Lin +2

Code large language models increasingly retrieve external code context from repositories, documentation, issue threads, and coding-agent environments, creating an indirect prompt-i…

cs.CR2026

Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution

Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu +3

Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate model outputs through malicious retrieved documents. Existing detection meth…

cs.CR2026

Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills

Yiyong Liu, Chia-Yi Hsu, Chun-Ying Huang +3

LLM-powered coding agents increasingly make software supply chain decisions. They generate imports, recommend packages, and write installation commands. Prior work showed that thes…

cs.CR2021

Real-World Adversarial Examples involving Makeup Application

Chang-Sheng Lin, Chia-Yi Hsu, Pin-Yu Chen +1

Deep neural networks have developed rapidly and have achieved outstanding performance in several tasks, such as image classification and natural language processing. However, recen…