{"id":"https://openalex.org/W4417126505","doi":"https://doi.org/10.18653/v1/2026.findings-acl.1002","title":"HAUNTATTACK: When Attack Follows Reasoning as a Shadow","display_name":"HAUNTATTACK: When Attack Follows Reasoning as a Shadow","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W4417126505","doi":"https://doi.org/10.18653/v1/2026.findings-acl.1002"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.1002","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1002","pdf_url":"https://aclanthology.org/2026.findings-acl.1002.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.1002.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101910789","display_name":"Junjun Ma","orcid":"https://orcid.org/0000-0003-3095-0325"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jingyuan Ma","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100448367","display_name":"Rui Li","orcid":"https://orcid.org/0000-0001-7858-3160"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rui Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100415043","display_name":"Zheng Li","orcid":"https://orcid.org/0000-0003-1475-5984"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheng Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047136482","display_name":"Junfeng Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Junfeng Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120724022","display_name":"Heming Xia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Heming Xia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120754973","display_name":"Lei Sha","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lei Sha","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5120754974","display_name":"Zhifang Sui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhifang Sui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03348232,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"20072","last_page":"20091"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6553999781608582,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6553999781608582,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.09239999949932098,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.04809999838471413,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reasoning-system","display_name":"Reasoning system","score":0.614300012588501},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6123999953269958},{"id":"https://openalex.org/keywords/qualitative-reasoning","display_name":"Qualitative reasoning","score":0.5478000044822693},{"id":"https://openalex.org/keywords/visual-reasoning","display_name":"Visual reasoning","score":0.5425999760627747},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5277000069618225},{"id":"https://openalex.org/keywords/opportunistic-reasoning","display_name":"Opportunistic reasoning","score":0.5260000228881836},{"id":"https://openalex.org/keywords/analytic-reasoning","display_name":"Analytic reasoning","score":0.5194000005722046},{"id":"https://openalex.org/keywords/case-based-reasoning","display_name":"Case-based reasoning","score":0.47099998593330383}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6543999910354614},{"id":"https://openalex.org/C89288958","wikidata":"https://www.wikidata.org/wiki/Q7301504","display_name":"Reasoning system","level":2,"score":0.614300012588501},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6123999953269958},{"id":"https://openalex.org/C83725634","wikidata":"https://www.wikidata.org/wiki/Q7268699","display_name":"Qualitative reasoning","level":2,"score":0.5478000044822693},{"id":"https://openalex.org/C2777508537","wikidata":"https://www.wikidata.org/wiki/Q7936620","display_name":"Visual reasoning","level":2,"score":0.5425999760627747},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5277000069618225},{"id":"https://openalex.org/C86827895","wikidata":"https://www.wikidata.org/wiki/Q7098582","display_name":"Opportunistic reasoning","level":4,"score":0.5260000228881836},{"id":"https://openalex.org/C103057564","wikidata":"https://www.wikidata.org/wiki/Q4751139","display_name":"Analytic reasoning","level":3,"score":0.5194000005722046},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5081999897956848},{"id":"https://openalex.org/C20162079","wikidata":"https://www.wikidata.org/wiki/Q1151406","display_name":"Case-based reasoning","level":2,"score":0.47099998593330383},{"id":"https://openalex.org/C37335422","wikidata":"https://www.wikidata.org/wiki/Q6888134","display_name":"Model-based reasoning","level":3,"score":0.46299999952316284},{"id":"https://openalex.org/C117797892","wikidata":"https://www.wikidata.org/wiki/Q286363","display_name":"Shadow (psychology)","level":2,"score":0.45419999957084656},{"id":"https://openalex.org/C97364631","wikidata":"https://www.wikidata.org/wiki/Q484284","display_name":"Deductive reasoning","level":2,"score":0.4275999963283539},{"id":"https://openalex.org/C195344581","wikidata":"https://www.wikidata.org/wiki/Q2555318","display_name":"Automated reasoning","level":2,"score":0.37209999561309814},{"id":"https://openalex.org/C159032336","wikidata":"https://www.wikidata.org/wiki/Q2488768","display_name":"Non-monotonic logic","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C36964233","wikidata":"https://www.wikidata.org/wiki/Q7920942","display_name":"Verbal reasoning","level":3,"score":0.3325999975204468},{"id":"https://openalex.org/C193221554","wikidata":"https://www.wikidata.org/wiki/Q5153664","display_name":"Commonsense reasoning","level":2,"score":0.32690000534057617},{"id":"https://openalex.org/C166088908","wikidata":"https://www.wikidata.org/wiki/Q308495","display_name":"Abductive reasoning","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C155911833","wikidata":"https://www.wikidata.org/wiki/Q3817354","display_name":"Spatial intelligence","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C183521366","wikidata":"https://www.wikidata.org/wiki/Q7256422","display_name":"Psychology of reasoning","level":4,"score":0.2847000062465668},{"id":"https://openalex.org/C2776325391","wikidata":"https://www.wikidata.org/wiki/Q6917865","display_name":"Motivated reasoning","level":3,"score":0.26739999651908875},{"id":"https://openalex.org/C115086926","wikidata":"https://www.wikidata.org/wiki/Q17004651","display_name":"Causal reasoning","level":3,"score":0.26660001277923584}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.1002","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1002","pdf_url":"https://aclanthology.org/2026.findings-acl.1002.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2506.07031","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2506.07031","pdf_url":"https://arxiv.org/pdf/2506.07031","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2506.07031","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2506.07031","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.1002","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1002","pdf_url":"https://aclanthology.org/2026.findings-acl.1002.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417126505.pdf","grobid_xml":"https://content.openalex.org/works/W4417126505.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Emerging":[0],"Large":[1],"Reasoning":[2],"Models":[3],"(LRMs)":[4],"consistently":[5],"excel":[6],"in":[7,47,76,152],"mathematical":[8],"and":[9,20,57,102,150],"reasoning":[10,18,25,35,48,69,74,85,148],"tasks,":[11],"showcasing":[12],"remarkable":[13],"capabilities.However,":[14],"the":[15,21,89,122,143],"enhancement":[16],"of":[17,23,109,118,146],"abilities":[19],"exposure":[22],"internal":[24],"processes":[26],"introduce":[27,53],"new":[28],"safety":[29,151],"vulnerabilities.A":[30],"critical":[31],"question":[32],"arises:":[33],"when":[34],"becomes":[36],"intertwined":[37],"with":[38,79],"harmfulness,":[39],"will":[40],"LRMs":[41,101],"become":[42],"more":[43],"vulnerable":[44],"to":[45,114,137],"jailbreaks":[46],"mode?To":[49],"investigate":[50],"this,":[51],"we":[52,71],"HAUNTATTACK,":[54],"a":[55,84],"novel":[56],"generalpurpose":[58],"black-box":[59],"adversarial":[60],"attack":[61,106],"framework":[62],"that":[63,87,129],"systematically":[64],"embeds":[65],"harmful":[66,80],"instructions":[67],"into":[68,142],"questions.Specifically,":[70],"modify":[72],"key":[73],"conditions":[75],"existing":[77],"questions":[78],"instructions,":[81],"thereby":[82],"constructing":[83],"pathway":[86],"guides":[88],"model":[90,154],"step":[91,93],"by":[92],"toward":[94],"unsafe":[95],"outputs.We":[96],"evaluate":[97],"HAUNTATTACK":[98],"on":[99],"11":[100],"observe":[103],"an":[104],"average":[105],"success":[107],"rate":[108],"over":[110,121],"70%,":[111],"achieving":[112],"up":[113],"13":[115],"percentage":[116],"points":[117],"absolute":[119],"improvement":[120],"strongest":[123],"prior":[124],"baseline.Our":[125],"further":[126],"analysis":[127],"reveals":[128],"even":[130],"advanced":[131],"safety-aligned":[132],"models":[133],"remain":[134],"highly":[135],"susceptible":[136],"reasoningbased":[138],"attacks,":[139],"offering":[140],"insights":[141],"urgent":[144],"challenge":[145],"balancing":[147],"capability":[149],"future":[153],"development.":[155]},"counts_by_year":[],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}