{"id":"https://openalex.org/W7163867469","doi":"https://doi.org/10.48550/arxiv.2606.07335","title":"Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics","display_name":"Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics","publication_year":2026,"publication_date":"2026-06-05","ids":{"openalex":"https://openalex.org/W7163867469","doi":"https://doi.org/10.48550/arxiv.2606.07335"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.07335","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07335","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.07335","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036365195","display_name":"Hangtao Zhang","orcid":"https://orcid.org/0000-0002-6805-6401"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Hangtao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101632793","display_name":"Yucheng Zhao","orcid":"https://orcid.org/0000-0002-9610-3025"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yucheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138152505","display_name":"Sishun Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Sishun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138178645","display_name":"Ziqi Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Ziqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138129131","display_name":"Zeyu Ye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Zeyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138119318","display_name":"Wei Wan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wan, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138141429","display_name":"Minghui Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Minghui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138109382","display_name":"Shengshan Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Shengshan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138199099","display_name":"Yanjun Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yanjun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138185219","display_name":"Yi Liu","orcid":"https://orcid.org/0000-0003-3199-7600"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138105443","display_name":"Leo Yu Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Leo Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6392999887466431,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6392999887466431,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.04259999841451645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.03889999911189079,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7365999817848206},{"id":"https://openalex.org/keywords/trajectory","display_name":"Trajectory","score":0.730400025844574},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5705999732017517},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5659000277519226},{"id":"https://openalex.org/keywords/manifold","display_name":"Manifold (fluid mechanics)","score":0.45239999890327454},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.3628000020980835},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.3619999885559082}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7365999817848206},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.730400025844574},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5778999924659729},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5705999732017517},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5659000277519226},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.45239999890327454},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3758000135421753},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.3628000020980835},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3619999885559082},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.35199999809265137},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3287000060081482},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3278999924659729},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C198043062","wikidata":"https://www.wikidata.org/wiki/Q180953","display_name":"Metric space","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.267300009727478},{"id":"https://openalex.org/C2778530986","wikidata":"https://www.wikidata.org/wiki/Q5457948","display_name":"Flatness (cosmology)","level":3,"score":0.25699999928474426}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.07335","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07335","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.07335","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07335","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7929081320762634,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Jailbreak":[0],"prompts":[1,42,54,133,143,198],"can":[2],"bypass":[3],"alignment":[4],"guardrails":[5],"in":[6,37,227],"large":[7],"language":[8],"models":[9],"(LLMs)":[10],"and":[11,40,64,119,153,165,199,204],"elicit":[12],"unsafe":[13],"outputs,":[14],"making":[15],"reliable":[16],"deployment-time":[17],"detection":[18,21,226],"critical.":[19],"Prior":[20],"approaches":[22],"largely":[23],"rely":[24],"on":[25,177,196,201],"a":[26,85,112,125,145,182,190,210],"fixed":[27],"metric":[28,87],"space,":[29],"e.g.,":[30],"raw":[31],"inputs,":[32],"gradients,":[33],"or":[34],"hidden":[35],"features,":[36],"which":[38,107],"benign":[39,57,137,158,197],"jailbreak":[41,142,167,183,225],"are":[43,56],"linearly":[44],"separable.":[45],"We":[46,101,216],"show":[47],"this":[48,77],"assumption":[49],"breaks":[50],"under":[51,205],"(i)":[52],"pseudo-malicious":[53,178,202],"that":[55,68,148],"by":[58,122],"intent":[59],"but":[60],"contain":[61],"safety-related":[62],"keywords,":[63],"(ii)":[65],"adaptive":[66,206],"attacks":[67],"explicitly":[69],"optimize":[70],"against":[71],"the":[72,91,97,219],"deployed":[73],"detector.":[74],"To":[75],"overcome":[76],"limitation,":[78],"we":[79],"shift":[80],"our":[81],"focus":[82],"from":[83],"identifying":[84],"universal":[86],"space":[88],"to":[89,136,160,173],"analyzing":[90],"more":[92],"robust":[93],"neighborhood":[94,127],"structure":[95,128],"of":[96,187,194,214,222],"underlying":[98],"data":[99],"manifold.":[100],"present":[102],"Manifold":[103],"Trajectory":[104],"Kinetics":[105],"(MTK),":[106],"treats":[108],"an":[109],"LLM":[110],"as":[111],"kinetic":[113],"system":[114],"transforming":[115],"inputs":[116],"into":[117],"outputs":[118],"detects":[120],"jailbreaks":[121],"tracking":[123],"how":[124],"prompt's":[126],"evolves":[129],"across":[130],"layers.":[131],"Benign":[132],"remain":[134],"close":[135],"neighborhoods":[138,159],"throughout":[139],"inference,":[140],"whereas":[141],"exhibit":[144],"characteristic":[146],"trajectory":[147],"begins":[149],"near":[150],"malicious":[151],"seeds":[152],"later":[154],"strategically":[155],"shifts":[156],"toward":[157],"evade":[161],"refusal.Across":[162],"four":[163],"LLMs":[164],"ten":[166],"attacks,":[168,207],"MTK":[169,223],"achieves":[170],"strong":[171],"robustness":[172],"both":[174],"failure":[175],"modes:":[176],"prompts,":[179,203],"it":[180,208],"attains":[181],"true":[184,211],"positive":[185,192,212],"rate":[186,193,213],"95%":[188],"at":[189,234],"false":[191],"5%":[195],"2%":[200],"maintains":[209],"85%.":[215],"further":[217],"demonstrate":[218],"superior":[220],"performance":[221],"for":[224],"vision-language":[228],"models.":[229],"Our":[230],"code":[231],"is":[232],"available":[233],"https://github.com/Rookie143/mtk.":[235]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-09T00:00:00"}