{"id":"https://openalex.org/W7162785975","doi":"https://doi.org/10.48550/arxiv.2605.29237","title":"Evolving Skill-Structured Attack Memory Enhances LLM Jailbreaking","display_name":"Evolving Skill-Structured Attack Memory Enhances LLM Jailbreaking","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7162785975","doi":"https://doi.org/10.48550/arxiv.2605.29237"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.29237","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29237","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.29237","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137313124","display_name":"Junke Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Junke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137397427","display_name":"Jianwei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jianwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137337917","display_name":"Sishuo Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Sishuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137330855","display_name":"Yizhang He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Yizhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137355648","display_name":"Qingshuai Feng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Feng, Qingshuai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137363065","display_name":"Zhengyi Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Zhengyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5565999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5565999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.060100000351667404,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.05849999934434891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.61080002784729},{"id":"https://openalex.org/keywords/memory-model","display_name":"Memory model","score":0.5347999930381775},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.49939998984336853},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.48890000581741333},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.47839999198913574},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.44609999656677246},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.34299999475479126}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7379999756813049},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.61080002784729},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.5347999930381775},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.49939998984336853},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.48890000581741333},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.47839999198913574},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.44609999656677246},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.397599995136261},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.34299999475479126},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.3361000120639801},{"id":"https://openalex.org/C171675096","wikidata":"https://www.wikidata.org/wiki/Q1143380","display_name":"Extended memory","level":4,"score":0.33169999718666077},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.29019999504089355},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.259799987077713},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.2558000087738037}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.29237","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29237","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.29237","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29237","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Jailbreak":[0],"attacks":[1],"on":[2,52,164],"large":[3],"language":[4],"models":[5],"(LLMs)":[6],"aim":[7],"to":[8,11,18,39],"induce":[9],"LLMs":[10],"produce":[12],"content":[13],"that":[14,167],"they":[15],"are":[16],"expected":[17],"refuse.":[19],"Automated":[20],"black-box":[21,47,85],"jailbreak":[22,48,86],"generation":[23],"is":[24],"especially":[25],"important":[26],"for":[27,42],"safety":[28],"evaluation,":[29],"where":[30],"the":[31,133,178],"attacker":[32],"observes":[33],"only":[34],"model":[35],"outputs":[36],"and":[37,71,94,124,142,145],"needs":[38],"automatically":[40],"search":[41,55],"effective":[43],"adversarial":[44],"prompts.":[45],"Existing":[46],"methods":[49],"either":[50],"depend":[51],"sample-wise":[53],"heuristic":[54],"or":[56,64],"leverage":[57],"attack":[58,74,90,109,114,119,172],"experience":[59,110],"through":[60,135],"accumulating":[61],"strategy":[62],"pools":[63],"method":[65],"libraries,":[66],"lacking":[67],"a":[68,83],"systematic":[69],"organization":[70],"management":[72],"of":[73,175],"experience.":[75],"To":[76],"mitigate":[77],"these":[78],"drawbacks,":[79],"we":[80],"propose":[81],"MemoAttack,":[82],"memory-driven":[84],"framework":[87],"with":[88,121,156],"comprehensive":[89],"memory":[91,115,134,154,196],"modeling,":[92],"evolution,":[93],"selection.":[95],"Specifically,":[96],"MemoAttack":[97,168,192],"comprises":[98],"three":[99],"key":[100],"designs:":[101],"(1)":[102],"Skill-Structured":[103],"Memory":[104,129,149],"Modeling,":[105],"which":[106,131,151],"abstracts":[107],"accumulated":[108],"into":[111],"reusable":[112],"skill-structured":[113],"whose":[116],"units":[117],"pair":[118],"skills":[120],"templates,":[122],"evidence,":[123],"lifecycle":[125],"state;":[126],"(2)":[127],"Lifecycle-Driven":[128],"Evolution,":[130],"evolves":[132],"evidence-based":[136],"probation,":[137],"promotion,":[138],"retirement,":[139],"reactivation,":[140],"elimination,":[141],"storage":[143],"cleanup;":[144],"(3)":[146],"Explore-Exploit":[147],"Balanced":[148],"Selection,":[150],"balances":[152],"reliable":[153],"reuse":[155],"uncertainty-driven":[157],"exploration":[158],"via":[159],"contextual":[160],"Thompson":[161],"Sampling.":[162],"Experiments":[163],"AdvBench":[165],"demonstrate":[166],"achieves":[169],"an":[170],"average":[171],"success":[173],"rate":[174],"98.00%,":[176],"outperforming":[177],"strongest":[179],"baseline":[180],"by":[181,189],"16.67":[182],"percentage":[183],"points,":[184],"while":[185],"reducing":[186],"request":[187],"count":[188],"45.9%.":[190],"Moreover,":[191],"continuously":[193],"improves":[194],"as":[195],"accumulates":[197],"over":[198],"more":[199],"samples.":[200]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-30T00:00:00"}