{"total":284,"rows":[{"id":"2310.03744","title":"Improved Baselines with Visual Instruction Tuning","created":"2023-10-05","cited_by_count":4418,"area":"mllm"},{"id":"2311.16502","title":"MMMU: A Massive Multi-discipline Multimodal Understanding and Reasoning Benchmark for Expert AGI","created":"2023-11-27","cited_by_count":2080,"area":null},{"id":"2306.13394","title":"MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Models","created":"2023-06-23","cited_by_count":1652,"area":"mllm"},{"id":"2307.03109","title":"A Survey on Evaluation of Large Language Models","created":"2023-07-06","cited_by_count":1242,"area":null},{"id":"2306.13549","title":"A Survey on Multimodal Large Language Models","created":"2023-06-23","cited_by_count":909,"area":"mllm"},{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2401.05459","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","created":"2024-01-10","cited_by_count":260,"area":"agents"},{"id":"2309.10020","title":"Multimodal Foundation Models: From Specialists to General-Purpose Assistants","created":"2023-09-18","cited_by_count":247,"area":null},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2310.05694","title":"A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethics","created":"2023-10-09","cited_by_count":163,"area":null},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2410.12761","title":"SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation","created":"2024-10-16","cited_by_count":133,"area":"diffusion"},{"id":"2403.09572","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","created":"2024-03-14","cited_by_count":124,"area":"lr"},{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2311.16101","title":"How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMs","created":"2023-11-27","cited_by_count":108,"area":"lr"},{"id":"2503.02199","title":"Words or Vision: Do Vision-Language Models Have Blind Faith in Text?","created":"2025-03-04","cited_by_count":89,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2411.15296","title":"MME-Survey: A Comprehensive Survey on Evaluation of Multimodal LLMs","created":"2024-11-22","cited_by_count":72,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2404.07204","title":"BRAVE: Broadening the visual encoding of vision-language models","created":"2024-04-10","cited_by_count":69,"area":"mllm"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2404.12241","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","created":"2024-04-18","cited_by_count":62,"area":null},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48,"area":"safety"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2403.09766","title":"An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models","created":"2024-03-14","cited_by_count":45,"area":"mllm"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2410.10855","title":"Core Knowledge Deficits in Multi-Modal Language Models","created":"2024-10-06","cited_by_count":38,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2306.08107","title":"AutoML in the Age of Large Language Models: Current Challenges, Future Opportunities and Risks","created":"2023-06-13","cited_by_count":35,"area":null},{"id":"2405.10313","title":"How Far Are We From AGI: Are LLMs All We Need?","created":"2024-05-16","cited_by_count":31,"area":null},{"id":"2309.07418","title":"A Fast Optimization View: Reformulating Single Layer Attention in LLM Based on Tensor and SVM Trick, and Solving It in Matrix Multiplication Time","created":"2023-09-14","cited_by_count":30,"area":null},{"id":"2410.05474","title":"R-Bench: Are your Large Multimodal Model Robust to Real-world Corruptions?","created":"2024-10-07","cited_by_count":30,"area":"mllm"},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2405.13581","title":"Safety Alignment for Vision Language Models","created":"2024-05-22","cited_by_count":28,"area":"mllm"},{"id":"2402.14899","title":"Stop Reasoning! When Multimodal LLM with Chain-of-Thought Reasoning Meets Adversarial Image","created":"2024-02-22","cited_by_count":26,"area":"lr"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2311.00308","title":"From Image to Language: A Critical Analysis of Visual Question Answering (VQA) Approaches, Challenges, and Opportunities","created":"2023-11-01","cited_by_count":25,"area":null},{"id":"2405.09981","title":"Adversarial Robustness for Visual Grounding of Multimodal Large Language Models","created":"2024-05-16","cited_by_count":23,"area":"mllm"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2509.16645","title":"ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents","created":"2025-09-20","cited_by_count":23,"area":"lr"},{"id":"2403.18775","title":"ImageNet-D: Benchmarking Neural Network Robustness on Diffusion Synthetic Object","created":"2024-03-27","cited_by_count":22,"area":"diffusion"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2510.13237","title":"Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models","created":"2025-10-15","cited_by_count":22,"area":"vla"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21,"area":null},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2509.19870","title":"FreezeVLA: Action-Freezing Attacks against Vision-Language-Action Models","created":"2025-09-24","cited_by_count":21,"area":"vla"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2411.02708","title":"Exploring Response Uncertainty in MLLMs: An Empirical Evaluation under Misleading Scenarios","created":"2024-11-05","cited_by_count":19,"area":"mllm"},{"id":"2306.14895","title":"Large Multimodal Models: Notes on CVPR 2023 Tutorial","created":"2023-06-26","cited_by_count":18,"area":"mllm"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2408.16769","title":"PromptSmooth: Certifying Robustness of Medical Vision-Language Models via Prompt Learning","created":"2024-08-29","cited_by_count":17,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2510.03285","title":"WAREX: Web Agent Reliability Evaluation on Existing Benchmarks","created":"2025-09-28","cited_by_count":15,"area":"agents"},{"id":"2511.14159","title":"MVI-Bench: A Comprehensive Benchmark for Evaluating Robustness to Misleading Visual Inputs in LVLMs","created":"2025-11-18","cited_by_count":15,"area":"mllm"},{"id":"2403.13507","title":"FMM-Attack: A Flow-based Multi-modal Adversarial Attack on Video-based LLMs","created":"2024-03-20","cited_by_count":14,"area":null},{"id":"2404.16557","title":"Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples","created":"2024-04-25","cited_by_count":14,"area":"mllm"},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2504.04716","title":"On the Robustness of GUI Grounding Models Against Image Attacks","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2603.06148","title":"VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models","created":"2026-03-06","cited_by_count":14,"area":"mllm"},{"id":"2407.05365","title":"ElecBench: a Power Dispatch Evaluation Benchmark for Large Language Models","created":"2024-07-07","cited_by_count":13,"area":null},{"id":"2410.01534","title":"Toward a Holistic Evaluation of Robustness in CLIP Models","created":"2024-10-02","cited_by_count":13,"area":"mllm"},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2310.02569","title":"ReForm-Eval: Evaluating Large Vision Language Models via Unified Re-Formulation of Task-Oriented Benchmarks","created":"2023-10-04","cited_by_count":12,"area":"mllm"},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2503.06254","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","created":"2025-03-08","cited_by_count":12,"area":"lr"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null}],"next_cursor":"100"}