paper-with-me

홈 › Papers

Concept Enhancement Engineering: A Lightweight and Efficient Robust Defense Against Jailbreak Attacks in Embodied AI

2025-04-15 · Jirui Yang, Zheyu Lin, Shuhan Yang, Zhihui Lu, Xin Du

Embodied Intelligence (EI) systems integrated with large language models (LLMs) face significant security risks, particularly from jailbreak attacks that manipulate models into generating harmful outputs or executing unsafe physical actions. Traditional defense strategies, such as input filtering and output monitoring, often introduce high computational overhead or interfere with task performance in real-time embodied scenarios. To address these challenges, we propose Concept Enhancement Engineering (CEE), a novel defense framework that leverages representation engineering to enhance the safety of embodied LLMs by dynamically steering their internal activations. CEE operates by (1) extracting multilingual safety patterns from model activations, (2) constructing control directions based on safety-aligned concept subspaces, and (3) applying subspace concept rotation to reinforce safe behavior during inference. Our experiments demonstrate that CEE effectively mitigates jailbreak attacks while maintaining task performance, outperforming existing defense methods in both robustness and efficiency. This work contributes a scalable and interpretable safety mechanism for embodied AI, bridging the gap between theoretical representation engineering and practical security applications. Our findings highlight the potential of latent-space interventions as a viable defense paradigm against emerging adversarial threats in physically grounded AI systems.

📄 PDF Abstract BibTeX arXiv:2504.13201

Code (0)

등록된 구현이 없습니다.

Tasks

input filtering

Similar Papers 제목 키워드 기반

TRYLOCK: Defense-in-Depth Against LLM Jailbreaks via Layered Preference and Representation Engineering

2026-01-06 · Scott Thornton arxiv

Large language models remain vulnerable to jailbreak attacks, and single-layer defenses often trade security for usability. We present TRYLOCK, the first defense-in-depth architecture that combines four heterogeneous mec…

LoRAShield: Data-Free Editing Alignment for Secure Personalized LoRA Sharing

2025-07-05 · Jiahao Chen, Junhao Li, Yiming Wang, Yong Yang 외 arxiv

The proliferation of Low-Rank Adaptation (LoRA) models has democratized personalized text-to-image generation, enabling users to share lightweight models (e.g., personal portraits) on platforms like Civitai and Liblib. H…

Text-to-Image GenerationPrompt Engineering

Active Defense Against Social Engineering: The Case for Human Language Technology

2020-05-01 · LREC 2020 5 · Adam Dalton, Ehsan Aghaei, Ehab Al-Shaer, Archna Bhatia 외

We describe a system that supports natural language processing (NLP) components for active defenses against social engineering attacks. We deploy a pipeline of human language technology, including Ask and Framing Detecti…

AttributeDialogue Generationnamed-entity-recognitionNamed Entity Recognition+1

When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent

2026-01-12 · Xinyi Wu, Geng Hong, Yueyue Chen, MingXuan Liu 외 arxiv

Web agents, powered by large language models (LLMs), are increasingly deployed to automate complex web interactions. The rise of open-source frameworks (e.g., Browser Use, Skyvern-AI) has accelerated adoption, but also b…

Robust Mode Connectivity-Oriented Adversarial Defense: Enhancing Neural Network Robustness Against Diversified $\ell_p$ Attacks

2023-03-17 · Ren Wang, YuXuan Li, Sijia Liu

Adversarial robustness is a key concept in measuring the ability of neural networks to defend against adversarial attacks during the inference phase. Recent studies have shown that despite the success of improving advers…

Adversarial DefenseAdversarial RobustnessComputational Efficiency