{"id":"https://openalex.org/W7162104882","doi":"https://doi.org/10.48550/arxiv.2605.22258","title":"Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting","display_name":"Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162104882","doi":"https://doi.org/10.48550/arxiv.2605.22258"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.22258","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22258","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.22258","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136767803","display_name":"Jingyi Kang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kang, Jingyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136761957","display_name":"Junyu Lu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Junyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136802098","display_name":"Bo Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136774789","display_name":"Hongbo Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hongbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136788899","display_name":"Linlin zong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"zong, Linlin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136802511","display_name":"Roy Ka-Wei Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Roy Ka-Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136795792","display_name":"Hongfei Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Hongfei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5849000215530396,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5849000215530396,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.2547999918460846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.013799999840557575,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6535999774932861},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6177999973297119},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5899999737739563},{"id":"https://openalex.org/keywords/rewriting","display_name":"Rewriting","score":0.5467000007629395}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6535999774932861},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6177999973297119},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.597100019454956},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5899999737739563},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.5467000007629395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4964999854564667},{"id":"https://openalex.org/C29730261","wikidata":"https://www.wikidata.org/wiki/Q274160","display_name":"Toxicity","level":2,"score":0.4699000120162964},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2978000044822693},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.24860000610351562},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2329999953508377}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.22258","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22258","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.22258","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22258","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.5378198623657227}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"require":[4],"robust":[5],"toxicity":[6,18],"evaluation":[7,36,76,93],"beyond":[8],"explicit":[9],"wording.":[10],"This":[11],"setting":[12],"remains":[13],"underexplored":[14],"in":[15],"Chinese,":[16],"where":[17],"may":[19],"combine":[20],"semantic":[21],"indirectness":[22],"with":[23,115],"surface":[24,72],"obfuscation.":[25],"We":[26],"introduce":[27],"Chinese":[28,109],"Implicit":[29,55,110],"Toxicity":[30,56,111],"Attack":[31],"(CITA),":[32],"a":[33,42,102,108],"controlled":[34,71],"red-team":[35,117],"and":[37,58,69,98],"defense-data":[38],"generation":[39],"framework,":[40],"not":[41],"deployable":[43],"evasion":[44],"tool.":[45],"CITA":[46],"uses":[47],"three":[48],"stages:":[49],"(i)":[50],"Harmful":[51],"Intent":[52],"Learning,":[53],"(ii)":[54],"Enhancement,":[57],"(iii)":[59],"Obfuscation":[60],"Variant":[61],"Rewriting,":[62],"to":[63],"preserve":[64],"harmful":[65],"intent,":[66],"increase":[67],"implicitness,":[68],"add":[70],"variants.":[73],"On":[74],"CITA-generated":[75,116],"samples,":[77],"the":[78],"seven":[79],"tested":[80],"detectors":[81],"exhibit":[82],"substantial":[83],"missed-detection":[84],"risks,":[85],"reaching":[86],"an":[87],"average":[88],"ASR":[89],"of":[90],"69.48%;":[91],"human":[92],"further":[94],"confirms":[95],"preserved":[96],"harmfulness":[97],"increased":[99],"implicitness/evasiveness.":[100],"As":[101],"downstream":[103],"defense":[104],"application,":[105],"we":[106],"fine-tune":[107],"Defense":[112],"model":[113],"(CITD)":[114],"data,":[118],"showing":[119],"that":[120],"such":[121],"data":[122],"can":[123],"improve":[124],"robustness":[125],"through":[126],"additional":[127],"training.":[128]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-23T00:00:00"}