4 papers · 1 filter
Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher
Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu
Third-party skills can expose LLM agents to malicious instructions hidden by encoding. We introduce Ciphered Skill Injection (CSI), which embeds such instructions in skill files fo…
RAS: Measuring LLM Safety Through Refusal Alignment
Chang-Chieh Huang, Yan-Lun Chen, Chia-Mu Yu +1
Safety evaluation of large language models (LLMs) is commonly performed by querying models with unsafe or jailbreak prompts and judging whether their outputs violate a safety polic…
Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution
Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu +3
Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate model outputs through malicious retrieved documents. Existing detection meth…
IU: Imperceptible Universal Backdoor Attack
Hsin Lin, Yan-Lun Chen, Ren-Hung Hwang +1
Backdoor attacks pose a critical threat to the security of deep neural networks, yet existing efforts on universal backdoors often rely on visually salient patterns, making them ea…