{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T00:18:36Z","timestamp":1783124316108,"version":"3.54.6"},"reference-count":45,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neurocomputing"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.neucom.2026.134358","type":"journal-article","created":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T16:39:14Z","timestamp":1782491954000},"page":"134358","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["An adversarial suffix for detecting prompt-level vulnerabilities in large language models"],"prefix":"10.1016","volume":"699","author":[{"given":"Jingyi","family":"Yu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wolfgang","family":"Mayer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8985-8836","authenticated-orcid":false,"given":"Liang","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wanli","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1618-3553","authenticated-orcid":false,"given":"Zaiwen","family":"Feng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.neucom.2026.134358_bib0005","author":"Alt"},{"key":"10.1016\/j.neucom.2026.134358_bib0010","doi-asserted-by":"crossref","first-page":"34","DOI":"10.1016\/j.eswa.2018.07.032","article-title":"Joint entity recognition and relation extraction as a multi-head selection problem","volume":"114","author":"Bekoulis","year":"2018","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.neucom.2026.134358_bib0015","author":"Das"},{"key":"10.1016\/j.neucom.2026.134358_bib0020","series-title":"Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers)","first-page":"31","article-title":"Hotflip: white-box adversarial examples for text classification","author":"Ebrahimi","year":"2018"},{"key":"10.1016\/j.neucom.2026.134358_bib0025","author":"Garg"},{"key":"10.1016\/j.neucom.2026.134358_bib0030","doi-asserted-by":"crossref","first-page":"914","DOI":"10.1016\/j.jbi.2013.07.011","article-title":"The DDI corpus: an annotated corpus with pharmacological substances and drug\u2013drug interactions","volume":"46","author":"Herrero-Zazo","year":"2013","journal-title":"J. Biomed. Inform."},{"key":"10.1016\/j.neucom.2026.134358_bib0035","series-title":"TextFool: Fool Your Model with Natural Adversarial Text","author":"Jin","year":"2019"},{"key":"10.1016\/j.neucom.2026.134358_bib0040","series-title":"Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","first-page":"3045","article-title":"The power of scale for parameter-efficient prompt tuning","author":"Lester","year":"2021"},{"key":"10.1016\/j.neucom.2026.134358_bib0045","series-title":"BioCreative V CDR Task Corpus: A Resource for Chemical Disease Relation Extraction","author":"Li","year":"2016"},{"key":"10.1016\/j.neucom.2026.134358_bib0050","series-title":"Improving Code LLM Robustness to Prompt Perturbations via Layer-Aware Model Editing","author":"Liu","year":"2025"},{"key":"10.1016\/j.neucom.2026.134358_bib0055","series-title":"Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers)","first-page":"61","article-title":"P-tuning: prompt tuning can be comparable to fine-tuning across scales and tasks","author":"Liu","year":"2022"},{"key":"10.1016\/j.neucom.2026.134358_bib0060","author":"Liu"},{"key":"10.1016\/j.neucom.2026.134358_bib0065","author":"Luan"},{"key":"10.1016\/j.neucom.2026.134358_bib0070","author":"Madry"},{"key":"10.1016\/j.neucom.2026.134358_bib0075","author":"Miwa"},{"key":"10.1016\/j.neucom.2026.134358_bib0080","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"1765","article-title":"Universal adversarial perturbations","author":"Moosavi-Dezfooli","year":"2017"},{"key":"10.1016\/j.neucom.2026.134358_bib0085","author":"Nookala"},{"key":"10.1016\/j.neucom.2026.134358_bib0090","doi-asserted-by":"crossref","first-page":"27730","DOI":"10.52202\/068431-2011","article-title":"Training language models to follow instructions with human feedback","volume":"35","author":"Ouyang","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134358_bib0095","author":"Perez"},{"key":"10.1016\/j.neucom.2026.134358_bib0100","series-title":"Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","first-page":"9558","article-title":"Onion: a simple and effective defense against textual backdoor attacks","author":"Qi","year":"2021"},{"key":"10.1016\/j.neucom.2026.134358_bib0105","series-title":"Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics","first-page":"1085","article-title":"Generating natural language adversarial examples through probability weighted word saliency","author":"Ren","year":"2019"},{"key":"10.1016\/j.neucom.2026.134358_bib0110","author":"Seleznyov"},{"key":"10.1016\/j.neucom.2026.134358_bib0115","series-title":"Companion Proceedings of the Web Conference 2022","first-page":"595","article-title":"FinRED: a dataset for relation extraction in financial