{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BL233SPC63ZU3ROCCZAXBSSZEJ","short_pith_number":"pith:BL233SPC","canonical_record":{"source":{"id":"2410.16327","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T17:02:13Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"97e3a1d8abbd90319dfa7f47b9868d31039763fad512aa586c87095c14bd489a","abstract_canon_sha256":"8934df9c840a1efc523d88a99ed15b96d4bd6d6550841ed42e6c757180b88b70"},"schema_version":"1.0"},"canonical_sha256":"0af5bdc9e2f6f34dc5c2164170ca59226b96bb6b2845b60c4f826943356d0101","source":{"kind":"arxiv","id":"2410.16327","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.16327","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"arxiv_version","alias_value":"2410.16327v2","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.16327","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_12","alias_value":"BL233SPC63ZU","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_16","alias_value":"BL233SPC63ZU3ROC","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_8","alias_value":"BL233SPC","created_at":"2026-07-05T11:33:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BL233SPC63ZU3ROCCZAXBSSZEJ","target":"record","payload":{"canonical_record":{"source":{"id":"2410.16327","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T17:02:13Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"97e3a1d8abbd90319dfa7f47b9868d31039763fad512aa586c87095c14bd489a","abstract_canon_sha256":"8934df9c840a1efc523d88a99ed15b96d4bd6d6550841ed42e6c757180b88b70"},"schema_version":"1.0"},"canonical_sha256":"0af5bdc9e2f6f34dc5c2164170ca59226b96bb6b2845b60c4f826943356d0101","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:16.822834Z","signature_b64":"5GErHFswCO/zzL31MnkwIe9f9DZmUVPaNRQvjmAp2ssTa/+nS9rjQyhDQNyvpAN06C097L0K9UIVhO9up2PiDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0af5bdc9e2f6f34dc5c2164170ca59226b96bb6b2845b60c4f826943356d0101","last_reissued_at":"2026-07-05T11:33:16.822174Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:16.822174Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.16327","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N1PYEBoI1FcV56qsqxshqa4+J8AsEk6qYzboKOMJv21Y/wHkTZDJaOcBFiO0Hi2+i3y5YFZ00adLoYTd6m9NBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T14:26:43.390782Z"},"content_sha256":"201e1799afea2512ddc92852f19f7aa9842d9ce0ca13382607152619bf654a8b","schema_version":"1.0","event_id":"sha256:201e1799afea2512ddc92852f19f7aa9842d9ce0ca13382607152619bf654a8b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BL233SPC63ZU3ROCCZAXBSSZEJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Chaozhuo Li, Lirong Qiu, Litian Zhang, Rui Ha, Rui Pu, Zaisheng Ye, Zejian Chen, Zheng Liu","submitted_at":"2024-10-18T17:02:13Z","abstract_excerpt":"Jailbreak attack can be used to access the vulnerabilities of Large Language Models (LLMs) by inducing LLMs to generate the harmful content. And the most common method of the attack is to construct semantically ambiguous prompts to confuse and mislead the LLMs. To access the security and reveal the intrinsic relation between the input prompt and the output for LLMs, the distribution of attention weight is introduced to analyze the underlying reasons. By using statistical analysis methods, some novel metrics are defined to better describe the distribution of attention weight, such as the Attent"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.16327","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.16327/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g80Z4tVJv0XH9S2twgJO2/0qxsEJOL3iY7fhR8DDo2gC8il0pr4LONdjtx4XqAKF4Lxxsia9pik+wIS5jisyCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T14:26:43.391299Z"},"content_sha256":"c9831d1db308335734fa5135938c3a80db7c0172f52f6437cb82c9c2dfba0791","schema_version":"1.0","event_id":"sha256:c9831d1db308335734fa5135938c3a80db7c0172f52f6437cb82c9c2dfba0791"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/bundle.json","state_url":"https://pith.science/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T14:26:43Z","links":{"resolver":"https://pith.science/pith/BL233SPC63ZU3ROCCZAXBSSZEJ","bundle":"https://pith.science/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/bundle.json","state":"https://pith.science/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BL233SPC63ZU3ROCCZAXBSSZEJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BL233SPC63ZU3ROCCZAXBSSZEJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8934df9c840a1efc523d88a99ed15b96d4bd6d6550841ed42e6c757180b88b70","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T17:02:13Z","title_canon_sha256":"97e3a1d8abbd90319dfa7f47b9868d31039763fad512aa586c87095c14bd489a"},"schema_version":"1.0","source":{"id":"2410.16327","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.16327","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"arxiv_version","alias_value":"2410.16327v2","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.16327","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_12","alias_value":"BL233SPC63ZU","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_16","alias_value":"BL233SPC63ZU3ROC","created_at":"2026-07-05T11:33:16Z"},{"alias_kind":"pith_short_8","alias_value":"BL233SPC","created_at":"2026-07-05T11:33:16Z"}],"graph_snapshots":[{"event_id":"sha256:c9831d1db308335734fa5135938c3a80db7c0172f52f6437cb82c9c2dfba0791","target":"graph","created_at":"2026-07-05T11:33:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.16327/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Jailbreak attack can be used to access the vulnerabilities of Large Language Models (LLMs) by inducing LLMs to generate the harmful content. And the most common method of the attack is to construct semantically ambiguous prompts to confuse and mislead the LLMs. To access the security and reveal the intrinsic relation between the input prompt and the output for LLMs, the distribution of attention weight is introduced to analyze the underlying reasons. By using statistical analysis methods, some novel metrics are defined to better describe the distribution of attention weight, such as the Attent","authors_text":"Chaozhuo Li, Lirong Qiu, Litian Zhang, Rui Ha, Rui Pu, Zaisheng Ye, Zejian Chen, Zheng Liu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T17:02:13Z","title":"Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.16327","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:201e1799afea2512ddc92852f19f7aa9842d9ce0ca13382607152619bf654a8b","target":"record","created_at":"2026-07-05T11:33:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8934df9c840a1efc523d88a99ed15b96d4bd6d6550841ed42e6c757180b88b70","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-18T17:02:13Z","title_canon_sha256":"97e3a1d8abbd90319dfa7f47b9868d31039763fad512aa586c87095c14bd489a"},"schema_version":"1.0","source":{"id":"2410.16327","kind":"arxiv","version":2}},"canonical_sha256":"0af5bdc9e2f6f34dc5c2164170ca59226b96bb6b2845b60c4f826943356d0101","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0af5bdc9e2f6f34dc5c2164170ca59226b96bb6b2845b60c4f826943356d0101","first_computed_at":"2026-07-05T11:33:16.822174Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:33:16.822174Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5GErHFswCO/zzL31MnkwIe9f9DZmUVPaNRQvjmAp2ssTa/+nS9rjQyhDQNyvpAN06C097L0K9UIVhO9up2PiDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:33:16.822834Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.16327","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:201e1799afea2512ddc92852f19f7aa9842d9ce0ca13382607152619bf654a8b","sha256:c9831d1db308335734fa5135938c3a80db7c0172f52f6437cb82c9c2dfba0791"],"state_sha256":"bf2b96bd1867d20944d5920efa5b5bedc26e98ba282aae3b81d0020079ab8325"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Srroi0hC3ZL/xcirNeL8v836xbvNHRLGD0tXiALP9GzKrNZyt9ubCrzlNFclTfhg/+N+q9CE4Gs0V85B9/uvBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T14:26:43.396522Z","bundle_sha256":"8965e310c5d5fd5e7d8f9b19be495ff8ed87624c940ddc2e1bd3103a4044db1c"}}