{"id":"https://openalex.org/W7166708130","doi":"https://doi.org/10.48550/arxiv.2606.29960","title":"IHDec: Divergence-Steered Contrastive Decoding for Securing Multi-Turn Instruction Hierarchies","display_name":"IHDec: Divergence-Steered Contrastive Decoding for Securing Multi-Turn Instruction Hierarchies","publication_year":2026,"publication_date":"2026-06-29","ids":{"openalex":"https://openalex.org/W7166708130","doi":"https://doi.org/10.48550/arxiv.2606.29960"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.29960","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29960","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.29960","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139639064","display_name":"Nicole Geumheon Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Nicole Geumheon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122316852","display_name":"Haeun Jang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jang, Haeun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120054887","display_name":"Yonghyun Jun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jun, Yonghyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139632482","display_name":"Hwanhee Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Hwanhee","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7864000201225281,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7864000201225281,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.08250000327825546,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.019500000402331352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7231000065803528},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.6169000267982483},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.5153999924659729},{"id":"https://openalex.org/keywords/divergence","display_name":"Divergence (linguistics)","score":0.4422999918460846},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.43389999866485596},{"id":"https://openalex.org/keywords/phenomenon","display_name":"Phenomenon","score":0.41530001163482666}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7871999740600586},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7231000065803528},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.6169000267982483},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.5153999924659729},{"id":"https://openalex.org/C207390915","wikidata":"https://www.wikidata.org/wiki/Q1230525","display_name":"Divergence (linguistics)","level":2,"score":0.4422999918460846},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.43389999866485596},{"id":"https://openalex.org/C50335755","wikidata":"https://www.wikidata.org/wiki/Q483247","display_name":"Phenomenon","level":2,"score":0.41530001163482666},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3808000087738037},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34549999237060547},{"id":"https://openalex.org/C99844830","wikidata":"https://www.wikidata.org/wiki/Q102441924","display_name":"Scaling","level":2,"score":0.304500013589859},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.30169999599456787},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29490000009536743},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2815000116825104},{"id":"https://openalex.org/C73301696","wikidata":"https://www.wikidata.org/wiki/Q5469984","display_name":"Formalism (music)","level":3,"score":0.275299996137619},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.29960","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29960","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.29960","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29960","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7236365079879761,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"often":[4],"fail":[5],"to":[6,21,36,86,97],"maintain":[7],"instruction":[8],"hierarchies":[9],"(IH)":[10],"when":[11],"processing":[12],"multi-source":[13],"inputs":[14,68],"with":[15,133],"varying":[16],"role-level":[17],"priorities,":[18],"paradoxically":[19],"adhering":[20],"lower-priority":[22],"directives":[23],"during":[24],"conflicts.":[25],"While":[26],"existing":[27],"defenses":[28],"mitigate":[29],"this":[30,44,48,74],"issue,":[31],"they":[32],"are":[33],"largely":[34],"restricted":[35],"single-turn":[37],"scenarios":[38],"and":[39,92,127],"require":[40],"expensive":[41],"fine-tuning.":[42],"In":[43],"paper,":[45],"we":[46,77],"formalize":[47],"failure":[49],"mode":[50],"in":[51,110],"multi-turn":[52,111],"contexts":[53],"via":[54],"a":[55,61,129],"Jensen-Shannon":[56],"Divergence":[57],"(JSD)":[58],"framework,":[59],"uncovering":[60],"pervasive":[62],"role-influence":[63],"inversion":[64],"phenomenon":[65],"where":[66],"subordinate":[67,100],"override":[69],"superior":[70],"roles.":[71,101],"To":[72],"rectify":[73],"without":[75],"training,":[76],"propose":[78],"IHDec":[79,83,106,120],"(Instruction":[80],"Hierarchy-steered":[81],"Decoding).":[82],"leverages":[84],"JSD":[85],"automatically":[87],"detect":[88],"token-level":[89],"hierarchy":[90],"violations":[91],"dynamically":[93],"executes":[94],"contrastive":[95],"decoding":[96],"suppress":[98],"misaligned":[99],"Extensive":[102],"evaluations":[103],"demonstrate":[104],"that":[105],"outperforms":[107],"training-based":[108],"baselines":[109],"conflicts":[112],"while":[113],"fully":[114],"preserving":[115],"general":[116],"response":[117],"quality.":[118],"Furthermore,":[119],"strengthens":[121],"safety":[122],"against":[123],"adversarial":[124],"prompt":[125],"injections":[126],"exhibits":[128],"robust":[130],"scaling":[131],"synergy":[132],"larger":[134],"models.":[135],"The":[136],"Code":[137],"is":[138],"available":[139],"at":[140],"https://github.com/nxcolelxu/IHDec.git":[141]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-01T00:00:00"}