{"id":"https://openalex.org/W7161254567","doi":"https://doi.org/10.48550/arxiv.2605.14514","title":"Defenses at Odds: Measuring and Explaining Defense Conflicts in Large Language Models","display_name":"Defenses at Odds: Measuring and Explaining Defense Conflicts in Large Language Models","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161254567","doi":"https://doi.org/10.48550/arxiv.2605.14514"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.14514","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14514","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.14514","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136208656","display_name":"Xiangtao Meng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meng, Xiangtao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136236140","display_name":"Wenyu Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Wenyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136188280","display_name":"Chuanchao Zang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zang, Chuanchao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136203773","display_name":"Xinyu Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Xinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136227548","display_name":"Jianing Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jianing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136230356","display_name":"Li Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136212133","display_name":"Zheng Li","orcid":"https://orcid.org/0009-0006-8789-7413"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Zheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136272327","display_name":"Shanqing Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Shanqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8223000168800354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8223000168800354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.017799999564886093,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6654999852180481},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5817000269889832},{"id":"https://openalex.org/keywords/divergence","display_name":"Divergence (linguistics)","score":0.44909998774528503},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.4018999934196472},{"id":"https://openalex.org/keywords/retraining","display_name":"Retraining","score":0.3203999996185303},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.28690001368522644}],"concepts":[{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6654999852180481},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5817000269889832},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5777000188827515},{"id":"https://openalex.org/C207390915","wikidata":"https://www.wikidata.org/wiki/Q1230525","display_name":"Divergence (linguistics)","level":2,"score":0.44909998774528503},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43720000982284546},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.4018999934196472},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3785000145435333},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.3203999996185303},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3091999888420105},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.28690001368522644},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.25279998779296875},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.14514","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14514","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.14514","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14514","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"deployed":[4],"in":[5,20,172],"high-stakes":[6],"applications":[7],"must":[8],"simultaneously":[9],"manage":[10],"multiple":[11],"risks,":[12],"yet":[13],"existing":[14],"defenses":[15],"are":[16,106],"almost":[17],"exclusively":[18],"evaluated":[19],"isolation":[21],"under":[22,76],"a":[23,50,56,117,136,179,208],"one-shot":[24],"deployment":[25,122],"assumption.":[26],"In":[27,142],"practice,":[28],"providers":[29],"patch":[30],"models":[31],"incrementally":[32],"throughout":[33],"their":[34],"lifecycle-responding":[35],"to":[36,135],"newly":[37],"exposed":[38],"vulnerabilities":[39],"or":[40],"targeted":[41],"data-removal":[42],"requests":[43],"without":[44,222],"retraining":[45],"from":[46,168],"scratch.":[47],"This":[48],"raises":[49],"fundamental":[51],"but":[52],"underexplored":[53],"question:":[54],"does":[55],"later":[57],"defense":[58,134,165,225],"preserve":[59],"the":[60,69,100,145,185,196],"protections":[61,221],"established":[62],"by":[63,200],"an":[64],"earlier":[65],"one?":[66],"We":[67,176],"present":[68],"first":[70],"systematic":[71],"study":[72],"of":[73,139],"cross-defense":[74],"interactions":[75,105],"sequential":[77,217],"deployment.":[78],"Evaluating":[79],"144":[80],"ordered":[81],"sequences":[82],"across":[83],"three":[84,88],"risk":[85,97],"dimensions":[86],"and":[87,109,128],"model":[89],"families,":[90],"we":[91,115,131,203],"find":[92],"that":[93,164,183,211],"38.9%":[94],"exhibit":[95,149],"measurable":[96],"exacerbation":[98],"on":[99,120],"originally":[101],"defended":[102],"dimension.":[103],"These":[104],"highly":[107],"asymmetric":[108],"order-dependent.":[110],"To":[111],"explain":[112],"these":[113,173],"phenomena,":[114],"conduct":[116],"mechanistic":[118,193],"analysis":[119,162],"representative":[121],"sequences.":[123],"Using":[124],"layer-wise":[125,180],"representational":[126],"divergence":[127],"activation":[129,169,190],"patching,":[130],"localize":[132],"each":[133],"compact":[137],"set":[138],"critical":[140,147],"layers.":[141,175],"conflicting":[143],"sequences,":[144],"overlapping":[146],"layers":[148,215],"strongly":[150],"anti-aligned":[151],"parameter":[152],"updates,":[153],"whereas":[154],"benign":[155],"orderings":[156],"maintain":[157],"near-orthogonal":[158],"updates.":[159],"PCA":[160],"trajectory":[161],"reveals":[163],"collapse":[166],"stems":[167],"pattern":[170],"reversals":[171],"shared":[174],"further":[177],"introduce":[178],"conflict":[181],"score":[182],"quantifies":[184],"geometric":[186],"tension":[187],"between":[188],"defense-induced":[189],"subspaces,":[191],"offering":[192],"insight":[194],"into":[195],"observed":[197],"reversals.":[198],"Guided":[199],"this":[201],"diagnosis,":[202],"propose":[204],"conflict-guided":[205],"layer":[206],"freezing,":[207],"lightweight":[209],"mitigation":[210],"selectively":[212],"freezes":[213],"high-conflict":[214],"during":[216],"deployment,":[218],"preserving":[219],"prior":[220],"degrading":[223],"secondary":[224],"performance.":[226]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-16T00:00:00"}