--- title: "Michael Backes — author profile and papers — Elamur Research" description: "Michael Backes, Helmholtz Center for Information Security: 5 papers on Elamur Research (2023–2026), h-index 65 — affiliations, topics…" canonical: "https://research.elamur.ai/free/en/authors/michael-backes/" --- [Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/michael-backes/) [home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / Michael Backes # Michael Backes Michael Backes has 5 papers in our library, in 2023–2026, most of them on [Language models & pretraining](https://md.research.elamur.ai/free/en/topics/language-models/), [Bias, fairness & safety](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/), [Efficient models & compression](https://md.research.elamur.ai/free/en/topics/efficient-models/); often with [Yang Zhang](https://md.research.elamur.ai/free/en/authors/yang-zhang/), [Yun Shen](https://md.research.elamur.ai/free/en/authors/yun-shen/), [Linyi Yang](https://md.research.elamur.ai/free/en/authors/linyi-yang/). 5 papers in our library · 2023–2026 [OpenAlex](https://openalex.org/A5004014878) · [ORCID](https://orcid.org/0000-0002-9326-6400) · [Wikidata](https://www.wikidata.org/wiki/Q55807313) · [**h-index 65**](https://openalex.org/authors/A5004014878) · [921 works](https://openalex.org/works?filter=author.id:A5004014878) · [16,605 citations](https://openalex.org/works?filter=author.id:A5004014878&sort=cited_by_count:desc) OpenAlex, 2026-10-14 [📄 5 works in our library](https://md.research.elamur.ai/free/en/authors/michael-backes/#papers) · [🔗 Cited 490 times in our library](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/) · [5 more in our library without a page yet](#also) · [⭐ Paper Stars ranking: #4553](https://md.research.elamur.ai/free/en/paper-stars/page/46/#star-4553) The profile is the library's match of the name; two people with one name are not always told apart. Elsewhere: [Google Scholar](https://scholar.google.com/citations?view_op=search_authors&mauthors=Michael+Backes) · [Semantic Scholar](https://www.semanticscholar.org/search?q=Michael+Backes) · [dblp](https://dblp.org/search?q=Michael+Backes) · [ACL Anthology](https://aclanthology.org/search/?q=Michael+Backes) ## Affiliations [🔬**Helmholtz Center for Information Security** Saarbrücken · Germany 2013–2026 · 369 papers*current*](https://md.research.elamur.ai/free/en/labs/helmholtz-center-for-information-security/) · [🎓**Saarland University** Saarbrücken · Germany 2002–2023 · 185 papers](https://md.research.elamur.ai/free/en/universities/saarland-university/) · [🔬**Max Planck Institute for Software Systems** Saarbrücken · Germany 2008–2018 · 102 papers](https://md.research.elamur.ai/free/en/labs/max-planck-institute-for-software-systems/) · [🔬**IBM Research - Zurich** Rüschlikon · Switzerland 2003–2006 · 46 papers](https://md.research.elamur.ai/free/en/labs/ibm-research-zurich/) · [🔬**Max Planck Society** Munich · Germany 2008–2018 · 13 papers](https://md.research.elamur.ai/free/en/labs/max-planck-society/) · [🎓**TU Dortmund University** Dortmund · Germany 2011–2014 · 3 papersEducation until 2012Employment 2011–2013 · Research Asssociate, Collaborative Research Center SFB 876](https://md.research.elamur.ai/free/en/universities/tu-dortmund-university/) · [🏢**IBM** Armonk · United States 2004–2005 · 3 papers](https://md.research.elamur.ai/free/en/companies/ibm/) · [🎓**University of Auckland** Auckland · New Zealand 2016–2018 · 2 papers](https://md.research.elamur.ai/free/en/universities/university-of-auckland/) · [🎓**ETH Zurich** Zurich · Switzerland 2006 · 2 papers](https://md.research.elamur.ai/free/en/universities/eth-zurich/) · [🎓**North-West University** Potchefstroom · South Africa 2017–2025 · 1 paperEmployment 2017–2025Employment since 2025](https://md.research.elamur.ai/free/en/universities/north-west-university/) From the bylines of their papers (OpenAlex, 2026-10-14), ORCID and Wikidata; institutions on papers are matched by machine. 12 more institutions on single bylines are not listed. ## Fields, topics and concepts Of its works in our library, with the number of works on each. 📚 Shelves 5 The field of science this work belongs to (OpenAlex fields).[Artificial Intelligence · 5 works](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · [Computer Science · 5 works](https://md.research.elamur.ai/free/en/shelves/computer-science/) · [Arts and Humanities · 4 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/) · [Language and Linguistics · 4 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/language-and-linguistics/) · [Computer Vision and Pattern Recognition · 1 work](https://md.research.elamur.ai/free/en/shelves/computer-science/computer-vision-and-pattern-recognition/) 🧭 Topics 3 Research subjects and languages the work is about.[Bias, fairness & safety · 4 works](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/) · [Language models & pretraining · 4 works](https://md.research.elamur.ai/free/en/topics/language-models/) · [Efficient models & compression · 1 work](https://md.research.elamur.ai/free/en/topics/efficient-models/) ## Works by year ### 2020s [**2026** 3 papers](https://md.research.elamur.ai/free/en/authors/michael-backes/year/2026/) · [**2025** 1 paper](https://md.research.elamur.ai/free/en/authors/michael-backes/year/2025/) · [**2023** 1 paper](https://md.research.elamur.ai/free/en/authors/michael-backes/year/2023/) ## Papers The most cited first (OpenAlex and our library). 1. **["Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models](https://md.research.elamur.ai/free/en/papers/shen-2023-anything-now-characterizing-evaluating-wild/)** *(2023 · 329 citations)* Jailbreak prompts are inputs designed to trick safety-aligned LLMs into producing content their vendors prohibit. 