{"id":"https://openalex.org/W7163167489","doi":"https://doi.org/10.48550/arxiv.2606.00813","title":"Cross-Generational Transfer of Adversarial Attacks Reveals Non-Monotonic Safety Alignment in LLMs","display_name":"Cross-Generational Transfer of Adversarial Attacks Reveals Non-Monotonic Safety Alignment in LLMs","publication_year":2026,"publication_date":"2026-05-30","ids":{"openalex":"https://openalex.org/W7163167489","doi":"https://doi.org/10.48550/arxiv.2606.00813"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.00813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.00813","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137679761","display_name":"Subhadip Mitra","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Mitra, Subhadip","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5137679761"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2777000069618225,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2777000069618225,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.22830000519752502,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.08879999816417694,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gemma","display_name":"Gemma","score":0.9775999784469604},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4153999984264374},{"id":"https://openalex.org/keywords/race","display_name":"Race (biology)","score":0.26269999146461487},{"id":"https://openalex.org/keywords/puncturing","display_name":"Puncturing","score":0.22920000553131104},{"id":"https://openalex.org/keywords/high-court","display_name":"High Court","score":0.22370000183582306}],"concepts":[{"id":"https://openalex.org/C170806853","wikidata":"https://www.wikidata.org/wiki/Q2746099","display_name":"Gemma","level":2,"score":0.9775999784469604},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42750000953674316},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4153999984264374},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3637999892234802},{"id":"https://openalex.org/C76509639","wikidata":"https://www.wikidata.org/wiki/Q918036","display_name":"Race (biology)","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C2778808095","wikidata":"https://www.wikidata.org/wiki/Q3899825","display_name":"Puncturing","level":2,"score":0.22920000553131104},{"id":"https://openalex.org/C2776862595","wikidata":"https://www.wikidata.org/wiki/Q3128539","display_name":"High Court","level":2,"score":0.22370000183582306},{"id":"https://openalex.org/C201811572","wikidata":"https://www.wikidata.org/wiki/Q188518","display_name":"Descendant","level":2,"score":0.22200000286102295},{"id":"https://openalex.org/C2781470023","wikidata":"https://www.wikidata.org/wiki/Q74363","display_name":"Seahorse","level":2,"score":0.21400000154972076},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.21240000426769257}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.00813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.00813","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.567256510257721}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Safety":[0],"alignment":[1],"in":[2,156],"LLMs":[3],"does":[4],"not":[5,163],"improve":[6],"monotonically":[7],"across":[8,74,120],"model":[9],"generations.":[10,108],"Studying":[11],"four":[12],"generations":[13,75,81],"of":[14],"Google's":[15],"Gemma":[16,31,52,65,84,92,96,146,149,157],"family":[17],"(7B-31B)":[18],"with":[19,186],"quality-diversity":[20],"evolution":[21],"(MAP-Elites)":[22],"as":[23],"an":[24],"automated":[25],"red-teaming":[26],"probe,":[27],"we":[28],"find":[29],"that":[30,77,95],"3":[32,45,85,150,183],"(12B)":[33],"exhibits":[34],"68.7%":[35],"+/-":[36,43,55,68],"5.7%":[37],"attack":[38,72,103],"success":[39],"rate":[40],"(ASR;":[41],"mean":[42],"std,":[44],"seeds),":[46],"significantly":[47],"higher":[48],"than":[49],"its":[50,63],"predecessor":[51],"2":[53,147],"(45.5%":[54],"7.2%;":[56],"p":[57],"=":[58],"0.030,":[59],"paired":[60],"bootstrap)":[61],"and":[62,114,148,151,173,192],"successor":[64],"4":[66],"(33.9%":[67],"1.8%).":[69],"Replaying":[70],"evolved":[71,105],"archives":[73],"reveals":[76],"attacks":[78],"from":[79,141],"other":[80],"transfer":[82],"to":[83,91,135,143,170],"at":[86,118,154,196],"44-46%":[87],"but":[88],"only":[89,175],"14-18%":[90],"4,":[93,158],"indicating":[94,159],"4's":[97],"safety":[98],"gains":[99],"generalize":[100],"beyond":[101],"the":[102,130,160],"distributions":[104],"against":[106],"earlier":[107],"Under":[109],"our":[110],"8B":[111],"judge,":[112],"copyright":[113,131],"cybercrime":[115],"vulnerabilities":[116],"register":[117],"near-100%":[119],"all":[121],"generations,":[122],"though":[123],"a":[124,187],"second-judge":[125],"audit":[126],"(Section":[127],"6)":[128],"suggests":[129],"result":[132],"is":[133],"sensitive":[134],"judge":[136],"choice.":[137],"Misinformation":[138],"ASR":[139],"jumps":[140],"29%":[142],"99%":[144],"between":[145],"remains":[152],"elevated":[153],"77%":[155],"regression":[161],"was":[162],"fully":[164],"addressed.":[165],"These":[166],"patterns":[167],"are":[168,194],"invisible":[169],"static":[171],"benchmarks":[172],"emerge":[174],"through":[176],"adaptive,":[177],"longitudinal":[178],"probing.":[179],"All":[180],"experiments":[181],"use":[182],"random":[184],"seeds":[185],"unified":[188],"self-hosted":[189],"judge;":[190],"code":[191],"artifacts":[193],"available":[195],"https://github.com/bassrehab/red-queen.":[197]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-03T00:00:00"}