{"total":33,"rows":[{"id":"2305.16934","title":"On Evaluating Adversarial Robustness of Large Vision-Language Models","created":"2023-05-26","cited_by_count":284,"area":"mllm"},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2403.09766","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","created":"2024-03-14","cited_by_count":45,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2407.15211","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","created":"2024-07-21","cited_by_count":30,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2511.07049","title":"From Pretrain to Pain: Adversarial Vulnerability of Video Foundation Models Without Task Knowledge","created":"2025-11-10","cited_by_count":9,"area":"mllm"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2502.08079","title":"MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models","created":"2025-02-12","cited_by_count":2,"area":"mllm"},{"id":"2511.19257","title":"Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2502.19672","title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack","created":"2025-02-27","cited_by_count":1,"area":"mllm"},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2602.09431","title":"Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models","created":"2026-02-10","cited_by_count":1,"area":"mllm"},{"id":"2506.22982","title":"Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models","created":"2025-06-28","cited_by_count":0,"area":"mllm"},{"id":"2511.20002","title":"Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation","created":"2025-11-25","cited_by_count":0,"area":"mllm"},{"id":"2601.10313","title":"Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models","created":"2026-01-15","cited_by_count":0,"area":"mllm"},{"id":"2603.13978","title":"When Visual Privacy Protection Meets Multimodal Large Language Models","created":"2026-03-14","cited_by_count":0,"area":"mllm"},{"id":"2605.04261","title":"Laundering AI Authority with Adversarial Examples","created":"2026-05-05","cited_by_count":0,"area":"mllm"},{"id":"2608.10959","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","created":"2026-08-11","cited_by_count":0,"area":"mllm"},{"id":"2608.17722","title":"MemCatalyst: Amplifying Data Auditing on Vision-Language Models via Data Poisoning","created":"2026-08-18","cited_by_count":0,"area":"mllm"},{"id":"2610.06977","title":"Visual-Invariance-Augmented Feature Optimal Alignment for Transferable Adversarial Attacks against Closed-Source MLLMs","created":"2026-10-04","cited_by_count":0,"area":"mllm"}],"next_cursor":null}