{"id":"https://openalex.org/W7161119299","doi":"https://doi.org/10.48550/arxiv.2605.12813","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","display_name":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","publication_year":2026,"publication_date":"2026-05-12","ids":{"openalex":"https://openalex.org/W7161119299","doi":"https://doi.org/10.48550/arxiv.2605.12813"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.12813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.12813","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080577958","display_name":"Buyun Liang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liang, Buyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136095668","display_name":"Jinqi Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Jinqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072149973","display_name":"Liangzu Peng","orcid":"https://orcid.org/0000-0003-0708-7543"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng, Liangzu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043328370","display_name":"Kwan Ho Ryan Chan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chan, Kwan Ho Ryan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5096532546","display_name":"Darshan Thaker","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thaker, Darshan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011912258","display_name":"Kaleab A. Kinfu","orcid":"https://orcid.org/0000-0002-1994-4816"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kinfu, Kaleab A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136090083","display_name":"Fengrui Tian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Fengrui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136185292","display_name":"Hamed Hassani","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hassani, Hamed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136104270","display_name":"Ren\u00e9 Vidal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vidal, Ren\u00e9","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8805000185966492,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8805000185966492,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.019700000062584877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.015599999576807022,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6924999952316284},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5728999972343445},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5031999945640564},{"id":"https://openalex.org/keywords/equivalence","display_name":"Equivalence (formal languages)","score":0.49079999327659607},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.4587000012397766},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4560000002384186},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.45010000467300415}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6924999952316284},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6488000154495239},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5728999972343445},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5031999945640564},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.49079999327659607},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47850000858306885},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.4587000012397766},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4560000002384186},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.45010000467300415},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3953000009059906},{"id":"https://openalex.org/C2781181686","wikidata":"https://www.wikidata.org/wiki/Q4226068","display_name":"Coherence (philosophical gambling strategy)","level":2,"score":0.387800008058548},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3813000023365021},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.32739999890327454},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3206000030040741},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.29820001125335693},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.12813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.12813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.49474024772644043,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,175],"(LLMs)":[3],"achieve":[4],"strong":[5],"performance":[6,160],"across":[7],"many":[8],"tasks":[9],"but":[10,66,84],"remain":[11,56],"vulnerable":[12],"to":[13,18,40,49,118,161],"hallucinations,":[14],"making":[15],"it":[16],"important":[17],"systematically":[19],"evaluate":[20],"their":[21],"reliability":[22],"under":[23,176],"realistic":[24,103,163,182],"adversarial":[25,44],"inputs.":[26],"We":[27],"formulate":[28],"hallucination":[29],"elicitation":[30],"as":[31],"a":[32,70,81,102,119],"constrained":[33],"optimization":[34,139],"problem,":[35],"where":[36,180],"the":[37,138,145],"goal":[38],"is":[39,186],"find":[41],"semantically":[42,120],"coherent":[43,123],"prompts":[45,88],"that":[46,89,154],"are":[47,90],"equivalent":[48,121],"benign":[50],"user":[51],"prompts.":[52],"Existing":[53],"attack":[54,105],"methods":[55],"limited:":[57],"discrete":[58,149],"prompt-based":[59],"attacks":[60,79,143,164,183],"preserve":[61],"semantic":[62,146],"equivalence":[63],"and":[64,122,125],"coherence":[65],"search":[67],"only":[68],"over":[69],"limited":[71],"set":[72],"of":[73,112,129,141,148],"prompt":[74],"variations,":[75],"while":[76],"continuous":[77,127,142],"latent-space":[78,104],"explore":[80],"richer":[82],"space":[83],"often":[85],"decode":[86],"into":[87],"no":[91],"longer":[92],"valid":[93,113],"rephrasings.":[94],"To":[95],"address":[96],"these":[97,130],"limitations,":[98],"we":[99],"propose":[100],"REALISTA,":[101],"framework.":[106],"REALISTA":[107,155],"constructs":[108],"an":[109],"input-dependent":[110],"dictionary":[111],"editing":[114],"directions,":[115],"each":[116],"corresponding":[117],"rephrasing,":[124],"optimizes":[126],"combinations":[128],"directions":[131],"in":[132,171],"latent":[133],"space.":[134],"This":[135],"design":[136],"combines":[137],"flexibility":[140],"with":[144],"realism":[147],"rephrasing-based":[150],"attacks.":[151],"Experiments":[152],"demonstrate":[153],"achieves":[156],"superior":[157],"or":[158],"comparable":[159],"state-of-the-art":[162],"on":[165],"open-source":[166],"LLMs":[167],"and,":[168],"crucially,":[169],"succeeds":[170],"attacking":[172],"large":[173],"reasoning":[174],"free-form":[177],"response":[178],"settings,":[179],"prior":[181],"fail.":[184],"Code":[185],"available":[187],"at":[188],"https://github.com/Buyun-Liang/REALISTA.":[189]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-15T00:00:00"}