{"id":"https://openalex.org/W7161175632","doi":"https://doi.org/10.48550/arxiv.2605.12746","title":"CoT-Guard: Small Models for Strong Monitoring","display_name":"CoT-Guard: Small Models for Strong Monitoring","publication_year":2026,"publication_date":"2026-05-12","ids":{"openalex":"https://openalex.org/W7161175632","doi":"https://doi.org/10.48550/arxiv.2605.12746"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.12746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.12746","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136108583","display_name":"Nirav Diwan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Diwan, Nirav","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136165370","display_name":"Han Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Han","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136112789","display_name":"Berkcan Kapusuzoglu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kapusuzoglu, Berkcan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136094899","display_name":"Ramin Moradi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Moradi, Ramin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136101587","display_name":"Supriyo Chakraborty","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chakraborty, Supriyo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136161451","display_name":"Giri Iyengar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Iyengar, Giri","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136118734","display_name":"Sambit Sahu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sahu, Sambit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136159765","display_name":"Huan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Huan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136106768","display_name":"Gang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Gang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.37529999017715454,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.37529999017715454,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2863999903202057,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.19539999961853027,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5856000185012817},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5841000080108643},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5763999819755554},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5595999956130981},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.47099998593330383},{"id":"https://openalex.org/keywords/closing","display_name":"Closing (real estate)","score":0.45489999651908875},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.44769999384880066},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.4066999852657318},{"id":"https://openalex.org/keywords/adversary-model","display_name":"Adversary model","score":0.39169999957084656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7698000073432922},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5856000185012817},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5841000080108643},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5763999819755554},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5595999956130981},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4846000075340271},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.47099998593330383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46959999203681946},{"id":"https://openalex.org/C2778775528","wikidata":"https://www.wikidata.org/wiki/Q5135432","display_name":"Closing (real estate)","level":2,"score":0.45489999651908875},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.4066999852657318},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.39169999957084656},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.37619999051094055},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3723999857902527},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3400999903678894},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3296999931335449},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30709999799728394},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.2888999879360199},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2662000060081482},{"id":"https://openalex.org/C100368936","wikidata":"https://www.wikidata.org/wiki/Q1411725","display_name":"Crawling","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.2535000145435333},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.2524999976158142},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.12746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.12746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Monitoring":[0],"the":[1,40,49,71,79,101,123,147,227,250],"chain-of-thought":[2],"(CoT)":[3],"of":[4,78,214,253],"reasoning":[5,42],"models":[6,24,61],"is":[7,149],"a":[8,87,137,150,192,208,238],"promising":[9],"approach":[10],"for":[11,51,103,185],"detecting":[12],"covert":[13],"misbehavior":[14],"(i.e.,":[15,210],"hidden":[16,66,120,155],"objectives)":[17],"in":[18],"code":[19,165,204],"generation":[20],"tasks.":[21,129],"While":[22],"large":[23,173,254],"(GPT-5,":[25],"Gemini-3-Flash)":[26],"can":[27],"serve":[28],"as":[29,76],"effective":[30],"CoT":[31],"monitors,":[32,112],"they":[33],"are":[34],"expensive":[35],"to":[36,39,64,70,126,229],"deploy":[37],"due":[38],"lengthy":[41],"traces":[43],"and":[44,94,113,117,203,216,222,240],"high":[45],"API":[46],"cost,":[47],"emphasizing":[48],"need":[50],"smaller,":[52],"cheaper":[53],"alternatives.":[54],"Nevertheless,":[55],"we":[56,85,134,177,189],"find":[57],"that":[58,172,195,235],"current":[59],"small":[60],"(4B--8B)":[62],"struggle":[63],"detect":[65],"objectives":[67,121,156,171],"despite":[68],"access":[69],"CoT,":[72],"frequently":[73],"misattributing":[74],"them":[75],"part":[77],"user":[80],"query.":[81],"To":[82,130,168],"address":[83],"this,":[84],"propose":[86],"post-training":[88],"pipeline":[89],"combining":[90],"supervised":[91],"fine-tuning":[92],"(SFT)":[93],"reinforcement":[95],"learning":[96],"(RL),":[97],"where":[98,146],"SFT":[99],"narrows":[100],"gap":[102,228],"in-domain":[104],"tasks":[105,183],"by":[106,142],"distilling":[107],"detection":[108,247],"behavior":[109],"from":[110],"stronger":[111],"RL":[114],"on":[115],"hard":[116],"subtly":[118],"crafted":[119],"helps":[122],"model":[124,140],"generalize":[125],"out-of-domain":[127],"monitoring":[128],"validate":[131],"this":[132],"generalization,":[133],"evaluate":[135],"under":[136,200],"realistic":[138],"threat":[139],"motivated":[141],"practical":[143,239],"supply-chain":[144],"attacks,":[145,206],"adversary":[148],"third-party":[151],"LLM":[152],"router":[153],"injecting":[154],"into":[157],"code-generation":[158],"requests":[159],"through":[160],"either":[161],"prompt":[162,202],"manipulation":[163,166,205],"or":[164],"attacks.":[167],"push":[169],"beyond":[170],"monitors":[174],"already":[175],"saturate,":[176],"also":[178],"introduce":[179,190],"four":[180],"new":[181],"challenging":[182],"even":[184],"strong":[186],"monitors.":[187,255],"Finally,":[188],"CoT-Guard,":[191],"4B-parameter":[193],"monitor":[194],"demonstrates":[196],"superior":[197],"generalization":[198],"performance":[199],"both":[201],"achieving":[207],"G-mean^2":[209],"TNR":[211],"x":[212],"TPR)":[213],"75%":[215],"outperforming":[217],"GPT-5.4":[218],"(56%),":[219],"GPT-5-mini":[220],"(41%),":[221],"Qwen3-32B":[223],"(54%),":[224],"while":[225,248],"closing":[226],"Gemini-3-Flash":[230],"(83%).":[231],"These":[232],"results":[233],"demonstrate":[234],"CoT-Guard":[236],"provides":[237],"cost-effective":[241],"user-side":[242],"defense,":[243],"substantially":[244],"improving":[245],"hidden-objective":[246],"avoiding":[249],"deployment":[251],"cost":[252]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-15T00:00:00"}