{"id":"https://openalex.org/W7159650501","doi":"https://doi.org/10.48550/arxiv.2604.28157","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","display_name":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7159650501","doi":"https://doi.org/10.48550/arxiv.2604.28157"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.28157","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.28157","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.28157","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134990660","display_name":"Yanting Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yanting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134938007","display_name":"Chenlong Yin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yin, Chenlong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134956339","display_name":"Ying Chen (9697)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Ying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134981253","display_name":"Jinyuan Jia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jia, Jinyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.45899999141693115,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.45899999141693115,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.16930000483989716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12808","display_name":"Ferroelectric and Negative Capacitance Devices","score":0.020999999716877937,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6204000115394592},{"id":"https://openalex.org/keywords/speedup","display_name":"Speedup","score":0.5394999980926514},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.5116000175476074},{"id":"https://openalex.org/keywords/language-change","display_name":"Language change","score":0.459199994802475},{"id":"https://openalex.org/keywords/obstacle","display_name":"Obstacle","score":0.41429999470710754},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.4097999930381775},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.40470001101493835}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7081999778747559},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6204000115394592},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.5394999980926514},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5116000175476074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5034000277519226},{"id":"https://openalex.org/C2780027415","wikidata":"https://www.wikidata.org/wiki/Q524648","display_name":"Language change","level":2,"score":0.459199994802475},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4311000108718872},{"id":"https://openalex.org/C2776650193","wikidata":"https://www.wikidata.org/wiki/Q264661","display_name":"Obstacle","level":2,"score":0.41429999470710754},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.4097999930381775},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.40470001101493835},{"id":"https://openalex.org/C30772137","wikidata":"https://www.wikidata.org/wiki/Q5164762","display_name":"Consumption (sociology)","level":2,"score":0.3736000061035156},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.3513000011444092},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3508000075817108},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.30730000138282776},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.28157","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.28157","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.28157","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.28157","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8064606189727783,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Long-context":[0],"large":[1],"language":[2],"models":[3],"(LLMs)-for":[4],"example,":[5],"Gemini-3.1-Pro":[6],"and":[7,22,41,61,74,93,123,150,156,186,226],"Qwen-3.5-are":[8],"widely":[9],"used":[10],"to":[11,114,141,181,199,210,219,237],"empower":[12],"many":[13],"real-world":[14],"applications,":[15],"such":[16,37,223],"as":[17,38,224,233],"retrieval-augmented":[18],"generation,":[19],"autonomous":[20],"agents,":[21],"AI":[23],"assistants.":[24],"However,":[25,85],"security":[26,47,83,118],"remains":[27],"a":[28,77,105,172,187,205,234],"major":[29,106],"concern":[30],"for":[31,97,108,152,204],"their":[32],"widespread":[33],"deployment,":[34],"with":[35],"threats":[36],"prompt":[39,154],"injection":[40,155],"knowledge":[42,157],"corruption.":[43],"To":[44],"quantify":[45],"the":[46,55,109,117,125,138,143],"risks":[48,119],"faced":[49],"by":[50],"LLMs":[51,122],"under":[52,160],"these":[53],"threats,":[54],"research":[56],"community":[57,110],"has":[58],"developed":[59],"heuristic-based":[60],"optimization-based":[62,153],"red-teaming":[63,235],"methods.":[64],"Optimization-based":[65],"methods":[66],"generally":[67],"produce":[68],"stronger":[69],"attacks":[70,73,159],"than":[71,183],"heuristic":[72],"thus":[75],"provide":[76],"more":[78],"rigorous":[79],"assessment":[80],"of":[81,120,127,147,241],"LLM":[82,243],"risks.":[84],"they":[86],"are":[87],"often":[88],"resource-intensive,":[89],"requiring":[90],"significant":[91],"computation":[92,149],"GPU":[94,191,202],"memory,":[95],"especially":[96],"long":[98],"context":[99],"scenarios.":[100],"The":[101,245],"resource-intensive":[102],"nature":[103],"poses":[104],"obstacle":[107],"(especially":[111],"academic":[112],"researchers)":[113],"systematically":[115],"evaluate":[116],"long-context":[121,161,242],"assess":[124],"effectiveness":[126],"defense":[128],"strategies":[129],"at":[130],"scale.":[131],"In":[132],"this":[133],"work,":[134],"we":[135,166],"propose":[136],"FlashRT,":[137],"first":[139],"framework":[140],"improve":[142],"efficiency":[144],"(in":[145],"terms":[146],"both":[148],"memory)":[151],"corruption":[158],"LLMs.":[162],"Through":[163],"extensive":[164],"evaluations,":[165],"find":[167],"that":[168],"FlashRT":[169,214,230],"consistently":[170],"delivers":[171],"2x-7x":[173],"speedup":[174],"(e.g.,":[175,194],"reducing":[176,195],"runtime":[177],"from":[178,196],"one":[179],"hour":[180],"less":[182],"ten":[184],"minutes)":[185],"2x-4x":[188],"reduction":[189],"in":[190],"memory":[192,203],"consumption":[193],"264.1":[197],"GB":[198,201],"65.7":[200],"32K":[206],"token":[207],"context)":[208],"compared":[209],"state-of-the-art":[211],"baseline":[212],"nanoGCG.":[213],"can":[215,231],"be":[216],"broadly":[217],"applied":[218],"black-box":[220],"optimization":[221],"methods,":[222],"TAP":[225],"AutoDAN.":[227],"We":[228],"hope":[229],"serve":[232],"tool":[236],"enable":[238],"systematic":[239],"evaluation":[240],"security.":[244],"code":[246],"is":[247],"available":[248],"at:":[249],"https://github.com/Wang-Yanting/FlashRT":[250]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-02T00:00:00"}