{"id":"https://openalex.org/W7160306608","doi":"https://doi.org/10.48550/arxiv.2605.02495","title":"Efficient Preference Poisoning Attack on Offline RLHF","display_name":"Efficient Preference Poisoning Attack on Offline RLHF","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W7160306608","doi":"https://doi.org/10.48550/arxiv.2605.02495"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.02495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.02495","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066891312","display_name":"Chenye Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Chenye","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101767475","display_name":"Weiyu Xu","orcid":"https://orcid.org/0000-0003-4256-6072"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Weiyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135307476","display_name":"Lifeng Lai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lai, Lifeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.24120000004768372,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.24120000004768372,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11596","display_name":"Constraint Satisfaction and Optimization","score":0.1573999971151352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.11299999803304672,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.6615999937057495},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.623199999332428},{"id":"https://openalex.org/keywords/preference","display_name":"Preference","score":0.5512999892234802},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.3707999885082245},{"id":"https://openalex.org/keywords/matching-pursuit","display_name":"Matching pursuit","score":0.3336000144481659},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.32120001316070557},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3190000057220459}],"concepts":[{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.6615999937057495},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.623199999332428},{"id":"https://openalex.org/C2781249084","wikidata":"https://www.wikidata.org/wiki/Q908656","display_name":"Preference","level":2,"score":0.5512999892234802},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5220000147819519},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48159998655319214},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3707999885082245},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35659998655319214},{"id":"https://openalex.org/C156872377","wikidata":"https://www.wikidata.org/wiki/Q6786281","display_name":"Matching pursuit","level":3,"score":0.3336000144481659},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.32120001316070557},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.31279999017715454},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.2962999939918518},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2824999988079071},{"id":"https://openalex.org/C2779110102","wikidata":"https://www.wikidata.org/wiki/Q1323737","display_name":"Revealed preference","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C119322782","wikidata":"https://www.wikidata.org/wiki/Q2662236","display_name":"VC dimension","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C2781204021","wikidata":"https://www.wikidata.org/wiki/Q6497091","display_name":"Lattice (music)","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2529999911785126},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.02495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.02495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education","score":0.520125687122345}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Offline":[0],"Reinforcement":[1],"Learning":[2],"from":[3],"Human":[4,152],"Feedback":[5],"(RLHF)":[6],"pipelines":[7],"such":[8],"as":[9],"Direct":[10],"Preference":[11],"Optimization":[12],"(DPO)":[13],"train":[14],"on":[15,146],"a":[16,45,65,98],"pre-collected":[17],"preference":[18,25,42],"dataset,":[19],"which":[20],"makes":[21],"them":[22],"vulnerable":[23],"to":[24,128],"poisoning":[26,62],"attack.":[27],"We":[28,36],"study":[29],"label":[30,43],"flip":[31,94],"attacks":[32],"against":[33],"log-linear":[34],"DPO.":[35],"first":[37],"illustrate":[38],"that":[39,114],"flipping":[40],"one":[41],"induces":[44],"parameter-independent":[46],"shift":[47],"in":[48],"the":[49,60,92,120,150,156],"DPO":[50],"gradient.":[51],"Using":[52],"this":[53,73],"key":[54],"property,":[55],"we":[56,75,110],"can":[57],"then":[58],"convert":[59],"targeted":[61],"problem":[63,96],"into":[64,97],"structured":[66],"binary":[67,93,116,125],"sparse":[68],"approximation":[69],"problem.":[70],"To":[71],"solve":[72],"problem,":[74],"develop":[76],"two":[77],"attack":[78,164],"methods:":[79],"Binary-Aware":[80],"Lattice":[81],"Attack":[82,88],"(BAL-A)":[83],"and":[84,101,105,118,133,138,149,158],"Binary":[85],"Matching":[86],"Pursuit":[87],"(BMP-A).":[89],"BAL-A":[90],"embeds":[91],"selection":[95],"binary-aware":[99],"lattice":[100],"applies":[102],"Lenstra-Lenstra-Lov\u00e1sz":[103],"reduction":[104],"Babai's":[106],"nearest":[107],"plane":[108],"algorithm;":[109],"provide":[111],"sufficient":[112],"conditions":[113],"enforce":[115],"coefficients":[117],"recover":[119],"minimum-flip":[121],"objective.":[122],"BMP-A":[123],"adapts":[124],"matching":[126],"pursuit":[127],"our":[129],"non-normalized":[130],"gradient":[131],"dictionary":[132,161],"yields":[134],"coherence-based":[135],"recovery":[136],"guarantees":[137],"robustness":[139],"(impossibility)":[140],"certificates":[141],"for":[142],"$K$-flip":[143],"budgets.":[144],"Experiments":[145],"synthetic":[147],"dictionaries":[148],"Stanford":[151],"Preferences":[153],"dataset":[154],"validate":[155],"theory":[157],"highlight":[159],"how":[160],"geometry":[162],"governs":[163],"success.":[165]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-06T00:00:00"}