{"id":"https://openalex.org/W7164050903","doi":"https://doi.org/10.48550/arxiv.2606.07696","title":"Adversarial Robustness of Activation Steering in Large Language Models","display_name":"Adversarial Robustness of Activation Steering in Large Language Models","publication_year":2026,"publication_date":"2026-06-05","ids":{"openalex":"https://openalex.org/W7164050903","doi":"https://doi.org/10.48550/arxiv.2606.07696"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.07696","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07696","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.07696","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138248255","display_name":"Kien Le","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Le, Kien","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138275900","display_name":"Thai Le","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Le, Thai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7828999757766724,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7828999757766724,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1324000060558319,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.01140000019222498,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8377000093460083},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.5968000292778015},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5623999834060669},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5515999794006348},{"id":"https://openalex.org/keywords/control-theory","display_name":"Control theory (sociology)","score":0.4050999879837036},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.38109999895095825}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8377000093460083},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6753000020980835},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.5968000292778015},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5623999834060669},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5515999794006348},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.4050999879837036},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.38109999895095825},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.37369999289512634},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3610000014305115},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.29750001430511475},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28349998593330383},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.27070000767707825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.07696","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07696","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.07696","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.07696","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.44113096594810486}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Activation":[0],"steering":[1,42,100,182],"has":[2],"become":[3],"a":[4,133],"popular":[5],"training-free":[6],"method":[7,121],"to":[8,28,71,85,128,160],"control":[9],"LLM":[10],"behavior":[11],"by":[12,83,118,126],"injecting":[13],"precomputed":[14],"direction":[15],"vectors":[16,141],"into":[17],"the":[18,36,49,114,137,162,167,178],"model's":[19],"residual":[20],"stream":[21],"at":[22],"inference":[23],"time.":[24],"Yet":[25],"its":[26],"robustness":[27,43,81],"realistic":[29],"input":[30],"variation":[31],"remains":[32],"unstudied.":[33],"We":[34],"present":[35],"first":[37],"systematic":[38],"evaluation":[39],"of":[40,170,180],"activation":[41,181],"under":[44,131],"adversarial":[45],"text":[46],"perturbations":[47],"on":[48,103,122,153],"inputs,":[50],"covering":[51],"four":[52],"extraction":[53],"methods,":[54],"three":[55],"attack":[56],"strategies,":[57],"six":[58],"personas":[59],"from":[60,69,142],"Anthropic":[61],"Model-Written":[62],"Evaluation":[63],"Dataset,":[64],"and":[65,97,99,151,188],"five":[66],"models":[67],"ranging":[68],"1.5B":[70],"30B":[72],"parameters.":[73],"Attacks":[74],"succeed":[75],"broadly":[76],"across":[77,94],"all":[78,95],"settings:":[79],"directional":[80],"drops":[82],"up":[84,127],"64%,":[86],"post-attack":[87],"confidence":[88],"collapses":[89],"near":[90],"or":[91],"below":[92],"0.25":[93],"methods":[96],"models,":[98,155],"strength":[101],"degrades":[102],"nearly":[104],"every":[105],"steerable":[106],"input.":[107],"Layer":[108],"selection":[109,192],"is":[110,183],"equally":[111],"fragile,":[112],"with":[113],"optimal":[115,164],"layer":[116,191],"identified":[117],"an":[119],"automated":[120],"clean":[123],"inputs":[124,145],"shifting":[125],"17":[129],"positions":[130],"perturbation,":[132],"failure":[134],"that":[135,177,189],"compounds":[136],"vector-level":[138],"breakdown.":[139],"Extracting":[140],"adversarially":[143],"perturbed":[144],"partially":[146],"recovers":[147],"steerability":[148],"for":[149,198],"PCA":[150],"MD":[152],"mid-to-large":[154],"but":[156],"they":[157],"consistently":[158],"fail":[159],"locate":[161],"improved":[163],"layer,":[165],"limiting":[166],"practical":[168],"benefit":[169],"this":[171],"mitigation.":[172],"Together,":[173],"these":[174],"findings":[175],"reveal":[176],"brittleness":[179],"structural":[184],"rather":[185],"than":[186],"method-specific,":[187],"current":[190],"strategies":[193],"are":[194],"not":[195],"robust":[196],"enough":[197],"real-world":[199],"deployment.":[200]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-10T00:00:00"}