{"total":117,"rows":[{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2312.07353","title":"CLIP in Medical Imaging: A Survey","created":"2023-12-12","cited_by_count":40,"area":null},{"id":"2403.14774","title":"Few-Shot Adversarial Prompt Learning on Vision-Language Models","created":"2024-03-21","cited_by_count":39,"area":"mllm"},{"id":"2311.01723","title":"Towards Calibrated Robust Fine-Tuning of Vision-Language Models","created":"2023-11-03","cited_by_count":35,"area":"mllm"},{"id":"2305.06061","title":"Visual Tuning","created":"2023-05-10","cited_by_count":34,"area":null},{"id":"2504.11195","title":"R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning","created":"2025-04-15","cited_by_count":33,"area":"mllm"},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2410.21802","title":"Text-Guided Attention is All You Need for Zero-Shot Robustness in Vision-Language Models","created":"2024-10-29","cited_by_count":23,"area":"mllm"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2403.18775","title":"ImageNet-D: Benchmarking Neural Network Robustness on Diffusion Synthetic Object","created":"2024-03-27","cited_by_count":22,"area":"diffusion"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2406.05184","title":"The Unmet Promise of Synthetic Training Images: Using Retrieved Real Images Performs Better","created":"2024-06-07","cited_by_count":19,"area":null},{"id":"2303.00198","title":"Convolutional Visual Prompt for Robust Visual Perception","created":"2023-03-01","cited_by_count":17,"area":null},{"id":"2308.06262","title":"Foundation Model is Efficient Multimodal Multitask Model Selector","created":"2023-08-11","cited_by_count":16,"area":null},{"id":"2506.02557","title":"Kernel-based Unsupervised Embedding Alignment for Enhanced Visual Representation in Vision-language Models","created":"2025-06-03","cited_by_count":15,"area":"mllm"},{"id":"2510.24038","title":"Enhancing CLIP Robustness via Cross-Modality Alignment","created":"2025-10-28","cited_by_count":15,"area":"mllm"},{"id":"2603.06148","title":"VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models","created":"2026-03-06","cited_by_count":14,"area":"mllm"},{"id":"2308.14597","title":"Adversarial Attacks on Foundational Vision Models","created":"2023-08-28","cited_by_count":13,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2310.10591","title":"Interpreting and Controlling Vision Foundation Models via Text Explanations","created":"2023-10-16","cited_by_count":11,"area":null},{"id":"2507.07814","title":"Pay Attention to Attention Distribution: A New Local Lipschitz Bound for Transformers","created":"2025-07-10","cited_by_count":11,"area":null},{"id":"2511.17448","title":"MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models","created":"2025-11-21","cited_by_count":11,"area":"mllm"},{"id":"2311.16445","title":"CLAP: Isolating Content from Style through Contrastive Learning with Augmented Prompts","created":"2023-11-28","cited_by_count":10,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2502.11725","title":"Adversarially Robust CLIP Models Can Induce Better (Robust) Perceptual Metrics","created":"2025-02-17","cited_by_count":10,"area":null},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2404.12139","title":"Omniview-Tuning: Boosting Viewpoint Invariance of Vision-Language Pre-training Models","created":"2024-04-18","cited_by_count":9,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2505.15130","title":"Few-Shot Adversarial Low-Rank Fine-Tuning of Vision-Language Models","created":"2025-05-21","cited_by_count":9,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2510.16596","title":"SHIELD: Suppressing Hallucinations In LVLM Encoders via Bias and Vulnerability Defense","created":"2025-10-18","cited_by_count":7,"area":"mllm"},{"id":"2308.10632","title":"Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models","created":"2023-08-21","cited_by_count":6,"area":null},{"id":"2411.15244","title":"Adversarial Prompt Distillation