SAVER is introduced, a transition-centered framework in which Substrate locates reusable influence, Adaptation captures how it changes, Violation identifies compromised safety attributes, Exposure marks where failures become observable, and Response assesses containment, repair, or revocation.
Jia-Hao Chen, Zhou Feng, Ou-Bo Ma et al.· 1 citation
IntraGuard is proposed, a black-box, venue-agnostic defense framework grounded in the structural--visual decoupling inherent to the PDF that achieves a defense success rate of up to 84%, while preserving peer-review invariance for human reviewers.
Ou-Bo Ma, Rui-Xiao Lin, Jia-Hao Chen et al.· 2 citations
This work forms this problem as backdoor generalization under training--inference trigger shift and introduces Lilith, a black-box anchor-to-family framework that achieves high family-wise attack success with limited utility degradation and a small trigger generalization gap.