Preprint
Aug 2026
Decomposition Attacks Across Unlinkable Identities: Limits of Stateful Defenses for LLM Services
It is proved that the achievable security and utility tradeoff depends entirely on how benign requests for the same capabilities are grouped, and that the achievable security and utility tradeoff depends entirely on how persistent, recognizable groups permit a useful defense.
Bowen Sun, Zhengyue Zhao, Xiaogeng Liu et al.
· 1 citation