← Search

Jianshuo Dong

4 accepted papers

2026

SafeSearch: Automated Red-Teaming of LLM-Based Search Agents

ICML 2026poster

Search agents connect LLMs to the Internet, enabling them to access broader and more up-to-date information. However, this also introduces a new threat surface: unreliable search results can mislead agents into producing unsafe outputs. Real-world incidents and our two in-the-wild observations show …

Cited by 0SourceScholar
2025

An Engorgio Prompt Makes Large Language Model Babble on

ICLR 2025poster

Auto-regressive large language models (LLMs) have yielded impressive performance in many real-world tasks. However, the new paradigm of these LLMs also exposes novel threats. In this paper, we explore their vulnerability to inference cost attacks, where a malicious user crafts Engorgio prompts to…

2025

“I’ve Decided to Leak”: Probing Internals Behind Prompt Leakage Intents

EMNLP 2025

Large language models (LLMs) exhibit prompt leakage vulnerabilities, where they may be coaxed into revealing system prompts embedded in LLM services, raising intellectual property and confidentiality concerns. An intriguing question arises: Do LLMs genuinely internalize prompt leakage intents in the

2023

One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training

ICCV 2023poster

Deep neural networks (DNNs) are widely deployed on real-world devices. Concerns regarding their security have gained great attention from researchers. Recently, a new weight modification attack called bit flip attack (BFA) was proposed, which exploits memory fault inject techniques such as row hamme…

Cited by 19PDFcodeScholar