Paper recorded by Signals 4 on 2026-10-22 in cs.CL. Abstract reproduced from arXiv; link to the original below.
Published 2026-10-22 on arXiv · recorded by Signals 4 on 2026-10-23
Category: cs.CL · 自然语言处理 · first seen 2026-10-23
\emph{Continuous-space} attacks find prompts that trigger malicious behaviors, such as overthinking, in black-box LLMs by sampling or optimizing over a low-dimensional Gaussian latent space and decoding it to text through a \emph{random mapping} and nearest-token lookup. Because the random mapping is not learned from language, its prompts can be highly unnatural, and as such easily detectable thro