{"id":"https://openalex.org/W7165948975","doi":"https://doi.org/10.48550/arxiv.2606.25592","title":"VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks","display_name":"VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks","publication_year":2026,"publication_date":"2026-06-24","ids":{"openalex":"https://openalex.org/W7165948975","doi":"https://doi.org/10.48550/arxiv.2606.25592"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.25592","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25592","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.25592","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139371569","display_name":"Yining Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Yining","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108989270","display_name":"Haoyu Kang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kang, Haoyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139338481","display_name":"Jiajun Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Jiajun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139307117","display_name":"Heng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Heng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139374695","display_name":"Danyang Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Danyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107849883","display_name":"Z. Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Zhenjun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139331816","display_name":"Haochen Han","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Han, Haochen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139370139","display_name":"Fangming Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Fangming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136117709","display_name":"Wai Kin Victor Chan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chan, Wai Kin Victor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5087779128","display_name":"A F Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Alex Jinpeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7868000268936157,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7868000268936157,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.11990000307559967,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0210999995470047,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.774399995803833},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7099999785423279},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6467999815940857},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.5443999767303467},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.35420000553131104},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.314300000667572}],"concepts":[{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.774399995803833},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7728999853134155},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7099999785423279},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6467999815940857},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5878000259399414},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.5443999767303467},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3968000113964081},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38089999556541443},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.35420000553131104},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.314300000667572},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C2776544517","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Unexpected events","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26460000872612},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25949999690055847}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.25592","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25592","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.25592","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25592","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7483801245689392,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recent":[0],"advancements":[1],"in":[2,53],"Image-to-Video":[3],"(I2V)":[4],"generation":[5,96],"have":[6],"transformed":[7],"input":[8],"images":[9],"from":[10],"simple":[11],"appearance":[12],"references":[13],"into":[14,50],"interactive":[15],"control":[16],"interfaces":[17],"where":[18],"visual":[19,77],"cues":[20,39],"such":[21,115],"as":[22,45],"arrows,":[23],"sketches,":[24],"and":[25,71,127,141,162,186,194],"emojis":[26],"orchestrate":[27],"complex":[28],"video":[29,95],"dynamics":[30],"with":[31,117],"unprecedented":[32],"controllability.":[33],"However,":[34],"these":[35,134],"seemingly":[36],"innocuous":[37],"static":[38],"can":[40],"be":[41],"interpreted":[42],"by":[43,160,166],"models":[44,110],"executable":[46],"temporal":[47],"instructions,":[48],"unfolding":[49],"harmful":[51],"actions":[52],"the":[54,58,89,157,163,172],"generated":[55],"videos.":[56],"Despite":[57],"severity":[59],"of":[60],"this":[61,84],"threat,":[62],"existing":[63],"safety":[64,97],"benchmarks":[65],"remain":[66],"predominantly":[67],"focused":[68],"on":[69,105,124,129,168],"text-based":[70],"content-only":[72],"image-based":[73],"jailbreaks,":[74],"leaving":[75],"implicit":[76],"prompt":[78,101],"attacks":[79],"insufficiently":[80],"explored.":[81],"To":[82,132],"bridge":[83],"gap,":[85],"we":[86,136],"present":[87],"VVA-Bench,":[88],"first":[90],"systematic":[91],"benchmark":[92,185],"for":[93,175],"evaluating":[94],"under":[98],"categorized":[99],"vision-centric":[100],"attacks.":[102],"Extensive":[103],"experiments":[104],"VVA-Bench":[106],"demonstrate":[107],"that":[108],"state-of-the-art":[109],"are":[111],"highly":[112],"susceptible":[113],"to":[114,149,191],"attacks,":[116],"Attack":[118],"Success":[119],"Rates":[120],"(ASR)":[121],"reaching":[122],"100.0\\%":[123],"Wan":[125],"2.7":[126],"74.8\\%":[128],"Veo":[130],"3.1.":[131],"mitigate":[133],"risks,":[135],"propose":[137],"VPA-Guard,":[138],"a":[139,183],"retrieval-augmented":[140],"self-evolving":[142],"defense":[143,189],"framework.":[144],"By":[145],"leveraging":[146],"few-shot":[147],"reasoning":[148],"identify":[150],"latent":[151],"malicious":[152],"intents,":[153],"our":[154],"method":[155],"reduces":[156],"attack":[158],"ASR":[159],"44.2\\%":[161],"harmfulness":[164],"score":[165],"73.4\\%":[167],"average,":[169],"while":[170],"maintaining":[171],"model's":[173],"utility":[174],"legitimate":[176],"user":[177],"edits.":[178],"Our":[179],"work":[180],"provides":[181],"both":[182],"rigorous":[184],"an":[187],"effective":[188],"strategy":[190],"advance":[192],"safe":[193],"socially":[195],"responsible":[196],"multimodal":[197],"generation.":[198]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-26T00:00:00"}