{"id":"https://openalex.org/W7128517966","doi":"https://doi.org/10.48550/arxiv.2602.08741","title":"Large Language Lobotomy: Jailbreaking Mixture-of-Experts via Expert Silencing","display_name":"Large Language Lobotomy: Jailbreaking Mixture-of-Experts via Expert Silencing","publication_year":2026,"publication_date":"2026-02-09","ids":{"openalex":"https://openalex.org/W7128517966","doi":"https://doi.org/10.48550/arxiv.2602.08741"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.08741","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093917340","display_name":"Jona te Lintelo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lintelo, Jona te","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045570758","display_name":"Lichao Wu","orcid":"https://orcid.org/0000-0002-7139-732X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Lichao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125582390","display_name":"Stjepan Picek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Picek, Stjepan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.23849999904632568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.23849999904632568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.13819999992847443,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.12530000507831573,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6017000079154968},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.5299999713897705},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.38920000195503235},{"id":"https://openalex.org/keywords/standardization","display_name":"Standardization","score":0.3580000102519989},{"id":"https://openalex.org/keywords/spoken-language","display_name":"Spoken language","score":0.34139999747276306}],"concepts":[{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6017000079154968},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.5299999713897705},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5212000012397766},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4952000081539154},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.38920000195503235},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3856000006198883},{"id":"https://openalex.org/C188087704","wikidata":"https://www.wikidata.org/wiki/Q369577","display_name":"Standardization","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C2776230583","wikidata":"https://www.wikidata.org/wiki/Q1322198","display_name":"Spoken language","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32519999146461487},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.305400013923645},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.29019999504089355},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.08741","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.08741","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.08741","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.08741","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"score":0.4943036735057831,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"rapid":[1],"adoption":[2],"of":[3,14,30,59,157],"Mixture-of-Experts":[4],"(MoE)":[5],"architectures":[6],"marks":[7],"a":[8,27,56,75,169],"major":[9],"shift":[10],"in":[11,48,55,187],"the":[12,105],"deployment":[13],"Large":[15,71],"Language":[16,72],"Models":[17],"(LLMs).":[18],"MoE":[19,49,121,145,174,189],"LLMs":[20,50,122,190],"improve":[21],"scaling":[22],"efficiency":[23],"by":[24,83],"activating":[25],"only":[26],"small":[28,57],"subset":[29],"parameters":[31],"per":[32],"token,":[33],"but":[34],"their":[35],"routing":[36,86,90],"structure":[37],"introduces":[38],"new":[39],"safety":[40,81,97,178,183],"attack":[41,78,132],"surfaces.":[42],"We":[43,114],"find":[44],"that":[45,79,92,125],"safety-critical":[46],"behaviors":[47],"(e.g.,":[51],"refusal)":[52],"are":[53,112],"concentrated":[54],"set":[58],"experts":[60,108,159],"rather":[61],"than":[62,155],"being":[63],"uniformly":[64],"distributed.":[65],"Building":[66],"on":[67,117],"this,":[68],"we":[69],"propose":[70],"Lobotomy":[73],"(L$^3$),":[74],"training-free,":[76],"architecture-agnostic":[77],"compromises":[80],"alignment":[82,179],"exploiting":[84],"expert":[85,128],"dynamics.":[87],"L$^3$":[88,116],"learns":[89],"patterns":[91],"correlate":[93],"with":[94,191],"refusal,":[95],"attributes":[96],"behavior":[98],"to":[99,136,140],"specific":[100],"experts,":[101],"and":[102,123,176,180,193],"adaptively":[103],"silences":[104],"most":[106],"safety-relevant":[107],"until":[109],"harmful":[110],"outputs":[111],"produced.":[113],"evaluate":[115],"eight":[118],"state-of-the-art":[119],"open-source":[120],"show":[124],"our":[126],"adaptive":[127],"silencing":[129,153],"increases":[130],"average":[131],"success":[133],"from":[134],"7.3%":[135],"70.4%,":[137],"reaching":[138],"up":[139],"86.3%,":[141],"outperforming":[142],"prior":[143],"training-free":[144],"jailbreak":[146],"methods.":[147,195],"Moreover,":[148],"bypassing":[149],"guardrails":[150],"typically":[151],"requires":[152],"fewer":[154],"20%":[156],"layer-wise":[158],"while":[160],"largely":[161],"preserving":[162],"general":[163],"language":[164],"utility.":[165],"These":[166],"results":[167],"reveal":[168],"fundamental":[170],"tension":[171],"between":[172],"efficiency-driven":[173],"design":[175],"robust":[177],"motivate":[181],"distributing":[182],"mechanisms":[184],"more":[185],"robustly":[186],"future":[188],"architecture-":[192],"routing-aware":[194]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-02-11T00:00:00"}