{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:C2Z7526C6PQIU67ROLGIV2DLUT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7"},"schema_version":"1.0","source":{"id":"2410.09040","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"2410.09040v1","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.09040","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"C2Z7526C6PQI","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"C2Z7526C6PQIU67R","created_at":"2026-07-05T09:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"C2Z7526C","created_at":"2026-07-05T09:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1","target":"graph","created_at":"2026-07-05T09:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.09040/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper studies the vulnerabilities of transformer-based Large Language Models (LLMs) to jailbreaking attacks, focusing specifically on the optimization-based Greedy Coordinate Gradient (GCG) strategy. We first observe a positive correlation between the effectiveness of attacks and the internal behaviors of the models. For instance, attacks tend to be less effective when models pay more attention to system prompts designed to ensure LLM safety alignment. Building on this discovery, we introduce an enhanced method that manipulates models' attention scores to facilitate LLM jailbreaking, whic","authors_text":"Bingchen Zhao, Cihang Xie, Haoqin Tu, Jieru Mei, Yisen Wang, Zijun Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title":"AttnGCG: Enhancing Jailbreaking Attacks on LLMs with Attention Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.09040","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1","target":"record","created_at":"2026-07-05T09:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c76d26bfb8b6bcd1977a40410e58af078a61bc3a455800de43d236f0f963fab4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-11T17:55:09Z","title_canon_sha256":"82f96297b9eef8e48bfa88d38df421caa74db0db8ac57e42810cba51c8356df7"},"schema_version":"1.0","source":{"id":"2410.09040","kind":"arxiv","version":1}},"canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"16b3feebc2f3e08a7bf172cc8ae86ba4cc8774616a6aad70fb03b7b014228b53","first_computed_at":"2026-07-05T09:19:21.108508Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:19:21.108508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MliCMEoJQj5pF1woQKSnZJ/wI9z7mYJW7MHUzEu0Edy3IwC+MYhhVsTmGMk9BJfq+WR8unAP5xrwVFQckYYzCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:19:21.108951Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.09040","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b64810b7a4f17856e2b572ee967f3c59446930961759b84a937bae4b01fc84c1","sha256:e010961896732fe4d6a7accb20a8f3276b37bd10d5f39d7a7f1b0ee4e1cdfbb1"],"state_sha256":"c21c0cab9e5dea422ab5f3229daf77ecef274bdb47c51398bdd258cd748ece71"}