{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:C2Z7526C6PQIU67ROLGIV2DLUT","short_pith_number":"pith:C2Z7526C","canonical_record":{"source":{"id":"2410.09040","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","cross_cats_sorted":[],"title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7","abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4"},"schema_version":"1.0"},"canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","source":{"kind":"arxiv","id":"2410.09040","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09040v1","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"C2Z7526C6PQI","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"C2Z7526C6PQIU67R","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"C2Z7526C","created_at":"2026-07-05T09:19:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:C2Z7526C6PQIU67ROLGIV2DLUT","target":"record","payload":{"canonical_record":{"source":{"id":"2410.09040","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","cross_cats_sorted":[],"title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7","abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4"},"schema_version":"1.0"},"canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:19:21.108951Z","signature_b64":"MliCMEoJQj5pF1woQKSnZJ/wI9z7mYJW7MHUzEu0Edy3IwC+MYhhVsTmGMk9BJfq+WR8unAP5xrwVFQckYYzCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","last_reissued_at":"2026-07-05T09:19:21.108508Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:19:21.108508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.09040","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/R0Wa6M1Sy9BU2GsldneThEYH6FTEQxobVM0z9YKqJe0v4SExtVayFEx2eCLfZAzouDJzi4gLIg+avsMiBPTBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:25:10.252331Z"},"content_sha256":"b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1","schema_version":"1.0","event_id":"sha256:b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:C2Z7526C6PQIU67ROLGIV2DLUT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AttnGCG: Enhancing Jailbreaking Attacks on LLMs with Attention Manipulation","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Bingchen Zhao, Cihang Xie, Haoqin Tu, Jieru Mei, Yisen Wang, Zijun Wang","submitted_at":"2024-10-11T17:55:09Z","abstract_excerpt":"This paper studies the vulnerabilities of transformer-based Large Language Models (LLMs) to jailbreaking attacks, focusing specifically on the optimization-based Greedy Coordinate Gradient (GCG) strategy. We first observe a positive correlation between the effectiveness of attacks and the internal behaviors of the models. For instance, attacks tend to be less effective when models pay more attention to system prompts designed to ensure LLM safety alignment. Building on this discovery, we introduce an enhanced method that manipulates models' attention scores to facilitate LLM jailbreaking, whic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09040","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.09040/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gUQBe4AnnWVbWxChIPyRKYmS20gEGXHmRVha5OADUJz3wCd3BPgwPp4fuwlXq2xRbgHqVh/CR+uJngQThLjlBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:25:10.252820Z"},"content_sha256":"e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1","schema_version":"1.0","event_id":"sha256:e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C2Z7526C6PQIU67ROLGIV2DLUT/bundle.json","state_url":"https://pith.science/pith/C2Z7526C6PQIU67ROLGIV2DLUT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C2Z7526C6PQIU67ROLGIV2DLUT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:25:10Z","links":{"resolver":"https://pith.science/pith/C2Z7526C6PQIU67ROLGIV2DLUT","bundle":"https://pith.science/pith/C2Z7526C6PQIU67ROLGIV2DLUT/bundle.json","state":"https://pith.science/pith/C2Z7526C6PQIU67ROLGIV2DLUT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C2Z7526C6PQIU67ROLGIV2DLUT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:C2Z7526C6PQIU67ROLGIV2DLUT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7"},"schema_version":"1.0","source":{"id":"2410.09040","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09040v1","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"C2Z7526C6PQI","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"C2Z7526C6PQIU67R","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"C2Z7526C","created_at":"2026-07-05T09:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1","target":"graph","created_at":"2026-07-05T09:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.09040/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper studies the vulnerabilities of transformer-based Large Language Models (LLMs) to jailbreaking attacks, focusing specifically on the optimization-based Greedy Coordinate Gradient (GCG) strategy. We first observe a positive correlation between the effectiveness of attacks and the internal behaviors of the models. For instance, attacks tend to be less effective when models pay more attention to system prompts designed to ensure LLM safety alignment. Building on this discovery, we introduce an enhanced method that manipulates models' attention scores to facilitate LLM jailbreaking, whic","authors_text":"Bingchen Zhao, Cihang Xie, Haoqin Tu, Jieru Mei, Yisen Wang, Zijun Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title":"AttnGCG: Enhancing Jailbreaking Attacks on LLMs with Attention Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09040","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1","target":"record","created_at":"2026-07-05T09:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7"},"schema_version":"1.0","source":{"id":"2410.09040","kind":"arxiv","version":1}},"canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","first_computed_at":"2026-07-05T09:19:21.108508Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:19:21.108508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MliCMEoJQj5pF1woQKSnZJ/wI9z7mYJW7MHUzEu0Edy3IwC+MYhhVsTmGMk9BJfq+WR8unAP5xrwVFQckYYzCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:19:21.108951Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.09040","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1","sha256:e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1"],"state_sha256":"c21c0cab9e5dea422ab5f3229daf77ecef274bdb47c51398bdd258cd748ece71"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rWcLy5OCD4mMTOTVtZmfdGGcwQIEi2bNadhSlEyAP1OAGlmMjR6Jygw3QW0gmfV+9RptWYMLSLpji2tFbhhPBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:25:10.257273Z","bundle_sha256":"88e00b8ec537813710a18c0cd04684fc4f692128aeee8d0329ce2529f4ae7003"}}