{"id":"https://openalex.org/W7160955463","doi":"https://doi.org/10.48550/arxiv.2605.10764","title":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","display_name":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160955463","doi":"https://doi.org/10.48550/arxiv.2605.10764"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2605.10764","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.10764","pdf_url":"https://arxiv.org/pdf/2605.10764","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2605.10764","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121545613","display_name":"Mengqi He","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"He, Mengqi","raw_affiliation_strings":["Australian National University , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian National University , ACT , Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121599203","display_name":"Xinyu Tian","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tian, Xinyu","raw_affiliation_strings":["Australian National University , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian National University , ACT , Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089835611","display_name":"Xin Shen","orcid":"https://orcid.org/0009-0007-8458-0397","observed_orcids":["https://orcid.org/0009-0007-8458-0397"]},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shen, Xin","raw_affiliation_strings":["The University Of Queensland , Brisbane , Queensland , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University Of Queensland , Brisbane , Queensland , Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101292475","display_name":"Shu Zou","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zou, Shu","raw_affiliation_strings":["Australian National University , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian National University , ACT , Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086057132","display_name":"Jinhong Ni","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ni, Jinhong","raw_affiliation_strings":["Australian National University , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian National University , ACT , Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056835845","display_name":"Zhaoyuan Yang","orcid":"https://orcid.org/0000-0003-0011-0093","observed_orcids":["https://orcid.org/0000-0003-0011-0093"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Zhaoyuan","raw_affiliation_strings":["Waymo , Mountain View , California , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waymo , Mountain View , California , USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135985959","display_name":"Weikang Li","orcid":"https://orcid.org/0009-0006-3080-7237","observed_orcids":["https://orcid.org/0009-0006-3080-7237"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li, Weikang","raw_affiliation_strings":["Peking University , Beijing , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University , Beijing , China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135950068","display_name":"Xuesong Li","orcid":"https://orcid.org/0009-0005-1246-9898","observed_orcids":["https://orcid.org/0009-0005-1246-9898"]},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Li, Xuesong","raw_affiliation_strings":["CSIRO , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO , ACT , Australia","institution_ids":["https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135990625","display_name":"Jing Zhang","orcid":"https://orcid.org/0000-0001-6595-7661","observed_orcids":["https://orcid.org/0000-0001-6595-7661","https://orcid.org/0000-0002-1678-5688"]},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhang, Jing","raw_affiliation_strings":["Australian National University , ACT , Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian National University , ACT , Australia","institution_ids":["https://openalex.org/I118347636"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/jailbreak-attacks","display_name":"jailbreak attacks","score":0.6639999747276306},{"id":"https://openalex.org/keywords/vision-language-models","display_name":"vision-language models","score":0.843999981880188},{"id":"https://openalex.org/keywords/untargeted-attacks","display_name":"untargeted attacks","score":0.7960000038146973},{"id":"https://openalex.org/keywords/entropy-maximization","display_name":"entropy maximization","score":0.8610000014305115},{"id":"https://openalex.org/keywords/refusal-behavior","display_name":"refusal behavior","score":0.718999981880188},{"id":"https://openalex.org/keywords/cross-model-transferability","display_name":"cross-model transfer","score":0.9049999713897705},{"id":"https://openalex.org/keywords/white-box-attacks","display_name":"white-box attacks","score":0.6840000152587891},{"id":"https://openalex.org/keywords/autoregressive-decoding","display_name":"autoregressive