{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:IWKXIAM5JMD5CKZ7Q77YUUCXSV","short_pith_number":"pith:IWKXIAM5","canonical_record":{"source":{"id":"2503.11619","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-14T17:39:45Z","cross_cats_sorted":[],"title_canon_sha256":"1a3e55820d661db50fd61db4800720a5ceeba0339aef9698f625cb7d592ea287","abstract_canon_sha256":"57ba32fd234f7941738d476aec3303505047041dc360c4373acd467147516814"},"schema_version":"1.0"},"canonical_sha256":"459574019d4b07d12b3f87ff8a50579565fed29de156a3cfced3495eca78775f","source":{"kind":"arxiv","id":"2503.11619","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11619","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11619v1","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11619","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_12","alias_value":"IWKXIAM5JMD5","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_16","alias_value":"IWKXIAM5JMD5CKZ7","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_8","alias_value":"IWKXIAM5","created_at":"2026-07-05T10:31:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:IWKXIAM5JMD5CKZ7Q77YUUCXSV","target":"record","payload":{"canonical_record":{"source":{"id":"2503.11619","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-14T17:39:45Z","cross_cats_sorted":[],"title_canon_sha256":"1a3e55820d661db50fd61db4800720a5ceeba0339aef9698f625cb7d592ea287","abstract_canon_sha256":"57ba32fd234f7941738d476aec3303505047041dc360c4373acd467147516814"},"schema_version":"1.0"},"canonical_sha256":"459574019d4b07d12b3f87ff8a50579565fed29de156a3cfced3495eca78775f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:36.035550Z","signature_b64":"fnNoe2mLN8Bsr6qRbc8wuQyltvY4wdw/P5rQHvOGXipWtIHIfxeLb8L57tZ+vn7XpoRbJw5LR2QtbV3sr5UBBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"459574019d4b07d12b3f87ff8a50579565fed29de156a3cfced3495eca78775f","last_reissued_at":"2026-07-05T10:31:36.034815Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:36.034815Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.11619","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wOHaAXr1i7i4MLTycGTYADczG5yXnDO4U0DBEGPUAzybT6XxF2k3XP484OIQoxPZkQi6o9wrEGNw6eocsmYWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T13:59:24.745117Z"},"content_sha256":"1de2c8b19f816b02b31e578a9d61eb183a28e6c074a0d1ac2f667bd703ff0f61","schema_version":"1.0","event_id":"sha256:1de2c8b19f816b02b31e578a9d61eb183a28e6c074a0d1ac2f667bd703ff0f61"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:IWKXIAM5JMD5CKZ7Q77YUUCXSV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bryan Hooi, Chengcheng Tang, Jun Liu, Ming-Hsuan Yang, Shuyang Hao, Yiwei Wang, Yujun Cai, Zi Huang","submitted_at":"2025-03-14T17:39:45Z","abstract_excerpt":"Deploying large vision-language models (LVLMs) introduces a unique vulnerability: susceptibility to malicious attacks via visual inputs. However, existing defense methods suffer from two key limitations: (1) They solely focus on textual defenses, fail to directly address threats in the visual domain where attacks originate, and (2) the additional processing steps often incur significant computational overhead or compromise model performance on benign tasks. Building on these insights, we propose ESIII (Embedding Security Instructions Into Images), a novel methodology for transforming the visua"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11619","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.11619/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9H3/8xMDsArpz4lhvM6EiW8h/Vxft31Qrh6CkdWgKit4A4cBLJ23wD8NAxQ0eUba2eGxHEQr3uTvogr7p19DBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T13:59:24.746118Z"},"content_sha256":"7e6dca198eb537a1ddd30ca15d55d4109a5777f5e70c6cad3b8e2e85c7229c53","schema_version":"1.0","event_id":"sha256:7e6dca198eb537a1ddd30ca15d55d4109a5777f5e70c6cad3b8e2e85c7229c53"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/bundle.json","state_url":"https://pith.science/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T13:59:24Z","links":{"resolver":"https://pith.science/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV","bundle":"https://pith.science/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/bundle.json","state":"https://pith.science/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IWKXIAM5JMD5CKZ7Q77YUUCXSV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:IWKXIAM5JMD5CKZ7Q77YUUCXSV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"57ba32fd234f7941738d476aec3303505047041dc360c4373acd467147516814","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-14T17:39:45Z","title_canon_sha256":"1a3e55820d661db50fd61db4800720a5ceeba0339aef9698f625cb7d592ea287"},"schema_version":"1.0","source":{"id":"2503.11619","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.11619","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"arxiv_version","alias_value":"2503.11619v1","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.11619","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_12","alias_value":"IWKXIAM5JMD5","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_16","alias_value":"IWKXIAM5JMD5CKZ7","created_at":"2026-07-05T10:31:36Z"},{"alias_kind":"pith_short_8","alias_value":"IWKXIAM5","created_at":"2026-07-05T10:31:36Z"}],"graph_snapshots":[{"event_id":"sha256:7e6dca198eb537a1ddd30ca15d55d4109a5777f5e70c6cad3b8e2e85c7229c53","target":"graph","created_at":"2026-07-05T10:31:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.11619/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deploying large vision-language models (LVLMs) introduces a unique vulnerability: susceptibility to malicious attacks via visual inputs. However, existing defense methods suffer from two key limitations: (1) They solely focus on textual defenses, fail to directly address threats in the visual domain where attacks originate, and (2) the additional processing steps often incur significant computational overhead or compromise model performance on benign tasks. Building on these insights, we propose ESIII (Embedding Security Instructions Into Images), a novel methodology for transforming the visua","authors_text":"Bryan Hooi, Chengcheng Tang, Jun Liu, Ming-Hsuan Yang, Shuyang Hao, Yiwei Wang, Yujun Cai, Zi Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-14T17:39:45Z","title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.11619","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1de2c8b19f816b02b31e578a9d61eb183a28e6c074a0d1ac2f667bd703ff0f61","target":"record","created_at":"2026-07-05T10:31:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"57ba32fd234f7941738d476aec3303505047041dc360c4373acd467147516814","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-14T17:39:45Z","title_canon_sha256":"1a3e55820d661db50fd61db4800720a5ceeba0339aef9698f625cb7d592ea287"},"schema_version":"1.0","source":{"id":"2503.11619","kind":"arxiv","version":1}},"canonical_sha256":"459574019d4b07d12b3f87ff8a50579565fed29de156a3cfced3495eca78775f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"459574019d4b07d12b3f87ff8a50579565fed29de156a3cfced3495eca78775f","first_computed_at":"2026-07-05T10:31:36.034815Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:36.034815Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fnNoe2mLN8Bsr6qRbc8wuQyltvY4wdw/P5rQHvOGXipWtIHIfxeLb8L57tZ+vn7XpoRbJw5LR2QtbV3sr5UBBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:36.035550Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.11619","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1de2c8b19f816b02b31e578a9d61eb183a28e6c074a0d1ac2f667bd703ff0f61","sha256:7e6dca198eb537a1ddd30ca15d55d4109a5777f5e70c6cad3b8e2e85c7229c53"],"state_sha256":"0a87a360027ceb76c44ea05bb6fa0969212c13d8d60d19b359f1342ea8ecb600"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o3rmLzkv4h9BRwgUG7gRXDdYaU5Ti67bpKHRqLLC7c2dJLB+DrR8HuRUyms1g7R5iOScb2RiVgWcnipZraJNCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T13:59:24.750673Z","bundle_sha256":"77c8b40b23126ed2289e4801ea06b1ba22eaf4bd6a5dec53fc5949cedc480a4e"}}