Disrupting Hierarchical Reasoning: Adversarial Protection for Geographic Privacy in Multimodal Reasoning Models
arXiv:2512.08503v2 Announce Type: replace-cross Abstract: Multi-modal large reasoning models (MLRMs) pose significant privacy risks by inferring precise geographic locations from personal images through hierarchical chain-of-thought reasoning. Existing privacy protection techniques, primarily designed for perception-based models, prove ineffective against MLRMs' sophisticated multi-step reasoning processes that analyze environmental cues. We introduce \textbf{ReasonBreak}, a novel adversarial framework specifically designed to disrupt hierarchical reasoning in MLRMs through concept-aware pertu — Jiaming Zhang, Che Wang, Yang Cao, Longtao Huang, Wei Yang Bryan Lim
View PDF HTML (experimental)
Abstract:Multi-modal large reasoning models (MLRMs) pose significant privacy risks by inferring precise geographic locations from personal images through hierarchical chain-of-thought reasoning. Existing privacy protection techniques, primarily designed for perception-based models, prove ineffective against MLRMs' sophisticated multi-step reasoning processes that analyze environmental cues. We introduce \textbf{ReasonBreak}, a novel adversarial framework specifically designed to disrupt hierarchical reasoning in MLRMs through concept-aware perturbations. Our approach is founded on the key insight that effective disruption of geographic reasoning requires perturbations aligned with conceptual hierarchies rather than uniform noise. ReasonBreak strategically targets critical conceptual dependencies within reasoning chains, generating perturbations that invalidate specific inference steps and cascade through subsequent reasoning stages. To facilitate this approach, we contribute \textbf{GeoPrivacy-6K}, a comprehensive dataset comprising 6,341 ultra-high-resolution images ($\geq$2K) with hierarchical concept annotations. Extensive evaluation across seven state-of-the-art MLRMs (including GPT-o3, GPT-5, Gemini 2.5 Pro) demonstrates ReasonBreak's superior effectiveness, achieving a 14.4% improvement in tract-level protection (33.8% vs 19.4%) and nearly doubling block-level protection (33.5% vs 16.8%). This work establishes a new paradigm for privacy protection against reasoning-based threats.
Comments: ICLR 2026
Subjects:
Computer Vision and Pattern Recognition (cs.CV); Artificial Intelligence (cs.AI)
Cite as: arXiv:2512.08503 [cs.CV]
(or arXiv:2512.08503v2 [cs.CV] for this version)
https://doi.org/10.48550/arXiv.2512.08503
arXiv-issued DOI via DataCite
Submission history
From: Jiaming Zhang [view email] [v1] Tue, 9 Dec 2025 11:35:51 UTC (8,485 KB) [v2] Sun, 29 Mar 2026 15:07:41 UTC (8,493 KB)
Sign in to highlight and annotate this article
Conversation starters
Daily AI Digest
Get the top 5 AI stories delivered to your inbox every morning.
More about
researchpaperarxiv
Exclusive | Caltech Researchers Claim Radical Compression of High-Fidelity AI Models - WSJ
<a href="https://news.google.com/rss/articles/CBMiuANBVV95cUxNWjFiT2ZQN1ZYQ1QxUUpxc2UzZjduQktEaW9DVjBib1hING0xOFptTUVBTUJQMFVVOUJ5eFptREliVkVtMXo1MlhwQy11c01YTlUwNWUzRjJ4dDM1T1hpOUdrcEdBR2czaDZvZ2V5Y1ZuRzFWSnlZQTNCOXR0d2ZXY015YjUya09FeXFHV2Fqd1htdlVwSDBBOWZhcTZmSmpfTjY3TVdfTWllV1RDQUd3a0dCT0NVUmdNSnF1Q2trM2xLdWdhcGx0aC1KRHMtcGJkSGFmTjZaNDNYZVQ5NnFpTk9wY1NkRkItRWZBVWJPQVdLcDhhYUdQaE1DMFdWbkp4VDd6a3dkSHVpVmhLZmItaUJTcWhQTWMtWlhfamVYT1FBQnBDS1VpWDFZZ3hnaFN0Qy1Ha2tUS2V1ZFJDYS1HczZjWFRRNkI1SlNxVFFNYzVwS2JWaGNQT3JXanFUNXZrdUw1UnFmMVAzaHpyUTI5QlBMdVI5SlRnTjdqbVNKdExKWC1jdzdMQTVFQkFySmo3TjBNRVQ4dmREdHJkQVhqWE1hQm5JTXlSelV1Vkt4OWNDRk95RnJRRg?oc=5" target="_blank">Exclusive | Caltech Researchers Claim Radical Compression of High-Fidelity AI Models</a> <font color="#6f6f6f">WSJ</font>
Researcher Warns Generative AI May Reinforce Harmful Leadership Patterns - The National Law Review
