{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:6IT7BNK37DQAQIRAUQMNWQEBLH","short_pith_number":"pith:6IT7BNK3","canonical_record":{"source":{"id":"2412.07672","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-10T17:02:28Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"b51c1b6aed1a85956499f9f85cd75a133edea1babcdbdbedb1962cfcd800f910","abstract_canon_sha256":"9c55fffc591229845cf1563e7237017987f855c8de21c64b9978b3d92cc2db13"},"schema_version":"1.0"},"canonical_sha256":"f227f0b55bf8e0082220a418db408159d44e9782416083508e3b82ef959c765f","source":{"kind":"arxiv","id":"2412.07672","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.07672","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"arxiv_version","alias_value":"2412.07672v1","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.07672","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_12","alias_value":"6IT7BNK37DQA","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_16","alias_value":"6IT7BNK37DQAQIRA","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_8","alias_value":"6IT7BNK3","created_at":"2026-07-05T09:47:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:6IT7BNK37DQAQIRAUQMNWQEBLH","target":"record","payload":{"canonical_record":{"source":{"id":"2412.07672","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-10T17:02:28Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"b51c1b6aed1a85956499f9f85cd75a133edea1babcdbdbedb1962cfcd800f910","abstract_canon_sha256":"9c55fffc591229845cf1563e7237017987f855c8de21c64b9978b3d92cc2db13"},"schema_version":"1.0"},"canonical_sha256":"f227f0b55bf8e0082220a418db408159d44e9782416083508e3b82ef959c765f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:47:13.466574Z","signature_b64":"lrxypnTP3wTZ++lNTNoWsuRtTvaHpPCa8CRYkIT3ZylEydeo5MrMUGjeHoaqnrwoQe6wW3HUQVCwzDl1kMxEBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f227f0b55bf8e0082220a418db408159d44e9782416083508e3b82ef959c765f","last_reissued_at":"2026-07-05T09:47:13.466063Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:47:13.466063Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.07672","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V0G9LIZZlOm/dkYMe6RBp5ETDoo5G5De0MBnefHOHyR7cDP5R0RYqz1CbfYV/d28WSyaYyeJjGoxyCeGGzf3AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T12:43:06.712890Z"},"content_sha256":"f3b4468e83e43a5c92492d08a60d7aa7fd18001af5fe74b6725b95f57cbf3de8","schema_version":"1.0","event_id":"sha256:f3b4468e83e43a5c92492d08a60d7aa7fd18001af5fe74b6725b95f57cbf3de8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:6IT7BNK37DQAQIRAUQMNWQEBLH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FlexLLM: Exploring LLM Customization for Moving Target Defense on Black-Box LLMs Against Jailbreak Attacks","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Bocheng Chen, Hanqing Guo, Qiben Yan","submitted_at":"2024-12-10T17:02:28Z","abstract_excerpt":"Defense in large language models (LLMs) is crucial to counter the numerous attackers exploiting these systems to generate harmful content through manipulated prompts, known as jailbreak attacks. Although many defense strategies have been proposed, they often require access to the model's internal structure or need additional training, which is impractical for service providers using LLM APIs, such as OpenAI APIs or Claude APIs. In this paper, we propose a moving target defense approach that alters decoding hyperparameters to enhance model robustness against various jailbreak attacks. Our appro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.07672","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.07672/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FywXJkl+lSUoUqxJbw7F6lZJKg4O9xteDUkafXpu1LaSwWZgqvJS7hPchEQfI/zZicR30HkXPVgcV8/b9ImBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T12:43:06.713425Z"},"content_sha256":"d349fed7c68c0ca5e02b7989ebf3a55d5bc114daa6ed17efa875f7e63910e1da","schema_version":"1.0","event_id":"sha256:d349fed7c68c0ca5e02b7989ebf3a55d5bc114daa6ed17efa875f7e63910e1da"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/bundle.json","state_url":"https://pith.science/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T12:43:06Z","links":{"resolver":"https://pith.science/pith/6IT7BNK37DQAQIRAUQMNWQEBLH","bundle":"https://pith.science/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/bundle.json","state":"https://pith.science/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6IT7BNK37DQAQIRAUQMNWQEBLH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6IT7BNK37DQAQIRAUQMNWQEBLH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9c55fffc591229845cf1563e7237017987f855c8de21c64b9978b3d92cc2db13","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-10T17:02:28Z","title_canon_sha256":"b51c1b6aed1a85956499f9f85cd75a133edea1babcdbdbedb1962cfcd800f910"},"schema_version":"1.0","source":{"id":"2412.07672","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.07672","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"arxiv_version","alias_value":"2412.07672v1","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.07672","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_12","alias_value":"6IT7BNK37DQA","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_16","alias_value":"6IT7BNK37DQAQIRA","created_at":"2026-07-05T09:47:13Z"},{"alias_kind":"pith_short_8","alias_value":"6IT7BNK3","created_at":"2026-07-05T09:47:13Z"}],"graph_snapshots":[{"event_id":"sha256:d349fed7c68c0ca5e02b7989ebf3a55d5bc114daa6ed17efa875f7e63910e1da","target":"graph","created_at":"2026-07-05T09:47:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.07672/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Defense in large language models (LLMs) is crucial to counter the numerous attackers exploiting these systems to generate harmful content through manipulated prompts, known as jailbreak attacks. Although many defense strategies have been proposed, they often require access to the model's internal structure or need additional training, which is impractical for service providers using LLM APIs, such as OpenAI APIs or Claude APIs. In this paper, we propose a moving target defense approach that alters decoding hyperparameters to enhance model robustness against various jailbreak attacks. Our appro","authors_text":"Bocheng Chen, Hanqing Guo, Qiben Yan","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-10T17:02:28Z","title":"FlexLLM: Exploring LLM Customization for Moving Target Defense on Black-Box LLMs Against Jailbreak Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.07672","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3b4468e83e43a5c92492d08a60d7aa7fd18001af5fe74b6725b95f57cbf3de8","target":"record","created_at":"2026-07-05T09:47:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9c55fffc591229845cf1563e7237017987f855c8de21c64b9978b3d92cc2db13","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-10T17:02:28Z","title_canon_sha256":"b51c1b6aed1a85956499f9f85cd75a133edea1babcdbdbedb1962cfcd800f910"},"schema_version":"1.0","source":{"id":"2412.07672","kind":"arxiv","version":1}},"canonical_sha256":"f227f0b55bf8e0082220a418db408159d44e9782416083508e3b82ef959c765f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f227f0b55bf8e0082220a418db408159d44e9782416083508e3b82ef959c765f","first_computed_at":"2026-07-05T09:47:13.466063Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:47:13.466063Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lrxypnTP3wTZ++lNTNoWsuRtTvaHpPCa8CRYkIT3ZylEydeo5MrMUGjeHoaqnrwoQe6wW3HUQVCwzDl1kMxEBA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:47:13.466574Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.07672","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3b4468e83e43a5c92492d08a60d7aa7fd18001af5fe74b6725b95f57cbf3de8","sha256:d349fed7c68c0ca5e02b7989ebf3a55d5bc114daa6ed17efa875f7e63910e1da"],"state_sha256":"af8c26de0bf96b83da5a292b3cfd9fa4ea89c2c4be4914210082badfb845dae3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"laQPdo0kv0crI/Gg0e6MDt79uQIemZ3E4JLsHVT+qaEq3BBOkmBqgbm4lBT0ImdfcSSw6eWL71h4KHG0wWmSDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T12:43:06.717879Z","bundle_sha256":"3e08ae9b96bf7185e54769a4763baa13db1e58d10db9c82729d9c653c7fb8ef7"}}