decoding","score":0.7110000252723694}],"concepts":[{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.6172000169754028},{"id":"https://openalex.org/C2776330181","wikidata":"https://www.wikidata.org/wiki/Q18358244","display_name":"Maximization","level":2,"score":0.6055999994277954},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5302000045776367},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3813000023365021},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.37529999017715454},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C127233936","wikidata":"https://www.wikidata.org/wiki/Q1417473","display_name":"Entropy maximization","level":3,"score":0.36239999532699585},{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.35339999198913574},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32260000705718994},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C171752962","wikidata":"https://www.wikidata.org/wiki/Q255166","display_name":"Kullback\u2013Leibler divergence","level":2,"score":0.30880001187324524},{"id":"https://openalex.org/C101721835","wikidata":"https://www.wikidata.org/wiki/Q813908","display_name":"Conditional entropy","level":3,"score":0.30550000071525574},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2939000129699707},{"id":"https://openalex.org/C2985793214","wikidata":"https://www.wikidata.org/wiki/Q3274096","display_name":"Utility maximization","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.27000001072883606},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25600001215934753}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2605.10764","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.10764","pdf_url":"https://arxiv.org/pdf/2605.10764","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2605.10764","doi":"https://doi.org/10.48550/arxiv.2605.10764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2605.10764","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.10764","pdf_url":"https://arxiv.org/pdf/2605.10764","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7160955463.pdf","grobid_xml":"https://content.openalex.org/works/W7160955463.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W4319300575","https://openalex.org/W4327810158","https://openalex.org/W4380353722","https://openalex.org/W4385374425","https://openalex.org/W4386076145","https://openalex.org/W4389713766","https://openalex.org/W4393157467","https://openalex.org/W4394007075","https://openalex.org/W4402671718","https://openalex.org/W4403920472","https://openalex.org/W4404330874","https://openalex.org/W4404352832","https://openalex.org/W4407794264","https://openalex.org/W4409348010","https://openalex.org/W4415981878","https://openalex.org/W4416034724","https://openalex.org/W4416036809","https://openalex.org/W4416830346","https://openalex.org/W4417100262","https://openalex.org/W7077911270","https://openalex.org/W7083445780","https://openalex.org/W7117301373","https://openalex.org/W7117571984","https://openalex.org/W7140609668"],"related_works":["https://openalex.org/W7127412319","https://openalex.org/W4405467128","https://openalex.org/W4415316409","https://openalex.org/W7213399645","https://openalex.org/W4414854691","https://openalex.org/W4417100262","https://openalex.org/W7204832475","https://openalex.org/W4412944854","https://openalex.org/W4416034649","https://openalex.org/W4417539267"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"show":[2],"that":[3,49,87,136],"gradient-based":[4],"universal":[5],"image":[6],"jailbreaks":[7],"on":[8,20],"vision-language":[9],"models":[10],"(VLMs)":[11],"exhibit":[12],"little":[13],"or":[14,42],"no":[15],"cross-model":[16],"transferability,":[17,125],"casting":[18],"doubt":[19],"the":[21,68,100,137],"feasibility":[22],"of":[23],"transferable":[24],"multimodal":[25],"jailbreaks.":[26],"We":[27],"revisit":[28],"this":[29,75],"conclusion":[30],"under":[31,129],"a":[32,39,84],"strictly":[33],"untargeted":[34],"threat":[35],"model":[36],"without":[37],"enforcing":[38],"fixed":[40],"prefix":[41],"response":[43],"pattern.":[44],"Our":[45,132],"preliminary":[46],"experiment":[47],"reveals":[48],"refusal":[50,96],"behavior":[51],"concentrates":[52],"at":[53,90],"high-entropy":[54],"tokens":[55,61,93],"during":[56],"autoregressive":[57],"decoding,":[58],"and":[59,111,122],"non-refusal":[60],"already":[62],"carry":[63],"substantial":[64],"probability":[65],"mass":[66],"among":[67],"top-ranked":[69],"candidates":[70],"before":[71],"attack.":[72],"Motivated":[73],"by":[74],"finding,":[76],"we":[77],"propose":[78],"Untargeted":[79],"Jailbreak":[80],"via":[81],"Entropy":[82],"Maximization(UJEM)-KL,":[83],"lightweight":[85],"attack":[86,119],"maximizes":[88],"entropy":[89],"these":[91],"decision":[92],"to":[94,104],"flip":[95],"outcomes,":[97],"while":[98,126],"stabilizing":[99],"remaining":[101,127],"low-entropy":[102],"positions":[103],"preserve":[105],"output":[106],"quality.":[107],"Across":[108],"three":[109],"VLMs":[110],"two":[112],"safety":[113],"benchmarks,":[114],"UJEM-KL":[115],"achieves":[116],"competitive":[117],"white-box":[118],"success":[120],"rates":[121],"consistently":[123],"improves":[124],"effective":[128],"representative":[130],"defenses.":[131],"experimental":[133],"results":[134],"indicate":[135],"limited":[138],"transferability":[139],"primarily":[140],"stems":[141],"from":[142],"overly":[143],"constrained":[144],"optimization":[145],"objectives.":[146]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-05-13T00:00:00"}