Other people with similar names: Xiang Li (East China Normal University), Xiang Li, Xiang Li, Xiang Li, Xiang Li, Xiang Li (Qilu), Xiang Li, Xiang Li, Xiang Li (East China Normal University), Xiang Li, Xiang Li, Xiang Li, Xiang Li, Xiang Li (Peking), Xiang Li (Massachusetts), Xiang Li, Xiang Li, Xiang Li (Beijing University of Posts and Telecommunications), Xiang Li (Peking), Xiang Li (North China Electric Power University), Xiang Li, Xiang Li, Xiang Li, Xiang Li (Beihang), Xiang Lorraine Li

Unverified author pages with similar names: Xiang Li


2026

Current jailbreak attacks on large language models (LLMs) predominantly rely on LLMs themselves to generate adversarial prompts, creating a critical efficiency bottleneck: each attack requires substantial computational resources and API queries, limiting scalability and practical deployment. To overcome this limitation, we propose Adversarial Prompt Distillation (APD), a novel framework that transfers jailbreaking capabilities from LLMs to small language models (SLMs) for efficient, low-resource attacks. APD integrates three key components: (1) masked adversarial knowledge pre-training via LoRA fine-tuning, (2) dynamic temperature-controlled knowledge distillation to bridge architectural gaps, and (3) reinforcement learning-based template optimization for adaptive refinement. Extensive experiments across 12 models show that APD achieves state-of-the-art attack success rates (e.g., 96.4% ASRk on GPT-4) while dramatically improving efficiency—generating prompts 3.7× faster with 11.3× fewer parameters than teacher models. Our work establishes the first practical framework for lightweight jailbreak attacks, exposes new vulnerabilities in LLM defenses, and provides a scalable testbed for advancing AI safety research. Our code is available at: https://github.com/lxgem/Efficient_and_Stealthy_Jailbreak_Attacks_via_Adversarial_Prompt.