{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,3]],"date-time":"2026-08-03T19:57:51Z","timestamp":1785787071399,"version":"3.56.0"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Research Project","award":["32170654"],"award-info":[{"award-number":["32170654"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100016588","name":"Shenzhen Research Institute, City University of Hong Kong","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100016588","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Research Grants Council of the Hong Kong Special Administrative Region CityU","award":["11203723"],"award-info":[{"award-number":["11203723"]}]},{"name":"City University of Hong Kong CityU","award":["7030022"],"award-info":[{"award-number":["7030022"]}]},{"DOI":"10.13039\/501100003452","name":"Innovation and Technology Commission","doi-asserted-by":"crossref","award":["ITB\/FBL\/9037\/22\/S"],"award-info":[{"award-number":["ITB\/FBL\/9037\/22\/S"]}],"id":[{"id":"10.13039\/501100003452","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Evol. Computat."],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1109\/tevc.2026.3656951","type":"journal-article","created":{"date-parts":[[2026,1,27]],"date-time":"2026-01-27T05:50:22Z","timestamp":1769493022000},"page":"1450-1464","source":"Crossref","is-referenced-by-count":0,"title":["UniBreak: A Unified Evolutionary Token-Level Jailbreaking Framework for Large Language Models"],"prefix":"10.1109","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3652-6381","authenticated-orcid":false,"given":"Shen","family":"You","sequence":"first","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6181-3900","authenticated-orcid":false,"given":"Wei","family":"Jiang","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China","place":["Chengdu, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-4731-2638","authenticated-orcid":false,"given":"Hefei","family":"Mei","sequence":"additional","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1621-3831","authenticated-orcid":false,"given":"Danei","family":"Gong","sequence":"additional","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-8656-3064","authenticated-orcid":false,"given":"Zhongshen","family":"Li","sequence":"additional","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8163-3253","authenticated-orcid":false,"given":"Jixiang","family":"Yu","sequence":"additional","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1985-938X","authenticated-orcid":false,"given":"Junkai","family":"Ji","sequence":"additional","affiliation":[{"name":"Shenzhen University","place":["Shenzhen, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2415-0401","authenticated-orcid":false,"given":"Qiuzhen","family":"Lin","sequence":"additional","affiliation":[{"name":"Shenzhen University","place":["Shenzhen, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8716-9823","authenticated-orcid":false,"given":"Xiangtao","family":"Li","sequence":"additional","affiliation":[{"name":"Jilin University","place":["Changchun, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6062-733X","authenticated-orcid":false,"given":"Ka-Chun","family":"Wong","sequence":"additional","affiliation":[{"name":"City University of Hong Kong","place":["Hong Kong, SAR, China"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Adaptive machine translation with large language models","author":"Moslem","year":"2023","journal-title":"arXiv:2301. 13294"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-naacl.246"},{"key":"ref3","article-title":"De-hallucinator: Mitigating LLM hallucinations in code generation tasks via iterative grounding","author":"Eghbali","year":"2024","journal-title":"arXiv:2401.01701"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00632"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3649449"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref7","first-page":"16048","article-title":"Understanding and improving fast adversarial training","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Andriushchenko"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.3390\/a15080283"},{"key":"ref9","article-title":"VEAttack: Downstream-agnostic vision encoder attack against large vision language models","author":"Mei","year":"2025","journal-title":"arXiv:2505.17440"},{"key":"ref10","article-title":"Survey of vulnerabilities in large language models revealed by adversarial attacks","author":"Shayegani","year":"2023","journal-title":"arXiv:2310.10844"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s13735-024-00334-8"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.443"},{"key":"ref13","article-title":"The best defense is a good offense: Countering LLM-powered cyberattacks","author":"Ayzenshteyn","year":"2024","journal-title":"arXiv:2410.15396"},{"key":"ref14","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"Liu","year":"2016","journal-title":"arXiv:1611.02770"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref16","article-title":"LLM