{"total":55,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2408.02882","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","created":"2024-08-06","cited_by_count":31,"area":"agents"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2401.01377","title":"Does Few-shot Learning Suffer from Backdoor Attacks?","created":"2023-12-31","cited_by_count":20,"area":null},{"id":"2411.16198","title":"Interpreting Object-level Foundation Models via Visual Precision Search","created":"2024-11-25","cited_by_count":20,"area":null},{"id":"2209.09841","title":"Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation","created":"2022-09-20","cited_by_count":19,"area":"distill"},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2303.14304","title":"Ensemble-based Blackbox Attacks on Dense Prediction","created":"2023-03-25","cited_by_count":16,"area":null},{"id":"2602.18739","title":"When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models","created":"2026-02-21","cited_by_count":13,"area":"wm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2508.02028","title":"Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving","created":"2025-08-04","cited_by_count":8,"area":"mllm"},{"id":"2507.01367","title":"3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation","created":"2025-07-02","cited_by_count":7,"area":null},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2605.23220","title":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","created":"2026-05-22","cited_by_count":7,"area":"wm"},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2312.16907","title":"DOEPatch: Dynamically Optimized Ensemble Model for Adversarial Patches Generation","created":"2023-12-28","cited_by_count":5,"area":null},{"id":"2412.11471","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2508.14527","title":"Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles","created":"2025-08-20","cited_by_count":5,"area":"driving"},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2508.02987","title":"Adversarial Attention Perturbations for Large Object Detection Transformers","created":"2025-08-05","cited_by_count":4,"area":null},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2508.06534","title":"MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving","created":"2025-08-04","cited_by_count":3,"area":"driving"},{"id":"2509.18717","title":"Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment","created":"2025-09-23","cited_by_count":3,"area":"safety"},{"id":"2404.15881","title":"Steal Now and Attack Later: Evaluating Robustness of Object Detection against Black-box Adversarial Attacks","created":"2024-04-24","cited_by_count":2,"area":null},{"id":"2502.07821","title":"Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2508.15650","title":"Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance","created":"2025-08-21","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","created":"2026-04-06","cited_by_count":1,"area":"mllm"},{"id":"2607.05783","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","created":"2026-07-07","cited_by_count":1,"area":"driving"},{"id":"2307.12342","title":"Towards Generic and Controllable Attacks Against Object Detection","created":"2023-07-23","cited_by_count":0,"area":null},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2509.20793","title":"FERD: Fairness-Enhanced Data-Free Robustness Distillation","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2603.17567","title":"Face anonymization preserving facial expressions and photometric realism","created":"2026-03-18","cited_by_count":0,"area":null},{"id":"2603.26067","title":"R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting","created":"2026-03-27","cited_by_count":0,"area":null},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2608.06674","title":"Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.10933","title":"SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense","created":"2026-08-11","cited_by_count":0,"area":"safety"},{"id":"2608.21114","title":"CIVA: Critic-Induced Value-Subspace Attacks on Visual World-Model Agents","created":"2026-08-21","cited_by_count":0,"area":"wm"},{"id":"2609.31032","title":"TempQ-Jail: Query-Constrained Candidate Ranking for Text-to-Video Jailbreak Attacks","created":"2026-09-25","cited_by_count":0,"area":"safety"}],"next_cursor":null}