11 papers
RAS: Measuring LLM Safety Through Refusal Alignment
Chang-Chieh Huang, Yan-Lun Chen, Chia-Mu Yu +1
Safety evaluation of large language models (LLMs) is commonly performed by querying models with unsafe or jailbreak prompts and judging whether their outputs violate a safety polic…
Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution
Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu +3
Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate model outputs through malicious retrieved documents. Existing detection meth…
CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts
Po-Han Cheng, Chia-Mu Yu, Ying-Dar Lin +2
Code large language models increasingly retrieve external code context from repositories, documentation, issue threads, and coding-agent environments, creating an indirect prompt-i…
Hidden Thoughts Are Not Secret: Reasoning Trace Exposure in LLMs
Yu-An Lu, Ci-Yang Tsai, Yu-Lin Tsai +2
Reasoning traces have become a valuable form of learning signals for improving and transferring the capabilities of large language models. In particular, detailed traces can help d…
Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills
Yiyong Liu, Chia-Yi Hsu, Chun-Ying Huang +3
LLM-powered coding agents increasingly make software supply chain decisions. They generate imports, recommend packages, and write installation commands. Prior work showed that thes…
Model Reprogramming Demystified: A Neural Tangent Kernel Perspective
Ming-Yu Chung, Jiashuo Fan, Hancheng Ye +5
Model Reprogramming (MR) is a resource-efficient framework that adapts large pre-trained models to new tasks with minimal additional parameters and data, offering a promising solut…