Decoy Images Amplify Caption-Mediated Defenses Against Encoded Jailbreaks

arXiv:2608.01043 · cs.CR, cs.AI · Submitted 2026-08-09 · Read on arXiv

Haoyu Zhang, Xiangchen Guan, Shibo Zheng, Mohammad Zandsalimy, Shanu Sushmita

cs.CR, cs.AI

Submitted: 2026-08-09

Updated: 2026-08-11

Comments: There is bug in algorithm implementation

Code: https://github.com/vacantfury/imaging_

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Benchmark — 11× in this paper · explained in 2 episodes
Decode — 8× in this paper · explained in 2 episodes
Robustness — 7× in this paper · explained in 6 episodes
Ablation — 5× in this paper · explained in 1 episode
Augmentation — 4× in this paper · explained in 2 episodes
Inflation — 4× in this paper · explained in 2 episodes
Obfuscation — 3× in this paper · explained in 2 episodes
Scaffold — 3× in this paper · explained in 2 episodes
Calibration — 2× in this paper · explained in 9 episodes
Core — 2× in this paper · explained in 2 episodes
Generalization — 2× in this paper · explained in 14 episodes
Introspection — 2× in this paper · explained in 2 episodes
LLM judge — 2× in this paper · explained in 2 episodes
Papers — 2× in this paper · explained in 3 episodes
Redundancy — 2× in this paper · explained in 2 episodes
Steering — 2× in this paper · explained in 2 episodes
Verification — 2× in this paper · explained in 2 episodes
Attack Success Rate (ASR) — 1× in this paper · explained in 3 episodes
Composition — 1× in this paper · explained in 2 episodes
Conference on Computer Vision and Pattern Recognition — 1× in this paper
Evaluation Framework — 1× in this paper · explained in 3 episodes
Vision-Language Model — 1× in this paper
Vision-Language Model (VLM) — 1× in this paper · explained in 3 episodes

Sources

Related papers