{"id":"https://openalex.org/W7162518759","doi":"https://doi.org/10.48550/arxiv.2605.26537","title":"Conceptual Steganography","display_name":"Conceptual Steganography","publication_year":2026,"publication_date":"2026-05-26","ids":{"openalex":"https://openalex.org/W7162518759","doi":"https://doi.org/10.48550/arxiv.2605.26537"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.26537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.26537","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113399822","display_name":"Zhejian Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Zhejian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135490559","display_name":"Jonathan May","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"May, Jonathan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3837999999523163,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3837999999523163,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.08950000256299973,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.06080000102519989,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.6227999925613403},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.6155999898910522},{"id":"https://openalex.org/keywords/paraphrase","display_name":"Paraphrase","score":0.5917999744415283},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.5612999796867371},{"id":"https://openalex.org/keywords/steganography","display_name":"Steganography","score":0.5594000220298767},{"id":"https://openalex.org/keywords/information-hiding","display_name":"Information hiding","score":0.516700029373169},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.4674000144004822},{"id":"https://openalex.org/keywords/unicode","display_name":"Unicode","score":0.450300008058548}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7186999917030334},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.6227999925613403},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.6155999898910522},{"id":"https://openalex.org/C2780922921","wikidata":"https://www.wikidata.org/wiki/Q255189","display_name":"Paraphrase","level":2,"score":0.5917999744415283},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.5612999796867371},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.5594000220298767},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5230000019073486},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.516700029373169},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5005999803543091},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.4674000144004822},{"id":"https://openalex.org/C500551929","wikidata":"https://www.wikidata.org/wiki/Q8819","display_name":"Unicode","level":2,"score":0.450300008058548},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.39309999346733093},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.37880000472068787},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.374099999666214},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3183000087738037},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C176982825","wikidata":"https://www.wikidata.org/wiki/Q835922","display_name":"Lexical analysis","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C37335422","wikidata":"https://www.wikidata.org/wiki/Q6888134","display_name":"Model-based reasoning","level":3,"score":0.27709999680519104},{"id":"https://openalex.org/C198104137","wikidata":"https://www.wikidata.org/wiki/Q974688","display_name":"Communication source","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C168297262","wikidata":"https://www.wikidata.org/wiki/Q6031182","display_name":"Information protection policy","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.26537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.26537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Language":[0],"Models":[1],"(LMs)":[2],"emit":[3],"Chains-of-Thought":[4],"(CoTs)":[5],"that":[6,16,35,150],"drive":[7],"much":[8,156],"of":[9,42,80,87,127,143,157],"their":[10,134],"capability.":[11],"However,":[12],"the":[13,54,64,125,137,158,172],"same":[14],"sequence":[15],"carries":[17,83],"useful":[18],"reasoning":[19,89,102,138,170],"can":[20,154],"also":[21],"covertly":[22],"convey":[23],"messages:":[24],"a":[25,40,60,81,116,151],"misaligned":[26],"model":[27,98],"may":[28],"embed":[29],"covert":[30],"information":[31,84,128],"in":[32,53,69,76,136,171],"its":[33],"CoT":[34,82],"slips":[36],"through":[37,85,93],"human":[38],"supervision,":[39],"form":[41],"steganography":[43,50],"known":[44],"as":[45],"encoded":[46],"reasoning.":[47],"Prior":[48],"LM":[49],"schemes":[51],"operate":[52],"token":[55],"or":[56],"lexical":[57,94],"space,":[58],"and":[59,66,100,124,163],"content-preserving":[61],"paraphraser":[62,153],"is":[63,108],"canonical":[65],"effective":[67],"defense":[68,119],"recent":[70],"work.":[71],"We":[72],"introduce":[73],"conceptual":[74],"steganography,":[75],"which":[77],"each":[78],"step":[79],"patterns":[86],"high-level":[88],"behavior,":[90],"rather":[91],"than":[92,120],"choice.":[95],"Across":[96],"four":[97],"families":[99],"two":[101],"domains,":[103],"this":[104,144],"backdoor":[105],"communication":[106],"channel":[107],"shown":[109],"to":[110,115],"be":[111],"consistently":[112],"more":[113],"robust":[114],"strong":[117],"paraphrase":[118],"standard":[121],"keyword":[122],"approaches,":[123],"encoding":[126],"into":[129],"CoTs":[130],"does":[131],"not":[132],"affect":[133],"utility":[135],"process.":[139],"Having":[140],"raised":[141],"awareness":[142],"new":[145,161],"risk,":[146],"we":[147],"then":[148],"demonstrate":[149],"strategy-aware":[152],"close":[155],"channel,":[159],"highlighting":[160],"challenges":[162],"recommended":[164],"defenses":[165],"for":[166],"ensuring":[167],"faithful":[168],"LLM":[169],"wild.":[173]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-28T00:00:00"}