{"id":"https://openalex.org/W7137947160","doi":"https://doi.org/10.48550/arxiv.2603.14219","title":"Safety-Potential Pruning for Enhancing Safety Prompts Against VLM Jailbreaking Without Retraining","display_name":"Safety-Potential Pruning for Enhancing Safety Prompts Against VLM Jailbreaking Without Retraining","publication_year":2026,"publication_date":"2026-03-15","ids":{"openalex":"https://openalex.org/W7137947160","doi":"https://doi.org/10.48550/arxiv.2603.14219"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.14219","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14219","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.14219","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129730308","display_name":"Chongxin Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Chongxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129670254","display_name":"Hanzhang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hanzhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5129641514","display_name":"Lian Duan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Duan, Lian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7968999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7968999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.09740000218153,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0142000000923872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/subnetwork","display_name":"Subnetwork","score":0.8180000185966492},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.7652000188827515},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6626999974250793},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.6431000232696533},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.5946000218391418},{"id":"https://openalex.org/keywords/retraining","display_name":"Retraining","score":0.5824000239372253},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4036000072956085}],"concepts":[{"id":"https://openalex.org/C2780186347","wikidata":"https://www.wikidata.org/wiki/Q11414","display_name":"Subnetwork","level":2,"score":0.8180000185966492},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.7652000188827515},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6797999739646912},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6626999974250793},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.6431000232696533},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5946000218391418},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.5824000239372253},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5022000074386597},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4474000036716461},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4036000072956085},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C79897977","wikidata":"https://www.wikidata.org/wiki/Q5054568","display_name":"Causal chain","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C2779137570","wikidata":"https://www.wikidata.org/wiki/Q16243196","display_name":"EXPOSE","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C180016635","wikidata":"https://www.wikidata.org/wiki/Q2712821","display_name":"Compression (physics)","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.14219","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14219","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.14219","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14219","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Safety":[0,49],"prompts":[1,30,96],"constitute":[2],"an":[3],"interpretable":[4],"layer":[5],"of":[6,36,58],"defense":[7],"against":[8],"jailbreak":[9,107,155],"attacks":[10],"in":[11],"vision-language":[12],"models":[13],"(VLMs);":[14],"however,":[15],"their":[16],"efficacy":[17],"is":[18],"constrained":[19],"by":[20,87,115],"the":[21,48],"models'":[22],"latent":[23],"structural":[24,143],"responsiveness.":[25],"We":[26],"observe":[27],"that":[28,38,83,90],"such":[29],"consistently":[31],"engage":[32],"a":[33,79,136,142,150],"sparse":[34],"set":[35],"parameters":[37],"remain":[39,64],"largely":[40],"quiescent":[41],"during":[42],"benign":[43,127],"use.":[44],"This":[45],"finding":[46],"motivates":[47],"Subnetwork":[50],"Hypothesis:":[51],"VLMs":[52],"embed":[53],"structurally":[54],"distinct":[55],"pathways":[56,63],"capable":[57],"enforcing":[59],"safety,":[60],"but":[61,140],"these":[62,73],"dormant":[65],"without":[66,97],"explicit":[67],"stimulation.":[68],"To":[69],"expose":[70],"and":[71,105],"amplify":[72],"pathways,":[74],"we":[75],"introduce":[76],"Safety-Potential":[77],"Pruning,":[78],"one-shot":[80],"pruning":[81,132],"framework":[82],"amplifies":[84],"safety-relevant":[85],"activations":[86],"removing":[88],"weights":[89],"are":[91],"less":[92],"responsive":[93],"to":[94,117,120,145,153],"safety":[95],"additional":[98],"retraining.":[99],"Across":[100],"three":[101,106],"representative":[102],"VLM":[103],"architectures":[104],"benchmarks,":[108],"our":[109],"method":[110],"reduces":[111],"attack":[112],"success":[113],"rates":[114],"up":[116],"22%":[118],"relative":[119],"prompting":[121],"alone,":[122],"all":[123],"while":[124],"maintaining":[125],"strong":[126],"performance.":[128],"These":[129],"findings":[130],"frame":[131],"not":[133],"only":[134],"as":[135,141],"model":[137],"compression":[138],"technique,":[139],"intervention":[144],"emerge":[146],"alignment-relevant":[147],"subnets,":[148],"offering":[149],"new":[151],"path":[152],"robust":[154],"resistance.":[156]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-18T00:00:00"}