{"id":"https://openalex.org/W4416017046","doi":"https://doi.org/10.1145/3746252.3761283","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","display_name":"Antelope: Potent and Concealed Jailbreak Attack Strategy","publication_year":2025,"publication_date":"2025-11-07","ids":{"openalex":"https://openalex.org/W4416017046","doi":"https://doi.org/10.1145/3746252.3761283"},"language":null,"primary_location":{"id":"doi:10.1145/3746252.3761283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746252.3761283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3746252.3761283","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101316362","display_name":"Xin Zhao","orcid":"https://orcid.org/0009-0005-5730-7534"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Zhao","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-5730-7534","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101407251","display_name":"Xiaojun Chen","orcid":"https://orcid.org/0000-0003-0362-847X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaojun Chen","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0362-847X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112587596","display_name":"Hongchang Gao","orcid":"https://orcid.org/0009-0003-4074-3976"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haoyu Gao","raw_affiliation_strings":["College of Computing, Georgia Institute of Technology, Atlanta, USA"],"raw_orcid":"https://orcid.org/0009-0003-4074-3976","affiliations":[{"raw_affiliation_string":"College of Computing, Georgia Institute of Technology, Atlanta, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.673,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86837285,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"4357","last_page":"4367"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5742999911308289,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5742999911308289,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.12409999966621399,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.055399999022483826,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8119999766349792},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7307000160217285},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.6154999732971191},{"id":"https://openalex.org/keywords/confusion","display_name":"Confusion","score":0.5220999717712402},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.5016999840736389},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.4571000039577484},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.4399000108242035},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4311999976634979}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8119999766349792},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7307000160217285},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7268000245094299},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.6154999732971191},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5814999938011169},{"id":"https://openalex.org/C2781140086","wikidata":"https://www.wikidata.org/wiki/Q557945","display_name":"Confusion","level":2,"score":0.5220999717712402},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.5016999840736389},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.4571000039577484},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.4399000108242035},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4311999976634979},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3643999993801117},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.32440000772476196},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.3158999979496002},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.27959999442100525},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2655999958515167},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.25600001215934753},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25270000100135803}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3746252.3761283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746252.3761283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3746252.3761283","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3746252.3761283","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1901129140","https://openalex.org/W2963341956","https://openalex.org/W4283172096","https://openalex.org/W4312933868","https://openalex.org/W4385805112","https://openalex.org/W4386066536","https://openalex.org/W4386072220","https://openalex.org/W4390871724","https://openalex.org/W4402713133","https://openalex.org/W4402959574"],"related_works":[],"abstract_inverted_index":{"Due":[0],"to":[1,41,44,91,153],"the":[2,26,33,102,113,126,137,148],"remarkable":[3],"generative":[4,97],"potential":[5],"of":[6,28,35,104,118,141,150],"diffusion-based":[7],"models,":[8],"numerous":[9,38],"researches":[10],"have":[11],"investigated":[12],"jailbreak":[13,87],"attacks":[14,152],"targeting":[15],"these":[16,46,77,119],"frameworks.":[17],"A":[18],"particularly":[19],"concerning":[20],"threat":[21],"within":[22],"image":[23],"models":[24],"is":[25],"generation":[27],"Not-Safe-for-Work":[29],"(NSFW)":[30],"content.":[31],"Despite":[32],"implementation":[34],"security":[36,93],"filters,":[37],"efforts":[39],"continue":[40],"explore":[42],"ways":[43],"circumvent":[45],"safeguards.":[47],"Current":[48],"attack":[49,68,88],"methodologies":[50],"primarily":[51],"encompass":[52],"adversarial":[53],"prompt":[54],"engineering":[55],"or":[56],"concept":[57],"obfuscation,":[58],"yet":[59],"they":[60],"frequently":[61],"suffer":[62],"from":[63],"slow":[64],"search":[65],"efficiency,":[66],"conspicuous":[67],"characteristics":[69],"and":[70,85,122,139,173],"poor":[71],"alignment":[72],"with":[73,107,125,136],"targets.":[74],"To":[75],"overcome":[76],"challenges,":[78],"we":[79,145],"propose":[80],"Antelope,":[81],"a":[82],"more":[83],"robust":[84],"covert":[86],"strategy":[89],"designed":[90],"expose":[92],"vulnerabilities":[94],"inherent":[95],"in":[96,112],"models.":[98],"Specifically,":[99],"Antelope":[100,162],"leverages":[101],"confusion":[103],"sensitive":[105,131],"concepts":[106,121],"similar":[108],"ones,":[109],"facilitates":[110],"searches":[111],"semantically":[114],"adjacent":[115],"text":[116],"space":[117],"related":[120],"aligns":[123],"them":[124],"target":[127,138],"imagery,":[128],"thereby":[129],"generating":[130],"images":[132],"that":[133,161],"are":[134],"consistent":[135],"capable":[140],"evading":[142],"detection.":[143],"Besides,":[144],"successfully":[146],"exploit":[147],"transferability":[149],"model-based":[151],"penetrate":[154],"online":[155],"black-box":[156],"services.":[157],"Experimental":[158],"evaluations":[159],"demonstrate":[160],"outperforms":[163],"existing":[164],"baselines":[165],"across":[166],"multiple":[167],"defensive":[168],"mechanisms,":[169],"underscoring":[170],"its":[171],"efficacy":[172],"versatility.":[174]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-11-08T00:00:00"}