Search papers, labs, and topics across Lattice.
This paper introduces MIND, a cognitive jailbreak framework that enhances the efficiency of adversarial prompt generation for Text-to-Image models by treating it as a belief-state inference problem. By leveraging multi-modal feedback to model latent defense mechanisms, MIND integrates a Multi-modal Judge, a Defense Profiler, and a Meta-Memory module within a reasoning-driven evolutionary optimization process. Experimental results demonstrate MIND's superiority, achieving an Attack Success Rate of 95.62% against the Stable Diffusion v1.5 model, significantly outperforming traditional heuristic methods.
MIND redefines adversarial prompt generation, achieving a staggering 95.62% success rate by intelligently interpreting model defenses rather than relying on brute-force tactics.
Text-to-Image (T2I) generative models have achieved remarkable progress in synthesizing high-quality visual content, yet they remain vulnerable to adversarial misuse, particularly in generating Not-Safe-For-Work (NSFW) images. Most existing jailbreak attacks primarily rely on heuristic prompt engineering or black-box optimization, treating model feedback as a binary signal (success or failure). This coarse-grained paradigm overlooks the rich information embedded in diverse failure modes, such as textual refusal, visual blocking, and semantic sanitization, resulting in inefficient exploration and severe semantic collapse. In this paper, we propose MIND, a cognitive jailbreak framework that reframes adversarial prompt generation as a belief-state inference problem over latent defense mechanisms. Instead of blindly searching for bypass prompts, MIND actively models the target system's latent defense mechanisms by interpreting multi-modal feedback as high-density signals. Specifically, the framework integrates three core components: (1) a Multi-modal Judge for fine-grained feedback decomposition, (2) a Defense Profiler for iterative belief updating, and (3) a Meta-Memory module for retrieving historically effective attack strategies. These components are unified within a reasoning-driven evolutionary optimization process, enabling adaptive and semantically consistent jailbreak generation. Extensive experiments on the I2P benchmark demonstrate the effectiveness of MIND. Under six representative pre-processing and post-processing defense settings applied to the Stable Diffusion v1.5 model, MIND achieves an Attack Success Rate (ASR) of 95.62%, significantly outperforming existing methods. Additionally, the effectiveness of the proposed framework is validated across four widely used commercial T2I systems, achieving the highest ASR of 91.58% on Wan-2.5.
