{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,28]],"date-time":"2026-08-28T10:54:36Z","timestamp":1787914476117,"version":"build-2784847793"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,6]],"date-time":"2024-12-06T00:00:00Z","timestamp":1733443200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,6]]},"DOI":"10.1145\/3709026.3709115","type":"proceedings-article","created":{"date-parts":[[2025,2,15]],"date-time":"2025-02-15T10:05:41Z","timestamp":1739613941000},"page":"183-190","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["SwordEcho: A LLM Jailbreaking Optimization Strategy Driven by Reinforcement Learning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9901-4087","authenticated-orcid":false,"given":"Xuehai","family":"Tang","sequence":"first","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-6587-2726","authenticated-orcid":false,"given":"Wenjie","family":"Xiao","sequence":"additional","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6583-9526","authenticated-orcid":false,"given":"Zhongjiang","family":"Yao","sequence":"additional","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1107-3873","authenticated-orcid":false,"given":"Jizhong","family":"Han","sequence":"additional","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,2,15]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"Project Academy. 2023. The Ultimate Guide to Textual Integrity for HSC English. https:\/\/projectacademy.nsw.edu.au\/year-12-guides\/the-ultimate-guide-to-textual-integrity\/. Accessed: date-of-access."},{"key":"e_1_3_3_1_3_2","unstructured":"Josh Achiam Steven Adler Sandhini Agarwal Lama Ahmad Ilge Akkaya Florencia\u00a0Leoni Aleman Diogo Almeida Janko Altenschmidt Sam Altman Shyamal Anadkat et\u00a0al. 2023. Gpt-4 technical report. arXiv preprint arXiv:2303.08774 (2023)."},{"key":"e_1_3_3_1_4_2","unstructured":"Anthropic. 2023. Model card and evaluations for Claude models. https:\/\/www-files.anthropic.com\/production\/images\/Model-Card-Claude-2.pdf."},{"key":"e_1_3_3_1_5_2","unstructured":"Baichuan. 2023. Baichuan 2: Open Large-scale Language Models. arXiv preprint arXiv:2309.10305 (2023). https:\/\/arxiv.org\/abs\/2309.10305"},{"key":"e_1_3_3_1_6_2","unstructured":"Tom\u00a0B. Brown. 2020. Language models are few-shot learners. arXiv preprint arXiv:2005.14165 (2020)."},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"crossref","unstructured":"Gelei Deng Yi Liu Yuekang Li Kailong Wang Ying Zhang Zefeng Li Haoyu Wang Tianwei Zhang and Yang Liu. 2023. MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots. arxiv:https:\/\/arXiv.org\/abs\/2307.08715\u00a0[cs.CR]","DOI":"10.14722\/ndss.2024.24188"},{"key":"e_1_3_3_1_8_2","doi-asserted-by":"crossref","unstructured":"Ameet Deshpande Vishvak Murahari Tanmay Rajpurohit Ashwin Kalyan and Karthik Narasimhan. 2023. Toxicity in ChatGPT: Analyzing Persona-assigned Language Models. arxiv:https:\/\/arXiv.org\/abs\/2304.05335\u00a0[cs.CL]","DOI":"10.18653\/v1\/2023.findings-emnlp.88"},{"key":"e_1_3_3_1_9_2","unstructured":"Josh\u00a0A. Goldstein Girish Sastry Micah Musser Renee DiResta Matthew Gentzel and Katerina Sedova. 2023. Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigations. arxiv:https:\/\/arXiv.org\/abs\/2301.04246\u00a0[cs.CY]"},{"key":"e_1_3_3_1_10_2","volume-title":"The Theory of Communicative Action, Volume 1: Reason and the Rationalization of Society","author":"Habermas J\u00fcrgen","year":"1984","unstructured":"J\u00fcrgen Habermas. 1984. The Theory of Communicative Action, Volume 1: Reason and the Rationalization of Society. Beacon Press, Boston."},{"key":"e_1_3_3_1_11_2","doi-asserted-by":"crossref","unstructured":"Thomas Hartvigsen Saadia Gabriel Hamid Palangi Maarten Sap Dipankar Ray and Ece Kamar. 2022. ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detection. arxiv:https:\/\/arXiv.org\/abs\/2203.09509\u00a0[cs.CL]","DOI":"10.18653\/v1\/2022.acl-long.234"},{"key":"e_1_3_3_1_12_2","unstructured":"Zhang-Wei Hong Idan Shenfeld Tsun-Hsuan Wang Yung-Sung Chuang Aldo Pareja James Glass Akash Srivastava and Pulkit Agrawal. 2024. Curiosity-driven Red-teaming for Large Language Models. arxiv:https:\/\/arXiv.org\/abs\/2402.19464\u00a0[cs.LG]"},{"key":"e_1_3_3_1_13_2","unstructured":"Lei Huang Weijiang Yu Weitao Ma Weihong Zhong Zhangyin Feng Haotian Wang Qianglong Chen Weihua Peng Xiaocheng Feng Bing Qin and Ting Liu. 2023. A Survey on Hallucination in Large Language Models: Principles Taxonomy Challenges and Open Questions. arxiv:https:\/\/arXiv.org\/abs\/2311.05232\u00a0[cs.CL]"},{"key":"e_1_3_3_1_14_2","unstructured":"Rub\u00e9n\u00a0Dar\u00edo Jaramillo. 2023. rubend18\/ChatGPT-Jailbreak-Prompts. https:\/\/huggingface.co\/datasets\/rubend18\/ChatGPT-Jailbreak-Prompts Accessed: 2023-11-3."},{"key":"e_1_3_3_1_15_2","unstructured":"Jiaming Ji Mickel Liu Juntao Dai Xuehai Pan Chi Zhang Ce Bian Chi Zhang Ruiyang Sun Yizhou Wang and Yaodong Yang. 2023. BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset. arxiv:https:\/\/arXiv.org\/abs\/2307.04657\u00a0[cs.CL]"},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"crossref","unstructured":"Daniel Kang Xuechen Li Ion Stoica Carlos Guestrin Matei Zaharia and Tatsunori Hashimoto. 2023. Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks. arxiv:https:\/\/arXiv.org\/abs\/2302.05733\u00a0[cs.CR]","DOI":"10.1109\/SPW63631.2024.00018"},{"key":"e_1_3_3_1_17_2","unstructured":"Daniel Kang Xuechen Li Ion Stoica Carlos Guestrin Matei Zaharia and Tatsunori Hashimoto. 2023. Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks. ArXiv abs\/2302.05733 (2023)."},{"key":"e_1_3_3_1_18_2","doi-asserted-by":"crossref","unstructured":"Raz Lapid Ron Langberg and Moshe Sipper. 2023. Open Sesame! Universal Black Box Jailbreaking of Large Language Models. arxiv:https:\/\/arXiv.org\/abs\/2309.01446\u00a0[cs.CL]","DOI":"10.3390\/app14167150"},{"key":"e_1_3_3_1_19_2","unstructured":"Xiaogeng Liu Nan Xu Muhao Chen and Chaowei Xiao. 2023. AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models. arxiv:https:\/\/arXiv.org\/abs\/2310.04451\u00a0[cs.CL]"},{"key":"e_1_3_3_1_20_2","unstructured":"OpenAI. 2023. OpenAI\u2019s Content Moderation. (2023). https:\/\/platform.openai.com\/docs\/guides\/moderation\/overview Accessed: 2023-11-19."},{"key":"e_1_3_3_1_21_2","unstructured":"Muhammad\u00a0Ahmed Shah Roshan Sharma Hira Dhamyal Raphael Olivier Ankit Shah Joseph Konan Dareen Alharthi Hazim\u00a0T. Bukhari Massa Baali Soham Deshmukh Michael Kuhlmann Bhiksha Raj and Rita Singh. 