{"id":"https://openalex.org/W4412945087","doi":"https://doi.org/10.18653/v1/2025.acl-long.805","title":"One-Shot is Enough: Consolidating Multi-Turn Attacks into Efficient Single-Turn Prompts for LLMs","display_name":"One-Shot is Enough: Consolidating Multi-Turn Attacks into Efficient Single-Turn Prompts for LLMs","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412945087","doi":"https://doi.org/10.18653/v1/2025.acl-long.805"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.acl-long.805","is_oa":false,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.805","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2503.04856","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026289390","display_name":"Jihun Ha","orcid":"https://orcid.org/0000-0001-7416-6474"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Junwoo Ha","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100737623","display_name":"Hyunjun Kim","orcid":"https://orcid.org/0000-0003-3886-0586"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hyunjun Kim","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036718908","display_name":"Shuishan Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sangyoon Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104956003","display_name":"Haon Park","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haon Park","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044916571","display_name":"Ashkan Yousefpour","orcid":"https://orcid.org/0000-0003-4869-9183"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ashkan Yousefpour","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Yuna Park","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuna Park","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5100385534","display_name":"Suhyun Kim","orcid":"https://orcid.org/0000-0001-7425-1310"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suhyun Kim","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09663953,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"16489","last_page":"16507"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9728999733924866,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9728999733924866,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.9496999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9272000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/turn","display_name":"Turn (biochemistry)","score":0.8833692073822021},{"id":"https://openalex.org/keywords/shot","display_name":"Shot (pellet)","score":0.7020018100738525},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.47933563590049744},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3795618712902069},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.34616541862487793},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.06429114937782288},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.06233876943588257}],"concepts":[{"id":"https://openalex.org/C85641259","wikidata":"https://www.wikidata.org/wiki/Q290042","display_name":"Turn (biochemistry)","level":2,"score":0.8833692073822021},{"id":"https://openalex.org/C2778344882","wikidata":"https://www.wikidata.org/wiki/Q278938","display_name":"Shot (pellet)","level":2,"score":0.7020018100738525},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47933563590049744},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3795618712902069},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.34616541862487793},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.06429114937782288},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.06233876943588257},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C46141821","wikidata":"https://www.wikidata.org/wiki/Q209402","display_name":"Nuclear magnetic resonance","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.18653/v1/2025.acl-long.805","is_oa":false,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.805","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2503.04856","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.04856","pdf_url":"https://arxiv.org/pdf/2503.04856","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2503.04856","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.04856","pdf_url":"https://arxiv.org/pdf/2503.04856","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2074502265","https://openalex.org/W4214877189","https://openalex.org/W2773965352","https://openalex.org/W2381179799","https://openalex.org/W4411535265","https://openalex.org/W4412839308","https://openalex.org/W2980279061"],"abstract_inverted_index":{"We":[0],"introduce":[1],"a":[2,166],"novel":[3],"framework":[4,164],"for":[5,20,169],"consolidating":[6],"multi-turn":[7,29,60,112,156],"adversarial":[8,21,77],"``jailbreak''":[9],"prompts":[10,72,108],"into":[11,62,158],"single-turn":[12,64,107,160],"queries,":[13],"significantly":[14],"reducing":[15],"the":[16,83,106,110,162],"manual":[17],"overhead":[18],"required":[19],"testing":[22],"of":[23],"large":[24],"language":[25],"models":[26],"(LLMs).":[27],"While":[28],"human":[30,44],"jailbreaks":[31],"have":[32],"been":[33],"shown":[34],"to":[35,98],"yield":[36],"high":[37],"attack":[38,92],"success":[39,93],"rates,":[40],"they":[41],"demand":[42],"considerable":[43],"effort":[45],"and":[46,55,74,150,173],"time.":[47],"Our":[48],"multi-turn-to-single-turn":[49],"(M2S)":[50],"methods":[51,90],"--":[52,57],"Hyphenize,":[53],"Numberize,":[54],"Pythonize":[56],"systematically":[58],"reformat":[59],"dialogues":[61],"structured":[63],"prompts.":[65],"Despite":[66],"removing":[67],"iterative":[68],"back-and-forth":[69],"interactions,":[70],"these":[71],"preserve":[73],"often":[75],"enhance":[76],"potency:":[78],"in":[79,138,177],"extensive":[80],"evaluations":[81],"on":[82,129],"Multi-turn":[84],"Human":[85],"Jailbreak":[86],"(MHJ)":[87],"dataset,":[88],"M2S":[89,163],"achieve":[91],"rates":[94],"from":[95],"70.6":[96],"percent":[97,100],"95.9":[99],"across":[101],"several":[102],"state-of-the-art":[103],"LLMs.":[104],"Remarkably,":[105],"outperform":[109],"original":[111],"attacks":[113],"by":[114,125],"as":[115,117],"much":[116],"17.5":[118],"percentage":[119],"points":[120],"while":[121],"cutting":[122],"token":[123],"usage":[124],"more":[126],"than":[127],"half":[128],"average.":[130],"Further":[131],"analysis":[132],"shows":[133],"that":[134],"embedding":[135],"malicious":[136],"requests":[137],"enumerated":[139],"or":[140],"code-like":[141],"structures":[142],"exploits":[143],"``contextual":[144],"blindness'',":[145],"bypassing":[146],"both":[147],"native":[148],"guardrails":[149],"external":[151],"input-output":[152],"filters.":[153],"By":[154],"converting":[155],"conversations":[157],"concise":[159],"prompts,":[161],"provides":[165],"scalable":[167],"tool":[168],"large-scale":[170],"red":[171],"teaming":[172],"reveals":[174],"critical":[175],"weaknesses":[176],"contemporary":[178],"LLM":[179],"defenses.":[180]},"counts_by_year":[],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-08-05T00:00:00"}