{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MIKHFJIMYJFZ6XVWURUGY2RUTJ","short_pith_number":"pith:MIKHFJIM","canonical_record":{"source":{"id":"2412.05934","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T13:20:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7559fdda6e6f85c0387b5a70aa9275c97173742a4f2f65ce7a4518653a94d178","abstract_canon_sha256":"ed463aa3bf19a154ade6647c4548f0efbe415f09076f43d64aa69b7d0f2aeb6a"},"schema_version":"1.0"},"canonical_sha256":"621472a50cc24b9f5eb6a4686c6a349a689c0f9eac49be6ae0cf8c2d3f48ced8","source":{"kind":"arxiv","id":"2412.05934","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.05934","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"arxiv_version","alias_value":"2412.05934v3","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.05934","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_12","alias_value":"MIKHFJIMYJFZ","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_16","alias_value":"MIKHFJIMYJFZ6XVW","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_8","alias_value":"MIKHFJIM","created_at":"2026-07-05T11:55:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MIKHFJIMYJFZ6XVWURUGY2RUTJ","target":"record","payload":{"canonical_record":{"source":{"id":"2412.05934","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T13:20:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7559fdda6e6f85c0387b5a70aa9275c97173742a4f2f65ce7a4518653a94d178","abstract_canon_sha256":"ed463aa3bf19a154ade6647c4548f0efbe415f09076f43d64aa69b7d0f2aeb6a"},"schema_version":"1.0"},"canonical_sha256":"621472a50cc24b9f5eb6a4686c6a349a689c0f9eac49be6ae0cf8c2d3f48ced8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:55:15.717276Z","signature_b64":"Ce+pT98OnNMniK6JSzcSA0bmQyFep08VxrT4oRsNSQpWxLrNUzx8fsMh2icdIuWk/0eDX0c0aueDUWntJ3vuAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"621472a50cc24b9f5eb6a4686c6a349a689c0f9eac49be6ae0cf8c2d3f48ced8","last_reissued_at":"2026-07-05T11:55:15.716776Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:55:15.716776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.05934","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:55:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2IiNrzFF3YPNy+q/BWTbIS4PwXwwwBc6s8yj9n+xvx2FlpGSIKchPjQMLf2wUrcX1uL3dv1qW+ohYhwBGna6DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:43:48.536958Z"},"content_sha256":"6bebe9af9dc1c4a9a88ce66c5f781975fea9ea5c8862fa9201bc4b5a11ed3673","schema_version":"1.0","event_id":"sha256:6bebe9af9dc1c4a9a88ce66c5f781975fea9ea5c8862fa9201bc4b5a11ed3673"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MIKHFJIMYJFZ6XVWURUGY2RUTJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chu Zhixuan, Duan Ranjie, Huang Yihao, Jia Xiaojun, Jia Xiaoshuang, Li Xinfeng, Ma Teng, Ren Wenqi","submitted_at":"2024-12-08T13:20:45Z","abstract_excerpt":"With the rapid advancement of multimodal large language models (MLLMs), concerns regarding their security have increasingly captured the attention of both academia and industry. Although MLLMs are vulnerable to jailbreak attacks, designing effective jailbreak attacks poses unique challenges, especially given the highly constrained adversarial capabilities in real-world deployment scenarios. Previous works concentrate risks into a single modality, resulting in limited jailbreak performance. In this paper, we propose a heuristic-induced multimodal risk distribution jailbreak attack method, calle"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.05934","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.05934/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:55:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uzh+B+mMEbkTnW4PeXKf1gMe3+PLjWBrEDeRkox7KtpK2yxoWjJbWiNp5/yIfx3U44372ZBPjlJG5EBmZaYODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T04:43:48.537471Z"},"content_sha256":"34a04f41f06973300ab49249ffc875f204bdeea96b9e09ed781c4fc310356226","schema_version":"1.0","event_id":"sha256:34a04f41f06973300ab49249ffc875f204bdeea96b9e09ed781c4fc310356226"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/bundle.json","state