domain","author":"Sharma","year":"2022"},{"key":"10.1016\/j.neucom.2026.134358_bib0120","series-title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers)","first-page":"7636","article-title":"Safer-instruct: aligning language models with automated preference data","author":"Shi","year":"2024"},{"key":"10.1016\/j.neucom.2026.134358_bib0125","series-title":"CCF International Conference on Natural Language Processing and Chinese Computing","first-page":"682","article-title":"Promptattack: prompt-based attack for language models via gradient search","author":"Shi","year":"2022"},{"key":"10.1016\/j.neucom.2026.134358_bib0130","author":"Shin"},{"key":"10.1016\/j.neucom.2026.134358_bib0135","series-title":"Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies","first-page":"3724","article-title":"Universal adversarial attacks with natural triggers for text classification","author":"Song","year":"2021"},{"key":"10.1016\/j.neucom.2026.134358_bib0140","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"13843","article-title":"Re-tacred: addressing shortcomings of the tacred dataset","author":"Stoica","year":"2021"},{"key":"10.1016\/j.neucom.2026.134358_bib0145","series-title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing","first-page":"22960","article-title":"Language models can be efficiently steered via minimal embedding layer transformations","author":"Tavares","year":"2025"},{"key":"10.1016\/j.neucom.2026.134358_bib0150","author":"Touvron"},{"key":"10.1016\/j.neucom.2026.134358_bib0155","series-title":"Proceedings of the Conference. Association for Computational Linguistics. Meeting","article-title":"Revisiting relation extraction in the era of large language models","author":"Wadhwa","year":"2023"},{"key":"10.1016\/j.neucom.2026.134358_bib0160","author":"Wallace"},{"key":"10.1016\/j.neucom.2026.134358_bib0165","author":"Wang"},{"key":"10.1016\/j.neucom.2026.134358_bib0170","doi-asserted-by":"crossref","first-page":"80079","DOI":"10.52202\/075280-3508","article-title":"Jailbroken: how does LLM safety training fail?","volume":"36","author":"Wei","year":"2023","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134358_bib0175","series-title":"International Conference on Research in Computational Molecular Biology","first-page":"272","article-title":"Renet: a deep learning approach for extracting gene-disease associations from literature","author":"Wu","year":"2019"},{"key":"10.1016\/j.neucom.2026.134358_bib0180","author":"Xu"},{"key":"10.1016\/j.neucom.2026.134358_bib0185","author":"Xu"},{"key":"10.1016\/j.neucom.2026.134358_bib0190","series-title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers)","first-page":"6473","article-title":"Linkprompt: natural and universal adversarial attacks on prompt-based language models","author":"Xu","year":"2024"},{"key":"10.1016\/j.neucom.2026.134358_bib0195","series-title":"Proceedings of COLING 2014, the 25th International Conference on Computational Linguistics: Technical Papers","first-page":"2335","article-title":"Relation classification via convolutional deep neural network","author":"Zeng","year":"2014"},{"key":"10.1016\/j.neucom.2026.134358_bib0200","series-title":"International Conference on Machine Learning","first-page":"7472","article-title":"Theoretically principled trade-off between robustness and accuracy","author":"Zhang","year":"2019"},{"key":"10.1016\/j.neucom.2026.134358_bib0205","series-title":"Safeguard Is a Double-Edged Sword: Denial-of-Service Attack on Large Language Models","author":"Zhang","year":"2024"},{"key":"10.1016\/j.neucom.2026.134358_bib0210","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2024.129307","article-title":"ChatGPT in threefold: as attacker, target, and evaluator in adversarial attacks","volume":"621","author":"Zhang","year":"2025","journal-title":"Neurocomputing"},{"key":"10.1016\/j.neucom.2026.134358_bib0215","author":"Zheng"},{"key":"10.1016\/j.neucom.2026.134358_bib0220","author":"Zhu"},{"key":"10.1016\/j.neucom.2026.134358_bib0225","author":"Zou"}],"container-title":["Neurocomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S092523122601756X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S092523122601756X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T23:39:58Z","timestamp":1783121998000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S092523122601756X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":45,"alternative-id":["S092523122601756X"],"URL":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134358","relation":{},"ISSN":["0925-2312"],"issn-type":[{"value":"0925-2312","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"An adversarial suffix for detecting prompt-level vulnerabilities in large language models","name":"articletitle","label":"Article Title"},{"value":"Neurocomputing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134358","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"134358"}}