This work introduces PROSE (Provenance through Relational Organization of Semantic Expression), replacing fixed query sets with a target semantical domain and brittle response keys with semantic structures internalized as domain-conditioned response behavior.
Zhong-Rui Sun, Jia-Hao Chen, Ou-Bo Ma et al.· 0 citations
IntraGuard is proposed, a black-box, venue-agnostic defense framework grounded in the structural--visual decoupling inherent to the PDF that achieves a defense success rate of up to 84%, while preserving peer-review invariance for human reviewers.
Ou-Bo Ma, Rui-Xiao Lin, Jia-Hao Chen et al.· 2 citations
It is revealed that Bit-Flip Attacks (BFAs) can serve as an attack vector for inducing decision-level hijacking, requiring no real-time interaction or control over the training process, and only a minimal number of weight bits need to be flipped after deployment to achieve stealthy, low-cost, and persistent cognitive m...
Yu Yan, Jia-Hao Chen, Si-Qi Lu et al.· arXiv.org· 0 citations
SkillShift is presented, a constrained black-box framework for covert policy steering without explicit target command injection or task hijacking that combines semantically plausible policy edits with hierarchical validation, failure-guided optimization, and strategy compression to preserve effectiveness, output validi...
Jia-Rui Li, Jia-Hao Chen, Chun-Yi Zhou et al.· 0 citations
This work forms this problem as backdoor generalization under training--inference trigger shift and introduces Lilith, a black-box anchor-to-family framework that achieves high family-wise attack success with limited utility degradation and a small trigger generalization gap.