{"id":"https://openalex.org/W7154070382","doi":"https://doi.org/10.48550/arxiv.2604.09222","title":"GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking","display_name":"GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking","publication_year":2026,"publication_date":"2026-04-10","ids":{"openalex":"https://openalex.org/W7154070382","doi":"https://doi.org/10.48550/arxiv.2604.09222"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.09222","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09222","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.09222","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130724611","display_name":"Yunqiang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yunqiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133520863","display_name":"Hengyuan Na","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Na, Hengyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133552416","display_name":"Di Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Di","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133531307","display_name":"Miao Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Miao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5124385671","display_name":"Guocong Quan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Quan, Guocong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5913000106811523,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5913000106811523,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.15489999949932098,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.06310000270605087,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.5329999923706055},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.34369999170303345},{"id":"https://openalex.org/keywords/transcription","display_name":"Transcription (linguistics)","score":0.3391000032424927},{"id":"https://openalex.org/keywords/audio-signal","display_name":"Audio signal","score":0.31779998540878296},{"id":"https://openalex.org/keywords/audio-signal-processing","display_name":"Audio signal processing","score":0.3100000023841858},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.2669000029563904}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7186999917030334},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.5329999923706055},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.5056999921798706},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.34369999170303345},{"id":"https://openalex.org/C179926584","wikidata":"https://www.wikidata.org/wiki/Q207714","display_name":"Transcription (linguistics)","level":2,"score":0.3391000032424927},{"id":"https://openalex.org/C64922751","wikidata":"https://www.wikidata.org/wiki/Q4650799","display_name":"Audio signal","level":3,"score":0.31779998540878296},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31769999861717224},{"id":"https://openalex.org/C127220857","wikidata":"https://www.wikidata.org/wiki/Q2719318","display_name":"Audio signal processing","level":4,"score":0.3100000023841858},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2930999994277954},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C134121241","wikidata":"https://www.wikidata.org/wiki/Q899301","display_name":"Yield (engineering)","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C167310288","wikidata":"https://www.wikidata.org/wiki/Q7564808","display_name":"Sound quality","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C205706631","wikidata":"https://www.wikidata.org/wiki/Q2319304","display_name":"Expected utility hypothesis","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.09222","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09222","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.09222","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.09222","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.48827970027923584,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"},{"score":0.44206929206848145,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Audio":[0],"large":[1],"language":[2],"models":[3],"(ALLMs)":[4],"enable":[5],"rich":[6],"speech-text":[7],"interaction,":[8],"but":[9],"they":[10],"also":[11],"introduce":[12],"jailbreak":[13,21,25,83,119],"vulnerabilities":[14],"in":[15,33,65,192],"the":[16,47,66,179],"audio":[17,20,193],"modality.":[18],"Existing":[19],"methods":[22],"mainly":[23],"optimize":[24],"success":[26],"while":[27,85,167],"overlooking":[28],"utility":[29,86,131,190],"preservation,":[30],"as":[31],"reflected":[32],"transcription":[34],"quality":[35],"and":[36,73,140,189,203],"question":[37],"answering":[38],"performance.":[39],"In":[40],"practice,":[41],"stronger":[42],"attacks":[43,59],"often":[44],"come":[45],"at":[46],"cost":[48],"of":[49,97,138,165,181],"degraded":[50],"utility.":[51],"To":[52],"study":[53],"this":[54,111],"trade-off,":[55],"we":[56,113],"revisit":[57],"existing":[58],"by":[60,125],"varying":[61],"their":[62,126],"perturbation":[63,93,145,183],"coverage":[64,78],"frequency":[67,77],"domain,":[68],"from":[69],"partial-band":[70],"to":[71,130],"full-band,":[72],"find":[74],"that":[75,91,156],"broader":[76],"does":[79],"not":[80],"necessarily":[81],"improve":[82],"performance,":[84],"consistently":[87],"deteriorates.":[88],"This":[89,197],"suggests":[90],"concentrating":[92],"on":[94,110,151],"a":[95,101,116,135,142,147,169],"subset":[96,137],"bands":[98,124],"can":[99],"yield":[100],"better":[102,170,185],"attack-utility":[103,171],"trade-off":[104,172],"than":[105,173],"indiscriminate":[106],"full-band":[107],"coverage.":[108],"Based":[109],"insight,":[112],"propose":[114],"GRM,":[115],"utility-aware":[117],"frequency-selective":[118,182],"framework.":[120],"It":[121],"ranks":[122],"Mel":[123],"attack":[127,187],"contribution":[128],"relative":[129],"sensitivity,":[132],"perturbs":[133],"only":[134],"selected":[136],"bands,":[139],"learns":[141],"reusable":[143],"universal":[144],"under":[146],"semantic-preservation":[148],"objective.":[149],"Experiments":[150],"four":[152],"representative":[153,174],"ALLMs":[154],"show":[155],"GRM":[157],"achieves":[158],"an":[159],"average":[160],"Jailbreak":[161],"Success":[162],"Rate":[163],"(JSR)":[164],"88.46%":[166],"providing":[168],"baselines.":[175],"These":[176],"results":[177],"highlight":[178],"potential":[180],"for":[184],"balancing":[186],"effectiveness":[188],"preservation":[191],"jailbreak.":[194],"Content":[195],"Warning:":[196],"paper":[198],"includes":[199],"harmful":[200],"query":[201],"examples":[202],"unsafe":[204],"model":[205],"responses.":[206]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-14T00:00:00"}