{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T02:27:17Z","timestamp":1781663237346,"version":"3.54.5"},"reference-count":32,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100010950","name":"Department of Science and Technology of Henan Province","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100010950","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017700","name":"Henan Provincial Science and Technology Research Project","doi-asserted-by":"publisher","award":["242102211077"],"award-info":[{"award-number":["242102211077"]}],"id":[{"id":"10.13039\/501100017700","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100009101","name":"Education Department of Henan Province","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100009101","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Pattern Recognition"],"published-print":{"date-parts":[[2026,11]]},"DOI":"10.1016\/j.patcog.2026.113661","type":"journal-article","created":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T15:50:53Z","timestamp":1775145053000},"page":"113661","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"PB","title":["CM-PIUG: Cross-modal prompt injection unified modeling and game-theoretic defense strategies"],"prefix":"10.1016","volume":"179","author":[{"given":"Gaoyuan","family":"Quan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3061-7768","authenticated-orcid":false,"given":"Zhiyong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanting","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weiguo","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junchang","family":"Jing","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mengdan","family":"Xue","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.patcog.2026.113661_bib0001","series-title":"33rd USENIX Security Symposium (USENIX Security 24)","first-page":"1831","article-title":"Formalizing and benchmarking prompt injection attacks and defenses","author":"Liu","year":"2024"},{"key":"10.1016\/j.patcog.2026.113661_bib0002","series-title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining","first-page":"1049","article-title":"Prompt as a double-edged sword: a dynamic equilibrium gradient-assigned attack against graph prompt learning","volume":"vol. 2","author":"Jia","year":"2025"},{"key":"10.1016\/j.patcog.2026.113661_bib0003","series-title":"Proceedings of the 31St ACM SIGKDD Conference on Knowledge Discovery and Data Mining","first-page":"1729","article-title":"Are you using reliable graph prompts? trojan prompt attacks on graph neural networks","volume":"vol. 2","author":"Lin","year":"2025"},{"key":"10.1016\/j.patcog.2026.113661_bib0004","article-title":"Jailbreak vision language models via bi-modal adversarial prompt","author":"Ying","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.patcog.2026.113661_bib0005","series-title":"Proceedings of the 33rd ACM International Conference on Multimedia","first-page":"10955","article-title":"Manipulating multimodal agents via cross-modal prompt injection","author":"Wang","year":"2025"},{"key":"10.1016\/j.patcog.2026.113661_bib0006","series-title":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","first-page":"2094","article-title":"Cross-context backdoor attacks against graph prompt learning","author":"Lyu","year":"2024"},{"key":"10.1016\/j.patcog.2026.113661_bib0007","article-title":"MKGPL: graph prompt learning with multi-view knowledge for few-shot recognition","author":"Xie","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113661_bib0008","article-title":"Jailbreak attack with multimodal virtual scenario hypnosis for vision-language models","author":"Shi","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113661_bib0009","doi-asserted-by":"crossref","first-page":"2759","DOI":"10.1109\/TIFS.2021.3065495","article-title":"Face anti-spoofing via adversarial cross-modality translation","volume":"16","author":"Liu","year":"2021","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.patcog.2026.113661_bib0010","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"222","article-title":"CFPL-FAS: Class free prompt learning for generalizable face anti-spoofing","author":"Liu","year":"2024"},{"issue":"11","key":"10.1016\/j.patcog.2026.113661_bib0011","doi-asserted-by":"crossref","first-page":"5439","DOI":"10.1007\/s11263-024-02135-2","article-title":"CA-MoEiT: generalizable face anti-spoofing via dual cross-attention and semi-fixed mixture-of-expert","volume":"132","author":"Liu","year":"2024","journal-title":"Int. J. Comput. Vis."},{"key":"10.1016\/j.patcog.2026.113661_bib0012","article-title":"JailGuard: a universal detection framework for prompt-based attacks on llm systems","author":"Zhang","year":"2025","journal-title":"ACM Trans. Software Eng. Method."},{"key":"10.1016\/j.patcog.2026.113661_bib0013","series-title":"2025 IEEE Symposium on Security and Privacy (SP)","first-page":"2190","article-title":"DataSentinel: a game-theoretic detection of prompt injection attacks","author":"Liu","year":"2025"},{"key":"10.1016\/j.patcog.2026.113661_bib0014","unstructured":"A. Obadiaru, Multi-Modal Prompt Injection Attacks Using Images, 2023, https:\/\/www.cobalt.io\/blog\/multi-modal-prompt-injection-attacks-using-images. Accessed: 2025-08-20."