{"data":{"id":"33aa16ae-1b23-4c7b-8811-a5a8e52e06c9","title":"Ellipsoid Control: A White-List Jailbreak Defense via Benign Latent Modeling","summary":"Representation engineering (RepE, a technique that modifies how an AI model processes information internally) defenses against jailbreaks (methods that trick LLMs into ignoring safety rules) have relied on block-list approaches that learn from known harmful examples, but this leaves gaps against new attacks. The paper proposes Ellipsoid Control, a white-list defense that instead protects the model's normal, harmless behavior by using test-time defense (constraints applied when the model runs) with projected gradient descent (a mathematical technique that adjusts the model's internal state while keeping it close to safe boundaries) to trigger refusals on harmful inputs while preserving the model's ability to answer legitimate questions.","solution":"The source explicitly describes Ellipsoid Control as the mitigation: it 'performs projected gradient descent that can elicit refusal on arbitrary inputs' while 'an anisotropic benign-geometry ellipsoid is fitted from abundant benign data to constrain the update to minimize distortion of the benign latent geometry.' This is deployed as a test-time defense mechanism that operates when the model is in use, using safe training examples to define boundaries that preserve normal model behavior during safety enforcement.","labels":["safety","research"],"sourceUrl":"http://ieeexplore.ieee.org/document/11579269","publishedAt":"2026-06-25T13:17:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["jailbreak"],"issueType":"research","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-06-25T13:17:25.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":"peer_reviewed","atlasIds":null}}