{"total":79,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2410.10855","title":"Core Knowledge Deficits in Multi-Modal Language Models","created":"2024-10-06","cited_by_count":38,"area":"mllm"},{"id":"2501.02765","title":"Visual Large Language Models for Generalized and Specialized Applications","created":"2025-01-06","cited_by_count":36,"area":"mllm"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2410.05474","title":"R-Bench: Are your Large Multimodal Model Robust to Real-world Corruptions?","created":"2024-10-07","cited_by_count":30,"area":"mllm"},{"id":"2410.06699","title":"Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models","created":"2024-10-09","cited_by_count":27,"area":"mllm"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2502.17832","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","created":"2025-02-25","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2507.01790","title":"How Do Vision-Language Models Process Conflicting Information Across Modalities?","created":"2025-07-02","cited_by_count":23,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2410.16983","title":"Order Matters: Exploring Order Sensitivity in Multimodal Large Language Models","created":"2024-10-22","cited_by_count":20,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2407.14971","title":"Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models","created":"2024-07-20","cited_by_count":12,"area":"mllm"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2312.04231","title":"Adventures of Trustworthy Vision-Language Models: A Survey","created":"2023-12-07","cited_by_count":10,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2511.07049","title":"From Pretrain to Pain: Adversarial Vulnerability of Video Foundation Models Without Task Knowledge","created":"2025-11-10","cited_by_count":9,"area":"mllm"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2312.07553","title":"Hijacking Context in Large Multi-modal Models","created":"2023-12-07","cited_by_count":6,"area":"mllm"},{"id":"2407.09050","title":"Refusing Safe Prompts for Multi-modal Large Language Models","created":"2024-07-12","cited_by_count":6,"area":"mllm"},{"id":"2503.12874","title":"Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models","created":"2025-03-17","cited_by_count":6,"area":"mllm"},{"id":"2601.21531","title":"On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression","created":"2026-01-29","cited_by_count":6,"area":"mllm"},{"id":"2502.16593","title":"Tracking the Copyright of Large Vision-Language Models through Parameter Learning Adversarial Images","created":"2025-02-23","cited_by_count":5,"area":"mllm"},{"id":"2509.00373","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","created":"2025-08-30","cited_by_count":5,"area":"mllm"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2504.03714","title":"Breach in the Shield: Unveiling the Vulnerabilities of Large Language Models","created":"2025-03-28","cited_by_count":4,"area":"mllm"},{"id":"2604.06950","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","created":"2026-04-08","cited_by_count":4,"area":"mllm"},{"id":"2506.15734","title":"The Safety Reminder: A Soft Prompt to Reactivate Delayed Safety Awareness in Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2511.15435","title":"HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation","created":"2025-11-19","cited_by_count":3,"area":"mllm"},{"id":"2602.19418","title":"PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention","created":"2026-02-23","cited_by_count":3,"area":"mllm"},{"id":"2606.15608","title":"On the Adversarial Robustness of Multimodal LLM Judges","created":"2026-06-14","cited_by_count":3,"area":"mllm"},{"id":"2506.03933","title":"Diffusion-based Cumulative Adversarial Purification for Vision Language Models","created":"2025-06-04","cited_by_count":2,"area":"mllm"},{"id":"2507.11968","title":"Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluation","created":"2025-07-16","cited_by_count":2,"area":"mllm"},{"id":"2602.15927","title":"Visual Memory Injection Attacks for Multi-Turn Conversations","created":"2026-02-17","cited_by_count":2,"area":"mllm"},{"id":"2603.22094","title":"Principled Steering via Null-space Projection for Jailbreak Defense in Vision-Language Models","created":"2026-03-23","cited_by_count":2,"area":"mllm"},{"id":"2504.16134","title":"Multimodal Large Language Models for Enhanced Traffic Safety: A Comprehensive Review and Future Trends","created":"2025-04-21","cited_by_count":1,"area":"mllm"},{"id":"2506.01064","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","created":"2025-06-01","cited_by_count":1,"area":"mllm"},{"id":"2507.07709","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","created":"2025-07-10","cited_by_count":1,"area":"mllm"},{"id":"2602.09431","title":"Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models","created":"2026-02-10","cited_by_count":1,"area":"mllm"},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2604.09024","title":"Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection","created":"2026-04-10","cited_by_count":1,"area":"mllm"},{"id":"2608.18938","title":"Breaking the weakest link to evade vision language models","created":"2026-08-19","cited_by_count":1,"area":"mllm"},{"id":"2505.17509","title":"MoAPT: Mixture of Adversarial Prompt Tuning for Vision-Language Models","created":"2025-05-23","cited_by_count":0,"area":"mllm"},{"id":"2506.22982","title":"Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models","created":"2025-06-28","cited_by_count":0,"area":"mllm"},{"id":"2507.20994","title":"Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM","created":"2025-07-28","cited_by_count":0,"area":"mllm"},{"id":"2601.06464","title":"On the Adversarial Robustness of 3D Large Vision-Language Models","created":"2026-01-10","cited_by_count":0,"area":"mllm"},{"id":"2605.01449","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","created":"2026-05-02","cited_by_count":0,"area":"mllm"},{"id":"2605.28609","title":"JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2606.03713","title":"Investigating Adversarial Robustness of Multi-modal Large Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2607.06485","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","created":"2026-07-07","cited_by_count":0,"area":"mllm"},{"id":"2607.14737","title":"GeoDetect: Geometric Adversarial Detection for VLPs","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.18958","title":"Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model","created":"2026-07-21","cited_by_count":0,"area":"mllm"},{"id":"2607.27897","title":"Unifying Adversarially Robust Model Experts in Vision-Language Models","created":"2026-07-30","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2608.17306","title":"Learning What Not to Learn: Adversarial Disentangled Prompt Tuning for Robust Vision-Language Models","created":"2026-08-18","cited_by_count":0,"area":"mllm"},{"id":"2609.35002","title":"Still There, No Longer Seen: Exposing Compression-Induced Risk in Large Vision-Language Models","created":"2026-09-28","cited_by_count":0,"area":"mllm"},{"id":"2609.38298","title":"It Takes Little to Rewrite Perception: Targeted Semantic Substitution in Vision-Language Models at $ε\\leq 4/255$","created":"2026-09-29","cited_by_count":0,"area":"mllm"}],"next_cursor":null}