{"id":"https://openalex.org/W7160955463","doi":"https://doi.org/10.48550/arxiv.2605.10764","title":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","display_name":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160955463","doi":"https://doi.org/10.48550/arxiv.2605.10764"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.10764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.10764","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135934720","display_name":"Mengqi He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Mengqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136000852","display_name":"Xinyu Tian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Xinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135927985","display_name":"Xin Shen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101292475","display_name":"Shu Zou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zou, Shu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086057132","display_name":"Jinhong Ni","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ni, Jinhong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135992697","display_name":"Zhaoyuan Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Zhaoyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135985959","display_name":"Weikang Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Weikang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135950068","display_name":"Xuesong Li","orcid":"https://orcid.org/0009-0005-1246-9898"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xuesong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135990625","display_name":"Jing Zhang","orcid":"https://orcid.org/0000-0002-1678-5688"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9824000000953674,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9824000000953674,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.006099999882280827,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.6172000169754028},{"id":"https://openalex.org/keywords/maximization","display_name":"Maximization","score":0.6055999994277954},{"id":"https://openalex.org/keywords/prefix","display_name":"Prefix","score":0.37529999017715454},{"id":"https://openalex.org/keywords/minification","display_name":"Minification","score":0.3650999963283539},{"id":"https://openalex.org/keywords/entropy-maximization","display_name":"Entropy maximization","score":0.36239999532699585},{"id":"https://openalex.org/keywords/autoregressive-model","display_name":"Autoregressive model","score":0.3580999970436096}],"concepts":[{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.6172000169754028},{"id":"https://openalex.org/C2776330181","wikidata":"https://www.wikidata.org/wiki/Q18358244","display_name":"Maximization","level":2,"score":0.6055999994277954},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5302000045776367},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3813000023365021},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.37529999017715454},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C127233936","wikidata":"https://www.wikidata.org/wiki/Q1417473","display_name":"Entropy maximization","level":3,"score":0.36239999532699585},{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.35339999198913574},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32260000705718994},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C171752962","wikidata":"https://www.wikidata.org/wiki/Q255166","display_name":"Kullback\u2013Leibler divergence","level":2,"score":0.30880001187324524},{"id":"https://openalex.org/C101721835","wikidata":"https://www.wikidata.org/wiki/Q813908","display_name":"Conditional entropy","level":3,"score":0.30550000071525574},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2939000129699707},{"id":"https://openalex.org/C2985793214","wikidata":"https://www.wikidata.org/wiki/Q3274096","display_name":"Utility maximization","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.27000001072883606},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25600001215934753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.10764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.10764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7478892207145691}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recent":[0],"studies":[1],"show":[2],"that":[3,49,87,136],"gradient-based":[4],"universal":[5],"image":[6],"jailbreaks":[7],"on":[8,20],"vision-language":[9],"models":[10],"(VLMs)":[11],"exhibit":[12],"little":[13],"or":[14,42],"no":[15],"cross-model":[16],"transferability,":[17,125],"casting":[18],"doubt":[19],"the":[21,68,100,137],"feasibility":[22],"of":[23],"transferable":[24],"multimodal":[25],"jailbreaks.":[26],"We":[27],"revisit":[28],"this":[29,75],"conclusion":[30],"under":[31,129],"a":[32,39,84],"strictly":[33],"untargeted":[34],"threat":[35],"model":[36],"without":[37],"enforcing":[38],"fixed":[40],"prefix":[41],"response":[43],"pattern.":[44],"Our":[45,132],"preliminary":[46],"experiment":[47],"reveals":[48],"refusal":[50,96],"behavior":[51],"concentrates":[52],"at":[53,90],"high-entropy":[54],"tokens":[55,61,93],"during":[56],"autoregressive":[57],"decoding,":[58],"and":[59,111,122],"non-refusal":[60],"already":[62],"carry":[63],"substantial":[64],"probability":[65],"mass":[66],"among":[67],"top-ranked":[69],"candidates":[70],"before":[71],"attack.":[72],"Motivated":[73],"by":[74],"finding,":[76],"we":[77],"propose":[78],"Untargeted":[79],"Jailbreak":[80],"via":[81],"Entropy":[82],"Maximization(UJEM)-KL,":[83],"lightweight":[85],"attack":[86,119],"maximizes":[88],"entropy":[89],"these":[91],"decision":[92],"to":[94,104],"flip":[95],"outcomes,":[97],"while":[98,126],"stabilizing":[99],"remaining":[101,127],"low-entropy":[102],"positions":[103],"preserve":[105],"output":[106],"quality.":[107],"Across":[108],"three":[109],"VLMs":[110],"two":[112],"safety":[113],"benchmarks,":[114],"UJEM-KL":[115],"achieves":[116],"competitive":[117],"white-box":[118],"success":[120],"rates":[121],"consistently":[123],"improves":[124],"effective":[128],"representative":[130],"defenses.":[131],"experimental":[133],"results":[134],"indicate":[135],"limited":[138],"transferability":[139],"primarily":[140],"stems":[141],"from":[142],"overly":[143],"constrained":[144],"optimization":[145],"objectives.":[146]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-13T00:00:00"}