{"id":"https://openalex.org/W7163696069","doi":"https://doi.org/10.48550/arxiv.2606.05614","title":"Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack","display_name":"Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack","publication_year":2026,"publication_date":"2026-06-04","ids":{"openalex":"https://openalex.org/W7163696069","doi":"https://doi.org/10.48550/arxiv.2606.05614"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.05614","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05614","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.05614","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126214943","display_name":"Long P. Hoang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hoang, Long P.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121849187","display_name":"Hai Le","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Le, Hai V.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102676471","display_name":"Shaoyang Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Shaoyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137972883","display_name":"Wei Lu (3580)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137989650","display_name":"Wenxuan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Wenxuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8562999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8562999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.031199999153614044,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.01489999983459711,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.41760000586509705},{"id":"https://openalex.org/keywords/frontier","display_name":"Frontier","score":0.34769999980926514},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.34459999203681946},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.32690000534057617},{"id":"https://openalex.org/keywords/empirical-evidence","display_name":"Empirical evidence","score":0.31200000643730164},{"id":"https://openalex.org/keywords/poison-control","display_name":"Poison control","score":0.2915000021457672}],"concepts":[{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5375000238418579},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48159998655319214},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.41760000586509705},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4068000018596649},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.34769999980926514},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.32690000534057617},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3192000091075897},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.31610000133514404},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.31200000643730164},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.29899999499320984},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29280000925064087},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2743000090122223},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C11671645","wikidata":"https://www.wikidata.org/wiki/Q5054567","display_name":"Causal model","level":2,"score":0.26660001277923584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.05614","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05614","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.05614","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05614","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7375625967979431}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,84,94],"(LLMs)":[3],"are":[4,99],"rigorously":[5],"aligned":[6],"to":[7,19,54,77,103],"refuse":[8],"harmful":[9,58],"requests,":[10],"a":[11,16,37,44,91,129,140],"process":[12],"that":[13,30,47,116,137,165],"inherently":[14],"cultivates":[15],"latent":[17],"capacity":[18],"evaluate":[20],"and":[21,82],"recognize":[22],"unsafe":[23],"content.":[24],"In":[25],"this":[26,31,104],"work,":[27],"we":[28,89,109,127],"reveal":[29],"advanced":[32],"safety":[33,120,142],"awareness":[34],"inadvertently":[35],"introduces":[36],"fatal":[38],"vulnerability.":[39,125,154],"We":[40],"introduce":[41],"Posterior":[42],"Attack,":[43],"single-query":[45],"jailbreak":[46],"bypasses":[48],"guardrails":[49],"by":[50],"prompting":[51],"the":[52,56,111,147,153],"model":[53],"generate":[55],"exact":[57],"response":[59],"its":[60],"internal":[61],"classifier":[62],"would":[63],"normally":[64],"flag":[65],"as":[66],"unsafe.":[67],"Through":[68],"extensive":[69],"empirical":[70],"evaluation":[71],"across":[72],"30":[73],"open-source":[74],"LLMs":[75],"(up":[76],"35B":[78],"parameters":[79],"in":[80,119,160],"size)":[81],"frontier":[83],"(e.g.,":[85],"GPT-5,":[86],"Claude":[87],"4.6),":[88],"observe":[90],"striking":[92],"phenomenon:":[93],"with":[95],"superior":[96],"safety-judgment":[97],"capabilities":[98],"disproportionately":[100],"more":[101],"susceptible":[102],"exploitation.":[105],"To":[106],"explain":[107],"this,":[108],"formalize":[110],"Safety":[112],"Paradox,":[113],"analytically":[114],"showing":[115],"monotonic":[117],"improvements":[118],"alignment":[121,162],"naturally":[122],"amplify":[123],"posterior":[124],"Finally,":[126],"establish":[128],"causal":[130],"link":[131],"via":[132],"reinforcement":[133],"learning":[134],"interventions,":[135],"exemplifying":[136],"artificially":[138],"degrading":[139],"model's":[141],"judgment":[143,151],"immunizes":[144],"it":[145],"against":[146],"attack,":[148],"whereas":[149],"enhancing":[150],"exacerbates":[152],"Our":[155],"findings":[156],"highlight":[157],"potential":[158],"flaws":[159],"current":[161],"paradigms,":[163],"indicating":[164],"defense":[166],"mechanisms":[167],"may":[168],"require":[169],"further":[170],"structural":[171],"refinement.":[172]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-06T00:00:00"}