{"total":84,"rows":[{"id":"2305.16934","title":"On Evaluating Adversarial Robustness of Large Vision-Language Models","created":"2023-05-26","cited_by_count":284,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2307.14061","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","created":"2023-07-26","cited_by_count":108,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2403.09766","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","created":"2024-03-14","cited_by_count":45,"area":"mllm"},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2403.14774","title":"Few-Shot Adversarial Prompt Learning on Vision-Language Models","created":"2024-03-21","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2502.07855","title":"Vision-Language Models for Edge Networks: A Comprehensive Survey","created":"2025-02-11","cited_by_count":29,"area":"mllm"},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2410.06699","title":"Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models","created":"2024-10-09","cited_by_count":27,"area":"mllm"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2411.02669","title":"Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack","created":"2024-11-04","cited_by_count":18,"area":"mllm"},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2403.10883","title":"Improving Adversarial Transferability of Vision-Language Pre-training Models through Collaborative Multimodal Interaction","created":"2024-03-16","cited_by_count":7,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2411.15244","title":"Adversarial Prompt Distillation for Vision-Language Models","created":"2024-11-22","cited_by_count":6,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2407.15239","title":"Benchmark Granularity and Model Robustness for Image-Text Retrieval","created":"2024-07-21","cited_by_count":5,"area":"mllm"},{"id":"2503.16566","title":"REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Models","created":"2025-03-20","cited_by_count":5,"area":"mllm"},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2406.13294","title":"Enhancing Cross-Prompt Transferability in Vision-Language Models through Contextual Injection of Target Tokens","created":"2024-06-19","cited_by_count":4,"area":"mllm"},{"id":"2410.11639","title":"Efficient and Effective Universal Adversarial Attack against Vision-Language Pre-training Models","created":"2024-10-15","cited_by_count":4,"area":"mllm"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2504.01308","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","created":"2025-04-02","cited_by_count":3,"area":"mllm"},{"id":"2410.13030","title":"Sensitivity of Generative VLMs to Semantically and Lexically Altered Prompts","created":"2024-10-16","cited_by_count":2,"area":"mllm"},{"id":"2502.08079","title":"MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models","created":"2025-02-12","cited_by_count":2,"area":"mllm"},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2510.11096","title":"CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization","created":"2025-10-13","cited_by_count":2,"area":"mllm"},{"id":"2511.19257","title":"Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2405.18770","title":"Multimodal Adversarial Defense for Vision-Language Models by Leveraging One-To-Many Relationships","created":"2024-05-29","cited_by_count":1,"area":"mllm"},{"id":"2505.24227","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","created":"2025-05-30","cited_by_count":1,"area":"mllm"},{"id":"2506.01064","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","created":"2025-06-01","cited_by_count":1,"area":"mllm"},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2509.14571","title":"VisMoDAl: Visual Analytics for Evaluating and Improving Corruption Robustness of Vision-Language Models","created":"2025-09-18","cited_by_count":1,"area":"mllm"},{"id":"2603.12055","title":"Continual Learning with Vision-Language Models via Semantic-Geometry Preservation","created":"2026-03-12","cited_by_count":1,"area":"mllm"},{"id":"2603.29410","title":"AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models","created":"2026-03-31","cited_by_count":1,"area":"mllm"},{"id":"2604.18867","title":"Hierarchically Robust Zero-shot Vision-language Models","created":"2026-04-20","cited_by_count":1,"area":"mllm"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2402.03627","title":"Partially Recentralization Softmax Loss for Vision-Language Models Robustness","created":"2024-02-06","cited_by_count":0,"area":"mllm"},{"id":"2409.06726","title":"Feedback-based Modal Mutual Search for Attacking Vision-Language Pre-training Models","created":"2024-08-27","cited_by_count":0,"area":"mllm"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2506.05429","title":"Coordinated Robustness Evaluation Framework for Vision-Language Models","created":"2025-06-05","cited_by_count":0,"area":"mllm"},{"id":"2506.22982","title":"Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models","created":"2025-06-28","cited_by_count":0,"area":"mllm"},{"id":"2512.07222","title":"Pay Less Attention to Function Words for Free Robustness of Vision-Language Models","created":"2025-12-08","cited_by_count":0,"area":"mllm"},{"id":"2601.10313","title":"Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models","created":"2026-01-15","cited_by_count":0,"area":"mllm"},{"id":"2601.12304","title":"A Two-Stage Globally-Diverse Adversarial Attack for Vision-Language Pre-training Models","created":"2026-01-18","cited_by_count":0,"area":"mllm"},{"id":"2601.21220","title":"LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models","created":"2026-01-29","cited_by_count":0,"area":"mllm"},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2603.04839","title":"Towards Highly Transferable Vision-Language Attack via Semantic-Augmented Dynamic Contrastive Interaction","created":"2026-03-05","cited_by_count":0,"area":"mllm"},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2603.28568","title":"XSPA: Crafting Imperceptible X-Shaped Sparse Adversarial Perturbations for Transferable Attacks on VLMs","created":"2026-03-30","cited_by_count":0,"area":"mllm"},{"id":"2604.16499","title":"HQA-VLAttack: Towards High Quality Adversarial Attack on Vision-Language Pre-Trained Models","created":"2026-04-14","cited_by_count":0,"area":"mllm"},{"id":"2605.17577","title":"TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2606.10571","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","created":"2026-06-09","cited_by_count":0,"area":"mllm"},{"id":"2607.06485","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","created":"2026-07-07","cited_by_count":0,"area":"mllm"},{"id":"2607.07288","title":"InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.14737","title":"GeoDetect: Geometric Adversarial Detection for VLPs","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.18958","title":"Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model","created":"2026-07-21","cited_by_count":0,"area":"mllm"},{"id":"2609.35002","title":"Still There, No Longer Seen: Exposing Compression-Induced Risk in Large Vision-Language Models","created":"2026-09-28","cited_by_count":0,"area":"mllm"}],"next_cursor":null}