Defensive Sufficiency in a Stackelberg Model of AI Security

arXiv:2610.09892 · cs.CR, cs.AI · Submitted 2026-10-07 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-10-07

Updated: 2026-10-08

Comments: 27 pages, 3 figures, 1 table

Code: https://github.com/rajlakshmichavan/garak-in-lean

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Verification — 6× in this paper · explained in 2 episodes
• Alignment — 4× in this paper · explained in 1 episode
• Fine-Tuning — 3× in this paper · explained in 5 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Benchmark — 2× in this paper · explained in 2 episodes
• Generalization — 2× in this paper · explained in 13 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Adversarial Prompting — 1× in this paper · explained in 1 episode
• Adversarial Training — 1× in this paper · explained in 1 episode
• Agentic AI — 1× in this paper · explained in 1 episode
• Benchmarking — 1× in this paper · explained in 3 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes

Sources

• garak: A Framework for Security Probing Large Language Models
• Toward a Dynamic Stackelberg Game-Theoretic Framework for Agentic AI Defense Against LLM Jailbreaking
• Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
• PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI System
• Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs