@inproceedings{su-etal-2026-persona, title = "The Persona-Switch Jailbreak Backdoor in {LLM}s: From Payload Retrieval to Trigger-Gated Persona-State Selection", author = "Su, Yanghao and Zhou, Wenbo and Zhang, Tianwei and Qiu, Han and Zhang, Weiming and Yu, Nenghai and Zhang, Jie", editor = "Lee, Hung-Yi and Dev, Sunipa and Li, Jessy and Elliott, Desmond", booktitle = "Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing", month = oct, year = "2026", address = "Budapest, Hungary", publisher = "Association for Computational Linguistics", url = "https://aclanthology.org/2026.emnlp-main.1553/", pages = "35434--35449", ISBN = "979-8-89176-459-0" }