{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,3]],"date-time":"2026-08-03T19:56:19Z","timestamp":1785786979173,"version":"3.56.0"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62576259"],"award-info":[{"award-number":["62576259"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"crossref","award":["LP180100114"],"award-info":[{"award-number":["LP180100114"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Innovation Capability Support Plan of Shaanxi Province","award":["2023KJXX-144"],"award-info":[{"award-number":["2023KJXX-144"]}]},{"name":"Open Fund of Shaanxi Key Laboratory of Antenna and Control Technology"},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Evol. Computat."],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1109\/tevc.2025.3629409","type":"journal-article","created":{"date-parts":[[2025,11,5]],"date-time":"2025-11-05T18:40:06Z","timestamp":1762368006000},"page":"1465-1479","source":"Crossref","is-referenced-by-count":1,"title":["Multigranularity Adversarial Attacks on Large Language Models Using Genetic Programming"],"prefix":"10.1109","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9344-4238","authenticated-orcid":false,"given":"Wencheng","family":"Han","sequence":"first","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, Shaanxi, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6294-6761","authenticated-orcid":false,"given":"Hao","family":"Li","sequence":"additional","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, Shaanxi, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0415-8556","authenticated-orcid":false,"given":"Maoguo","family":"Gong","sequence":"additional","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, Shaanxi, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9950-4728","authenticated-orcid":false,"given":"Yu","family":"Zhou","sequence":"additional","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, Shaanxi, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3459-5079","authenticated-orcid":false,"given":"Yue","family":"Wu","sequence":"additional","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6631-1651","authenticated-orcid":false,"given":"A. K.","family":"Qin","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology","place":["Hawthorn, Victoria, Australia"],"department":["Department of Computing Technologies"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6983-4244","authenticated-orcid":false,"given":"Lining","family":"Xing","sequence":"additional","affiliation":[{"name":"Xidian University","place":["Xi\u2019an, Shaanxi, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N18-1202"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref3","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Neural Inf. Process. Syst.","volume":"33","author":"Brown"},{"key":"ref4","article-title":"GPT-4 technical report","volume-title":"arXiv:2303.08774","author":"Achiam","year":"2023"},{"key":"ref5","article-title":"Code llama: Open foundation models for code","author":"Roziere","year":"2023","journal-title":"arXiv:2308.12950"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2024.3497793"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JAS.2023.123618"},{"key":"ref8","first-page":"1","article-title":"Brainstorm, then select: A generative language model improves its creativity score","volume-title":"Proc. AAAI Conf. Artif. Intell. Workshop Creat. AI Across Modal.","author":"Summers-Stay"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2024.3392930"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2024.3439690"},{"key":"ref11","article-title":"Survey of vulnerabilities in large language models revealed by adversarial attacks","author":"Shayegani","year":"2023","journal-title":"arXiv:2310.10844"},{"key":"ref12","article-title":"Securing large language models: Threats, vulnerabilities and responsible practices","author":"Abdali","year":"2024","journal-title":"arXiv:2403.12503"},{"key":"ref13","article-title":"Universal and transferable adversarial attacks on aligned language models","author":"Zou","year":"2023","journal-title":"arXiv:2307.15043"},{"key":"ref14","first-page":"4657","article-title":"LLM-Fuzzer: Scaling assessment of large language model jailbreaks","volume-title":"Proc. USENIX Security","author":"Yu"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1221"},{"key":"ref16","first-page":"1","article-title":"Catastrophic jailbreak of open-source LLMs via exploiting generation","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Huang"},{"key":"ref17","first-page":"15307","article-title":"Automatically auditing large language models via discrete optimization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Jones"},{"key":"ref18","first-page":"1","article-title":"AutoDan: Generating stealthy jailbreak prompts on aligned large language models","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Liu"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.157"},{"key":"ref20","article-title":"AdvPrompter}: Fast adaptive adversarial prompting for LLMs","author":"Paulus","year":"2024","journal-title":"arXiv:2404.16873"},{"key":"ref21","first-page":"1","article-title":"Low-resource