{"total":76,"rows":[{"id":"2310.10012","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","created":"2023-10-16","cited_by_count":250,"area":"diffusion"},{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2311.17516","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","created":"2023-11-29","cited_by_count":194,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2404.02928","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","created":"2024-04-02","cited_by_count":72,"area":"diffusion"},{"id":"2404.08031","title":"Latent Guard: a Safety Framework for Text-to-image Generation","created":"2024-04-11","cited_by_count":71,"area":null},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2306.00974","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","created":"2023-06-01","cited_by_count":25,"area":"diffusion"},{"id":"2306.13103","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","created":"2023-06-16","cited_by_count":24,"area":"diffusion"},{"id":"2408.11071","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","created":"2024-08-18","cited_by_count":22,"area":"diffusion"},{"id":"2306.08257","title":"On the Robustness of Latent Diffusion Models","created":"2023-06-14","cited_by_count":21,"area":"diffusion"},{"id":"2411.16832","title":"Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing","created":"2024-11-25","cited_by_count":21,"area":"diffusion"},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2306.07591","title":"I See Dead People: Gray-Box Adversarial Attack on Image-To-Text Models","created":"2023-06-13","cited_by_count":17,"area":null},{"id":"2312.10993","title":"Realistic Human Motion Generation with Cross-Diffusion Models","created":"2023-12-18","cited_by_count":17,"area":"diffusion"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2403.13507","title":"FMM-Attack: A Flow-based Multi-modal Adversarial Attack on Video-based LLMs","created":"2024-03-20","cited_by_count":14,"area":null},{"id":"2410.07157","title":"InstructG2I: Synthesizing Images from Multimodal Attributed Graphs","created":"2024-10-09","cited_by_count":14,"area":null},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2402.15429","title":"ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation","created":"2024-02-23","cited_by_count":10,"area":"diffusion"},{"id":"2410.02710","title":"SteerDiff: Steering towards Safe Text-to-Image Diffusion Models","created":"2024-10-03","cited_by_count":10,"area":"diffusion"},{"id":"2410.21471","title":"AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models","created":"2024-10-28","cited_by_count":10,"area":"diffusion"},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2407.02411","title":"Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2408.00352","title":"Autonomous LLM-Enhanced Adversarial Attack for Text-to-Motion","created":"2024-08-01","cited_by_count":7,"area":"safety"},{"id":"2502.20623","title":"SafeText: Safe Text-to-image Models via Aligning the Text Encoder","created":"2025-02-28","cited_by_count":7,"area":null},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2504.11707","title":"Towards Safe Synthetic Image Generation On the Web: A Multimodal Robust NSFW Defense and Million Scale Dataset","created":"2025-04-16","cited_by_count":6,"area":null},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2312.00057","title":"VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2507.16329","title":"DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling","created":"2025-07-22","cited_by_count":5,"area":"alignment"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2512.23953","title":"T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models","created":"2025-12-30","cited_by_count":5,"area":"diffusion"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2402.07562","title":"Discovering Universal Semantic Triggers for Text-to-Image Synthesis","created":"2024-02-12","cited_by_count":3,"area":null},{"id":"2403.12166","title":"The Power of Few: Accelerating and Enhancing Data Reweighting with Coreset Selection","created":"2024-03-18","cited_by_count":3,"area":null},{"id":"2412.07249","title":"Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation","created":"2024-12-10","cited_by_count":3,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2508.00591","title":"Wukong Framework for Not Safe For Work Detection in Text-to-Image systems","created":"2025-08-01","cited_by_count":3,"area":"diffusion"},{"id":"2509.22723","title":"Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models","created":"2025-09-25","cited_by_count":3,"area":"diffusion"},{"id":"2510.00635","title":"Erased, But Not Forgotten: Erased Rectified Flow Transformers Still Remain Unsafe Under Concept Attack","created":"2025-10-01","cited_by_count":3,"area":"diffusion"},{"id":"2603.21208","title":"JANUS: A Lightweight Framework for Jailbreaking Text-to-Image Models via Distribution Optimization","created":"2026-03-22","cited_by_count":3,"area":"diffusion"},{"id":"2409.15381","title":"Adversarial Attacks on Parts of Speech: An Empirical Study in Text-to-Image Generation","created":"2024-09-21","cited_by_count":2,"area":"safety"},{"id":"2504.14554","title":"REDEditing: Relationship-Driven Precise Backdoor Poisoning on Text-to-Image Diffusion Models","created":"2025-04-20","cited_by_count":2,"area":"diffusion"},{"id":"2504.17253","title":"DIVE: Inverting Conditional Diffusion Models for Discriminative Tasks","created":"2025-04-24","cited_by_count":2,"area":"diffusion"},{"id":"2504.21307","title":"The Linear Geometry of Interpretable Tokens: Jailbreaking Attacks and Defenses for Unlearned Diffusion Models","created":"2025-04-30","cited_by_count":2,"area":"diffusion"},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.03683","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","created":"2025-06-04","cited_by_count":2,"area":null},{"id":"2601.07141","title":"MacPrompt: Maraconic-guided Jailbreak against Text-to-Image Models","created":"2026-01-12","cited_by_count":2,"area":"safety"},{"id":"2603.27332","title":"Unsafe by Reciprocity: How Generation-Understanding Coupling Undermines Safety in Unified Multimodal Models","created":"2026-03-28","cited_by_count":2,"area":null},{"id":"2605.26332","title":"Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models","created":"2026-05-25","cited_by_count":1,"area":"diffusion"},{"id":"2311.09680","title":"Trustworthy Large Models in Vision: A Survey","created":"2023-11-16","cited_by_count":0,"area":null},{"id":"2312.08843","title":"Diffusion-C: Unveiling the Generative Challenges of Diffusion Models through Corrupted Data","created":"2023-12-14","cited_by_count":0,"area":"diffusion"},{"id":"2402.13629","title":"Adversarial Purification and Fine-tuning for Robust UDC Image Restoration","created":"2024-02-21","cited_by_count":0,"area":null},{"id":"2408.03944","title":"Improving Fast Adversarial Training Paradigm: An Example Taxonomy Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2412.02270","title":"Sustainable Self-evolution Adversarial Training","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2505.03646","title":"Revealing Hidden Vulnerabilities in Autoencoders through Gradient Signal Restoration","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2510.26105","title":"Security Risk of Misalignment between Text and Image in Multi-modal Model","created":"2025-10-30","cited_by_count":0,"area":"diffusion"},{"id":"2511.21180","title":"CAHS-Attack: CLIP-Aware Heuristic Search Attack Method for Stable Diffusion","created":"2025-11-26","cited_by_count":0,"area":"diffusion"},{"id":"2512.22307","title":"LLA: Enhancing Security and Privacy for Generative Models with Logic-Locked Accelerators","created":"2025-12-26","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2604.05853","title":"Reading Between the Pixels: An Inscriptive Jailbreak Attack on Text-to-Image Models","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2605.01113","title":"Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation","created":"2026-05-01","cited_by_count":0,"area":"diffusion"},{"id":"2607.05407","title":"Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2609.33445","title":"Concept Score Relearning: A Unified Cross-Architecture Attack on Concept Erasure","created":"2026-09-27","cited_by_count":0,"area":"diffusion"},{"id":"2609.34920","title":"RISE: Red-teaming via Iterative Strategy Evolution for Modern Text-to-Image Models","created":"2026-09-28","cited_by_count":0,"area":"safety"}],"next_cursor":null}