for Vision-Language Models","created":"2024-11-22","cited_by_count":6,"area":"mllm"},{"id":"2503.18695","title":"OCRT: Boosting Foundation Models in the Open World with Object-Concept-Relation Triad","created":"2025-03-24","cited_by_count":6,"area":null},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2407.11121","title":"Towards Adversarially Robust Vision-Language Models: Insights from Design Choices and Prompt Formatting Techniques","created":"2024-07-15","cited_by_count":5,"area":"mllm"},{"id":"2412.03002","title":"AdvDreamer Unveils: Are Vision-Language Models Truly Ready for Real-World 3D Variations?","created":"2024-12-04","cited_by_count":5,"area":"mllm"},{"id":"2412.19920","title":"Not all Views are Created Equal: Analyzing Viewpoint Instabilities in Vision Foundation Models","created":"2024-12-27","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2603.05235","title":"Reclaiming Lost Text Layers for Source-Free Cross-Domain Few-Shot Learning","created":"2026-03-05","cited_by_count":5,"area":null},{"id":"2407.01157","title":"Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Models","created":"2024-07-01","cited_by_count":3,"area":null},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2506.12706","title":"NAP-Tuning: Neural Augmented Prompt Tuning for Adversarially Robust Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2508.10637","title":"Processing and acquisition traces in visual encoders: What does CLIP know about your camera?","created":"2025-08-14","cited_by_count":3,"area":null},{"id":"2510.22785","title":"Self-Calibrated Consistency can Fight Back for Adversarial Robustness in Vision-Language Models","created":"2025-10-26","cited_by_count":3,"area":"mllm"},{"id":"2602.19418","title":"PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention","created":"2026-02-23","cited_by_count":3,"area":"mllm"},{"id":"2605.08896","title":"FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness","created":"2026-05-09","cited_by_count":3,"area":null},{"id":"2605.29524","title":"KBF: Knowledge Boundary as Fingerprint for Language Model and Black-Box API Auditing","created":"2026-05-28","cited_by_count":3,"area":null},{"id":"2310.19177","title":"Robustifying Language Models with Test-Time Adaptation","created":"2023-10-29","cited_by_count":2,"area":null},{"id":"2402.08473","title":"Intriguing Differences Between Zero-Shot and Systematic Evaluations of Vision-Language Transformer Models","created":"2024-02-13","cited_by_count":2,"area":null},{"id":"2505.06580","title":"TAROT: Towards Essentially Domain-Invariant Robustness with Theoretical Justification","created":"2025-05-10","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2603.10652","title":"Are Video Reasoning Models Ready to Go Outside?","created":"2026-03-11","cited_by_count":2,"area":"lr"},{"id":"2405.18770","title":"Multimodal Adversarial Defense for Vision-Language Models by Leveraging One-To-Many Relationships","created":"2024-05-29","cited_by_count":1,"area":"mllm"},{"id":"2411.00898","title":"Replace-then-Perturb: Targeted Adversarial Attacks With Visual Reasoning for Vision-Language Models","created":"2024-11-01","cited_by_count":1,"area":"lr"},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2508.10065","title":"Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design","created":"2025-08-13","cited_by_count":1,"area":null},{"id":"2509.25082","title":"MANI-Pure: Magnitude-Adaptive Noise Injection for Adversarial Purification","created":"2025-09-29","cited_by_count":1,"area":"diffusion"},{"id":"2511.17362","title":"ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP","created":"2025-11-21","cited_by_count":1,"area":null},{"id":"2512.12997","title":"Calibrating Uncertainty for Zero-Shot Adversarial CLIP","created":"2025-12-15","cited_by_count":1,"area":null},{"id":"2601.12443","title":"Adversarial Defense in Vision-Language Models: An