languages jailbreak GPT-4","volume-title":"Proc. Neural Inf. Process. Syst. Workshop Soc. Responsib. Lang. Model. Res.","author":"Yong"},{"key":"ref22","article-title":"Jailbreaking proprietary large language models using word substitution cipher","author":"Handa","year":"2024","journal-title":"arXiv:2402.10601"},{"key":"ref23","article-title":"Semantic mirror jailbreak: Genetic algorithm based jailbreak prompts against open-source LLMs","author":"Li","year":"2024","journal-title":"arXiv:2402.14872"},{"issue":"1959","key":"ref24","first-page":"1","article-title":"Dependency grammar and dependency parsing","volume-title":"MSI Rep.","volume":"5133","author":"Nivre","year":"2005"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/BF00175355"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3225509"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2018.2853719"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s10710-020-09389-y"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-64556-4_6"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/s10710-019-09361-5"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.870"},{"key":"ref32","first-page":"1","article-title":"A closer look at adversarial suffix learning for jailbreaking LLMs","volume-title":"Proc. Int. Conf. Learn. Represent. Workshop Secure Trustworthy Large Lang. Models","author":"Wang"},{"key":"ref33","first-page":"1","article-title":"GASP}: Efficient black-box generation of adversarial suffixes for jailbreaking LLMs","volume-title":"Proc. Int. Conf. Learn. Represent. Workshop BuildingTrust","author":"Basani"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.591"},{"key":"ref35","article-title":"Jailbreak and guard aligned language models with only few in-context demonstrations","author":"Wei","year":"2023","journal-title":"arXiv:2310.06387"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICETSIS61505.2024.10459698"},{"key":"ref37","first-page":"1","article-title":"An LLM can fool itself: A prompt-based adversarial attack","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Xu"},{"key":"ref38","article-title":"Prompt stealing attacks against large language models","author":"Sha","year":"2024","journal-title":"arXiv:2402.12959"},{"key":"ref39","first-page":"1","article-title":"Black box adversarial prompting for foundation models","volume-title":"Proc. Int. Conf. Mach. Learn. Workshop New Front. Advers. Mach. Learn.","author":"Maus"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-emnlp.692"},{"key":"ref41","article-title":"Enhancing jailbreak attack against large language models through silent tokens","author":"Yu","year":"2024","journal-title":"arXiv:2405.20653"},{"key":"ref42","article-title":"When \u2018competency\u2019 in reasoning opens the door to vulnerability: Jailbreaking LLMs via novel complex ciphers","author":"Handa","year":"2024","journal-title":"arXiv:2402.10601"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2024.3454118"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3151373"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2023.3302838"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1162\/evco_a_00359"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2023.3334626"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2003.818189"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/11844297_44"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3377930.3390248"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-1249"},{"key":"ref53","article-title":"ShieldGemma: Generative AI content moderation based on gemma","author":"Zeng","year":"2024","journal-title":"arXiv:2407.21772"},{"key":"ref54","volume-title":"Llama-3.2-1B-Instruct","year":"2025"},{"key":"ref55","volume-title":"Llama-3.2-3B-Instruct","year":"2025"},{"key":"ref56","volume-title":"Qwen2.5: A party of foundation models","year":"2024"},{"key":"ref57","article-title":"Gemma2: Improving open language models at a practical size","author":"Team","year":"2024","journal-title":"arXiv:2408.00118"},{"key":"ref58","article-title":"Llama2: Open foundation and fine-tuned chat models","author":"Touvron","year":"2023","journal-title":"arXiv:2307.09288"},{"key":"ref59","volume-title":"Llama-3.1-8B-Instruct","year":"2025"},{"key":"ref60","article-title":"Mistral 7B","author":"Jiang","year":"2023","journal-title":"arXiv:2310.06825"},{"key":"ref61","volume-title":"Language models are unsupervised multitask learners","author":"Radford","year":"2019"}],"container-title":["IEEE Transactions on Evolutionary Computation"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/4235\/11635978\/11227129.pdf?arnumber=11227129","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,3]],"date-time":"2026-08-03T19:01:32Z","timestamp":1785783692000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11227129\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":61,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tevc.2025.3629409","relation":{},"ISSN":["1089-778X","1089-778X","1941-0026"],"issn-type":[{"value":"1089-778X","type":"print"},{"value":"1089-778X","type":"print"},{"value":"1941-0026","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8]]}}}