Papers by Kangyi Ding
TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing jailbreak defense paradigms rely on static detection of prompts, outputs, or internal states . hidden states in critical layers during decoding carry stronger and more stable risk signals . |
| Approach: | They propose a decoding-time defense framework that aggregates hidden-state trajectories via a sliding window to quantify risk in real time. |
| Outcome: | The proposed framework achieves an average defense rate of 95% in 12 jailbreak attacks and open-source LLMs. |