{"id":"https://openalex.org/W7160616231","doi":"https://doi.org/10.48550/arxiv.2605.05709","title":"Conceal, Reconstruct, Jailbreak: Exploiting the Reconstruction-Concealment Tradeoff in MLLMs","display_name":"Conceal, Reconstruct, Jailbreak: Exploiting the Reconstruction-Concealment Tradeoff in MLLMs","publication_year":2026,"publication_date":"2026-05-07","ids":{"openalex":"https://openalex.org/W7160616231","doi":"https://doi.org/10.48550/arxiv.2605.05709"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.05709","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.05709","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.05709","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111021764","display_name":"Md Farhamdur Reza","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Reza, Md Farhamdur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070646892","display_name":"Richeng Jin","orcid":"https://orcid.org/0000-0002-1480-585X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin, Richeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135670866","display_name":"Tianfu Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Tianfu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5027155270","display_name":"Huaiyu Dai","orcid":"https://orcid.org/0000-0002-0078-4891"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dai, Huaiyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5938000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5938000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.11159999668598175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.050200000405311584,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6478000283241272},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.6071000099182129},{"id":"https://openalex.org/keywords/balance","display_name":"Balance (ability)","score":0.39399999380111694},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.3560999929904938},{"id":"https://openalex.org/keywords/model-transformation","display_name":"Model transformation","score":0.26669999957084656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7918999791145325},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6478000283241272},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.6071000099182129},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.438400000333786},{"id":"https://openalex.org/C168031717","wikidata":"https://www.wikidata.org/wiki/Q1530280","display_name":"Balance (ability)","level":2,"score":0.39399999380111694},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.35199999809265137},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31029999256134033},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2791000008583069},{"id":"https://openalex.org/C2779791154","wikidata":"https://www.wikidata.org/wiki/Q258040","display_name":"Model transformation","level":3,"score":0.26669999957084656},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2632000148296356},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.257999986410141},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.05709","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.05709","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.05709","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.05709","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8136773109436035}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Intent-obfuscation-based":[0],"jailbreak":[1],"attacks":[2,26],"on":[3,90],"multimodal":[4,16],"large":[5],"language":[6],"models":[7],"(MLLMs)":[8],"transform":[9],"a":[10,14,30,57,86,160],"harmful":[11,38,128,171],"query":[12],"into":[13],"concealed":[15],"input":[17,35],"to":[18,51,71,168],"bypass":[19],"safety":[20,41],"mechanisms.":[21],"We":[22,119],"show":[23,81,149],"that":[24,67,82,102,125],"such":[25],"are":[27,103],"governed":[28],"by":[29],"\\emph{reconstruction--concealment":[31],"tradeoff}:":[32],"the":[33,48,53,127,150],"transformed":[34],"must":[36],"hide":[37],"intent":[39,172],"from":[40],"filters":[42],"while":[43],"remaining":[44],"recoverable":[45],"enough":[46],"for":[47],"victim":[49],"model":[50],"reconstruct":[52],"original":[54],"request.":[55],"Through":[56],"reconstruction":[58,163],"analysis":[59],"of":[60],"three":[61],"representative":[62],"black-box":[63],"methods,":[64],"we":[65,80,92],"find":[66],"existing":[68],"transformations":[69],"struggle":[70],"balance":[72],"this":[73],"tradeoff,":[74],"limiting":[75],"their":[76],"effectiveness.":[77],"In":[78],"contrast,":[79],"character-removed":[83,100],"variants":[84,101],"achieve":[85],"better":[87],"balance.":[88],"Building":[89],"this,":[91],"propose":[93],"\\emph{concealment-aware":[94],"variant":[95],"construction},":[96],"which":[97],"greedily":[98],"selects":[99],"low":[104],"in":[105,130],"harmful-keyword":[106],"alignment":[107],"and":[108,111,146,173],"mutually":[109],"diverse,":[110],"instantiates":[112],"them":[113],"through":[114],"five":[115],"modality-aware":[116],"prompting":[117],"strategies.":[118],"further":[120],"introduce":[121],"\\emph{keyword-related":[122],"distractor":[123,141],"images}":[124],"depict":[126],"keyword":[129],"diverse":[131],"contexts,":[132],"providing":[133],"more":[134],"effective":[135],"auxiliary":[136],"visual":[137],"context":[138],"than":[139],"generic":[140],"images.":[142],"Experiments":[143],"across":[144],"closed-source":[145],"open-source":[147],"MLLMs":[148],"proposed":[151],"strategies":[152],"outperform":[153],"strong":[154],"baselines,":[155],"revealing":[156],"an":[157],"underexplored":[158],"vulnerability:":[159],"model's":[161],"own":[162],"ability":[164],"can":[165],"be":[166],"exploited":[167],"recover":[169],"hidden":[170],"produce":[174],"unsafe":[175],"responses.":[176]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-09T00:00:00"}