2023. LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model. arxiv:https:\/\/arXiv.org\/abs\/2310.04445\u00a0[cs.CL]"},{"key":"e_1_3_3_1_22_2","unstructured":"InternLM Team. 2023. InternLM: A Multilingual Language Model with Progressively Enhanced Capabilities. https:\/\/github.com\/InternLM\/InternLM."},{"key":"e_1_3_3_1_23_2","unstructured":"Hugo Touvron Thibaut Lavril Gautier Izacard Xavier Martinet Marie-Anne Lachaux Timoth\u00e9e Lacroix Baptiste Rozi\u00e8re Naman Goyal Eric Hambro Faisal Azhar Aurelien Rodriguez Armand Joulin Edouard Grave and Guillaume Lample. 2023. LLaMA: Open and Efficient Foundation Language Models. arxiv:https:\/\/arXiv.org\/abs\/2302.13971\u00a0[cs.CL]"},{"key":"e_1_3_3_1_24_2","unstructured":"Dongyu Yao Jianshu Zhang Ian\u00a0G. Harris and Marcel Carlsson. 2023. FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models. arxiv:https:\/\/arXiv.org\/abs\/2309.05274\u00a0[cs.CR]"},{"key":"e_1_3_3_1_25_2","unstructured":"Jiahao Yu Xingwei Lin Zheng Yu and Xinyu Xing. 2023. Gptfuzzer: Red teaming large language models with auto-generated jailbreak prompts. arXiv preprint arXiv:2309.10253 (2023)."},{"key":"e_1_3_3_1_26_2","unstructured":"Aohan Zeng Xiao Liu Zhengxiao Du Zihan Wang Hanyu Lai Ming Ding Zhuoyi Yang Yifan Xu Wendi Zheng Xiao Xia et\u00a0al. 2022. Glm-130b: An open bilingual pre-trained model. arXiv preprint arXiv:2210.02414 (2022)."},{"key":"e_1_3_3_1_27_2","unstructured":"Lianmin Zheng Wei-Lin Chiang Ying Sheng Siyuan Zhuang Zhanghao Wu Yonghao Zhuang Zi Lin Zhuohan Li Dacheng Li Eric.\u00a0P Xing Hao Zhang Joseph\u00a0E. Gonzalez and Ion Stoica. 2023. Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena. arxiv:https:\/\/arXiv.org\/abs\/2306.05685\u00a0[cs.CL]"},{"key":"e_1_3_3_1_28_2","unstructured":"Terry\u00a0Yue Zhuo Yujin Huang Chunyang Chen and Zhenchang Xing. 2023. Red teaming ChatGPT via Jailbreaking: Bias Robustness Reliability and Toxicity. arxiv:https:\/\/arXiv.org\/abs\/2301.12867\u00a0[cs.CL]"},{"key":"e_1_3_3_1_29_2","unstructured":"Andy Zou Zifan Wang J.\u00a0Zico Kolter and Matt Fredrikson. 2023. Universal and Transferable Adversarial Attacks on Aligned Language Models. arxiv:https:\/\/arXiv.org\/abs\/2307.15043\u00a0[cs.CL]"}],"event":{"name":"CSAI 2024: 2024 8th International Conference on Computer Science and Artificial Intelligence (CSAI)","location":"Beijing China","acronym":"CSAI 2024"},"container-title":["Proceedings of the 2024 8th International Conference on Computer Science and Artificial Intelligence"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3709026.3709115","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3709026.3709115","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:17:31Z","timestamp":1750295851000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3709026.3709115"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,6]]},"references-count":28,"alternative-id":["10.1145\/3709026.3709115","10.1145\/3709026"],"URL":"https:\/\/doi.org\/10.1145\/3709026.3709115","relation":{},"subject":[],"published":{"date-parts":[[2024,12,6]]},"assertion":[{"value":"2025-02-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}