},{"issue":"10","key":"10.1016\/j.patcog.2026.113661_bib0015","doi-asserted-by":"crossref","DOI":"10.3390\/electronics14101907","article-title":"Mind mapping prompt injection: visual prompt injection attacks in modern large language models","volume":"14","author":"Lee","year":"2025","journal-title":"Electronics"},{"key":"10.1016\/j.patcog.2026.113661_bib0016","series-title":"Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing","first-page":"25671","article-title":"Evaluating robustness of large audio language models to audio injection: an empirical study","author":"Hou","year":"2025"},{"key":"10.1016\/j.patcog.2026.113661_bib0017","series-title":"European Conference on Computer Vision","first-page":"386","article-title":"MM-SafetyBench: a benchmark for safety evaluation of multimodal large language models","author":"Liu","year":"2024"},{"key":"10.1016\/j.patcog.2026.113661_bib0018","doi-asserted-by":"crossref","first-page":"2526","DOI":"10.1109\/TMM.2021.3086618","article-title":"MFFENet: multiscale feature fusion and enhancement network for RGB\u2013thermal urban road scene parsing","volume":"24","author":"Zhou","year":"2021","journal-title":"IEEE Trans. Multimed."},{"key":"10.1016\/j.patcog.2026.113661_bib0019","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"3571","article-title":"Edge-aware guidance fusion network for RGB\u2013thermal scene parsing","volume":"vol. 36","author":"Zhou","year":"2022"},{"issue":"12","key":"10.1016\/j.patcog.2026.113661_bib0020","doi-asserted-by":"crossref","first-page":"7096","DOI":"10.1109\/TCSVT.2023.3275314","article-title":"MMSMCNet: modal memory sharing and morphological complementary networks for RGB-T urban scene semantic segmentation","volume":"33","author":"Zhou","year":"2023","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"1","key":"10.1016\/j.patcog.2026.113661_bib0021","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/TIV.2022.3164899","article-title":"MTANet: multitask-aware network with hierarchical multimodal fusion for RGB-T urban scene understanding","volume":"8","author":"Zhou","year":"2022","journal-title":"IEEE Trans. Intell. Veh."},{"key":"10.1016\/j.patcog.2026.113661_bib0022","doi-asserted-by":"crossref","first-page":"1329","DOI":"10.1109\/TIP.2023.3242775","article-title":"LSNet: lightweight spatial boosting network for detecting salient objects in RGB-thermal images","volume":"32","author":"Zhou","year":"2023","journal-title":"IEEE Trans. Image Process."},{"key":"10.1016\/j.patcog.2026.113661_bib0023","doi-asserted-by":"crossref","first-page":"3027","DOI":"10.1109\/TIP.2023.3275538","article-title":"WaveNet: wavelet network with knowledge distillation for RGB-T salient object detection","volume":"32","author":"Zhou","year":"2023","journal-title":"IEEE Trans. Image Process."},{"key":"10.1016\/j.patcog.2026.113661_bib0024","doi-asserted-by":"crossref","first-page":"2192","DOI":"10.1109\/TMM.2021.3077767","article-title":"CCAFNet: crossflow and cross-scale adaptive fusion network for detecting salient objects in RGB-D images","volume":"24","author":"Zhou","year":"2021","journal-title":"IEEE Trans. Multimed."},{"issue":"3","key":"10.1016\/j.patcog.2026.113661_bib0025","doi-asserted-by":"crossref","first-page":"1224","DOI":"10.1109\/TCSVT.2021.3077058","article-title":"ECFFNet: effective and consistent feature fusion network for RGB-T salient object detection","volume":"32","author":"Zhou","year":"2021","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"10.1016\/j.patcog.2026.113661_bib0026","series-title":"ICLR 2026 Workshop AIMS","article-title":"Toward a dynamic Stackelberg game-theoretic framework for agentic AI defense against LLM jailbreaking","author":"Han","year":"2026"},{"key":"10.1016\/j.patcog.2026.113661_bib0027","series-title":"2024 IEEE Security and Privacy Workshops (SPW)","first-page":"112","article-title":"Defending language models against image-based prompt attacks via user-provided specifications","author":"Sharma","year":"2024"},{"key":"10.1016\/j.patcog.2026.113661_bib0028","series-title":"European Conference on Computer Vision","first-page":"388","article-title":"Eyes closed, safety on: protecting multimodal llms via image-to-text transformation","author":"Gou","year":"2024"},{"key":"10.1016\/j.patcog.2026.113661_bib0029","doi-asserted-by":"crossref","first-page":"4775","DOI":"10.1109\/TIFS.2023.3296330","article-title":"FM-ViT: flexible modal vision transformers for face anti-spoofing","volume":"18","author":"Liu","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.patcog.2026.113661_bib0030","unstructured":"R. Harang, Securing LLM Systems Against Prompt Injection, 2023, https:\/\/developer.nvidia.com\/blog\/securing-llm-systems-against-prompt-injection. Accessed: 2025-08-20."},{"key":"10.1016\/j.patcog.2026.113661_bib0031","unstructured":"R. Goodside, Prompt injection attacks against GPT-3, 2022, https:\/\/simonwillison.net\/2022\/Sep\/12\/prompt-injection\/. Accessed: 2025-08-20."},{"key":"10.1016\/j.patcog.2026.113661_bib0032","unstructured":"S. Willison, Delimiters won\u2019t save you from prompt injection, 2023, https:\/\/simonwillison.net\/2023\/May\/11\/delimiters-wont-save-you\/. Accessed: 2025-08-20."}],"container-title":["Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326006266?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326006266?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T21:17:12Z","timestamp":1781299032000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0031320326006266"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,11]]},"references-count":32,"alternative-id":["S0031320326006266"],"URL":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113661","relation":{},"ISSN":["0031-3203"],"issn-type":[{"value":"0031-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,11]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"CM-PIUG: Cross-modal prompt injection unified modeling and game-theoretic defense strategies","name":"articletitle","label":"Article Title"},{"value":"Pattern Recognition","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113661","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"113661"}}