{"total":84,"rows":[{"id":"2212.07016","title":"Understanding Zero-Shot Adversarial Robustness for Large-Scale Models","created":"2022-12-14","cited_by_count":117,"area":"mllm"},{"id":"2307.14061","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","created":"2023-07-26","cited_by_count":108,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2504.11195","title":"R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning","created":"2025-04-15","cited_by_count":33,"area":"mllm"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2410.06699","title":"Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models","created":"2024-10-09","cited_by_count":27,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2410.21802","title":"Text-Guided Attention is All You Need for Zero-Shot Robustness in Vision-Language Models","created":"2024-10-29","cited_by_count":23,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2505.19616","title":"Diagnosing and Mitigating Modality Interference in Multimodal Large Language Models","created":"2025-05-26","cited_by_count":19,"area":"mllm"},{"id":"2510.24038","title":"Enhancing CLIP Robustness via Cross-Modality Alignment","created":"2025-10-28","cited_by_count":15,"area":"mllm"},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2311.16445","title":"CLAP: Isolating Content from Style through Contrastive Learning with Augmented Prompts","created":"2023-11-28","cited_by_count":10,"area":"mllm"},{"id":"2401.02565","title":"Demonstration of an Adversarial Attack Against a Multimodal Vision Language Model for Pathology Imaging","created":"2024-01-04","cited_by_count":10,"area":"mllm"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2410.04778","title":"MM-R$^3$: On (In-)Consistency of Vision-Language Models (VLMs)","created":"2024-10-07","cited_by_count":10,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2407.20657","title":"Prompt-Driven Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":9,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2411.15244","title":"Adversarial Prompt Distillation for Vision-Language Models","created":"2024-11-22","cited_by_count":6,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2311.09024","title":"Fast Certification of Vision-Language Models Using Incremental Randomized Smoothing","created":"2023-11-15","cited_by_count":4,"area":"mllm"},{"id":"2407.17797","title":"A Unified Understanding of Adversarial Vulnerability Regarding Unimodal Models and Vision-Language Pre-training Models","created":"2024-07-25","cited_by_count":4,"area":"mllm"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2510.22785","title":"Self-Calibrated Consistency can Fight Back for Adversarial Robustness in Vision-Language Models","created":"2025-10-26","cited_by_count":3,"area":"mllm"},{"id":"2511.15435","title":"HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation","created":"2025-11-19","cited_by_count":3,"area":"mllm"},{"id":"2602.19418","title":"PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention","created":"2026-02-23","cited_by_count":3,"area":"mllm"},{"id":"2412.10353","title":"Robust image classification with multi-modal large language models","created":"2024-12-13","cited_by_count":2,"area":"mllm"},{"id":"2502.14976","title":"EigenShield: Causal Subspace Filtering via Random Matrix Theory for Adversarially Robust Vision-Language Models","created":"2025-02-20","cited_by_count":2,"area":"mllm"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2507.16257","title":"Quality Text, Robust Vision: The Role of Language in Enhancing Visual Robustness of Vision-Language Models","created":"2025-07-22","cited_by_count":2,"area":"mllm"},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2602.15927","title":"Visual Memory Injection Attacks for Multi-Turn Conversations","created":"2026-02-17","cited_by_count":2,"area":"mllm"},{"id":"2603.26486","title":"ClipTTT: CLIP-Guided Test-Time Training Helps LVLMs See Better","created":"2026-03-27","cited_by_count":2,"area":"mllm"},{"id":"2410.11242","title":"Automatically Generating Visual Hallucination Test Cases for Multimodal Large Language Models","created":"2024-10-15","cited_by_count":1,"area":"mllm"},{"id":"2502.16361","title":"A Framework for Evaluating Vision-Language Model Safety: Building Trust in AI for Public Sector Applications","created":"2025-02-22","cited_by_count":1,"area":"mllm"},{"id":"2505.24227","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","created":"2025-05-30","cited_by_count":1,"area":"mllm"},{"id":"2506.00534","title":"The