Search papers, labs, and topics across Lattice.
This paper introduces SMTrap, a novel approach to launching cost-effective denial-of-service (DoS) attacks against large reasoning models (LRMs) by utilizing Satisfiability Modulo Theories (SMT) conflict counts as a guiding signal for generating constraint satisfaction problems (CSPs). Unlike traditional methods that rely on model feedback, SMTrap operates without repeated queries or the need for a dedicated attack model, making it significantly more efficient. Evaluations show that SMTrap achieves DoS effects that are multiple times stronger than existing techniques across seven leading models, highlighting its potential impact on the security landscape of AI systems.
Leveraging SMT conflict counts, SMTrap achieves unprecedented denial-of-service effects against large reasoning models without the need for model feedback or GPU resources.
Existing LRM-DoS methods rely heavily on model feedback to synthesize attack queries, requiring either repeated queries to the target model or training a dedicated attack model. These expensive operations severely weaken attack leverage. In this paper, we propose \emph{search amplification}, a novel, model-feedback-free LRM-DoS paradigm. It employs the conflict count derived from an Satisfiability Modulo Theories (SMT) solver as a low-cost external signal to guide the synthesis of inference-heavy Constraint Satisfaction Problem (CSP) instances. Our key observation is that LRMs depend on trial-and-backtracking search when solving CSPs, where higher SMT conflict counts on a given CSP instance positively correlate with more extensive LRM backtracking search and substantially longer output trajectories. Building on this finding, we propose \textsc{SMTrap}, a lightweight, CPU-only framework. Guided by SMT conflict counts, \textsc{SMTrap} generates inference-heavy CSP queries without model queries, attack-model training, or GPU computation. Evaluations across seven frontier models demonstrate the state-of-the-art LRM-DoS capability of \textsc{SMTrap}, producing DoS effects multiple times stronger than existing baselines. To mitigate the threat of \textsc{SMTrap}, we demonstrate a tool-based mitigation that significantly cuts token usage.
