{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YMCOCF737EA3ATSSBHD22GPS5P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b2cceebcffbba4bec33bc23e5fa04b087379c88bb47a191b47df83d0590c6e6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-23T02:17:17Z","title_canon_sha256":"6afe68746175137603f574df0df48f06388c1450bf24ef6d5eeea51cae21e58d"},"schema_version":"1.0","source":{"id":"2411.16721","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.16721","created_at":"2026-07-05T10:57:30Z"},{"alias_kind":"arxiv_version","alias_value":"2411.16721v3","created_at":"2026-07-05T10:57:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.16721","created_at":"2026-07-05T10:57:30Z"},{"alias_kind":"pith_short_12","alias_value":"YMCOCF737EA3","created_at":"2026-07-05T10:57:30Z"},{"alias_kind":"pith_short_16","alias_value":"YMCOCF737EA3ATSS","created_at":"2026-07-05T10:57:30Z"},{"alias_kind":"pith_short_8","alias_value":"YMCOCF73","created_at":"2026-07-05T10:57:30Z"}],"graph_snapshots":[{"event_id":"sha256:cbe3148b2a7fe9d65f2c6f55ef7d19e1a34978049cde86ae0dc850ea3332c530","target":"graph","created_at":"2026-07-05T10:57:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.16721/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision Language Models (VLMs) can produce unintended and harmful content when exposed to adversarial attacks, particularly because their vision capabilities create new vulnerabilities. Existing defenses, such as input preprocessing, adversarial training, and response evaluation-based methods, are often impractical for real-world deployment due to their high costs. To address this challenge, we propose ASTRA, an efficient and effective defense by adaptively steering models away from adversarial feature directions to resist VLM attacks. Our key procedures involve finding transferable steering ve","authors_text":"Gang Wang, Han Wang, Huan Zhang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-23T02:17:17Z","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.16721","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1aca792b0d286c73bb5c1ff4f64d701cbed1e7d244ea3af81bf130787ae90d24","target":"record","created_at":"2026-07-05T10:57:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b2cceebcffbba4bec33bc23e5fa04b087379c88bb47a191b47df83d0590c6e6","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-11-23T02:17:17Z","title_canon_sha256":"6afe68746175137603f574df0df48f06388c1450bf24ef6d5eeea51cae21e58d"},"schema_version":"1.0","source":{"id":"2411.16721","kind":"arxiv","version":3}},"canonical_sha256":"c304e117fbf901b04e5209c7ad19f2ebf9932b962ef4745476e981db2d81f730","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c304e117fbf901b04e5209c7ad19f2ebf9932b962ef4745476e981db2d81f730","first_computed_at":"2026-07-05T10:57:30.013483Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:30.013483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FuBTACwMzRQDQfYge4/n9J3mH2zXwNMQ6j94OFr06JgYAiwpOgTgUeLqi3zPvya9FoODoLuBPKQA/PNzuN4VDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:30.014020Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.16721","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1aca792b0d286c73bb5c1ff4f64d701cbed1e7d244ea3af81bf130787ae90d24","sha256:cbe3148b2a7fe9d65f2c6f55ef7d19e1a34978049cde86ae0dc850ea3332c530"],"state_sha256":"09cf3f9622ab298b2e6c76711b46da5593d02202a15c5bb62b2894a6292bf798"}