{"total":30,"rows":[{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2402.05355","title":"A Survey on Safe Multi-Modal Learning System","created":"2024-02-08","cited_by_count":15,"area":null},{"id":"2309.16573","title":"Language Models as a Service: Overview of a New Paradigm and its Challenges","created":"2023-09-28","cited_by_count":10,"area":null},{"id":"2405.16996","title":"Mitigating Noisy Correspondence by Geometrical Structure Consistency Learning","created":"2024-05-27","cited_by_count":10,"area":null},{"id":"2502.11725","title":"Adversarially Robust CLIP Models Can Induce Better (Robust) Perceptual Metrics","created":"2025-02-17","cited_by_count":10,"area":null},{"id":"2406.06089","title":"Texture Re-scalable Universal Adversarial Perturbation","created":"2024-06-10","cited_by_count":9,"area":null},{"id":"2602.10161","title":"Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignment","created":"2026-02-10","cited_by_count":6,"area":null},{"id":"2412.19920","title":"Not all Views are Created Equal: Analyzing Viewpoint Instabilities in Vision Foundation Models","created":"2024-12-27","cited_by_count":5,"area":null},{"id":"2502.02438","title":"Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment","created":"2025-02-04","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2603.29080","title":"Is the Modality Gap a Bug or a Feature? A Robustness Perspective","created":"2026-03-30","cited_by_count":5,"area":null},{"id":"2506.03755","title":"Misalignment or misuse? The AGI alignment tradeoff","created":"2025-06-04","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2407.21174","title":"AI Safety in Practice: Enhancing Adversarial Robustness in Multimodal Image Captioning","created":"2024-07-30","cited_by_count":3,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2411.15222","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2503.10191","title":"Robustness Tokens: Towards Adversarial Robustness of Transformers","created":"2025-03-13","cited_by_count":2,"area":null},{"id":"2505.19397","title":"Are Time-Series Foundation Models Deployment-Ready? A Systematic Study of Adversarial Robustness Across Domains","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2502.13034","title":"Natural Language Generation from Visual Events: State-of-the-Art and Key Open Questions","created":"2025-02-18","cited_by_count":1,"area":null},{"id":"2512.04554","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","created":"2025-12-04","cited_by_count":1,"area":null},{"id":"2602.18845","title":"Echoes of ownership: Adversarial-guided dual injection for copyright protection in MLLMs","created":"2026-02-21","cited_by_count":1,"area":null},{"id":"2407.18251","title":"Sparse vs Contiguous Adversarial Pixel Perturbations in Multimodal Models: An Empirical Analysis","created":"2024-07-25","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2505.15265","title":"Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2512.17902","title":"Adversarial Robustness of Vision in Open Foundation Models","created":"2025-12-19","cited_by_count":0,"area":null},{"id":"2602.18252","title":"On the Adversarial Robustness of Discrete Image Tokenizers","created":"2026-02-20","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null}],"next_cursor":null}