Overview","created":"2026-01-18","cited_by_count":1,"area":"mllm"},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2603.29410","title":"AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models","created":"2026-03-31","cited_by_count":1,"area":"mllm"},{"id":"2604.06440","title":"Visual prompting reimagined: The power of the Activation Prompts","created":"2026-04-07","cited_by_count":1,"area":null},{"id":"2604.11576","title":"Finetune Like You Pretrain: Boosting Zero-shot Adversarial Robustness in Vision-language Models","created":"2026-04-13","cited_by_count":1,"area":"mllm"},{"id":"2604.18867","title":"Hierarchically Robust Zero-shot Vision-language Models","created":"2026-04-20","cited_by_count":1,"area":"mllm"},{"id":"2606.06186","title":"Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models","created":"2026-06-04","cited_by_count":1,"area":"mllm"},{"id":"2606.06938","title":"When CLIP Sees More, It Fights Back Harder: Multi-View Guided Adaptive Counterattacks for Test-Time Adversarial Robustness","created":"2026-06-05","cited_by_count":1,"area":"mllm"},{"id":"2606.08063","title":"Robust-U1: Can MLLMs Self-Recover Corrupted Visual Content for Robust Understanding?","created":"2026-06-06","cited_by_count":1,"area":"mllm"},{"id":"2606.19584","title":"Language-Instructed Vision Embeddings for Controllable and Generalizable Perception","created":"2026-06-17","cited_by_count":1,"area":null},{"id":"2607.03165","title":"Rethinking Brain Decoding with CLIP: The Role of Adversarial Robustness","created":"2026-07-03","cited_by_count":1,"area":null},{"id":"2303.05828","title":"Adapting Contrastive Language-Image Pretrained (CLIP) Models for Out-of-Distribution Detection","created":"2023-03-10","cited_by_count":0,"area":null},{"id":"2311.09680","title":"Trustworthy Large Models in Vision: A Survey","created":"2023-11-16","cited_by_count":0,"area":null},{"id":"2412.01725","title":"Attacks on multimodal models","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2505.17509","title":"MoAPT: Mixture of Adversarial Prompt Tuning for Vision-Language Models","created":"2025-05-23","cited_by_count":0,"area":"mllm"},{"id":"2505.18884","title":"LORE: Lagrangian-Optimized Robust Embeddings for Visual Encoders","created":"2025-05-24","cited_by_count":0,"area":null},{"id":"2507.01788","title":"Are Vision Transformer Representations Semantically Meaningful? A Case Study in Medical Imaging","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2509.14383","title":"RLBind: Adversarial-Invariant Cross-Modal Alignment for Unified Robust Embeddings","created":"2025-09-17","cited_by_count":0,"area":null},{"id":"2509.16163","title":"Robust Vision-Language Models via Tensor Decomposition: A Defense Against Adversarial Attacks","created":"2025-09-19","cited_by_count":0,"area":"mllm"},{"id":"2510.02913","title":"Improving Adversarial Robustness of Zero-Shot CLIP with Confidence-Aware Weighting","created":"2025-10-03","cited_by_count":0,"area":"mllm"},{"id":"2512.07222","title":"Pay Less Attention to Function Words for Free Robustness of Vision-Language Models","created":"2025-12-08","cited_by_count":0,"area":"mllm"},{"id":"2601.12865","title":"Proxy Robustness in Vision Language Models is Effortlessly Transferable","created":"2026-01-19","cited_by_count":0,"area":"mllm"},{"id":"2602.13293","title":"NutVLM: A Self-Adaptive Defense Framework against Full-Dimension Attacks for Vision Language Models in Autonomous Driving","created":"2026-02-09","cited_by_count":0,"area":"mllm"},{"id":"2602.18252","title":"On the Adversarial Robustness of Discrete Image Tokenizers","created":"2026-02-20","cited_by_count":0,"area":null},{"id":"2602.22013","title":"RobustVisRAG: Causality-Aware Vision-Based Retrieval-Augmented Generation under Visual Degradations","created":"2026-02-25","cited_by_count":0,"area":"mllm"},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2603.18598","title":"Complementary Text-Guided Attention for Zero-Shot Adversarial Robustness","created":"2026-03-19","cited_by_count":0,"area":"mllm"}],"next_cursor":"100"}