{"id":"https://openalex.org/W4408354748","doi":"https://doi.org/10.1109/icassp49660.2025.10890715","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","display_name":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408354748","doi":"https://doi.org/10.1109/icassp49660.2025.10890715"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10890715","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10890715","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109599156","display_name":"Lijia Lv","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lijia Lv","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109483586","display_name":"Weigang Zhang","orcid":"https://orcid.org/0000-0001-6718-7218"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weigang Zhang","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047580108","display_name":"Xuehai Tang","orcid":"https://orcid.org/0000-0002-9901-4087"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuehai Tang","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039066179","display_name":"Jie Wen","orcid":"https://orcid.org/0000-0002-1439-080X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Wen","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115593859","display_name":"Feng Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Liu","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082300353","display_name":"Jizhong Han","orcid":"https://orcid.org/0000-0003-1107-3873"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jizhong Han","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018288181","display_name":"Songlin Hu","orcid":"https://orcid.org/0000-0002-7170-3809"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songlin Hu","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9537000060081482,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9537000060081482,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.942799985408783,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9187999963760376,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/position","display_name":"Position (finance)","score":0.49164897203445435},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.46766579151153564},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38773155212402344},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2962988018989563}],"concepts":[{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.49164897203445435},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46766579151153564},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38773155212402344},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2962988018989563},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10890715","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10890715","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1978394996","https://openalex.org/W4389523771","https://openalex.org/W4391724817","https://openalex.org/W4392904091","https://openalex.org/W4401042360","https://openalex.org/W4401615053","https://openalex.org/W4402671039","https://openalex.org/W6849904766","https://openalex.org/W6852874933","https://openalex.org/W6853646231","https://openalex.org/W6854866820","https://openalex.org/W6854948896","https://openalex.org/W6855447051","https://openalex.org/W6855469472","https://openalex.org/W6856601796","https://openalex.org/W6857241877","https://openalex.org/W6857257659","https://openalex.org/W6857320562","https://openalex.org/W6857463441","https://openalex.org/W6858685246","https://openalex.org/W6864454506","https://openalex.org/W6869164663","https://openalex.org/W6869270668"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Jailbreak":[0],"vulnerabilities":[1],"in":[2,54],"Large":[3],"Language":[4],"Models":[5],"(LLMs)":[6],"refer":[7],"to":[8,90,101,127],"methods":[9,50],"that":[10],"extract":[11],"malicious":[12],"content":[13],"from":[14,28],"the":[15,29,40,47,52,55,86,113,120],"model":[16,124],"by":[17,46,117],"carefully":[18],"crafting":[19],"prompts":[20],"or":[21],"suffixes,":[22],"which":[23,36],"has":[24],"garnered":[25],"significant":[26],"attention":[27],"research":[30],"community.":[31],"However,":[32],"traditional":[33],"attack":[34,75,114],"methods,":[35],"primarily":[37],"focus":[38],"on":[39,81,119],"semantic":[41],"level,":[42],"are":[43],"easily":[44],"detected":[45],"model.":[48],"These":[49],"overlook":[51],"difference":[53],"model\u2019s":[56,87],"alignment":[57],"protection":[58],"capabilities":[59,89],"at":[60],"different":[61],"output":[62,92],"stages.":[63],"To":[64],"address":[65],"this":[66],"issue,":[67],"we":[68],"propose":[69],"an":[70],"adaptive":[71],"position":[72],"pre-fill":[73],"jailbreak":[74,79],"approach":[76],"for":[77],"executing":[78],"attacks":[80],"LLMs.":[82],"Our":[83,130],"method":[84,110],"leverages":[85],"instruction-following":[88],"first":[91],"pre-filled":[93],"safe":[94],"content,":[95],"then":[96],"exploits":[97],"its":[98],"narrative-shifting":[99],"abilities":[100],"generate":[102],"harmful":[103],"content.":[104],"Extensive":[105],"black-box":[106],"experiments":[107],"demonstrate":[108],"our":[109],"can":[111,132],"improve":[112],"success":[115],"rate":[116],"47%":[118],"widely":[121],"recognized":[122],"secure":[123],"(Llama2)":[125],"compared":[126],"existing":[128],"approaches.":[129],"code":[131],"be":[133],"found":[134],"at:":[135],"https://github.com/Yummy416/AdaPPA.":[136]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}