{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:12:00Z","timestamp":1780053120287,"version":"3.54.0"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U24B20182"],"award-info":[{"award-number":["U24B20182"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Scientific Research Innovation Capability Support Project for Young Faculty","award":["SRICSPYF-ZY2025016"],"award-info":[{"award-number":["SRICSPYF-ZY2025016"]}]},{"name":"Ant Group Research Fund"},{"DOI":"10.13039\/501100007129","name":"Shandong Provincial Natural Science Foundation","doi-asserted-by":"crossref","award":["ZR2023LZH018"],"award-info":[{"award-number":["ZR2023LZH018"]}],"id":[{"id":"10.13039\/501100007129","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100004761","name":"Henan Provincial Natural Science Foundation","doi-asserted-by":"crossref","award":["252300423351"],"award-info":[{"award-number":["252300423351"]}],"id":[{"id":"10.13039\/501100004761","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tdsc.2026.3665230","type":"journal-article","created":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T21:10:17Z","timestamp":1771276217000},"page":"6506-6521","source":"Crossref","is-referenced-by-count":2,"title":["RedAgent: An Autonomous Agent for Context-Aware Red Teaming of LLM Jailbreaks"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3797-846X","authenticated-orcid":false,"given":"Huiyu","family":"Xu","sequence":"first","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenhui","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5804-3279","authenticated-orcid":false,"given":"Zhibo","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Xiao","sequence":"additional","affiliation":[{"name":"Palo Alto Networks, Santa Clara, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9592-3283","authenticated-orcid":false,"given":"Rui","family":"Zheng","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0921-8869","authenticated-orcid":false,"given":"Zhongjie","family":"Ba","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1969-2591","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref2","article-title":"Introducing GPTs","year":"2023"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.88"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.272"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3300381"},{"issue":"2","key":"ref6","first-page":"1","article-title":"Detection and defense against backdoor attacks in large language models based on repeated words analysis","volume":"35","author":"Chuan","year":"2026","journal-title":"Chin. J. Electron."},{"key":"ref7","first-page":"1","article-title":"Towards secure and robust vision-language models in autonomous driving: A survey for perception-oriented and decision-oriented attacks","volume":"35","author":"Tianyuan","year":"2025","journal-title":"Chin. J. Electron."},{"key":"ref8","article-title":"Jailbreaklens: Interpreting jailbreak mechanism in the lens of representation and circuit","author":"He","year":"2025"},{"key":"ref9","article-title":"Be careful with information from openAI","year":"2024"},{"key":"ref10","article-title":"Chat GPT DAN\u201d (and other \u201dJailbreaks\u201d),","year":"2024"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/satml64287.2025.00010"},{"key":"ref12","first-page":"61065","article-title":"Tree of attacks: Jailbreaking black-box llms automatically","volume-title":"Proc. 38th Int. Conf. Neural Inf. Process. Systems (NIPS \u201924)","volume":"37","author":"Mehrotra","year":"2023"},{"key":"ref13","first-page":"56174","article-title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Liu","year":"2023"},{"key":"ref14","article-title":"Gptfuzzer: Red teaming large language models with auto-generated jailbreak prompts","author":"Yu","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.773"},{"key":"ref16","article-title":"math","year":"2024"},{"key":"ref17","article-title":"The hacking of chatGPT is just getting started","author":"Burgess","year":"2023"},{"key":"ref18","article-title":"Amazing \u201djailbreak\u201d bypasses chatgpt\u2019s ethics safeguards","author":"Botty","year":"2023"},{"key":"ref19","article-title":"Dan is my new friend","year":"2022"},{"key":"ref20","article-title":"A two sentence jailbreak for GPT-4 and claude & why nobody knows how to fix it","author":"Guzey","year":"2023"},{"key":"ref21","article-title":"Twitter post","author":"Switten","year":"2022"},{"key":"ref22","article-title":"Jailbreaking the chatGPT on release","author":"Mowshowitz","year":"2023"},{"key":"ref23","article-title":"Can small language models reliably resist jailbreak attacks? a comprehensive evaluation","author":"Zhang","year":"2025"},{"key":"ref24","article-title":"Ailbreak chat","year":"2024"},{"key":"ref25","article-title":"Multilingual jailbreak challenges in large language models","author":"Deng","year":"2023"},{"key":"ref26","article-title":"Low-resource languages jailbreak gpt-4","author":"Yong","year":"2023"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.809"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-emnlp.813"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.52202\/079017-4121"},{"key":"ref30","article-title":"Deepinception: Hypnotize large language model to be jailbreaker","author":"Li","year":"2023"},{"key":"ref31","article-title":"Universal and transferable adversarial attacks on aligned language models","author":"Zou","year":"2023"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3390\/app14167150"},{"key":"ref33","first-page":"16974","article-title":"Cold-attack: Jailbreaking llms with stealthiness and controllability","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Guo","year":"2024"},{"key":"ref34","article-title":"What are ai agents?","year":"2024"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1561\/3300000051"},{"key":"ref36","article-title":"A comprehensive survey in LLM (-agent) full stack safety: Data, training and deployment","author":"Wang","year":"2025"},{"key":"ref37","first-page":"1","article-title":"Evaluating conversational question answering in multi-instructional documents with large language models","volume":"35","author":"Shiwei","year":"2022","journal-title":"Chin. J. Electron."},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1037\/13117-003"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0377"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3586183.3606763"},{"key":"ref41","article-title":"React: Synergizing reasoning and acting in language models","volume-title":"Proc. 11th Int. Conf. Learn. Representations","author":"Yao","year":"2022"},{"key":"ref42","article-title":"Voyager: An open-ended embodied agent with large language models","author":"Wang","year":"2023"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1800"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0517"},{"key":"ref45","first-page":"68539","article-title":"Toolformer: Language models can teach themselves to use tools","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Schick","year":"2024"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-024-00832-8"},{"key":"ref47","article-title":"Voyager: An open-ended embodied agent with large language models","author":"Wang","year":"2023"},{"key":"ref48","first-page":"46534","article-title":"Self-refine: Iterative refinement with self-feedback","volume-title":"Proc. 37th Int. Conf. Neural Inf. Process. Syst. (NIPS \u201923)","author":"Madaan"},{"key":"ref49","first-page":"62138","article-title":"Language agent tree search unifies reasoning acting and planning in language models","volume-title":"Proc. 41st Int. Conf. Mach. Learn. (ICML\u201924)","volume":"235","author":"Zhou","year":"2024"},{"key":"ref50","article-title":"Jailbreaking chatGPT via prompt engineering: An empirical study","author":"Liu","year":"2023"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670388"},{"key":"ref52","first-page":"4675","article-title":"Don\u2019t listen to me: Understanding and exploring jailbreak prompts of large language models","volume-title":"Proc. 33rd USENIX Conf. Secur. Symp. (SEC \u201924)","author":"Yu","year":"2024"},{"key":"ref53","first-page":"80079","article-title":"Jailbroken: How does LLM safety training fail?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Wei","year":"2024"},{"key":"ref54","first-page":"30988","article-title":"Fine-tuning aligned language models compromises safety, even when users do not intend to!","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Qi","year":"2023"},{"key":"ref55","first-page":"1","article-title":"Jade: A linguistic-based safety evaluation platform for llm","author":"Zhang","year":"2023"},{"key":"ref56","article-title":"Building effective agents","year":"2024"},{"key":"ref57","article-title":"Generator text to video maker","year":"2024"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11517592\/11397286.pdf?arnumber=11397286","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:07:44Z","timestamp":1778900864000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11397286\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":56,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3665230","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}