{"total":108,"rows":[{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2502.07855","title":"Vision-Language Models for Edge Networks: A Comprehensive Survey","created":"2025-02-11","cited_by_count":29,"area":"mllm"},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2510.13237","title":"Model-agnostic Adversarial Attack and Defense for Vision-Language-Action Models","created":"2025-10-15","cited_by_count":22,"area":"vla"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2411.02669","title":"Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack","created":"2024-11-04","cited_by_count":18,"area":"mllm"},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2403.10883","title":"Improving Adversarial Transferability of Vision-Language Pre-training Models through Collaborative Multimodal Interaction","created":"2024-03-16","cited_by_count":7,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2501.01042","title":"Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach","created":"2025-01-02","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2310.16499","title":"Data Optimization in Deep Learning: A Survey","created":"2023-10-25","cited_by_count":6,"area":null},{"id":"2411.15244","title":"Adversarial Prompt Distillation for Vision-Language Models","created":"2024-11-22","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2407.13111","title":"PG-Attack: A Precision-Guided Adversarial Attack Framework Against Vision Foundation Models for Autonomous Driving","created":"2024-07-18","cited_by_count":5,"area":null},{"id":"2501.13340","title":"Retrievals Can Be Detrimental: Unveiling the Backdoor Vulnerability of Retrieval-Augmented Diffusion Models","created":"2025-01-23","cited_by_count":5,"area":"rag"},{"id":"2506.11111","title":"Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions","created":"2025-06-08","cited_by_count":5,"area":null},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2407.17797","title":"A Unified Understanding of Adversarial Vulnerability Regarding Unimodal Models and Vision-Language Pre-training Models","created":"2024-07-25","cited_by_count":4,"area":"mllm"},{"id":"2410.11639","title":"Efficient and Effective Universal Adversarial Attack against Vision-Language Pre-training Models","created":"2024-10-15","cited_by_count":4,"area":"mllm"},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2509.20851","title":"Poisoning Prompt-Guided Sampling in Video Large Language Models","created":"2025-09-25","cited_by_count":4,"area":null},{"id":"2507.00817","title":"CAVALRY-V: A Large-Scale Generator Framework for Adversarial Attacks on Video MLLMs","created":"2025-07-01","cited_by_count":3,"area":"lr"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2408.02980","title":"Sample-agnostic Adversarial Perturbation for Vision-Language Pre-training Models","created":"2024-08-06","cited_by_count":2,"area":"mllm"},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2502.08079","title":"MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models","created":"2025-02-12","cited_by_count":2,"area":"mllm"},{"id":"2502.11858","title":"Rethinking Audio-Visual Adversarial Vulnerability from Temporal and Modality Perspectives","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2511.19257","title":"Medusa: Cross-Modal Transferable Adversarial Attacks on Multimodal Medical Retrieval-Augmented Generation","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2405.18770","title":"Multimodal Adversarial Defense for Vision-Language Models by Leveraging One-To-Many Relationships","created":"2024-05-29","cited_by_count":1,"area":"mllm"},{"id":"2411.00898","title":"Replace-then-Perturb: Targeted Adversarial Attacks With Visual Reasoning for Vision-Language Models","created":"2024-11-01","cited_by_count":1,"area":"lr"},{"id":"2505.22943","title":"Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2505.24227","title":"Light as Deception: GPT-driven Natural Relighting Against Vision-Language Pre-training Models","created":"2025-05-30","cited_by_count":1,"area":"mllm"},{"id":"2506.01064","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","created":"2025-06-01","cited_by_count":1,"area":"mllm"},{"id":"2507.07709","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","created":"2025-07-10","cited_by_count":1,"area":"mllm"},{"id":"2508.06964","title":"Adversarial Video Promotion Against Text-to-Video Retrieval","created":"2025-08-09","cited_by_count":1,"area":null},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2509.14571","title":"VisMoDAl: Visual Analytics for Evaluating and Improving Corruption Robustness of Vision-Language Models","created":"2025-09-18","cited_by_count":1,"area":"mllm"},{"id":"2511.14106","title":"Stealth Fine-Tuning: Efficiently Breaking Alignment in RVLMs Using Self-Generated CoT","created":"2025-11-18","cited_by_count":1,"area":"lr"},{"id":"2602.19096","title":"The Power of Decaying Steps: Enhancing Attack Stability and Transferability for Sign-based Optimizers","created":"2026-02-22","cited_by_count":1,"area":null},{"id":"2603.12055","title":"Continual Learning with Vision-Language Models via Semantic-Geometry Preservation","created":"2026-03-12","cited_by_count":1,"area":"mllm"},{"id":"2604.18867","title":"Hierarchically Robust Zero-shot Vision-language Models","created":"2026-04-20","cited_by_count":1,"area":"mllm"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2409.06726","title":"Feedback-based Modal Mutual Search for Attacking Vision-Language Pre-training Models","created":"2024-08-27","cited_by_count":0,"area":"mllm"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2412.02270","title":"Sustainable Self-evolution Adversarial Training","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2505.15265","title":"Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2506.16157","title":"Proxy-Embedding as an Adversarial Teacher: An Embedding-Guided Bidirectional Attack for Referring Expression Segmentation Models","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2511.00831","title":"Enhancing Adversarial Transferability in Visual-Language Pre-training Models via Local Shuffle and Sample-based Attack","created":"2025-11-02","cited_by_count":0,"area":null},{"id":"2511.18138","title":"Vulnerability-Aware Robust Multimodal Adversarial Training","created":"2025-11-22","cited_by_count":0,"area":null},{"id":"2512.07222","title":"Pay Less Attention to Function Words for Free Robustness of Vision-Language Models","created":"2025-12-08","cited_by_count":0,"area":"mllm"},{"id":"2601.09647","title":"Identifying Models Behind Text-to-Image Leaderboards","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2601.10313","title":"Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models","created":"2026-01-15","cited_by_count":0,"area":"mllm"},{"id":"2601.12304","title":"A Two-Stage Globally-Diverse Adversarial Attack for Vision-Language Pre-training Models","created":"2026-01-18","cited_by_count":0,"area":"mllm"},{"id":"2601.21220","title":"LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models","created":"2026-01-29","cited_by_count":0,"area":"mllm"},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.04839","title":"Towards Highly Transferable Vision-Language Attack via Semantic-Augmented Dynamic Contrastive Interaction","created":"2026-03-05","cited_by_count":0,"area":"mllm"},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2603.27759","title":"When Surfaces Lie: Exploiting Wrinkle-Induced Attention Shift to Attack Vision-Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2604.16499","title":"HQA-VLAttack: Towards High Quality Adversarial Attack on Vision-Language Pre-Trained Models","created":"2026-04-14","cited_by_count":0,"area":"mllm"},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.17577","title":"TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2606.10571","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","created":"2026-06-09","cited_by_count":0,"area":"mllm"},{"id":"2607.07288","title":"InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.14737","title":"GeoDetect: Geometric Adversarial Detection for VLPs","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.18958","title":"Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model","created":"2026-07-21","cited_by_count":0,"area":"mllm"}],"next_cursor":"100"}