{"total":144,"rows":[{"id":"2305.16934","title":"On Evaluating Adversarial Robustness of Large Vision-Language Models","created":"2023-05-26","cited_by_count":284,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2307.14061","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","created":"2023-07-26","cited_by_count":108,"area":"mllm"},{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2403.09766","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","created":"2024-03-14","cited_by_count":45,"area":"mllm"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2403.14774","title":"Few-Shot Adversarial Prompt Learning on Vision-Language Models","created":"2024-03-21","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2502.07855","title":"Vision-Language Models for Edge Networks: A Comprehensive Survey","created":"2025-02-11","cited_by_count":29,"area":"mllm"},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2410.06699","title":"Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models","created":"2024-10-09","cited_by_count":27,"area":"mllm"},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2510.13237","title":"Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models","created":"2025-10-15","cited_by_count":22,"area":"vla"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2411.02669","title":"Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack","created":"2024-11-04","cited_by_count":18,"area":"mllm"},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2402.05355","title":"A Survey on Safe Multi-Modal Learning System","created":"2024-02-08","cited_by_count":15,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2308.14597","title":"Adversarial Attacks on Foundational Vision Models","created":"2023-08-28","cited_by_count":13,"area":null},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2410.03869","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2402.11083","title":"VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models","created":"2024-02-16","cited_by_count":10,"area":null},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.21499","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2511.13248","title":"DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents","created":"2025-11-17","cited_by_count":9,"area":"agents"},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2403.10883","title":"Improving Adversarial Transferability of Vision-Language Pre-training Models through Collaborative Multimodal Interaction","created":"2024-03-16","cited_by_count":7,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2411.15244","title":"Adversarial Prompt Distillation for Vision-Language Models","created":"2024-11-22","cited_by_count":6,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2602.10139","title":"Anonymization-Enhanced Privacy Protection for Mobile GUI Agents: Available but Invisible","created":"2026-02-08","cited_by_count":6,"area":null},{"id":"2407.13111","title":"PG-Attack: A Precision-Guided Adversarial Attack Framework Against Vision Foundation Models for Autonomous Driving","created":"2024-07-18","cited_by_count":5,"area":null},{"id":"2407.15239","title":"Benchmark Granularity and Model Robustness for Image-Text Retrieval","created":"2024-07-21","cited_by_count":5,"area":"mllm"},{"id":"2503.16566","title":"REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Models","created":"2025-03-20","cited_by_count":5,"area":"mllm"},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2403.19080","title":"MMCert: Provable Defense against Adversarial Attacks to Multi-modal Models","created":"2024-03-28","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2406.13294","title":"Enhancing Cross-Prompt Transferability in Vision-Language Models through Contextual Injection of Target Tokens","created":"2024-06-19","cited_by_count":4,"area":"mllm"},{"id":"2410.11639","title":"Efficient and Effective Universal Adversarial Attack against Vision-Language Pre-training Models","created":"2024-10-15","cited_by_count":4,"area":"mllm"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2509.20851","title":"Poisoning Prompt-Guided Sampling in Video Large Language Models","created":"2025-09-25","cited_by_count":4,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2504.01308","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","created":"2025-04-02","cited_by_count":3,"area":"mllm"},{"id":"2507.00817","title":"CAVALRY-V: A Large-Scale Generator Framework for Adversarial Attacks on Video MLLMs","created":"2025-07-01","cited_by_count":3,"area":"lr"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2305.13208","title":"Iterative Adversarial Attack on Image-guided Story Ending Generation","created":"2023-05-16","cited_by_count":2,"area":null},{"id":"2410.13030","title":"Sensitivity of Generative VLMs to Semantically and Lexically Altered Prompts","created":"2024-10-16","cited_by_count":2,"area":"mllm"},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2502.08079","title":"MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models","created":"2025-02-12","cited_by_count":2,"area":"mllm"},{"id":"2502.11858","title":"Rethinking Audio-Visual Adversarial Vulnerability from Temporal and Modality Perspectives","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2506.04713","title":"Enabling Validation for Robust Few-Shot Recognition","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2510.11096","title":"CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization","created":"2025-10-13","cited_by_count":2,"area":"mllm"},{"id":"2511.19257","title":"Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2310.00503","title":"Black-box Attacks on Image Activity Prediction and its Natural Language Explanations","created":"2023-09-30","cited_by_count":1,"area":null},{"id":"2405.18770","title":"Multimodal Adversarial Defense for Vision-Language Models by Leveraging One-To-Many Relationships","created":"2024-05-29","cited_by_count":1,"area":"mllm"},{"id":"2411.00898","title":"Replace-then-Perturb: Targeted Adversarial Attacks With Visual Reasoning for Vision-Language Models","created":"2024-11-01","cited_by_count":1,"area":"lr"},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2505.22943","title":"Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2505.24227","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","created":"2025-05-30","cited_by_count":1,"area":"mllm"},{"id":"2506.01064","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","created":"2025-06-01","cited_by_count":1,"area":"mllm"},{"id":"2508.06964","title":"Adversarial Video Promotion Against Text-to-Video Retrieval","created":"2025-08-09","cited_by_count":1,"area":null},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2509.14571","title":"VisMoDAl: Visual Analytics for Evaluating and Improving Corruption Robustness of Vision-Language Models","created":"2025-09-18","cited_by_count":1,"area":"mllm"}],"next_cursor":"100"}