{"total":22,"rows":[{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2405.10529","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","created":"2024-05-17","cited_by_count":27,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2407.08970","title":"Self-interpreting Adversarial Images","created":"2024-07-12","cited_by_count":7,"area":"mllm"},{"id":"2512.11899","title":"Read or Ignore? A Unified Benchmark for Typographic-Attack Robustness and Text Recognition in Vision-Language Models","created":"2025-12-10","cited_by_count":2,"area":"mllm"},{"id":"2603.16960","title":"Adversarial attacks against Modern Vision-Language Models","created":"2026-03-17","cited_by_count":2,"area":"mllm"},{"id":"2608.05715","title":"Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots","created":"2026-08-06","cited_by_count":2,"area":"mllm"},{"id":"2602.07104","title":"Extended to Reality: Prompt Injection in 3D Environments","created":"2026-02-06","cited_by_count":1,"area":"mllm"},{"id":"2604.27414","title":"Understanding Adversarial Transferability in Vision-Language Models for Autonomous Driving: A Cross-Architecture Analysis","created":"2026-04-30","cited_by_count":1,"area":"mllm"},{"id":"2406.07506","title":"Understanding Visual Concepts Across Models","created":"2024-06-11","cited_by_count":0,"area":"mllm"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2603.08897","title":"Comparative Analysis of Patch Attack on VLM-Based Autonomous Driving Architectures","created":"2026-03-09","cited_by_count":0,"area":"mllm"},{"id":"2603.28568","title":"XSPA: Crafting Imperceptible X-Shaped Sparse Adversarial Perturbations for Transferable Attacks on VLMs","created":"2026-03-30","cited_by_count":0,"area":"mllm"},{"id":"2604.03117","title":"Revealing Physical-World Semantic Vulnerabilities: Universal Adversarial Patch for Infrared Vision-Language Models","created":"2026-04-03","cited_by_count":0,"area":"mllm"},{"id":"2605.27927","title":"Structure-Guided Visual Perturbation Neutralization for LVLMs","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2607.06485","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","created":"2026-07-07","cited_by_count":0,"area":"mllm"},{"id":"2607.07288","title":"InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2609.02233","title":"InfraPatch: Cross-Task Targeted Grayscale Patch Attacks on Infrared-Adapted Vision-Language Models","created":"2026-09-02","cited_by_count":0,"area":"mllm"}],"next_cursor":null}