{"id":"https://openalex.org/W7204659245","doi":"https://doi.org/10.2139/ssrn.7371730","title":"JailAR: Evaluating the Jailbreak Vulnerability of Visual Autoregressive Text-to-Image Models","display_name":"JailAR: Evaluating the Jailbreak Vulnerability of Visual Autoregressive Text-to-Image Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7204659245","doi":"https://doi.org/10.2139/ssrn.7371730"},"language":"en","primary_location":{"id":"doi:10.2139/ssrn.7371730","doi":"https://doi.org/10.2139/ssrn.7371730","is_oa":true,"landing_page_url":"https://doi.org/10.2139/ssrn.7371730","pdf_url":null,"source":{"id":"https://openalex.org/S4210172589","display_name":"SSRN Electronic Journal","issn_l":"1556-5068","issn":["1556-5068"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1318003438","host_organization_name":"RELX Group (Netherlands)","host_organization_lineage":["https://openalex.org/I1318003438"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"volume":null,"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.2139/ssrn.7371730","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148609301","display_name":"Jiahui Wang","orcid":"https://orcid.org/0009-0009-5614-0399","observed_orcids":["https://orcid.org/0009-0009-5614-0399"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiahui Wang","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0009-5614-0399","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148592676","display_name":"Xinhao Zhong","orcid":"https://orcid.org/0009-0008-3950-8609","observed_orcids":["https://orcid.org/0009-0008-3950-8609"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xinhao Zhong","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0008-3950-8609","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148597331","display_name":"Yi Sun","orcid":"https://orcid.org/0009-0009-9927-7387","observed_orcids":["https://orcid.org/0009-0009-9927-7387"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi Sun","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0009-9927-7387","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148595640","display_name":"Zhiqi Zhang","orcid":"https://orcid.org/0009-0000-7294-7779","observed_orcids":["https://orcid.org/0009-0000-7294-7779"]},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiqi Zhang","raw_affiliation_strings":["Jilin University, China, China"],"raw_orcid":"https://orcid.org/0009-0000-7294-7779","affiliations":[{"raw_affiliation_string":"Jilin University, China, China","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109681315","display_name":"Hongyao Yu","orcid":"https://orcid.org/0009-0009-8525-1565","observed_orcids":["https://orcid.org/0009-0009-8525-1565"]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyao Yu","raw_affiliation_strings":["Tsinghua University - Tsinghua Shenzhen International Graduate School, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0009-8525-1565","affiliations":[{"raw_affiliation_string":"Tsinghua University - Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136539980","display_name":"Yuxia Qiao","orcid":"https://orcid.org/0009-0002-6091-4667","observed_orcids":["https://orcid.org/0009-0002-6091-4667"]},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxia Qiao","raw_affiliation_strings":["South China University of Technology, Wushan, Guangzhou, AR 510640, China"],"raw_orcid":"https://orcid.org/0009-0002-6091-4667","affiliations":[{"raw_affiliation_string":"South China University of Technology, Wushan, Guangzhou, AR 510640, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100427338","display_name":"Bin Chen","orcid":"https://orcid.org/0000-0002-4798-230X","observed_orcids":["https://orcid.org/0000-0002-4798-230X"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Bin Chen","raw_affiliation_strings":["Harbin Industry University"],"raw_orcid":"https://orcid.org/0000-0002-4798-230X","affiliations":[{"raw_affiliation_string":"Harbin Industry University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X","observed_orcids":["https://orcid.org/0000-0002-8639-982X"]},"institutions":[{"id":"https://openalex.org/I4405263052","display_name":"Tsinghua Shenzhen International Graduate School","ror":"https://ror.org/01vceef04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shutao Xia","raw_affiliation_strings":["Tsinghua University - Tsinghua Shenzhen International Graduate School, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8639-982X","affiliations":[{"raw_affiliation_string":"Tsinghua University - Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4405263052","https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100427338"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/jailbreak-attacks","display_name":"jailbreak attacks","score":0.9589999914169312},{"id":"https://openalex.org/keywords/text-to-image-generation","display_name":"text-to-image generation","score":0.996999979019165},{"id":"https://openalex.org/keywords/diffusion-models","display_name":"diffusion models","score":0.6370000243186951},{"id":"https://openalex.org/keywords/security-vulnerabilities","display_name":"security vulnerabilities","score":0.5740000009536743},{"id":"https://openalex.org/keywords/safety-filters","display_name":"safety filters","score":0.5130000114440918},{"id":"https://openalex.org/keywords/concept-erasure","display_name":"concept erasure","score":0.8849999904632568},{"id":"https://openalex.org/keywords/defense-mechanisms","display_name":"defense mechanisms","score":0.5709999799728394},{"id":"https://openalex.org/keywords/failure-modes","display_name":"failure modes","score":0.41600000858306885}],"concepts":[{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.8064000010490417},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7226999998092651},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.644599974155426},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5939000248908997},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4072999954223633},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3723999857902527},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.37070000171661377},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3418000042438507},{"id":"https://openalex.org/C194657046","wikidata":"https://www.wikidata.org/wiki/Q7394685","display_name":"STAR model","level":4,"score":0.3416000008583069},{"id":"https://openalex.org/C30795276","wikidata":"https://www.wikidata.org/wiki/Q7389877","display_name":"SETAR","level":5,"score":0.3287000060081482},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27570000290870667}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.2139/ssrn.7371730","doi":"https://doi.org/10.2139/ssrn.7371730","is_oa":true,"landing_page_url":"https://doi.org/10.2139/ssrn.7371730","pdf_url":null,"source":{"id":"https://openalex.org/S4210172589","display_name":"SSRN Electronic Journal","issn_l":"1556-5068","issn":["1556-5068"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1318003438","host_organization_name":"RELX Group (Netherlands)","host_organization_lineage":["https://openalex.org/I1318003438"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.2139/ssrn.7371730","doi":"https://doi.org/10.2139/ssrn.7371730","is_oa":true,"landing_page_url":"https://doi.org/10.2139/ssrn.7371730","pdf_url":null,"source":{"id":"https://openalex.org/S4210172589","display_name":"SSRN Electronic Journal","issn_l":"1556-5068","issn":["1556-5068"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1318003438","host_organization_name":"RELX Group (Netherlands)","host_organization_lineage":["https://openalex.org/I1318003438"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7169656760","https://openalex.org/W7148766347","https://openalex.org/W7206171080","https://openalex.org/W7212015787","https://openalex.org/W7083708607","https://openalex.org/W4411337486","https://openalex.org/W7160106859","https://openalex.org/W7167946219","https://openalex.org/W7169865821","https://openalex.org/W7140123911"],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-30T00:00:00"}