D. Obidov, H. Yu, X. Guo, and K. Yang, “Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs”, AAAI, vol. 40, no. 42, pp. 35742–35750, Mar. 2026.