arXiv AI By Boyuan Chen, Minseok Kim, Sohaila Abdulsattar, Minghao Shao, Siddharth Garg, Ramesh Karri, Muhammad Shafique

Where Does the Audio Jailbreak Live? A Controlled Frequency-Depth Audit of AdvWave-P on Qwen2-Audio

Read the original on arXiv AI →

The study audits the frequency and decoder‑depth claims of the audio jailbreak AdvWave‑P on the Qwen2‑Audio model. Using a protocol that masks frequency components in the short‑time Fourier transform domain, the authors evaluate attack success across 520 prompts, finding that 76.7% of adversarial inputs are labeled as jailbreaks. Detailed analyses show that masking specific frequency bands can sharply reduce attack success, with finer 16‑band partitions revealing that a narrow 7520‑7960 Hz band is critical, while global rescaling and re‑optimization experiments further illuminate the role of frequency partitioning and energy distribution in jailbreak effectiveness.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
Sep 10

Clean Accuracy Does Not Guarantee Provenance Robustness: A Prospective Codec-Stress Evaluation of Audio Attribution

The study evaluates audio provenance attribution systems, showing that high clean‑benchmark accuracy does not translate to robustness after codec compression. Using a prospectively registered protocol, the authors measured closed‑set attribution performance on two corpora after single‑stage codec transport, finding significant degradation—up to 70.3 Macro‑F1 points for WavLM‑Base+ and 61.0 for W2V2‑BERT 2.0—depending on codec settings and representation. The results demonstrate that clean accuracy alone cannot guarantee deployment robustness across different codecs and representations.

By Gang Shi (Independent Researcher)
arXiv AI
Oct 12

Does Location Matter? A Black-Box Causal Audit Reveals Model-Dependent Audio Grounding in LALM Hallucination

The paper investigates how large audio‑language models (LALMs) hallucinate objects by affirming sounds that are not present. Using a black‑box causal test, the authors isolate and remove the claimed evidence region via spectral gating and compare the effect against a random‑window control across a 2×2×2 grid on three LALMs. The study finds that localization of evidence improves detection over random removal, that raw detection values are model‑dependent, and that contrastive decoding combining blank and language‑prior contrasts can significantly boost accuracy, but a unified causal‑grounding profile does not transfer between models.

By Mohammad Khalooei, Mohammad Sabokrou
Hugging Face Trending Papers
Oct 9

Does Location Matter? A Black-Box Causal Audit Reveals Model-Dependent Audio Grounding in LALM Hallucination

The paper investigates how large audio‑language models (LALMs) hallucinate objects by affirming sounds that are not present. Using a black‑box causal test, the authors isolate evidence regions via CLAP similarity, remove them with spectral gating, and compare against random windows across a 2×2×2 grid on three LALMs. The study finds that evidence localization improves detection over random removal, that raw detection scores are model‑dependent, and that a contrastive decoding strategy combining blank and language‑prior cues boosts Qwen2‑Audio accuracy from 57.1 % to 71.9 %, outperforming Audio‑Aware Decoding alone.