{"total":52,"rows":[{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2504.11195","title":"R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning","created":"2025-04-15","cited_by_count":33,"area":"mllm"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2410.21802","title":"Text-Guided Attention is All You Need for Zero-Shot Robustness in Vision-Language Models","created":"2024-10-29","cited_by_count":23,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2411.01703","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","created":"2024-11-03","cited_by_count":19,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2510.24038","title":"Enhancing CLIP Robustness via Cross-Modality Alignment","created":"2025-10-28","cited_by_count":15,"area":"mllm"},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2401.02565","title":"Demonstration of an Adversarial Attack Against a Multimodal Vision Language Model for Pathology Imaging","created":"2024-01-04","cited_by_count":10,"area":"mllm"},{"id":"2410.22888","title":"Effective and Efficient Adversarial Detection for Vision-Language Models via A Single Vector","created":"2024-10-30","cited_by_count":8,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2407.08970","title":"Self-interpreting Adversarial Images","created":"2024-07-12","cited_by_count":7,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2407.09050","title":"Refusing Safe Prompts for Multi-modal Large Language Models","created":"2024-07-12","cited_by_count":6,"area":"mllm"},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2508.15370","title":"Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation","created":"2025-08-21","cited_by_count":4,"area":"mllm"},{"id":"2504.01308","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","created":"2025-04-02","cited_by_count":3,"area":"mllm"},{"id":"2601.21692","title":"TCAP: Tri-Component Attention Profiling for Unsupervised Backdoor Detection in MLLM Fine-Tuning","created":"2026-01-29","cited_by_count":3,"area":"mllm"},{"id":"2502.14976","title":"EigenShield: Causal Subspace Filtering via Random Matrix Theory for Adversarially Robust Vision-Language Models","created":"2025-02-20","cited_by_count":2,"area":"mllm"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2510.11096","title":"CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization","created":"2025-10-13","cited_by_count":2,"area":"mllm"},{"id":"2603.27240","title":"Diagnosing and Repairing Unsafe Channels in Vision-Language Models via Causal Discovery and Dual-Modal Safety Subspace Projection","created":"2026-03-28","cited_by_count":2,"area":"mllm"},{"id":"2407.00905","title":"Learning Robust 3D Representation from CLIP via Dual Denoising","created":"2024-07-01","cited_by_count":1,"area":"mllm"},{"id":"2510.09699","title":"VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands","created":"2025-10-09","cited_by_count":1,"area":"mllm"},{"id":"2510.09849","title":"Text Prompt Injection of Vision Language Models","created":"2025-10-10","cited_by_count":1,"area":"mllm"},{"id":"2602.09431","title":"Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models","created":"2026-02-10","cited_by_count":1,"area":"mllm"},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2603.29410","title":"AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models","created":"2026-03-31","cited_by_count":1,"area":"mllm"},{"id":"2604.19844","title":"If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems","created":"2026-04-21","cited_by_count":1,"area":"mllm"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2606.06186","title":"Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models","created":"2026-06-04","cited_by_count":1,"area":"mllm"},{"id":"2606.06938","title":"When CLIP Sees More, It Fights Back Harder: Multi-View Guided Adaptive Counterattacks for Test-Time Adversarial Robustness","created":"2026-06-05","cited_by_count":1,"area":"mllm"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2603.18598","title":"Complementary Text-Guided Attention for Zero-Shot Adversarial Robustness","created":"2026-03-19","cited_by_count":0,"area":"mllm"},{"id":"2605.28609","title":"JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2606.03713","title":"Investigating Adversarial Robustness of Multi-modal Large Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2606.03730","title":"Beyond False Stability: High-Noise Drift Gating for Test-Time Adversarial Defenses in Vision-Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2606.06943","title":"SS-TPT: Stability and Suitability-Guided Test-Time Prompt Tuning for Adversarially Robust Vision-Language Models","created":"2026-06-05","cited_by_count":0,"area":"mllm"},{"id":"2606.23132","title":"T-VSS: Test-Time Visual Subspace Steering for Adversarial Robustness of Vision-Language Models","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2609.07048","title":"FreqDoor: A Hidden Trojan in the Frequency Domain for Backdoor Attacks on Vision-Language Models","created":"2026-09-07","cited_by_count":0,"area":"mllm"},{"id":"2610.20055","title":"GeoCloak: An Agentic Framework for Semantics-Preserving Geolocation Privacy via Peripheral Clue Manipulation","created":"2026-10-14","cited_by_count":0,"area":"mllm"}],"next_cursor":null}