{"id":"https://openalex.org/W7162441106","doi":"https://doi.org/10.48550/arxiv.2605.24535","title":"Steering Beyond the Support: Adversarial Training on Unsupervised Jailbroken Activation Simulation","display_name":"Steering Beyond the Support: Adversarial Training on Unsupervised Jailbroken Activation Simulation","publication_year":2026,"publication_date":"2026-05-23","ids":{"openalex":"https://openalex.org/W7162441106","doi":"https://doi.org/10.48550/arxiv.2605.24535"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.24535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.24535","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137005488","display_name":"Luoyu Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Luoyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137019640","display_name":"Weiqi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Weiqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059567156","display_name":"Zhiyi Tian","orcid":"https://orcid.org/0000-0001-8905-0941"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Zhiyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137070102","display_name":"Chenhan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Chenhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137013021","display_name":"Feng Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Feng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137054424","display_name":"Jianhuan Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Jianhuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137029506","display_name":"Ahmed Asiri","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Asiri, Ahmed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137012003","display_name":"Shui Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Shui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0026000000070780516,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8518000245094299},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.760699987411499},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.5576000213623047},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5131000280380249},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4097999930381775},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.3804999887943268}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8518000245094299},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.760699987411499},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6039000153541565},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5861999988555908},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.5576000213623047},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5131000280380249},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4535999894142151},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4097999930381775},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3804999887943268},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.34529998898506165},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C42058472","wikidata":"https://www.wikidata.org/wiki/Q810214","display_name":"Base (topology)","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C51167844","wikidata":"https://www.wikidata.org/wiki/Q4422623","display_name":"Latent variable","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.24535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.24535","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24535","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.8190123438835144,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Jailbreak":[0],"prompts":[1],"can":[2],"trigger":[3,24],"harmful":[4],"completions":[5],"on":[6,60,70,75],"aligned":[7],"LLMs,":[8],"In":[9,63,91,120],"accordance,":[10],"safety":[11],"steering":[12,32,128],"has":[13],"been":[14],"proposed:":[15],"test-time":[16],"activation":[17,118],"interventions":[18],"that":[19],"steer":[20],"jailbreak":[21,89,117,149],"activations":[22,99,105],"to":[23,39,58,130],"refusal":[25,137],"while":[26,139],"preserving":[27],"benign":[28,141],"utility.":[29],"However,":[30],"existing":[31],"methods":[33],"are":[34,50],"fundamentally":[35],"supervised":[36],"and":[37,49,146,163],"tied":[38],"a":[40,82,126],"static,":[41],"limited":[42],"training":[43,55,85,168],"set,":[44,56],"whereas":[45],"real":[46,116],"jailbreaks":[47,72],"evolve":[48],"often":[51],"out-of-distributed":[52],"from":[53,102],"the":[54,68,92,113,121,171],"leading":[57],"failures":[59],"unseen":[61,71],"attacks.":[62],"this":[64],"paper,":[65],"we":[66,95,124],"tackle":[67],"failure":[69],"problem,":[73],"base":[74],"unsupervised":[76,107],"latent":[77,108],"direction":[78,109],"discovery.":[79],"We":[80],"propose":[81],"bi-level":[83],"adversarial":[84,133],"framework":[86],"for":[87],"zero-shot":[88],"defense.":[90],"inner":[93],"step,":[94,123],"simulate":[96],"diverse":[97],"jail-broken":[98],"by":[100],"extrapolating":[101],"refusal-state":[103],"harmful-request":[104],"via":[106],"discovery,":[110],"which":[111],"expands":[112],"coverage":[114,166],"of":[115],"subspaces.":[119],"outer":[122],"train":[125],"potential-induced":[127],"field":[129],"push":[131],"these":[132],"jailbroken":[134],"states":[135],"into":[136],"regions":[138],"keeping":[140],"unchanged.":[142],"Across":[143],"three":[144],"LLMs":[145],"six":[147],"classical":[148],"families,":[150],"our":[151],"method":[152],"achieves":[153],"strong":[154],"defense":[155],"with":[156],"attack":[157],"success":[158],"rates":[159],"mostly":[160],"below":[161],"5%,":[162],"rising":[164],"subspace":[165],"throughout":[167],"helps":[169],"explain":[170],"improved":[172],"generalization.":[173]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-27T00:00:00"}