← Search

Quanchen Zou

4 accepted papers

2026

Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?

ICASSP 2026poster

Jailbreak attacks on Large Language Models (LLMs) have demonstrated various successful methods whereby attackers manipulate models into generating harmful responses that they are designed to avoid. Among these, Greedy Coordinate Gradient (GCG) has emerged as a general and effective approach that opt…

Cited by 0SourcePDFScholar
2026

SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety

ICML 2026poster

With the rapid evolution of foundation models, Large Language Model (LLM) agents have demonstrated increasingly powerful tool-use capabilities. However, this proficiency introduces significant security risks, as malicious actors can manipulate agents into executing tools to generate harmful content.…

Cited by 0SourceScholar
2025

Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models

EMNLP 2025

Multi-turn jailbreak attacks simulate real-world human interactions by engaging large language models (LLMs) in iterative dialogues, exposing critical safety vulnerabilities. However, existing methods often struggle to balance semantic coherence with attack effectiveness, resulting in either benign

2025

Training an Anti-KD Model that Cannot Teach Students via Similarity Disruption

ICASSP 2025accepted

Knowledge Distillation (KD) aims to enhance the performance of student models by transferring knowledge from teacher models. While reaping the benefits of KD, the intellectual property risks associated with it cannot be ignored. Even if models are released without training data or provided as a serv…

Cited by 0SourceScholar