{"id":"https://openalex.org/W7140406923","doi":"https://doi.org/10.48550/arxiv.2603.24511","title":"Claudini: Autoresearch Discovers State-of-the-Art Adversarial Attack Algorithms for LLMs","display_name":"Claudini: Autoresearch Discovers State-of-the-Art Adversarial Attack Algorithms for LLMs","publication_year":2026,"publication_date":"2026-03-25","ids":{"openalex":"https://openalex.org/W7140406923","doi":"https://doi.org/10.48550/arxiv.2603.24511"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.24511","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24511","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.24511","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130635545","display_name":"Alexander Panfilov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Panfilov, Alexander","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130710768","display_name":"Peter Romov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Romov, Peter","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130693032","display_name":"Igor Shilov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shilov, Igor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130718514","display_name":"Yves-Alexandre de Montjoye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"de Montjoye, Yves-Alexandre","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130662879","display_name":"Jonas Geiping","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Geiping, Jonas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130707061","display_name":"Maksym Andriushchenko","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andriushchenko, Maksym","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5627999901771545,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5627999901771545,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.17720000445842743,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.035999998450279236,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8574000000953674},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.7178000211715698},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.6507999897003174},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.6040999889373779},{"id":"https://openalex.org/keywords/iterated-function","display_name":"Iterated function","score":0.5525000095367432},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5333999991416931}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8574000000953674},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.7178000211715698},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7023000121116638},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.6507999897003174},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.6040999889373779},{"id":"https://openalex.org/C140479938","wikidata":"https://www.wikidata.org/wiki/Q5254619","display_name":"Iterated function","level":2,"score":0.5525000095367432},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5333999991416931},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45829999446868896},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4133000075817108},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3718000054359436},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34599998593330383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.326200008392334},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2992999851703644},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2955999970436096},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.24511","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24511","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.24511","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24511","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,29,61],"show":[1,62],"that":[2,170],"AI":[3],"agents":[4],"are":[5,125],"capable":[6],"of":[7,19,48,153],"discovering":[8],"novel":[9],"algorithms":[10],"for":[11,101,131,193],"adversarial":[12],"attacks":[13,176],"against":[14,76,175],"LLMs,":[15],"advancing":[16],"the":[17,20,84,111,144,151,159,190],"state":[18],"art":[21],"on":[22,95,127,143],"white-box":[23],"jailbreaking":[24,69],"and":[25,37,52,72,162,184],"prompt":[26,74,141],"injection":[27,142],"evaluations.":[28],"deploy":[30],"frontier":[31],"agents,":[32],"such":[33],"as":[34],"Claude":[35],"Code":[36],"Codex,":[38],"in":[39,68,73,120],"an":[40,53,78],"autoresearch":[41,180],"loop":[42],"with":[43,56],"access":[44],"to":[45,65,90,99,140,178],"a":[46,57,132],"library":[47],"30+":[49],"prior":[50,113],"methods":[51,115,124,154],"evaluation":[54,195],"script":[55],"fixed":[58],"compute":[59],"budget.":[60],"this":[63,182],"pipeline":[64],"be":[66,173,189],"effective":[67],"OpenAI's":[70],"GPT-OSS-Safeguard-20B":[71],"injections":[75],"Meta-SecAlign-70B,":[77],"adversarially":[79,145],"robust":[80],"model.":[81,147],"For":[82,104],"GPT-OSS-Safeguard,":[83],"best":[85,112],"agent-discovered":[86],"method":[87],"achieves":[88,107],"up":[89],"80\\%":[91],"attack":[92,123],"success":[93],"rate":[94],"CBRN":[96],"queries,":[97],"compared":[98],"<50\\%":[100],"existing":[102],"methods.":[103],"SecAlign,":[105],"it":[106,187],"100\\%":[108],"ASR,":[109],"while":[110],"automated":[114],"only":[116],"achieve":[117],"82\\%.":[118],"Notably,":[119],"our":[121],"setting,":[122],"developed":[126,155],"unrelated":[128],"surrogate":[129],"models":[130],"pure":[133],"random-target":[134],"token-forcing":[135],"task,":[136],"yet":[137],"generalize":[138],"directly":[139],"trained":[146],"Finally,":[148],"we":[149,185],"trace":[150],"lineage":[152],"during":[156],"autoresearch,":[157],"characterizing":[158],"agents'":[160],"strategies":[161],"failure":[163],"modes.":[164],"Adversarial":[165],"ML":[166],"has":[167],"long":[168],"held":[169],"defenses":[171],"must":[172],"evaluated":[174],"tailored":[177],"them;":[179],"automates":[181],"principle,":[183],"argue":[186],"should":[188],"minimum":[191],"bar":[192],"defense":[194],"going":[196],"forward.":[197]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-27T00:00:00"}