_url":"https://pith.science/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T04:43:48Z","links":{"resolver":"https://pith.science/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ","bundle":"https://pith.science/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/bundle.json","state":"https://pith.science/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MIKHFJIMYJFZ6XVWURUGY2RUTJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MIKHFJIMYJFZ6XVWURUGY2RUTJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ed463aa3bf19a154ade6647c4548f0efbe415f09076f43d64aa69b7d0f2aeb6a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T13:20:45Z","title_canon_sha256":"7559fdda6e6f85c0387b5a70aa9275c97173742a4f2f65ce7a4518653a94d178"},"schema_version":"1.0","source":{"id":"2412.05934","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.05934","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"arxiv_version","alias_value":"2412.05934v3","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.05934","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_12","alias_value":"MIKHFJIMYJFZ","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_16","alias_value":"MIKHFJIMYJFZ6XVW","created_at":"2026-07-05T11:55:15Z"},{"alias_kind":"pith_short_8","alias_value":"MIKHFJIM","created_at":"2026-07-05T11:55:15Z"}],"graph_snapshots":[{"event_id":"sha256:34a04f41f06973300ab49249ffc875f204bdeea96b9e09ed781c4fc310356226","target":"graph","created_at":"2026-07-05T11:55:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.05934/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rapid advancement of multimodal large language models (MLLMs), concerns regarding their security have increasingly captured the attention of both academia and industry. Although MLLMs are vulnerable to jailbreak attacks, designing effective jailbreak attacks poses unique challenges, especially given the highly constrained adversarial capabilities in real-world deployment scenarios. Previous works concentrate risks into a single modality, resulting in limited jailbreak performance. In this paper, we propose a heuristic-induced multimodal risk distribution jailbreak attack method, calle","authors_text":"Chu Zhixuan, Duan Ranjie, Huang Yihao, Jia Xiaojun, Jia Xiaoshuang, Li Xinfeng, Ma Teng, Ren Wenqi","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T13:20:45Z","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.05934","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6bebe9af9dc1c4a9a88ce66c5f781975fea9ea5c8862fa9201bc4b5a11ed3673","target":"record","created_at":"2026-07-05T11:55:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ed463aa3bf19a154ade6647c4548f0efbe415f09076f43d64aa69b7d0f2aeb6a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-08T13:20:45Z","title_canon_sha256":"7559fdda6e6f85c0387b5a70aa9275c97173742a4f2f65ce7a4518653a94d178"},"schema_version":"1.0","source":{"id":"2412.05934","kind":"arxiv","version":3}},"canonical_sha256":"621472a50cc24b9f5eb6a4686c6a349a689c0f9eac49be6ae0cf8c2d3f48ced8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"621472a50cc24b9f5eb6a4686c6a349a689c0f9eac49be6ae0cf8c2d3f48ced8","first_computed_at":"2026-07-05T11:55:15.716776Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:55:15.716776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ce+pT98OnNMniK6JSzcSA0bmQyFep08VxrT4oRsNSQpWxLrNUzx8fsMh2icdIuWk/0eDX0c0aueDUWntJ3vuAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:55:15.717276Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.05934","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6bebe9af9dc1c4a9a88ce66c5f781975fea9ea5c8862fa9201bc4b5a11ed3673","sha256:34a04f41f06973300ab49249ffc875f204bdeea96b9e09ed781c4fc310356226"],"state_sha256":"3b7d7ac64181ce2e3f4675f633879010f9fc8707e2adc20978f80550a483fc97"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YJogJ/DP4N2hUs0opTiZXjSEyX1O46JVRHj8j2n9tBXh/VV4qY/C0Lj/PYZEuRxhCiR8JrOzc2HgqZzP1u1eCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T04:43:48.541292Z","bundle_sha256":"431f6f5889752e60cf5d4c6ee7bdc2a926d5192b96fba789b42db9fa8ac47a8d"}}