Demo Data from VLDB 2026 / reviewers in the wild / expert
Yongwoo Song
dblp:408/7858
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 77% Language models and text generation · 23% |
Topics — the 2 heaviest of 2, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › adversarial machine learning
jailbreak attack |
0.9 | 1 | 2025 | What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs · ACL (1) 2025 |
Natural language and speech › Language models and text generation › language modeling › long-context language modeling › context utilization
long-context modeling |
0.3 | 1 | 2025 | What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs · ACL (1) 2025 |
Methods — techniques the papers use, named apart from their topics
many-shot jailbreaking · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMsabstractWe investigate long-context vulnerabilities in Large Language Models (LLMs) through Many-Shot Jailbreaking (MSJ).Our experiments utilize context length of up to 128K tokens.Through comprehensive analysis with various many-shot attack settings with different instruction styles, shot density, topic, and format, we reveal that context length is the primary factor determining attack effectiveness.Critically, we find that successful attacks do not require carefully crafted harmful content.Even repetitive shots or random dummy text can circumvent model safety measures, suggesting fundamental limitations in long-context processing capabilities of LLMs.The safety behavior of well-aligned models becomes increasingly inconsistent with longer contexts.These findings highlight significant safety gaps in context expansion capabilities of LLMs, emphasizing the need for new safety mechanisms. Sangyeop Kim 0001, Yongwoo Song, Kimin Lee |
ACL (1) | 3 |