Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models
On the map: LLM safety and security → Jailbreaking
Abstract (arXiv)
Small language models (SLMs) have become increasingly prominent in the deployment on edge devices due to their high efficiency and low computational cost. While researchers continue to advance the capabilities of SLMs through innovative training strategies and model compression techniques, the security risks of SLMs have received considerably less attention compared to large language models (LLMs).To fill this gap, we provide a comprehensive empirical study to evaluate the security performance of 13 state-of-the-art SLMs under various jailbreak attacks. Our experiments demonstrate that most SLMs are quite susceptible to existing jailbreak attacks, while some of them are even vulnerable to direct harmful prompts.To address the safety concerns, we evaluate several representative defense methods and demonstrate their effectiveness in enhancing the security of SLMs. We further analyze the potential security degradation caused by different SLM techniques including architecture compression, quantization, knowledge distillation, and so on. We expect that our research can highlight the security challenges of SLMs and provide valuable insights to future work in developing more robust and secure SLMs.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Jailbreaking, one of 12 directions in LLM safety and security. Builds on 40 of its 52 references that are in the map. First posted on arXiv 27 Feb 2025.
Builds on
40 of 52 references.
Closest ancestors · 14
Same direction, newest first
- 2025Layer-Level Self-Exposure and Patch: Affirmative Token Mitigation for Jailbreak Attack Defense5 Jan
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Survey5 Jul
- 2024Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks30 May
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks2 Apr
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction28 Feb
- 2024PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails24 Feb
- 2024A StrongREJECT for Empty Jailbreaks15 Feb
- 2024Attacking Large Language Models with Projected Gradient Descent14 Feb
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding14 Feb
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs12 Jan
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreaker6 Nov
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation10 Oct
2 more
Other references · 26
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2022FlashAttention: Fast and Memory-Efficient Exact Attention with IO-Awarenesscited by 3,673
- 2023Qwen Technical Reportcited by 3,344
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,919
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023AWQ: Activation-aware Weight Quantization for LLM Compression and Accelerationcited by 1,298
14 more
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2024MiniCPM: Unveiling the Potential of Small Language Models with Scalable Training Strategiescited by 723
- 2024TinyLlama: An Open-Source Small Language Modelcited by 618
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 398
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 278
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 216
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 191
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 163
- 2023From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacycited by 143
- 2023MobileVLM : A Fast, Strong and Open Vision Language Assistant for Mobile Devicescited by 122
- 2024Small Language Models: Survey, Measurements, and Insightscited by 112
- 2024MobiLlama: Towards Accurate and Lightweight Fully Transparent GPTcited by 34
- 2024A Survey of Small Language Modelscited by 31
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation
- 2026GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models
- 2024The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense
- 2025Evolving Security in LLMs: A Study of Jailbreak Attacks and Defenses
- 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem
- 2026SoK: Robustness in Large Language Models against Jailbreak Attacks
- 2025Do Methods to Jailbreak and Defend LLMs Generalize Across Languages?