{"id":"https://openalex.org/W7148766347","doi":"https://doi.org/10.48550/arxiv.2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","display_name":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","publication_year":2026,"publication_date":"2026-04-02","ids":{"openalex":"https://openalex.org/W7148766347","doi":"https://doi.org/10.48550/arxiv.2604.01888"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.01888","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01888","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.01888","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132918979","display_name":"Ahmed B Mustafa","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mustafa, Ahmed B","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001112243","display_name":"Zihan Ye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Zihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132915020","display_name":"YANG Lu(\u6768\u9732)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072892248","display_name":"Michael P. Pound","orcid":"https://orcid.org/0000-0002-5016-1078"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pound, Michael P","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132858189","display_name":"Shreyank N Gowda","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gowda, Shreyank N","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6761000156402588,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6761000156402588,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.1451999992132187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.08190000057220459,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7071999907493591},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6144000291824341},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.5378000140190125},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.42089998722076416},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.3652999997138977},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.3603000044822693},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.33009999990463257},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.3061000108718872}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7071999907493591},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.636900007724762},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6144000291824341},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.5378000140190125},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.506600022315979},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.42089998722076416},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3603000044822693},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3492000102996826},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.33009999990463257},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.304500013589859},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3034000098705292},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2935999929904938},{"id":"https://openalex.org/C2777146004","wikidata":"https://www.wikidata.org/wiki/Q14949826","display_name":"CLARITY","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C93225998","wikidata":"https://www.wikidata.org/wiki/Q1941972","display_name":"Moderation","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C29825287","wikidata":"https://www.wikidata.org/wiki/Q1427940","display_name":"Warning system","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C2780878386","wikidata":"https://www.wikidata.org/wiki/Q1659648","display_name":"Visual language","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C2780226545","wikidata":"https://www.wikidata.org/wiki/Q6888030","display_name":"Modality (human\u2013computer interaction)","level":2,"score":0.25780001282691956}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.01888","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01888","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.01888","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01888","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7295734882354736}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Text-to-image":[0],"generative":[1,158],"models":[2,41,164],"are":[3],"widely":[4],"deployed":[5],"in":[6,99,157],"creative":[7],"tools":[8],"and":[9,21,91,102,123,134,148,165],"online":[10],"platforms.":[11],"To":[12],"mitigate":[13],"misuse,":[14],"these":[15,116],"systems":[16,122],"rely":[17],"on":[18],"safety":[19,64,104],"filters":[20,65],"moderation":[22,101],"pipelines":[23],"that":[24,38,48,62,125],"aim":[25],"to":[26,44,153,177],"block":[27],"harmful":[28],"or":[29,70],"policy":[30],"violating":[31],"content.":[32],"In":[33],"this":[34],"work":[35],"we":[36,168],"show":[37],"modern":[39],"text-to-image":[40,121],"remain":[42],"vulnerable":[43],"low-effort":[45],"jailbreak":[46,79],"attacks":[47,117],"require":[49],"only":[50],"natural":[51],"language":[52],"prompts.":[53],"We":[54,73,114],"present":[55],"a":[56,75,141],"systematic":[57],"study":[58],"of":[59,77,175],"prompt-based":[60],"strategies":[61,96],"bypass":[63],"without":[66],"model":[67],"access,":[68],"optimization,":[69],"adversarial":[71,155],"training.":[72],"introduce":[74],"taxonomy":[76],"visual":[78,103],"techniques":[80],"including":[81],"artistic":[82],"reframing,":[83],"material":[84],"substitution,":[85],"pseudo-educational":[86],"framing,":[87],"lifestyle":[88],"aesthetic":[89],"camouflage,":[90],"ambiguous":[92],"action":[93],"substitution.":[94],"These":[95],"exploit":[97],"weaknesses":[98],"prompt":[100,146],"filtering":[105,147],"by":[106],"masking":[107],"unsafe":[108],"intent":[109,156],"within":[110],"benign":[111],"semantic":[112,150],"contexts.":[113],"evaluate":[115],"across":[118],"several":[119],"state-of-the-art":[120],"demonstrate":[124],"simple":[126],"linguistic":[127],"modifications":[128],"can":[129],"reliably":[130],"evade":[131],"existing":[132],"safeguards":[133],"produce":[135],"restricted":[136],"imagery.":[137],"Our":[138],"findings":[139],"highlight":[140],"critical":[142],"gap":[143],"between":[144],"surface-level":[145],"the":[149],"understanding":[151],"required":[152],"detect":[154],"media":[159],"systems.":[160],"Across":[161],"all":[162],"tested":[163],"attack":[166,171],"categories":[167],"observe":[169],"an":[170],"success":[172],"rate":[173],"(ASR)":[174],"up":[176],"74.47%.":[178]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-04T00:00:00"}