[2309.00236] Image Hijacks: Adversarial Images can Control Generative Models at Runtime

arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website. Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them. Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs. arXiv Operational Status Get status notifications via email or slack

[2309.00236] Image Hijacks: Adversarial Images can Control Generative Models at Runtime Skip to main content arXiv is now an independent nonprofit! Learn more × Search arXiv Press Enter to search · Advanced search --> Computer Science > Machine Learning arXiv:2309.00236 (cs) [Submitted on 1 Sep 2023 ( v1 ), last revised 17 Sep 2024 (this version, v4)] Title: Image Hijacks: Adversarial Images can Control Generative Models at Runtime Authors: Luke Bailey , Euan Ong , Stuart Russell , Scott Emmons View a PDF of the paper titled Image Hijacks: Adversarial Images can Control Generative

related reading

• [2401.05566] Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingarxiv.org
• [2309.01809] Are Emergent Abilities in Large Language Models just In-Context Learning?arxiv.org
• [2310.08586] PonderV2: Pave the Way for 3D Foundation Model with A Universal Pre-training Paradigmarxiv.org
• [2503.10965] Auditing language models for hidden objectivesarxiv.org
• [2312.03079] LooseControl: Lifting ControlNet for Generalized Depth Conditioningarxiv.org
• [2312.15159] Understanding the Potential of FPGA-Based Spatial Acceleration for Large Language Model Inferencearxiv.org
• [2406.02061] Alice in Wonderland: Simple Tasks Showing Complete Reasoning Breakdown in State-Of-the-Art Large Language Modelsarxiv.org
• Hyper-Connectionsarxiv.org
• [2407.15549] Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMsarxiv.org
• [2209.15162] Linearly Mapping from Image to Text Spacearxiv.org
• [2502.05209] Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiesarxiv.org
• [2509.14786] Pre-training under infinite computearxiv.org