{"id":"https://openalex.org/W7134231205","doi":"https://doi.org/10.48550/arxiv.2603.05772","title":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","display_name":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","publication_year":2026,"publication_date":"2026-03-06","ids":{"openalex":"https://openalex.org/W7134231205","doi":"https://doi.org/10.48550/arxiv.2603.05772"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2603.05772","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128560462","display_name":"Jinman Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Jinman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128422693","display_name":"Yi Xie","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xie, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128575160","display_name":"Shiqian Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Shiqian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5039525839","display_name":"Xiaofeng Chen","orcid":"https://orcid.org/0000-0003-4062-4515"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Xiaofeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.2820752,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9168999791145325,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9168999791145325,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.009800000116229057,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.009200000204145908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.48510000109672546},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4724999964237213},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.4562000036239624},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.45179998874664307},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.35510000586509705},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.3474999964237213}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6995999813079834},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5041999816894531},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.48510000109672546},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4724999964237213},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.4562000036239624},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.45179998874664307},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.35510000586509705},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3488999903202057},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.3474999964237213},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.32260000705718994},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.2590000033378601},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2603.05772","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2603.05772","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.05772","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2603.05772","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8224819898605347}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Currently,":[0],"open-sourced":[1],"large":[2],"language":[3],"models":[4],"(OSLLMs)":[5],"have":[6],"demonstrated":[7],"remarkable":[8],"generative":[9],"performance.":[10],"However,":[11],"as":[12,37],"their":[13],"structure":[14],"and":[15,43],"weights":[16],"are":[17,21],"made":[18],"public,":[19],"they":[20],"exposed":[22],"to":[23,46,118,138,148],"jailbreak":[24,76,105],"attacks":[25,30],"even":[26],"after":[27],"alignment.":[28],"Existing":[29],"operate":[31],"primarily":[32],"at":[33,196],"shallow":[34],"levels,":[35],"such":[36],"the":[38,80,121,140,149,159,168,182,185,189],"prompt":[39],"or":[40],"embedding":[41],"level,":[42],"often":[44],"fail":[45],"expose":[47],"vulnerabilities":[48],"rooted":[49],"in":[50,82],"deeper":[51,83,98],"model":[52],"components,":[53],"which":[54],"creates":[55],"a":[56,131],"false":[57],"sense":[58],"of":[59,142,170,184],"security":[60],"for":[61,125],"successful":[62],"defense.":[63],"In":[64],"this":[65,109],"paper,":[66],"we":[67,95,129],"propose":[68],"\\textbf{\\underline{S}}afety":[69],"\\textbf{\\underline{A}}ttention":[70],"\\textbf{\\underline{H}}ead":[71],"\\textbf{\\underline{A}}ttack":[72],"(\\textbf{SAHA}),":[73],"an":[74],"attention-head-level":[75],"framework":[77],"that":[78,97],"explores":[79],"vulnerability":[81,103,183],"but":[84],"insufficiently":[85],"aligned":[86],"attention":[87,99,190],"heads.":[88],"SAHA":[89,173],"contains":[90],"two":[91],"novel":[92],"designs.":[93],"Firstly,":[94],"reveal":[96],"layers":[100],"introduce":[101,130],"more":[102],"against":[104],"attacks.":[106],"Based":[107],"on":[108,188],"finding,":[110],"\\textbf{SAHA}":[111],"introduces":[112],"\\textit{Ablation-Impact":[113],"Ranking}":[114],"head":[115],"selection":[116],"strategy":[117],"effectively":[119],"locate":[120],"most":[122],"vital":[123],"layer":[124],"unsafe":[126,143],"output.":[127],"Secondly,":[128],"boundary-aware":[132],"perturbation":[133,147,153],"method,":[134],"\\textit{i.e.":[135],"Layer-Wise":[136],"Perturbation},":[137],"probe":[139],"generation":[141],"content":[144],"with":[145,158],"minimal":[146],"attention.":[150],"This":[151],"constrained":[152],"guarantees":[154],"higher":[155],"semantic":[156],"relevance":[157],"target":[160],"intent":[161],"while":[162],"ensuring":[163],"evasion.":[164],"Extensive":[165],"experiments":[166],"show":[167],"superiority":[169],"our":[171],"method:":[172],"improves":[174],"ASR":[175],"by":[176],"14\\%":[177],"over":[178],"SOTA":[179],"baselines,":[180],"revealing":[181],"attack":[186],"surface":[187],"head.":[191],"Our":[192],"code":[193],"is":[194],"available":[195],"https://anonymous.4open.science/r/SAHA.":[197]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-03-10T00:00:00"}