{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:ET7ZDUNRJ7KBW3FNNWOLB3KHZO","short_pith_number":"pith:ET7ZDUNR","schema_version":"1.0","canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","source":{"kind":"arxiv","id":"2412.12192","version":1},"attestation_state":"computed","paper":{"title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bocheng Chen, Guangliang Liu, Kristen Marie Johnson, Ramtin Pedarsani, Zhiyu Xue","submitted_at":"2024-12-13T23:58:12Z","abstract_excerpt":"The security of Large Language Models (LLMs) has become an important research topic since the emergence of ChatGPT. Though there have been various effective methods to defend against jailbreak attacks, prefilling attacks remain an unsolved and popular threat against open-sourced LLMs. In-Context Learning (ICL) offers a computationally efficient defense against various jailbreak attacks, yet no effective ICL methods have been developed to counter prefilling attacks. In this paper, we: (1) show that ICL can effectively defend against prefilling jailbreak attacks by employing adversative sentence"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2412.12192","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-13T23:58:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"18c4c8e339616cfc8c907e5c18d45872e2a51c1df4cd06c389086647c7240047","abstract_canon_sha256":"7b5ccabe74f3dccbab31e841d10915fdf6c0441830ff37ec79844a128992f5dc"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:11.321870Z","signature_b64":"k21RVzJSP9vS6uEMkr9f/U33WW5p15A5JPm4tLfufKtO802YuHmPaQiJYxzI9rlJA7NAfa08ITwi9Q1LYrdFBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"24ff91d1b14fd41b6cad6d9cb0ed47cb8198fe43e9ebc4088fb7b2c079b3616a","last_reissued_at":"2026-07-05T09:50:11.321358Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:11.321358Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Bocheng Chen, Guangliang Liu, Kristen Marie Johnson, Ramtin Pedarsani, Zhiyu Xue","submitted_at":"2024-12-13T23:58:12Z","abstract_excerpt":"The security of Large Language Models (LLMs) has become an important research topic since the emergence of ChatGPT. Though there have been various effective methods to defend against jailbreak attacks, prefilling attacks remain an unsolved and popular threat against open-sourced LLMs. In-Context Learning (ICL) offers a computationally efficient defense against various jailbreak attacks, yet no effective ICL methods have been developed to counter prefilling attacks. In this paper, we: (1) show that ICL can effectively defend against prefilling jailbreak attacks by employing adversative sentence"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12192","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12192/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2412.12192","created_at":"2026-07-05T09:50:11.321411+00:00"},{"alias_kind":"arxiv_version","alias_value":"2412.12192v1","created_at":"2026-07-05T09:50:11.321411+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12192","created_at":"2026-07-05T09:50:11.321411+00:00"},{"alias_kind":"pith_short_12","alias_value":"ET7ZDUNRJ7KB","created_at":"2026-07-05T09:50:11.321411+00:00"},{"alias_kind":"pith_short_16","alias_value":"ET7ZDUNRJ7KBW3FN","created_at":"2026-07-05T09:50:11.321411+00:00"},{"alias_kind":"pith_short_8","alias_value":"ET7ZDUNR","created_at":"2026-07-05T09:50:11.321411+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO","json":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO.json","graph_json":"https://pith.science/api/pith-number/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/graph.json","events_json":"https://pith.science/api/pith-number/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/events.json","paper":"https://pith.science/paper/ET7ZDUNR"},"agent_actions":{"view_html":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO","download_json":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO.json","view_paper":"https://pith.science/paper/ET7ZDUNR","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2412.12192&json=true","fetch_graph":"https://pith.science/api/pith-number/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/graph.json","fetch_events":"https://pith.science/api/pith-number/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/action/storage_attestation","attest_author":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/action/author_attestation","sign_citation":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/action/citation_signature","submit_replication":"https://pith.science/pith/ET7ZDUNRJ7KBW3FNNWOLB3KHZO/action/replication_record"}},"created_at":"2026-07-05T09:50:11.321411+00:00","updated_at":"2026-07-05T09:50:11.321411+00:00"}