{"total":34,"rows":[{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2406.16746","title":"The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resources","created":"2024-06-24","cited_by_count":11,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2509.26636","title":"AccidentBench: Benchmarking Multimodal Understanding and Reasoning in Vehicle Accidents and Beyond","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2506.11111","title":"Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions","created":"2025-06-08","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2402.06004","title":"Memory-Efficient Vision Transformers: An Activation-Aware Mixed-Rank Compression Strategy","created":"2024-02-08","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2506.03755","title":"Misalignment or misuse? The AGI alignment tradeoff","created":"2025-06-04","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2603.27332","title":"Unsafe by Reciprocity: How Generation-Understanding Coupling Undermines Safety in Unified Multimodal Models","created":"2026-03-28","cited_by_count":2,"area":null},{"id":"2505.22943","title":"Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2510.12117","title":"Locket: Robust Feature-Locking Technique for Language Models","created":"2025-10-14","cited_by_count":1,"area":null},{"id":"2601.16231","title":"SoundBreak: A Systematic Study of Audio-Only Adversarial Attacks on Trimodal Models","created":"2026-01-20","cited_by_count":1,"area":null},{"id":"2602.18845","title":"Echoes of ownership: Adversarial-guided dual injection for copyright protection in MLLMs","created":"2026-02-21","cited_by_count":1,"area":null},{"id":"2603.22260","title":"Greater accessibility can amplify discrimination in generative AI","created":"2026-03-23","cited_by_count":1,"area":null},{"id":"2605.13213","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","created":"2026-05-13","cited_by_count":1,"area":null},{"id":"2410.13010","title":"Hiding-in-Plain-Sight (HiPS) Attack on CLIP for Targetted Object Removal from Images","created":"2024-10-16","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2511.21893","title":"Breaking the Illusion: Consensus-Based Generative Mitigation of Adversarial Illusions in Multi-Modal Embeddings","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2512.04599","title":"Malicious Image Analysis via Vision-Language Segmentation Fusion: Detection, Element, and Location in One-shot","created":"2025-12-04","cited_by_count":0,"area":null},{"id":"2512.17902","title":"Adversarial Robustness of Vision in Open Foundation Models","created":"2025-12-19","cited_by_count":0,"area":null},{"id":"2601.16200","title":"Feature-Space Smoothing: Certified Robustness of Deep Representations","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2607.11560","title":"Technical Report on the CVPR 2026@AdvML Workshop Challenge","created":"2026-07-13","cited_by_count":0,"area":null},{"id":"2610.00371","title":"Deny Without Disabling: Authorization-Paired Evaluation and Control for Multi-Agent Systems","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.17728","title":"Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistants","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}