<a href="https://news.google.com/rss/articles/CBMisgFBVV95cUxONVJCMF9Yd3NGSThhUTJFd3JZRTU2c2ZSd29PWXBVeThfcXdDOVRkaGlWM0lZQmVZSTM5Z1NWaGJrckE5bGFWbjBEMXhvd2NqOG1DUUJ2dERPd0ZOd202alctRWFPS3VMTkVVM3NWQ09ld184Umt3Ny1CQzhjQk40cnB6RllUaGRyUTVyMmRtcXVmME9lQ3VzdWxTc2pYSEZDUzNyanJPWUxBMzQtSnFnc0xR?oc=5" target="_blank">Researcher Warns Generative AI May Reinforce Harmful Leadership Patterns</a> <font color="#6f6f6f">The National Law Review</font>
Exclusive | Caltech Researchers Claim Radical Compression of High-Fidelity AI Models - WSJ
<a href="https://news.google.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?oc=5" target="_blank">Exclusive | Caltech Researchers Claim Radical Compression of High-Fidelity AI Models</a> <font color="#6f6f6f">WSJ</font>
Knowledge Map
Connected Articles — Knowledge Graph
This article is connected to other articles through shared AI topics and tags.
More in Research Papers
AI Inspires New Research Topics In Materials Science - miragenews.com
<a href="https://news.google.com/rss/articles/CBMihwFBVV95cUxQRlVFdkRBaHRvYkJJdFRlMTZmajEzeFRPU0hGWWdfbi02V1FnTUdVQ2pmY2VZLUV2NlB4V3BFdEVlSVZkUlhRSTZaNWFKMmcyWXJYbnNqbUhMTmp0NnFtMEppOXlPZkJSNHJfck5VSEVYcmUtX1k2QkJlR1BvUEdTTkp3UmlYRkk?oc=5" target="_blank">AI Inspires New Research Topics In Materials Science</a> <font color="#6f6f6f">miragenews.com</font>
From brain scans to alloys: Teaching AI to make sense of complex research data - Penn State University
<a href="https://news.google.com/rss/articles/CBMiwAFBVV95cUxPZDFHdkptQ2VUM2hmWjhqQkxoRnBiTWoxMXRRR21MUG5TamdUMlFRWmhvYVNHaFVNREVKU3VmSnVOdDVZYnNLb2ppYXRVRTZmVFVMV1pLTlVhUm9ybTNZbGtvZTdIMnIyMHNpOEk5aU9TSmxxS2Y4V2MwazYwY3JlX1Axbk1nd3pfcWhFdUJaaDJWRXJaMFIyTTROcmFHeXI3ZzFudXJ2M1h6UHI1LW1Ca1dta2RkM3BiYndocGk3Yjg?oc=5" target="_blank">From brain scans to alloys: Teaching AI to make sense of complex research data</a> <font color="#6f6f6f">Penn State University</font>
Locating Risk: Task Designers and the Challenge of Risk Disclosure in RAI Content Work
arXiv:2505.24246v4 Announce Type: replace Abstract: As AI systems are increasingly tested and deployed in open-ended and high-stakes domains, crowdworkers are often tasked with responsible AI (RAI) content work. These tasks include labeling violent content, moderating disturbing text, or simulating harmful behavior for red teaming exercises to shape AI system behaviors. While prior research efforts have highlighted the risks to worker well-being associated with RAI content work, far less attention has been paid to how these risks are communicated to workers by task designers or individuals who design and post RAI tasks. Existing transparency frameworks and guidelines, such as model cards, datasheets, and crowdworksheets, focus on documenting model information and dataset collection process
Togedule: Scheduling Meetings with Large Language Models and Adaptive Representations of Group Availability
arXiv:2505.01000v5 Announce Type: replace Abstract: Scheduling is a perennial-and often challenging-problem for many groups. Existing tools are mostly static, showing an identical set of choices to everyone, regardless of the current status of attendees' inputs and preferences. In this paper, we propose Togedule, an adaptive scheduling tool that uses large language models to dynamically adjust the pool of choices and their presentation format. With the initial prototype, we conducted a formative study (N=10) and identified the potential benefits and risks of such an adaptive scheduling tool. Then, after enhancing the system, we conducted two controlled experiments, one each for attendees and organizers (total N=66). For each experiment, we compared scheduling with verbal messages, shared c
Discussion
Sign in to join the discussion
No comments yet — be the first to share your thoughts!