{"id":"https://openalex.org/W7163142150","doi":"https://doi.org/10.48550/arxiv.2606.00801","title":"Quality-Diversity Evolution for Discovering Diverse Vulnerabilities in LLM Safety","display_name":"Quality-Diversity Evolution for Discovering Diverse Vulnerabilities in LLM Safety","publication_year":2026,"publication_date":"2026-05-30","ids":{"openalex":"https://openalex.org/W7163142150","doi":"https://doi.org/10.48550/arxiv.2606.00801"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.00801","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00801","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.00801","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137679761","display_name":"Subhadip Mitra","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Mitra, Subhadip","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5137679761"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6294999718666077,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6294999718666077,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2071000039577484,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.05209999904036522,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.623199999332428},{"id":"https://openalex.org/keywords/framing","display_name":"Framing (construction)","score":0.5073000192642212},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.46619999408721924},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.40220001339912415},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.4018000066280365},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.3889000117778778}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6959999799728394},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.623199999332428},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.5073000192642212},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.46619999408721924},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.40220001339912415},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.4018000066280365},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3889000117778778},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3873000144958496},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3231000006198883},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3192000091075897},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3100000023841858},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.30709999799728394},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2833999991416931},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2685999870300293}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.00801","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00801","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.00801","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00801","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Current":[0],"approaches":[1,22],"to":[2,88,100],"LLM":[3,137],"adversarial":[4],"testing":[5],"suffer":[6],"from":[7],"coverage":[8],"gaps:":[9],"manual":[10],"red-teaming":[11],"does":[12],"not":[13],"scale,":[14],"LLM-as-attacker":[15],"methods":[16],"exhibit":[17],"mode":[18],"collapse,":[19],"and":[20,74,90,105,139,149],"gradient-based":[21],"produce":[23],"uninterpretable":[24],"gibberish.":[25],"We":[26],"introduce":[27],"a":[28,50,140],"quality-diversity":[29],"evolutionary":[30],"framework":[31],"that":[32,127],"operates":[33],"at":[34,154],"the":[35],"semantic":[36,122],"level,":[37],"evolving":[38],"interpretable":[39,125],"attack":[40],"strategies":[41,118],"rather":[42],"than":[43],"token":[44],"sequences.":[45],"Using":[46],"MAP-Elites,":[47],"we":[48,80],"maintain":[49],"diverse":[51],"archive":[52],"of":[53],"attacks":[54,102,126],"across":[55,66,116],"behavioral":[56],"dimensions":[57],"(strategy":[58],"type,":[59],"encoding":[60,96],"method,":[61],"prompt":[62],"length).":[63],"In":[64],"experiments":[65],"GPT-4o-mini,":[67],"Claude":[68,111],"3.5":[69],"Sonnet,":[70],"Gemini":[71,99],"2.0":[72],"Flash,":[73],"an":[75],"open-weight":[76],"coding":[77],"model":[78],"(Devstral-small-2),":[79],"discover":[81],"distinct":[82],"vulnerability":[83],"profiles:":[84],"GPT-4o-mini":[85],"is":[86],"vulnerable":[87],"hypothetical":[89],"multi-turn":[91,106],"framing":[92],"combined":[93],"with":[94,103,107],"ROT13":[95,104],"(fitness":[97],"0.8),":[98],"direct":[101],"Leetspeak":[108],"(0.8),":[109],"while":[110],"shows":[112],"uniformly":[113],"ambiguous":[114],"responses":[115],"all":[117],"(max":[119],"0.4).":[120],"The":[121],"representation":[123],"produces":[124],"reveal":[128],"systematic,":[129],"model-specific":[130],"weaknesses,":[131],"providing":[132],"actionable":[133],"insights":[134],"for":[135,143],"improving":[136],"safety":[138],"reproducible":[141],"baseline":[142],"evaluating":[144],"future":[145],"frontier":[146],"models.":[147],"Code":[148],"experiment":[150],"artifacts":[151],"are":[152],"released":[153],"https://github.com/bassrehab/red-queen.":[155]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-03T00:00:00"}