activity
20242026
most citedMulti-Turn Context Jailbreak Attack on Large Language Models From First Principles

2 citations · 2 across the 13 of their papers we have counts for

collaborators
Showing 2026Show all

8 papers · 1 filter

cs.AI2026

Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models

Dongdong Yang, Deyue Zhang, Zhao Liu +5

Text-to-Image (T2I) generative models have achieved remarkable progress in synthesizing high-quality visual content, yet they remain vulnerable to adversarial misuse, particularly…

cs.AI2026

ElephantAgent: Contextual State Continuity in Agentic Systems

Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4

Agentic systems enhance their capabilities by invoking external tools and maintaining persistent memory. However, these external dependencies introduce novel attack surfaces. Recen…

cs.CR2026

DMN: A Compositional Framework for Jailbreaking Multimodal LLMs with Multi-Image Inputs

Wenzhuo Xu, Zhipeng Wei, Zonghao Ying +4

Multimodal Large Language Models (MLLMs) are vulnerable to jailbreak attacks, which can elicit harmful responses from MLLMs. Many MLLMs support multi-image inputs, inadvertently in…

cs.CR2026

SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety

Zhe Liu, Zonghao Ying, Wenxin Zhang +5

Recent advances in foundation models have transformed LLMs from passive conversational systems into autonomous agents capable of reasoning and tool execution. While these capabilit…

cs.CR2026

Reasoning-Oriented Programming: Chaining Semantic Gadgets to Jailbreak Large Vision Language Models

Quanchen Zou, Moyang Chen, Zonghao Ying +6

Large Vision-Language Models (LVLMs) undergo safety alignment to suppress harmful content. However, current defenses predominantly target explicit malicious patterns in the input r…

cs.CR2026

Two Frames Matter: A Temporal Attack for Text-to-Video Model Jailbreaking

Moyang Chen, Zonghao Ying, Wenzhuo Xu +4

Recent text-to-video (T2V) models can synthesize complex videos from lightweight natural language prompts, raising urgent concerns about safety alignment in the event of misuse in…

cs.CV2026

DIVER: Dynamic Iterative Visual Evidence Reasoning for Multimodal Fake News Detection

Weilin Zhou, Zonghao Ying, Chunlei Meng +6

Multimodal fake news detection is crucial for mitigating adversarial misinformation. Existing methods, relying on static fusion or LLMs, face computational redundancy and hallucina…

cs.LG2026

Robust Privacy: Inference-Stage Privacy through Certified Robustness

Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4

An adversary observing a model's released prediction can infer sensitive attributes of the queried input, or even reconstruct representatives of the model's training data. The infe…