2. **[Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification](https://md.research.elamur.ai/free/en/papers/zhang-2025-breaking-agents-compromising-autonomous-llm/)** *(2025 · 29 citations)* Most safety studies of LLM agents look for overtly harmful behaviour, such as stealing data or moving money. 3. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/)** *(2026 · 3 citations)* Studies of jailbreaking usually measure attack success against the aligned model alone. Real deployments, however, often add content moderation filters on both the incoming prompt and the generated reply. This paper asks how well published jailbreaks hold up when such filters are included. The authors frame a… 4. **[Peering Behind the Shield: Guardrail Identification in Large Language Models](https://md.research.elamur.ai/free/en/papers/yang-2026-peering-behind-shield-guardrail-identification/)** *(2026 · 1 citation)* Conversational AI agents often place safety guardrails before or after their core LLM. Knowing which guardrail is in use lets an attacker treat it as a white-box target. Existing LLM fingerprinting methods transfer poorly to this task for four reasons: guardrails give near-binary verdicts, agents allow only black-box… 5. **[Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs](https://md.research.elamur.ai/free/en/papers/si-2026-pruning-unsafe-tickets-resource-efficient/)** *(2026)* Open aligned models such as Mistral and LLaVA can still produce harmful content. SFT and RLHF teach a model which answers to prefer, but they do not remove the internal pathways that generate unsafe text, and they need large datasets and heavy compute. The authors use the Lottery Ticket Hypothesis to describe the… ## All works 10 works of theirs in our library, the most cited first; 5 with a page here, the others link their original until we summarise them. 1. [**"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models arXiv:2308.03825**Xinyue Shen, Zeyuan Chen, Michael Backes, et al.*2023 · 329 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-anything-now-characterizing-evaluating-wild/) 2. **[Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification](https://md.research.elamur.ai/free/en/papers/zhang-2025-breaking-agents-compromising-autonomous-llm/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Boyang Zhang, Yicong Tan, Yun Shen, et al.*2025 · 29 citations* 3. **[PriCL: Creating a Precedent A Framework for Reasoning about Privacy Case Law ↗](https://arxiv.org/abs/1501.03353) arXiv:1501.03353 · no summary yet**Michael Backes et al.*2015 · 4 citations* 4. **[Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?](https://md.research.elamur.ai/free/en/papers/xin-2026-jailbreaking-attacks-vs-content-safety/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuan Xin, Dingfan Chen, Linyi Yang, et al.*2026 · 3 citations* 5. **[Peering Behind the Shield: Guardrail Identification in Large Language Models](https://md.research.elamur.ai/free/en/papers/yang-2026-peering-behind-shield-guardrail-identification/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Ziqing Yang, Yixin Wu, Rui Wen, et al.*2026 · 1 citation* 6. **[Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs](https://md.research.elamur.ai/free/en/papers/si-2026-pruning-unsafe-tickets-resource-efficient/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wai Man Si, Mingjie Li, Michael Backes, et al.*2026* 7. **[InferPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents ↗](https://aclanthology.org/2026.findings-acl.572/) Findings of the Association for Computational Linguistics: ACL 2026 · no summary yet**Yixin Wu et al.*2026* 8. **[The Challenge of Identifying the Origin of Black-Box Large Language Models ↗](https://aclanthology.org/2026.privatenlp-main.2/) Proceedings of the Seventh Workshop on Privacy in Natural Language Processing · no summary yet**Ziqing Yang et al.*2026* 9. **[The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Training ↗](https://aclanthology.org/2026.findings-acl.164/) Findings of the Association for Computational Linguistics: ACL 2026 · no summary yet**Rui Zhang et al.*2026* 10. **[DE-CLIP: Few-Shot Anomaly Detection via Difference-Guided Embedding Editing ↗](https://aclanthology.org/2026.acl-long.110/) Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) · no summary yet**Yage Zhang et al.*2026* ## Co-authors here 8 co-authors with a page, the most papers together first. - [Yang Zhang](https://md.research.elamur.ai/free/en/authors/yang-zhang/) ×4 - [Yun Shen](https://md.research.elamur.ai/free/en/authors/yun-shen/) ×2 - [Linyi Yang](https://md.research.elamur.ai/free/en/authors/linyi-yang/) - [Rui Wen](https://md.research.elamur.ai/free/en/authors/rui-wen/) - [Savvas Zannettou](https://md.research.elamur.ai/free/en/authors/savvas-zannettou/) - [Xiao Zhang](https://md.research.elamur.ai/free/en/authors/xiao-zhang/) - [Yixin Wu](https://md.research.elamur.ai/free/en/authors/yixin-wu/) - [Ziqing Yang](https://md.research.elamur.ai/free/en/authors/ziqing-yang/) ## Venues Where their works here were published, the most works first, with the editions of those that have a page. - [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/) ×2: [ACL 2026](https://md.research.elamur.ai/free/en/venues/acl/2026/) - [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/) ×2: [Findings of the Association for Computational Linguistics 2026](https://md.research.elamur.ai/free/en/venues/findings/2026/) ×2 - Findings of the Association for Computational Linguistics: ACL 2026 ×2 - [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/): [EMNLP 2025](https://md.research.elamur.ai/free/en/venues/emnlp/2025/) - Proceedings of the Seventh Workshop on Privacy in Natural Language Processing ## Cited by Papers of our library cite their works 490 times (of the 149,439 papers whose bibliographies we read); [109 citing papers with a page here →](https://md.research.elamur.ai/free/en/authors/michael-backes/cited-by/). Updated 1 November 2026