{"total":39,"rows":[{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2405.05524","title":"Universal Adversarial Perturbations for Vision-Language Pre-trained Models","created":"2024-05-09","cited_by_count":31,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2505.15130","title":"Few-Shot Adversarial Low-Rank Fine-Tuning of Vision-Language Models","created":"2025-05-21","cited_by_count":9,"area":"mllm"},{"id":"2511.07049","title":"From Pretrain to Pain: Adversarial Vulnerability of Video Foundation Models Without Task Knowledge","created":"2025-11-10","cited_by_count":9,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2407.17797","title":"A Unified Understanding of Adversarial Vulnerability Regarding Unimodal Models and Vision-Language Pre-training Models","created":"2024-07-25","cited_by_count":4,"area":"mllm"},{"id":"2511.00446","title":"ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training","created":"2025-11-01","cited_by_count":4,"area":"mllm"},{"id":"2403.00376","title":"Spurious Feature Eraser: Stabilizing Test-Time Adaptation for Vision-Language Foundation Model","created":"2024-03-01","cited_by_count":2,"area":"mllm"},{"id":"2408.02980","title":"Sample-agnostic Adversarial Perturbation for Vision-Language Pre-training Models","created":"2024-08-06","cited_by_count":2,"area":"mllm"},{"id":"2505.23266","title":"Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion","created":"2025-05-29","cited_by_count":2,"area":"mllm"},{"id":"2507.01042","title":"Can Argus Judge Them All? Comparing VLMs Across Domains","created":"2025-06-23","cited_by_count":2,"area":"mllm"},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2512.11336","title":"UFVideo: Towards Unified Fine-Grained Video Cooperative Understanding with Large Language Models","created":"2025-12-12","cited_by_count":2,"area":"mllm"},{"id":"2512.16523","title":"TTP: Test-Time Padding for Adversarial Detection and Robust Adaptation on Vision-Language Models","created":"2025-12-18","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2604.12371","title":"Reading Between the Pixels: Linking Text-Image Embedding Alignment to Typographic Attack Success on Vision-Language Models","created":"2026-04-14","cited_by_count":2,"area":"mllm"},{"id":"2504.11509","title":"PATFinger: Prompt-Adapted Transferable Fingerprinting against Unauthorized Multimodal Dataset Usage","created":"2025-04-15","cited_by_count":1,"area":"mllm"},{"id":"2409.06726","title":"Feedback-based Modal Mutual Search for Attacking Vision-Language Pre-training Models","created":"2024-08-27","cited_by_count":0,"area":"mllm"},{"id":"2601.10313","title":"Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models","created":"2026-01-15","cited_by_count":0,"area":"mllm"},{"id":"2601.21220","title":"LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models","created":"2026-01-29","cited_by_count":0,"area":"mllm"},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2604.25102","title":"One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations","created":"2026-04-28","cited_by_count":0,"area":"mllm"},{"id":"2605.17577","title":"TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2607.06485","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","created":"2026-07-07","cited_by_count":0,"area":"mllm"},{"id":"2607.14737","title":"GeoDetect: Geometric Adversarial Detection for VLPs","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2609.36648","title":"VLM4Cluster: Benchmarking Deep Clustering In the Era of Vision-Language Pre-training","created":"2026-09-29","cited_by_count":0,"area":"mllm"}],"next_cursor":null}