Security Threat of Compressed Projectors in Large Vision-Language Models","created":"2025-05-31","cited_by_count":1,"area":"mllm"},{"id":"2506.01064","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","created":"2025-06-01","cited_by_count":1,"area":"mllm"},{"id":"2509.06992","title":"FedAPT: Federated Adversarial Prompt Tuning for Vision-Language Models","created":"2025-09-03","cited_by_count":1,"area":"mllm"},{"id":"2512.14102","title":"Neurosymbolic Inference On Foundation Models For Remote Sensing Text-to-image Retrieval With Complex Queries","created":"2025-12-16","cited_by_count":1,"area":"mllm"},{"id":"2603.29410","title":"AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models","created":"2026-03-31","cited_by_count":1,"area":"mllm"},{"id":"2604.11576","title":"Finetune Like You Pretrain: Boosting Zero-shot Adversarial Robustness in Vision-language Models","created":"2026-04-13","cited_by_count":1,"area":"mllm"},{"id":"2604.17318","title":"When Background Matters: Breaking Medical Vision Language Models by Transferable Attack","created":"2026-04-19","cited_by_count":1,"area":"mllm"},{"id":"2604.18867","title":"Hierarchically Robust Zero-shot Vision-language Models","created":"2026-04-20","cited_by_count":1,"area":"mllm"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2605.16651","title":"Right Predictions, Misleading Explanations: On the Vulnerability of Vision-Language Model Explanations","created":"2026-05-15","cited_by_count":1,"area":"mllm"},{"id":"2606.06938","title":"When CLIP Sees More, It Fights Back Harder: Multi-View Guided Adaptive Counterattacks for Test-Time Adversarial Robustness","created":"2026-06-05","cited_by_count":1,"area":"mllm"},{"id":"2608.00076","title":"Which Modality Decides? Counterfactual Modality Attribution for Multimodal LLMs","created":"2026-07-29","cited_by_count":1,"area":"mllm"},{"id":"2406.07506","title":"Understanding Visual Concepts Across Models","created":"2024-06-11","cited_by_count":0,"area":"mllm"},{"id":"2510.02913","title":"Improving Adversarial Robustness of Zero-Shot CLIP with Confidence-Aware Weighting","created":"2025-10-03","cited_by_count":0,"area":"mllm"},{"id":"2601.10313","title":"Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models","created":"2026-01-15","cited_by_count":0,"area":"mllm"},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2603.18598","title":"Complementary Text-Guided Attention for Zero-Shot Adversarial Robustness","created":"2026-03-19","cited_by_count":0,"area":"mllm"},{"id":"2603.27759","title":"When Surfaces Lie: Exploiting Wrinkle-Induced Attention Shift to Attack Vision-Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2605.17577","title":"TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2605.25922","title":"Closed-Loop Bidirectional Prompting for Adversarial Robustness of Vision Language Models","created":"2026-05-25","cited_by_count":0,"area":"mllm"},{"id":"2605.27927","title":"Structure-Guided Visual Perturbation Neutralization for LVLMs","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2605.28609","title":"JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2606.03713","title":"Investigating Adversarial Robustness of Multi-modal Large Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2606.06943","title":"SS-TPT: Stability and Suitability-Guided Test-Time Prompt Tuning for Adversarially Robust Vision-Language Models","created":"2026-06-05","cited_by_count":0,"area":"mllm"},{"id":"2606.23132","title":"T-VSS: Test-Time Visual Subspace Steering for Adversarial Robustness of Vision-Language Models","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.06485","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","created":"2026-07-07","cited_by_count":0,"area":"mllm"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.18958","title":"Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model","created":"2026-07-21","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2608.17306","title":"Learning What Not to Learn: Adversarial Disentangled Prompt Tuning for Robust Vision-Language Models","created":"2026-08-18","cited_by_count":0,"area":"mllm"},{"id":"2609.00231","title":"Beyond Language Priors: Diagnosing and Fixing Visual-Origin Hallucinations in Multimodal LLM","created":"2026-08-31","cited_by_count":0,"area":"mllm"},{"id":"2609.02233","title":"InfraPatch: Cross-Task Targeted Grayscale Patch Attacks on Infrared-Adapted Vision-Language Models","created":"2026-09-02","cited_by_count":0,"area":"mllm"}],"next_cursor":null}