{"id":"https://openalex.org/W7129054643","doi":"https://doi.org/10.1109/tdsc.2026.3665230","title":"RedAgent: An Autonomous Agent for Context-Aware Red Teaming of LLM Jailbreaks","display_name":"RedAgent: An Autonomous Agent for Context-Aware Red Teaming of LLM Jailbreaks","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7129054643","doi":"https://doi.org/10.1109/tdsc.2026.3665230"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3665230","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3665230","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014335948","display_name":"X. Xu","orcid":"https://orcid.org/0000-0002-8148-3539"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huiyu Xu","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3797-846X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126154286","display_name":"Wenhui Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhui Zhang","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100376381","display_name":"Zhi Wang","orcid":"https://orcid.org/0000-0002-0490-2031"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhibo Wang","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5804-3279","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126103116","display_name":"Feng Xiao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210108451","display_name":"Palo Alto Networks (United States)","ror":"https://ror.org/01rn6rn86","country_code":"US","type":"company","lineage":["https://openalex.org/I4210108451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feng Xiao","raw_affiliation_strings":["Palo Alto Networks, Santa Clara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Palo Alto Networks, Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210108451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013294440","display_name":"Rui Zheng","orcid":"https://orcid.org/0000-0001-5906-0081"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Zheng","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9592-3283","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072485378","display_name":"Zhongjie Ba","orcid":"https://orcid.org/0000-0003-0921-8869"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongjie Ba","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0921-8869","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1969-2591","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.1051,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96873968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"23","issue":"3","first_page":"6506","last_page":"6521"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.20679999887943268,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.20679999887943268,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.06949999928474426,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.062199998646974564,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/rewriting","display_name":"Rewriting","score":0.713100016117096},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6373999714851379},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5559999942779541},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.45080000162124634},{"id":"https://openalex.org/keywords/ubiquitous-computing","display_name":"Ubiquitous computing","score":0.36980000138282776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7932999730110168},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.713100016117096},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6373999714851379},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5559999942779541},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.45899999141693115},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.45080000162124634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43299999833106995},{"id":"https://openalex.org/C172195944","wikidata":"https://www.wikidata.org/wiki/Q541265","display_name":"Ubiquitous computing","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C135257023","wikidata":"https://www.wikidata.org/wiki/Q691358","display_name":"Domain-specific language","level":2,"score":0.3244999945163727},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3156999945640564},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.31439998745918274},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2721000015735626}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3665230","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3665230","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.661572277545929,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1069707572","display_name":null,"funder_award_id":"252300423351","funder_id":"https://openalex.org/F4320322866","funder_display_name":"Natural Science Foundation of Hainan Province"},{"id":"https://openalex.org/G6554973059","display_name":null,"funder_award_id":"ZR2023LZH018","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G8999494135","display_name":null,"funder_award_id":"U24B20182","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322866","display_name":"Natural Science Foundation of Hainan Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2026751516","https://openalex.org/W4385452929","https://openalex.org/W4387835442","https://openalex.org/W4389518968","https://openalex.org/W4389523771","https://openalex.org/W4396723768","https://openalex.org/W4401615053","https://openalex.org/W4402671039","https://openalex.org/W4402671155","https://openalex.org/W4404782326","https://openalex.org/W4405181600","https://openalex.org/W4410609100","https://openalex.org/W4414205813","https://openalex.org/W4415800797","https://openalex.org/W7133209886","https://openalex.org/W7133222210","https://openalex.org/W7133224126"],"related_works":[],"abstract_inverted_index":{"Recently,":[0],"Large":[1],"Language":[2],"Models":[3],"(LLMs)":[4],"have":[5,18],"been":[6],"in":[7,38,48,54,116,135,167],"tegrated":[8],"into":[9],"many":[10],"real-world":[11,31,72],"applications":[12,17,74,229,243],"like":[13],"Code":[14],"Copilot.":[15],"These":[16],"significantly":[19],"expanded":[20],"the":[21,35,69,99,102,114,180,184,203,231],"attack":[22],"surface":[23],"of":[24,43,84,101,205,233,239],"LLMs,":[25],"ex":[26],"posing":[27],"them":[28],"to":[29,88,98,108,151,178,183],"complex":[30,55],"jailbreak":[32,41,90,96,117,154,181,194,217,224],"threats.":[33,91],"Despite":[34],"promising":[36],"advances":[37],"actively":[39],"finding":[40],"vulnerabilities":[42,238],"LLMs":[44,131,197],"(i.e.,":[45],"red":[46,147,207],"teaming)":[47],"general":[49,95,120],"contexts,":[50],"identifying":[51],"these":[52,71,240],"threats":[53],"domain-specific":[56],"contexts":[57],"(e.g,":[58],"mathematical":[59],"LLMs)":[60],"remains":[61],"underexplored.":[62],"In":[63],"this":[64,141],"paper,":[65],"we":[66,93,125,143,235],"study":[67],"whether":[68],"context":[70,100],"LLM":[73,106,158,219],"work":[75],"in,":[76],"including":[77],"different":[78],"system":[79,192],"prompts,":[80],"tools,":[81],"and":[82,122,163,174],"scenarios":[83],"tasks,":[85],"give":[86],"rise":[87],"context-specific":[89,110,123,153,223],"Particularly,":[92],"adapt":[94,179],"prompts":[97,182,225],"target":[103,185],"application":[104],"via":[105],"rewriting":[107],"generate":[109,152],"attacks.":[111],"By":[112,221],"measuring":[113],"differences":[115],"responses":[118],"between":[119],"attacks":[121,155],"attacks,":[124],"reveal":[126],"that":[127,190],"customized":[128,157,218],"domain":[129],"specific":[130,137],"are":[132],"more":[133],"vulnerable":[134],"their":[136],"context.":[138],"Motivated":[139],"by":[140,210],"observation,":[142],"propose":[144],"a":[145],"context-aware":[146],"teaming":[148,208],"approach,":[149],"RedAgent,":[150],"towards":[156,226],"applications.":[159,220],"Through":[160],"effectively":[161,216],"retrieving":[162],"updating":[164],"structured":[165],"knowledge":[166],"an":[168],"agent":[169],"system,":[170],"RedAgent":[171,214],"efficiently":[172],"perceive":[173],"utilize":[175],"contextual":[176],"information":[177],"contexts.":[186],"Extensive":[187],"experiments":[188],"show":[189],"our":[191],"can":[193,215],"most":[195],"black-box":[196],"within":[198],"just":[199],"five":[200],"queries,":[201],"improving":[202],"efficiency":[204],"existing":[206],"methods":[209],"two":[211,246],"times.":[212],"Further,":[213],"generating":[222],"60":[227],"trending":[228],"on":[230],"marketplace":[232],"OpenAI,":[234],"discover":[236],"600":[237],"real":[241],"world":[242],"with":[244],"only":[245],"queries":[247],"per":[248],"vulnerability.":[249]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-02-17T00:00:00"}