censorship: A machine learning challenge or a computer security problem?","author":"Glukhov","year":"2023","journal-title":"arXiv:2307.10719"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"ref18","article-title":"A new era in LLM security: Exploring security concerns in real-world LLM-based systems","author":"Wu","year":"2024","journal-title":"arXiv:2402.18649"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3712001"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICMC60390.2024.00008"},{"key":"ref21","article-title":"Universal and transferable adversarial attacks on aligned language models","author":"Zou","year":"2023","journal-title":"arXiv:2307.15043"},{"key":"ref22","article-title":"An LLM can fool itself: A prompt-based adversarial attack","author":"Xu","year":"2023","journal-title":"arXiv:2310.13345"},{"key":"ref23","article-title":"LLM lies: Hallucinations are not bugs, but features as adversarial examples","author":"Yao","year":"2023","journal-title":"arXiv:2310.01469"},{"key":"ref24","article-title":"HotFlip: White-box adversarial examples for text classification","author":"Ebrahimi","year":"2017","journal-title":"arXiv:1712.06751"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref26","article-title":"AmpleGCG: Learning a universal and transferable generative model of adversarial suffixes for jailbreaking both open and closed LLMs","author":"Liao","year":"2024","journal-title":"arXiv:2404.07921"},{"key":"ref27","article-title":"AutoDAN: Generating stealthy jailbreak prompts on aligned large language models","author":"Liu","year":"2023","journal-title":"arXiv:2310.04451"},{"key":"ref28","article-title":"Jailbreaking black box large language models in twenty queries","author":"Chao","year":"2023","journal-title":"arXiv:2310.08419"},{"key":"ref29","article-title":"Jailbreaking leading safety-aligned LLMs with simple adaptive attacks","author":"Andriushchenko","year":"2024","journal-title":"arXiv:2404.02151"},{"key":"ref30","article-title":"Adversarial attacks and defences: A survey","author":"Chakraborty","year":"2018","journal-title":"arXiv:1810.00069"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2013.2281535"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2010.2058118"},{"key":"ref35","article-title":"EvoPrompt: Connecting LLMs with evolutionary algorithms yields powerful prompt optimizers","author":"Guo","year":"2023","journal-title":"arXiv:2309.08532"},{"key":"ref36","article-title":"One model transfer to all: On robust jailbreak prompts generation against LLMs","author":"Li","year":"2025","journal-title":"arXiv:2505.17598"},{"key":"ref37","article-title":"Semantic mirror jailbreak: Genetic algorithm based jailbreak prompts against open-source LLMs","author":"Li","year":"2024","journal-title":"arXiv:2402.14872"},{"key":"ref38","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref39","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2025.3586128"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2022.3231460"},{"key":"ref42","article-title":"Llama 2: Open foundation and fine-tuned chat models","author":"Touvron","year":"2023","journal-title":"arXiv:2307.09288"},{"key":"ref43","article-title":"Qwen technical report","volume-title":"arXiv:2309.16609","author":"Bai","year":"2023"},{"key":"ref44","article-title":"OpenELM: An efficient language model family with open training and inference framework","author":"Mehta","year":"2024","journal-title":"arXiv:2404.14619"},{"key":"ref45","article-title":"DeepSeek-V3 technical report","volume-title":"arXiv:2412.19437","author":"Liu","year":"2024"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS54959.2023.00042"},{"key":"ref47","article-title":"ERNIE 3.0: Large-scale knowledge enhanced pre-training for language understanding and generation","author":"Sun","year":"2021","journal-title":"arXiv:2107.02137"},{"key":"ref48","article-title":"Kimi-VL technical report","volume-title":"arXiv:2504.07491","author":"Team","year":"2025"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2011"}],"container-title":["IEEE Transactions on Evolutionary Computation"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/4235\/11635978\/11363592.pdf?arnumber=11363592","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,3]],"date-time":"2026-08-03T19:03:41Z","timestamp":1785783821000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11363592\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":49,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tevc.2026.3656951","relation":{},"ISSN":["1089-778X","1089-778X","1941-0026"],"issn-type":[{"value":"1089-778X","type":"print"},{"value":"1089-778X","type":"print"},{"value":"1941-0026","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8]]}}}