Xiang Li
Author directoryOther people with similar names: Xiang Li (East China Normal University), Xiang Li, Xiang Li, Xiang Li, Xiang Li, Xiang Li (Qilu), Xiang Li, Xiang Li, Xiang Li (East China Normal University), Xiang Li, Xiang Li, Xiang Li, Xiang Li, Xiang Li (Peking), Xiang Li (Massachusetts), Xiang Li, Xiang Li, Xiang Li (Beijing University of Posts and Telecommunications), Xiang Li (Peking), Xiang Li (North China Electric Power University), Xiang Li, Xiang Li, Xiang Li, Xiang Li (Beihang), Xiang Lorraine Li
Unverified author pages with similar names: Xiang Li
2026
Adversarial Prompt Distillation: Efficient Jailbreak Attacks from Large to Small Language Models
Xiang Li | Chong Zhang | Jia Wang | Fangyu Wu | Yushi Li | Xiaobo Jin
Findings of the Association for Computational Linguistics: IJCNLP-AACL 2026
Xiang Li | Chong Zhang | Jia Wang | Fangyu Wu | Yushi Li | Xiaobo Jin
Findings of the Association for Computational Linguistics: IJCNLP-AACL 2026
Current jailbreak attacks on large language models (LLMs) predominantly rely on LLMs themselves to generate adversarial prompts, creating a critical efficiency bottleneck: each attack requires substantial computational resources and API queries, limiting scalability and practical deployment. To overcome this limitation, we propose Adversarial Prompt Distillation (APD), a novel framework that transfers jailbreaking capabilities from LLMs to small language models (SLMs) for efficient, low-resource attacks. APD integrates three key components: (1) masked adversarial knowledge pre-training via LoRA fine-tuning, (2) dynamic temperature-controlled knowledge distillation to bridge architectural gaps, and (3) reinforcement learning-based template optimization for adaptive refinement. Extensive experiments across 12 models show that APD achieves state-of-the-art attack success rates (e.g., 96.4% ASRk on GPT-4) while dramatically improving efficiency—generating prompts 3.7× faster with 11.3× fewer parameters than teacher models. Our work establishes the first practical framework for lightweight jailbreak attacks, exposes new vulnerabilities in LLM defenses, and provides a scalable testbed for advancing AI safety research. Our code is available at: https://github.com/lxgem/Efficient_and_Stealthy_Jailbreak_Attacks_via_Adversarial_Prompt.