{"total":147,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2412.18826","title":"RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting","created":"2024-12-25","cited_by_count":19,"area":"mllm"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2603.06148","title":"VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models","created":"2026-03-06","cited_by_count":14,"area":"mllm"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2407.07392","title":"Malicious Path Manipulations via Exploitation of Representation Vulnerabilities of Vision-Language Navigation Systems","created":"2024-07-10","cited_by_count":11,"area":"mllm"},{"id":"2412.08108","title":"Exploiting Vision Encoder Vulnerabilities for Universal Adversarial Perturbations on Large Vision-Language Models","created":"2024-12-11","cited_by_count":11,"area":"mllm"},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2510.04217","title":"MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering","created":"2025-10-05","cited_by_count":10,"area":"mllm"},{"id":"2511.12917","title":"Explore How to Inject Beneficial Noise in MLLMs","created":"2025-11-17","cited_by_count":10,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2504.10000","title":"Do We Really Need Curated Malicious Data for Safety Alignment in Multi-modal Large Language Models?","created":"2025-04-14","cited_by_count":9,"area":"mllm"},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2410.22888","title":"Effective and Efficient Adversarial Detection for Vision-Language Models via A Single Vector","created":"2024-10-30","cited_by_count":8,"area":"mllm"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2506.09353","title":"DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt","created":"2025-06-11","cited_by_count":8,"area":"mllm"},{"id":"2603.03637","title":"Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions","created":"2026-03-04","cited_by_count":8,"area":"mllm"},{"id":"2407.08970","title":"Self-interpreting Adversarial Images","created":"2024-07-12","cited_by_count":7,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2509.19212","title":"Steering Multimodal Large Language Models Decoding for Context-Aware Safety","created":"2025-09-23","cited_by_count":7,"area":"mllm"},{"id":"2312.07553","title":"Hijacking Context in Large Multi-modal Models","created":"2023-12-07","cited_by_count":6,"area":"mllm"},{"id":"2407.09050","title":"Refusing Safe Prompts for Multi-modal Large Language Models","created":"2024-07-12","cited_by_count":6,"area":"mllm"},{"id":"2602.16931","title":"Narrow Fine-Tuning Erodes Safety Alignment in Vision-Language Agents","created":"2026-02-18","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2502.16593","title":"Tracking the Copyright of Large Vision-Language Models through Parameter Learning Adversarial Images","created":"2025-02-23","cited_by_count":5,"area":"mllm"},{"id":"2505.21967","title":"Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack","created":"2025-05-28","cited_by_count":5,"area":"mllm"},{"id":"2509.00373","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","created":"2025-08-30","cited_by_count":5,"area":"mllm"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2504.03714","title":"Breach in the Shield: Unveiling the Vulnerabilities of Large Language Models","created":"2025-03-28","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2508.15370","title":"Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation","created":"2025-08-21","cited_by_count":4,"area":"mllm"},{"id":"2601.12042","title":"Less Is More -- Until It Breaks: Security Pitfalls of Vision Token Compression in Large Vision-Language Models","created":"2026-01-17","cited_by_count":4,"area":"mllm"},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2603.13385","title":"VisualLeakBench: Auditing the Fragility of Large Vision-Language Models against PII Leakage and Social Engineering","created":"2026-03-11","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2605.00583","title":"Jailbreaking Vision-Language Models Through the Visual Modality","created":"2026-05-01","cited_by_count":4,"area":"mllm"},{"id":"2504.01308","title":"Safeguarding Vision-Language Models: Mitigating Vulnerabilities to Gaussian Noise in Perturbation-based Attacks","created":"2025-04-02","cited_by_count":3,"area":"mllm"},{"id":"2505.24208","title":"Bootstrapping LLM Robustness for VLM Safety via Reducing the Pretraining Modality Gap","created":"2025-05-30","cited_by_count":3,"area":"mllm"},{"id":"2506.15734","title":"The Safety Reminder: A Soft Prompt to Reactivate Delayed Safety Awareness in Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2508.18805","title":"Hidden Tail: Adversarial Image Causing Stealthy Resource Consumption in Vision-Language Models","created":"2025-08-26","cited_by_count":3,"area":"mllm"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2512.02973","title":"Contextual Image Attack: How Visual Context Exposes Multimodal Safety Vulnerabilities","created":"2025-12-02","cited_by_count":3,"area":"mllm"},{"id":"2603.22882","title":"TreeTeaming: Autonomous Red-Teaming of Vision-Language Models via Hierarchical Strategy Exploration","created":"2026-03-24","cited_by_count":3,"area":"mllm"},{"id":"2606.15608","title":"On the Adversarial Robustness of Multimodal LLM Judges","created":"2026-06-14","cited_by_count":3,"area":"mllm"},{"id":"2412.17544","title":"Retention Score: Quantifying Jailbreak Risks for Vision Language Models","created":"2024-12-23","cited_by_count":2,"area":"mllm"},{"id":"2501.09039","title":"Playing Devil's Advocate: Unmasking Toxicity and Vulnerabilities in Large Vision-Language Models","created":"2025-01-14","cited_by_count":2,"area":"mllm"},{"id":"2502.14976","title":"EigenShield: Causal Subspace Filtering via Random Matrix Theory for Adversarially Robust Vision-Language Models","created":"2025-02-20","cited_by_count":2,"area":"mllm"},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2503.13652","title":"Web Artifact Attacks Disrupt Vision Language Models","created":"2025-03-17","cited_by_count":2,"area":"mllm"},{"id":"2503.14189","title":"Towards Harmless Multimodal Assistants with Blind Preference Optimization","created":"2025-03-18","cited_by_count":2,"area":"mllm"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2507.21637","title":"Self-Aware Safety Augmentation: Leveraging Internal Semantic Understanding to Enhance Safety in Vision-Language Models","created":"2025-07-29","cited_by_count":2,"area":"mllm"},{"id":"2510.26830","title":"SmoothGuard: Defending Multimodal Large Language Models with Noise Perturbation and Clustering Aggregation","created":"2025-10-29","cited_by_count":2,"area":"mllm"},{"id":"2511.16229","title":"Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security","created":"2025-11-20","cited_by_count":2,"area":"mllm"},{"id":"2603.22094","title":"Principled Steering via Null-space Projection for Jailbreak Defense in Vision-Language Models","created":"2026-03-23","cited_by_count":2,"area":"mllm"},{"id":"2604.12616","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","created":"2026-04-14","cited_by_count":2,"area":"mllm"},{"id":"2607.09697","title":"Safe responses matter: Output-aware safety guardrail mitigate over-refusal in MLLMs","created":"2026-06-20","cited_by_count":2,"area":"mllm"},{"id":"2607.22716","title":"Visual Token Compression Enhances Robustness of MLLMs","created":"2026-07-21","cited_by_count":2,"area":"mllm"},{"id":"2502.19672","title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack","created":"2025-02-27","cited_by_count":1,"area":"mllm"},{"id":"2505.17132","title":"Dynamic Token Reweighting for Robust Vision-Language Models","created":"2025-05-22","cited_by_count":1,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2506.09067","title":"Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations","created":"2025-06-08","cited_by_count":1,"area":"mllm"},{"id":"2509.25533","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","created":"2025-09-29","cited_by_count":1,"area":"mllm"}],"next_cursor":"100"}