{"id":"https://openalex.org/W7143399273","doi":"https://doi.org/10.48550/arxiv.2603.26045","title":"H-Node Attack and Defense in Large Language Models","display_name":"H-Node Attack and Defense in Large Language Models","publication_year":2026,"publication_date":"2026-03-27","ids":{"openalex":"https://openalex.org/W7143399273","doi":"https://doi.org/10.48550/arxiv.2603.26045"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.26045","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.26045","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.26045","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045799556","display_name":"Eric Yocam","orcid":"https://orcid.org/0000-0001-8176-3867"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yocam, Eric","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130991327","display_name":"Varghese Vaidyan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vaidyan, Varghese","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130996489","display_name":"Yong Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/perplexity","display_name":"Perplexity","score":0.853600025177002},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.694599986076355},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6075000166893005},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5752999782562256},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.503000020980835},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.44769999384880066},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.39320001006126404},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.3928999900817871}],"concepts":[{"id":"https://openalex.org/C100279451","wikidata":"https://www.wikidata.org/wiki/Q372193","display_name":"Perplexity","level":3,"score":0.853600025177002},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.694599986076355},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6075000166893005},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5956000089645386},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5752999782562256},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.503000020980835},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4999000132083893},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.4242999851703644},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.39320001006126404},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3928999900817871},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C2982912361","wikidata":"https://www.wikidata.org/wiki/Q1851867","display_name":"Mental model","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.3199999928474426},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.313400000333786},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.31200000643730164},{"id":"https://openalex.org/C159694833","wikidata":"https://www.wikidata.org/wiki/Q2321565","display_name":"Iterative method","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C123403432","wikidata":"https://www.wikidata.org/wiki/Q654068","display_name":"Visibility","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C83546350","wikidata":"https://www.wikidata.org/wiki/Q1139051","display_name":"Regression","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C100675267","wikidata":"https://www.wikidata.org/wiki/Q1371624","display_name":"Background noise","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C60048801","wikidata":"https://www.wikidata.org/wiki/Q1433889","display_name":"Intelligibility (philosophy)","level":2,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.26045","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.26045","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.26045","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.26045","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5130910277366638}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0],"present":[1],"H-Node":[2,96],"Adversarial":[3],"Noise":[4],"Cancellation":[5],"(H-Node":[6],"ANC),":[7],"a":[8,44,75,80,128],"mechanistic":[9],"framework":[10],"that":[11,115,158],"identifies,":[12],"exploits,":[13],"and":[14,141,150],"defends":[15],"hallucination":[16,41],"representations":[17],"in":[18],"transformer-based":[19],"large":[20],"language":[21],"models":[22],"(LLMs)":[23],"at":[24,71,154],"the":[25,90,159],"level":[26],"of":[27,47,82,131],"individual":[28],"hidden-state":[29],"dimensions.":[30],"A":[31,64,111],"logistic":[32],"regression":[33],"probe":[34,57],"trained":[35],"on":[36,137],"last-token":[37],"hidden":[38],"states":[39],"localizes":[40],"signal":[42],"to":[43,89,124],"small":[45],"set":[46],"high-variance":[48],"dimensions":[49,70],"--":[50,55],"termed":[51],"Hallucination":[52],"Nodes":[53],"(H-Nodes)":[54],"with":[56,84],"AUC":[58],"reaching":[59],"0.90":[60],"across":[61,119],"four":[62],"architectures.":[63],"white-box":[65],"adversarial":[66],"attack":[67],"amplifies":[68],"these":[69],"inference":[72],"time":[73],"via":[74],"real-time":[76],"forward":[77],"hook,":[78],"achieving":[79],"selectivity":[81],"3.02x":[83],"less":[85],"than":[86],"10%":[87],"visibility":[88],"defender.":[91],"Adaptive":[92],"ANC":[93],"defense":[94,160],"suppresses":[95],"excess":[97],"in-pass":[98],"using":[99],"confidence-weighted":[100],"cancellation,":[101],"reducing":[102],"grounded":[103],"activation":[104],"drift":[105],"by":[106],"33-42%":[107],"over":[108],"static":[109],"cancellation.":[110],"dynamic":[112],"iterative":[113],"extension":[114],"re-ranks":[116],"cancellation":[117],"targets":[118],"successive":[120],"passes":[121],"recovers":[122],"up":[123],"0.69":[125],"robustness":[126],"from":[127],"single-pass":[129],"baseline":[130],"8%.":[132],"All":[133],"contributions":[134],"are":[135],"validated":[136],"OPT-125M,":[138],"Phi-3-mini-4k-instruct,":[139],"LLaMA-3-8B-Instruct,":[140],"Mistral-7B-Instruct-v0.3":[142],"(125M-8B":[143],"parameters).":[144],"Perplexity":[145],"impact":[146],"is":[147,153],"surgical":[148],"(&lt;5%)":[149],"MMLU":[151],"degradation":[152],"most":[155],"3%,":[156],"confirming":[157],"does":[161],"not":[162],"impair":[163],"general":[164],"reasoning":[165],"capability.":[166]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-31T00:00:00"}
