{"total":47,"rows":[{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2402.05355","title":"A Survey on Safe Multi-Modal Learning System","created":"2024-02-08","cited_by_count":15,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2308.14597","title":"Adversarial Attacks on Foundational Vision Models","created":"2023-08-28","cited_by_count":13,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2402.11083","title":"VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models","created":"2024-02-16","cited_by_count":10,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2602.10139","title":"Anonymization-Enhanced Privacy Protection for Mobile GUI Agents: Available but Invisible","created":"2026-02-08","cited_by_count":6,"area":null},{"id":"2407.13111","title":"PG-Attack: A Precision-Guided Adversarial Attack Framework Against Vision Foundation Models for Autonomous Driving","created":"2024-07-18","cited_by_count":5,"area":null},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2403.19080","title":"MMCert: Provable Defense against Adversarial Attacks to Multi-modal Models","created":"2024-03-28","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2509.20851","title":"Poisoning Prompt-Guided Sampling in Video Large Language Models","created":"2025-09-25","cited_by_count":4,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2305.13208","title":"Iterative Adversarial Attack on Image-guided Story Ending Generation","created":"2023-05-16","cited_by_count":2,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2502.11858","title":"Rethinking Audio-Visual Adversarial Vulnerability from Temporal and Modality Perspectives","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.04713","title":"Enabling Validation for Robust Few-Shot Recognition","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2310.00503","title":"Black-box Attacks on Image Activity Prediction and its Natural Language Explanations","created":"2023-09-30","cited_by_count":1,"area":null},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2505.22943","title":"Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2508.06964","title":"Adversarial Video Promotion Against Text-to-Video Retrieval","created":"2025-08-09","cited_by_count":1,"area":null},{"id":"2601.16231","title":"SoundBreak: A Systematic Study of Audio-Only Adversarial Attacks on Trimodal Models","created":"2026-01-20","cited_by_count":1,"area":null},{"id":"2602.19096","title":"The Power of Decaying Steps: Enhancing Attack Stability and Transferability for Sign-based Optimizers","created":"2026-02-22","cited_by_count":1,"area":null},{"id":"2412.01725","title":"Attacks on multimodal models","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2502.18592","title":"DeBUGCN -- Detecting Backdoors in CNNs Using Graph Convolutional Networks","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2502.19697","title":"Prompt-driven Transferable Adversarial Attack on Person Re-Identification with Attribute-aware Textual Inversion","created":"2025-02-27","cited_by_count":0,"area":null},{"id":"2505.15265","title":"Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2506.16157","title":"Proxy-Embedding as an Adversarial Teacher: An Embedding-Guided Bidirectional Attack for Referring Expression Segmentation Models","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2511.00831","title":"Enhancing Adversarial Transferability in Visual-Language Pre-training Models via Local Shuffle and Sample-based Attack","created":"2025-11-02","cited_by_count":0,"area":null},{"id":"2511.18138","title":"Vulnerability-Aware Robust Multimodal Adversarial Training","created":"2025-11-22","cited_by_count":0,"area":null},{"id":"2602.11204","title":"Zero-Sacrifice Persistent-Robustness Adversarial Defense for Pre-Trained Encoders","created":"2026-02-10","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.18868","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.38802","title":"Uncovering Uncontrolled Repetition through Residual Stream Dynamics","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}