{"id":"W4411120192","doi":"10.18653/v1/2025.naacl-long.302","title":"Stronger Universal and Transferable Attacks by Suppressing Refusals","year":2025,"lang":"en","type":"article","venue":"","topic":"Cryptography and Data Security","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"Tamkeen; Army Research Office; King Abdulaziz City for Science and Technology; York University; New York University Abu Dhabi; U.S. Department of Homeland Security; Open Philanthropy Project; Noyce Foundation; National Science Foundation","keywords":"Computer science; Computer security","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00009655173,0.00007019783,0.00008277652,0.00006554047,0.0001166136,0.0001779622,0.0002944827,0.00004015034,0.00004380944],"category_scores_gemma":[0.000003277496,0.00006335373,0.00002503518,0.0002385358,0.00004648731,0.0005850182,0.0001010437,0.00007825474,0.000002074712],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000006684205,"about_ca_system_score_gemma":0.00002337544,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00005275987,"about_ca_topic_score_gemma":0.0000198147,"domain_scores_codex":[0.9994157,0.00002910451,0.00008107704,0.0002451366,0.00007463138,0.0001543801],"domain_scores_gemma":[0.9996135,0.00005150992,0.000008401179,0.000262133,0.00001728253,0.00004716365],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00001144531,0.00007296512,0.002016549,0.00002595807,0.00003052639,0.000005211548,0.0003415727,0.000002724694,0.00768972,0.8642349,0.09859014,0.02697824],"study_design_scores_gemma":[0.002609639,0.0001619157,0.005385266,0.0001084056,0.00004646456,0.00000880734,0.0004763272,0.02073131,0.0960521,0.03904126,0.8346071,0.0007714531],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03553837,0.000462417,0.935781,0.001242754,0.0001111898,0.00006711006,0.00001975245,0.0001258647,0.02665155],"genre_scores_gemma":[0.9685481,0.00008107859,0.03022883,0.0005091601,0.00001019837,0.000002168553,0.00001222801,0.000002889684,0.0006053456],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9330097,"threshold_uncertainty_score":0.258349,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.003495829172001487,"score_gpt":0.2244669642449901,"score_spread":0.2209711350729886,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}