{"id":"https://openalex.org/W7160308037","doi":"https://doi.org/10.48550/arxiv.2605.01761","title":"TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks","display_name":"TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks","publication_year":2026,"publication_date":"2026-05-03","ids":{"openalex":"https://openalex.org/W7160308037","doi":"https://doi.org/10.48550/arxiv.2605.01761"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.01761","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01761","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.01761","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135391210","display_name":"Quanchen Zou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zou, Quanchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018730602","display_name":"N Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Nizhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135417365","display_name":"Wenxin Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Wenxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126521377","display_name":"Jiaye Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Jiaye","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037374299","display_name":"Yi Zeng","orcid":"https://orcid.org/0000-0002-0899-3786"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zeng, Yangchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135401293","display_name":"Xiangzheng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xiangzheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5020945039","display_name":"Zonghao Ying","orcid":"https://orcid.org/0009-0007-7393-7362"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ying, Zonghao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7936000227928162,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7936000227928162,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.05829999968409538,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.033399999141693115,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6834999918937683},{"id":"https://openalex.org/keywords/narrative","display_name":"Narrative","score":0.570900022983551},{"id":"https://openalex.org/keywords/mediation","display_name":"Mediation","score":0.4575999975204468},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.37959998846054077},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.3522999882698059},{"id":"https://openalex.org/keywords/intervention","display_name":"Intervention (counseling)","score":0.33239999413490295}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6834999918937683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6292999982833862},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.570900022983551},{"id":"https://openalex.org/C179420905","wikidata":"https://www.wikidata.org/wiki/Q223871","display_name":"Mediation","level":2,"score":0.4575999975204468},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4083999991416931},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.37959998846054077},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.3522999882698059},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.33239999413490295},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.3208000063896179},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.31049999594688416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3043000102043152},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.29420000314712524},{"id":"https://openalex.org/C11671645","wikidata":"https://www.wikidata.org/wiki/Q5054567","display_name":"Causal model","level":2,"score":0.28790000081062317},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.27619999647140503},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.27459999918937683},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C2776035091","wikidata":"https://www.wikidata.org/wiki/Q7928819","display_name":"Viewpoints","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.01761","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01761","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.01761","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01761","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4906635582447052}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Text-to-Video":[0],"(T2V)":[1],"models":[2],"have":[3],"demonstrated":[4],"remarkable":[5],"capability":[6],"in":[7,109,126],"generating":[8],"temporally":[9,73,111,123],"coherent":[10],"videos":[11],"from":[12,35],"natural":[13],"language":[14],"prompts,":[15,119],"yet":[16],"they":[17],"also":[18],"risk":[19,154],"producing":[20],"unsafe":[21,83,118],"content":[22,84],"such":[23],"as":[24,105],"violence":[25],"or":[26,59],"explicit":[27,117],"material.":[28],"Existing":[29],"prompt-level":[30],"defenses":[31],"are":[32],"largely":[33],"inherited":[34],"text-to-image":[36],"safety":[37,104,164],"and":[38,122,145,166],"operate":[39],"on":[40,160],"the":[41,45,86,132,139,153],"lexical":[42],"surface":[43],"of":[44,135,142,191],"input,":[46],"making":[47],"them":[48],"vulnerable":[49],"to":[50,82],"jailbreak":[51,120],"attacks":[52],"that":[53,101,151,171],"disguise":[54],"harmful":[55],"intent":[56],"through":[57,85],"rephrasing":[58],"adversarial":[60],"prompting.":[61],"Moreover,":[62],"T2V":[63,103,168],"generation":[64],"introduces":[65],"a":[66,77,96,106,110,127,136,147],"distinctive":[67],"challenge":[68],"overlooked":[69],"by":[70,130],"prior":[71],"work:":[72],"emergent":[74,124],"risk,":[75,144],"where":[76],"seemingly":[78],"benign":[79],"prompt":[80],"leads":[81],"generator's":[87],"temporal":[88],"extrapolation":[89],"toward":[90],"narrative":[91],"coherence.":[92],"We":[93],"propose":[94],"\\method{},":[95],"training-free,":[97],"inference-time":[98],"defense":[99],"framework":[100],"reformulates":[102],"causal":[107,140],"intervention":[108],"structured":[112],"semantic":[113,180],"space.":[114],"TrajShield":[115,172],"handles":[116],"attacks,":[121],"risks":[125],"unified":[128],"manner":[129],"simulating":[131],"implied":[133],"trajectory":[134],"prompt,":[137],"localizing":[138],"origin":[141],"potential":[143],"applying":[146],"minimally":[148],"invasive":[149],"rewrite":[150],"neutralizes":[152],"while":[155,177],"preserving":[156],"safety-irrelevant":[157],"semantics.":[158],"Experiments":[159],"T2VSafetyBench":[161],"across":[162],"14":[163],"categories":[165],"multiple":[167],"backends":[169],"demonstrate":[170],"achieves":[173],"state-of-the-art":[174],"defenseive":[175],"performance":[176],"maintaining":[178],"high":[179],"fidelity,":[181],"substantially":[182],"outperforming":[183],"existing":[184],"defenses,":[185],"with":[186],"an":[187],"average":[188],"ASR":[189],"reduction":[190],"52.44\\%.":[192]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-06T00:00:00"}