Perception-guided Jailbreak against Text-to-Image Models
<|reference_start|>Perception-guided Jailbreak against Text-to-Image Models: In recent years, Text-to-Image (T2I) models have garnered significant attention due to their remarkable advancements. However, security concerns have emerged due to their potential to generate inappropriate or Not-Safe-For-Work (NSFW) images. In this paper, inspired by the observation that texts with different semantics can lead to similar human perceptions, we propose an LLM-driven perception-guided jailbreak method, termed PGJ. It is a black-box jailbreak method that requires no specific T2I model (model-free) and generates highly natural attack prompts. Specifically, we propose identifying a safe phrase that is similar in human perception yet inconsistent in text semantics with the target unsafe word and using it as a substitution. The experiments conducted on six open-source models and commercial online services with thousands of prompts have verified the effectiveness of PGJ.<|reference_end|>
@article{huang2024perception-guided,
    title={Perception-guided Jailbreak against Text-to-Image Models},
    author={Yihao Huang, Le Liang, Tianlin Li, Xiaojun Jia, Run Wang, Weikai Miao,
  Geguang Pu, Yang Liu},
    journal={arXiv preprint arXiv:2408.10848},
    year={2024},
    archivePrefix={arXiv},
    eprint={2408.10848},
    primaryClass={cs.CV}
}