DIRE: Dual-grained Internal Refusal Estimation for VLM Jailbreak Detection
Dual-grained Internal Refusal Estimation (DIRE), a training-free detection framework that jointly probes resilient Attention routing and FFN semantic memory within effective semantic layers to detect multimodal jailbreaks in a training-free manner, is introduced.
Xi-Yu Zeng, Li-Ming Lu, Xu Zheng et al.
· 0 citations