arXiv Computer Vision
Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application
Read the original on arXiv Computer Vision →The Flow has not summarised this story yet — read it at arXiv Computer Vision.
Related stories
arXiv Computation and Language
Sep 17
Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Models
The paper introduces JMLLM, a multimodal jailbreaking approach that targets text, visual, and auditory inputs to expose vulnerabilities in large language models. It also presents TriJail, a new dataset containing jailbreak prompts across all three modalities. Experiments on TriJail and AdvBench show higher attack success rates and lower time overhead compared to existing methods.
arXiv Machine Learning
Jun 2
VERA: Variational Inference Framework for Jailbreaking Large Language Models
arXiv:2506. 22666v3 Announce Type: replace-cross Abstract: The rise of API-only access to state-of-the-art LLMs highlights the need for effective black-box jailbreak methods to identify model vulnerabilities in real-world settings.
arXiv AI
Jun 2
Jailbreaking Multimodal Large Language Models using Multi-Clip Video
arXiv:2606. 02111v1 Announce Type: cross Abstract: As multimodal large language models (MLLMs) have advanced to process video inputs, concerns have emerged about their potential for malicious misuse.
arXiv AI
Jul 23
JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models
arXiv:2607. 19424v1 Announce Type: cross Abstract: The assessment of jailbreak attacks against large language models currently suffers from inconsistent evaluation criteria and methods, leading to unreliable estimates of attack success rates.
arXiv AI
3d ago
SceneJail: Exploiting Video Scenario Context to Jailbreak Multimodal LLMs
arXiv:2609.38899v1 Announce Type: cross Abstract: Video Multimodal Large Language Models (Video-MLLMs) support reasoning over video inputs, yet remain vulnerable to jailbreak attacks that elicit poli...
arXiv AI
Sep 7
AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks
AlcaTRAz is a prompt‑level defense that uses rule trees to insert controlled character‑level perturbations into input text, disrupting jailbreak attacks without modifying or retraining the target LLM. It operates solely on the input, making it suitable for black‑box deployments, and was evaluated on 33 open‑weight models and 22 jailbreak types, outperforming three baseline defenses in 73.4 % of model‑attack combinations. While it significantly reduces high‑severity jailbreak success, it does not eliminate it and is intended as one layer of a broader defense strategy.