{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JOHEVSJM6DDVMWBY3EIWWD2R6V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"20a1e1fa65fd12528c1206568638c4b8c668ce8011a43b0e9063609275c5e950","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-05-09T08:15:21Z","title_canon_sha256":"ae88f980d75f14391aa6d6ab7e490716e824ef12248bdf2cd2bd7a8866cf9ccb"},"schema_version":"1.0","source":{"id":"2405.05610","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.05610","created_at":"2026-07-05T08:17:20Z"},{"alias_kind":"arxiv_version","alias_value":"2405.05610v1","created_at":"2026-07-05T08:17:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.05610","created_at":"2026-07-05T08:17:20Z"},{"alias_kind":"pith_short_12","alias_value":"JOHEVSJM6DDV","created_at":"2026-07-05T08:17:20Z"},{"alias_kind":"pith_short_16","alias_value":"JOHEVSJM6DDVMWBY","created_at":"2026-07-05T08:17:20Z"},{"alias_kind":"pith_short_8","alias_value":"JOHEVSJM","created_at":"2026-07-05T08:17:20Z"}],"graph_snapshots":[{"event_id":"sha256:484c696eda84f6ce95fa9e78435478c980ec1020c3a3ff6b385f253f48e5f76c","target":"graph","created_at":"2026-07-05T08:17:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.05610/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have achieved remarkable performance in various natural language processing tasks, especially in dialogue systems. However, LLM may also pose security and moral threats, especially in multi round conversations where large models are more easily guided by contextual content, resulting in harmful or biased responses. In this paper, we present a novel method to attack LLMs in multi-turn dialogues, called CoA (Chain of Attack). CoA is a semantic-driven contextual multi-turn attack method that adaptively adjusts the attack policy through contextual feedback and semantic","authors_text":"Jizhong Han, Songlin Hu, Xikang Yang, Xuehai Tang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-05-09T08:15:21Z","title":"Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.05610","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c3b455e2449179b74bd977647e06aab892584d27aacd199028a45114a00438e","target":"record","created_at":"2026-07-05T08:17:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"20a1e1fa65fd12528c1206568638c4b8c668ce8011a43b0e9063609275c5e950","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-05-09T08:15:21Z","title_canon_sha256":"ae88f980d75f14391aa6d6ab7e490716e824ef12248bdf2cd2bd7a8866cf9ccb"},"schema_version":"1.0","source":{"id":"2405.05610","kind":"arxiv","version":1}},"canonical_sha256":"4b8e4ac92cf0c7565838d9116b0f51f5444ae2ebe377dd720439e2c8f07aa7c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4b8e4ac92cf0c7565838d9116b0f51f5444ae2ebe377dd720439e2c8f07aa7c7","first_computed_at":"2026-07-05T08:17:20.510270Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:17:20.510270Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"md6kDXnwa+L3f5hS/FDK7rO8NUOh05iO5OMuYu+AKI93hTlv3Yo2N/fKEGheQzKBX6EuTIgn6MNP/V1AJoFpBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:17:20.510745Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.05610","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c3b455e2449179b74bd977647e06aab892584d27aacd199028a45114a00438e","sha256:484c696eda84f6ce95fa9e78435478c980ec1020c3a3ff6b385f253f48e5f76c"],"state_sha256":"443393ce547b148169c1001cbec854f510b9b32387cf77a13fc91338a06cd9ff"}