{"id":"https://openalex.org/W7159589352","doi":"https://doi.org/10.48550/arxiv.2604.27861","title":"TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning","display_name":"TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7159589352","doi":"https://doi.org/10.48550/arxiv.2604.27861"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.27861","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.27861","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134931666","display_name":"Bowen Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Bowen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134945657","display_name":"Chaozhuo Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Chaozhuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134937769","display_name":"Yaodong Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yaodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134974362","display_name":"Yiwei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yiwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134970604","display_name":"Chaowei Xiao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao, Chaowei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7350999712944031,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7350999712944031,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.05249999836087227,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.018799999728798866,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.7150999903678894},{"id":"https://openalex.org/keywords/stateless-protocol","display_name":"Stateless protocol","score":0.6966999769210815},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5539000034332275},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.4796000123023987},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4546000063419342},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.4009000062942505},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.38690000772476196},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.3856000006198883},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.36660000681877136}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8565000295639038},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.7150999903678894},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.6966999769210815},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5539000034332275},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.4796000123023987},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4634999930858612},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4546000063419342},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.4009000062942505},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.38690000772476196},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.36660000681877136},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.35749998688697815},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35440000891685486},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3528999984264374},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3434000015258789},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.32749998569488525},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C140745168","wikidata":"https://www.wikidata.org/wiki/Q1210082","display_name":"Tree traversal","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.2766000032424927},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2712000012397766},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2703999876976013},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.27000001072883606},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.26030001044273376},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25929999351501465},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C121375916","wikidata":"https://www.wikidata.org/wiki/Q936559","display_name":"Principle of compositionality","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.27861","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.27861","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.27861","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.8187085390090942,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Decompositional":[0],"jailbreaks":[1],"pose":[2],"a":[3,16,20,36,98,118,123,139,171,190,201],"critical":[4],"threat":[5,56],"to":[6,14,109,147],"large":[7],"language":[8],"models":[9,84],"(LLMs)":[10],"by":[11,48],"allowing":[12],"adversaries":[13],"fragment":[15],"malicious":[17,115,182,197],"objective":[18],"into":[19],"sequence":[21],"of":[22,40,67,74,82,174],"individually":[23],"benign":[24,132],"queries":[25],"that":[26],"collectively":[27],"reconstruct":[28],"prohibited":[29],"content.":[30],"In":[31,64],"real-world":[32],"deployments,":[33],"LLMs":[34],"face":[35],"continuous,":[37],"untraceable":[38],"stream":[39],"fully":[41],"anonymized":[42],"and":[43,165,220,226],"arbitrarily":[44],"interleaved":[45],"requests,":[46],"infiltrated":[47],"covertly":[49],"distributed":[50],"adversarial":[51],"queries.":[52],"Under":[53],"this":[54,186],"rigorous":[55],"model,":[57],"state-of-the-art":[58],"defensive":[59],"strategies":[60],"exhibit":[61],"fundamental":[62],"limitations.":[63],"the":[65,145,152],"absence":[66],"trustworthy":[68],"user":[69],"metadata,":[70],"they":[71],"are":[72],"incapable":[73],"tracking":[75],"global":[76],"historical":[77],"contexts,":[78],"while":[79,122,207],"their":[80],"deployment":[81],"generative":[83],"for":[85],"real-time":[86],"monitoring":[87],"introduces":[88],"computationally":[89],"prohibitive":[90],"overhead.":[91,160],"To":[92,161],"address":[93],"this,":[94],"we":[95,169],"present":[96],"TwinGate,":[97],"stateful":[99,219],"dual-encoder":[100],"defense":[101,146],"framework.":[102],"TwinGate":[103,194],"employs":[104],"Asymmetric":[105],"Contrastive":[106],"Learning":[107],"(ACL)":[108],"cluster":[110],"semantically":[111],"disparate":[112],"but":[113],"intent-matched":[114],"fragments":[116],"in":[117,149],"shared":[119],"latent":[120],"space,":[121],"parallel":[124,150],"frozen":[125],"encoder":[126],"suppresses":[127],"false":[128,204],"positives":[129],"arising":[130],"from":[131],"topical":[133],"overlap.":[134],"Each":[135],"request":[136],"requires":[137],"only":[138],"single":[140],"lightweight":[141],"forward":[142],"pass,":[143],"enabling":[144],"execute":[148],"with":[151],"target":[153],"model's":[154],"prefill":[155],"phase":[156],"at":[157,200],"negligible":[158],"latency":[159],"evaluate":[162],"our":[163,215],"approach":[164],"advance":[166],"future":[167],"research,":[168],"construct":[170],"comprehensive":[172],"dataset":[173],"over":[175],"3.62":[176],"million":[177],"instructions":[178],"spanning":[179],"8,600":[180],"distinct":[181],"intents.":[183],"Evaluated":[184],"on":[185],"large-scale":[187],"corpus":[188],"under":[189],"strictly":[191],"causal":[192],"protocol,":[193],"achieves":[195],"high":[196],"intent":[198],"recall":[199],"remarkably":[202],"low":[203],"positive":[205],"rate":[206],"remaining":[208],"highly":[209],"robust":[210],"against":[211],"adaptive":[212],"attacks.":[213],"Furthermore,":[214],"proposal":[216],"substantially":[217],"outperforms":[218],"stateless":[221],"baselines,":[222],"delivering":[223],"superior":[224],"throughput":[225],"reduced":[227],"latency.":[228]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-02T00:00:00"}