mlsanityData to 7 Oct 2026

Turning Logic Against Itself : Probing Model Defenses Through Contrastive Questions

arXiv 2501.01872 ↗First posted 3 Jan 2025cs.CLcited by 1

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Large language models, despite extensive alignment with human values and ethical principles, remain vulnerable to sophisticated jailbreak attacks that exploit their reasoning abilities. Existing safety measures often detect overt malicious intent but fail to address subtle, reasoning-driven vulnerabilities. In this work, we introduce POATE (Polar Opposite query generation, Adversarial Template construction, and Elaboration), a novel jailbreak technique that harnesses contrastive reasoning to provoke unethical responses. POATE crafts semantically opposing intents and integrates them with adversarial templates, steering models toward harmful outputs with remarkable subtlety. We conduct extensive evaluation across six diverse language model families of varying parameter sizes to demonstrate the robustness of the attack, achieving significantly higher attack success rates (~44%) compared to existing methods. To counter this, we propose Intent-Aware CoT and Reverse Thinking CoT, which decompose queries to detect malicious intent and reason in reverse to evaluate and reject harmful responses. These methods enhance reasoning robustness and strengthen the model's defense against adversarial exploits.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 40 of its 73 references that are in the map. First posted on arXiv 3 Jan 2025.

Builds on

40 of 73 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs12 Jan

Other references · 39

  1. 2024The Llama 3 Herd of Modelscited by 14,192
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
  4. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  5. 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
  6. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  7. 2019The Curious Case of Neural Text Degenerationcited by 2,881
  8. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,928
  9. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
  10. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  11. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  12. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
27 more
  1. 2018Hierarchical Neural Story Generationcited by 1,182
  2. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
  3. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
  4. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
  5. 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
  6. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
  7. 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
  8. 2023Detecting Language Model Attacks with Perplexitycited by 411
  9. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
  10. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
  11. 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
  12. 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
  13. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
  14. 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
  15. 2022Are Large Pre-Trained Language Models Leaking Your Personal Information?cited by 195
  16. 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
  17. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
  18. 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
  19. 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 156
  20. 2024LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yetcited by 145
  21. 2023Element-aware Summarization with Large Language Models: Expert-aligned Evaluation and Chain-of-Thought Methodcited by 76
  22. 2024Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Cluescited by 57
  23. 2024Safety Arithmetic: A Framework for Test-time Safety Alignment of Language Models by Steering Parameters and Activationscited by 32
  24. 2024Reverse Thinking Makes LLMs Stronger Reasonerscited by 29
  25. 2024How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queriescited by 26
  26. 2024Sowing the Wind, Reaping the Whirlwind: The Impact of Editing Language Modelscited by 20
  27. 2024Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attackscited by 17

Built on by

Cited by year

Citing papers per year: 2025: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2024Reasoning as a Weapon: Adaptive Dual-Path Jailbreak Attack on Large Language Models
  2. 2025ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning
  3. 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models
  4. 2026On the Efficiency-Safety Dilemma in Large Reasoning Models
  5. 2026Reasoning Hijacking: The Fragility of Reasoning Alignment in Large Language Models
  6. 2025EASE: Practical and Efficient Safety Alignment for Small Language Models
  7. 2025Adversarial Reasoning at Jailbreaking Time
  8. 2025Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models