{"total":89,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2404.07214","title":"Exploring the Frontier of Vision-Language Models: A Survey of Current Methodologies and Future Directions","created":"2024-02-20","cited_by_count":68,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2310.02224","title":"Can Language Models be Instructed to Protect Personal Information?","created":"2023-10-03","cited_by_count":46,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2407.15211","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","created":"2024-07-21","cited_by_count":30,"area":"mllm"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2505.11842","title":"Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs","created":"2025-05-17","cited_by_count":28,"area":"mllm"},{"id":"2405.10529","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","created":"2024-05-17","cited_by_count":27,"area":"mllm"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2407.04952","title":"Granular Privacy Control for Geolocation with Vision Language Models","created":"2024-07-06","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2411.01703","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","created":"2024-11-03","cited_by_count":19,"area":"mllm"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2603.03637","title":"Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions","created":"2026-03-04","cited_by_count":8,"area":"mllm"},{"id":"2407.08970","title":"Self-interpreting Adversarial Images","created":"2024-07-12","cited_by_count":7,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2501.01042","title":"Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach","created":"2025-01-02","cited_by_count":7,"area":"mllm"},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2506.00548","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","created":"2025-05-31","cited_by_count":7,"area":"mllm"},{"id":"2407.09050","title":"Refusing Safe Prompts for Multi-modal Large Language Models","created":"2024-07-12","cited_by_count":6,"area":"mllm"},{"id":"2504.03714","title":"Breach in the Shield: Unveiling the Vulnerabilities of Large Language Models","created":"2025-03-28","cited_by_count":4,"area":"mllm"},{"id":"2504.03735","title":"Misaligned Roles, Misplaced Images: Structural Input Perturbations Expose Multimodal Alignment Blind Spots","created":"2025-04-01","cited_by_count":4,"area":"mllm"},{"id":"2507.22037","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","created":"2025-07-29","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2601.12042","title":"Less Is More -- Until It Breaks: Security Pitfalls of Vision Token Compression in Large Vision-Language Models","created":"2026-01-17","cited_by_count":4,"area":"mllm"},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2603.13385","title":"VisualLeakBench: Auditing the Fragility of Large Vision-Language Models against PII Leakage and Social Engineering","created":"2026-03-11","cited_by_count":4,"area":"mllm"},{"id":"2604.06950","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","created":"2026-04-08","cited_by_count":4,"area":"mllm"},{"id":"2605.00583","title":"Jailbreaking Vision-Language Models Through the Visual Modality","created":"2026-05-01","cited_by_count":4,"area":"mllm"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2512.02973","title":"Contextual Image Attack: How Visual Context Exposes Multimodal Safety Vulnerabilities","created":"2025-12-02","cited_by_count":3,"area":"mllm"},{"id":"2603.08486","title":"Visual Self-Fulfilling Alignment: Shaping Safety-Oriented Personas via Threat-Related Images","created":"2026-03-09","cited_by_count":3,"area":"mllm"},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2508.10955","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","created":"2025-08-14","cited_by_count":2,"area":"mllm"},{"id":"2509.12521","title":"Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time","created":"2025-09-15","cited_by_count":2,"area":"mllm"},{"id":"2602.15927","title":"Visual Memory Injection Attacks for Multi-Turn Conversations","created":"2026-02-17","cited_by_count":2,"area":"mllm"},{"id":"2503.09964","title":"ExtremeAIGC: Benchmarking LMM Vulnerability to AI-Generated Extremist Content","created":"2025-03-13","cited_by_count":1,"area":"mllm"},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2507.07709","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","created":"2025-07-10","cited_by_count":1,"area":"mllm"},{"id":"2509.25533","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","created":"2025-09-29","cited_by_count":1,"area":"mllm"},{"id":"2510.09699","title":"VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands","created":"2025-10-09","cited_by_count":1,"area":"mllm"},{"id":"2602.19570","title":"VALD: Multi-Stage Vision Attack Detection for Efficient LVLM Defense","created":"2026-02-23","cited_by_count":1,"area":"mllm"},{"id":"2603.00565","title":"MIDAS: Multi-Image Dispersion and Semantic Reconstruction for Jailbreaking MLLMs","created":"2026-02-28","cited_by_count":1,"area":"mllm"},{"id":"2604.09024","title":"Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection","created":"2026-04-10","cited_by_count":1,"area":"mllm"},{"id":"2503.06223","title":"RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion","created":"2025-03-08","cited_by_count":0,"area":"mllm"},{"id":"2508.08521","title":"VISOR: Visual Input-based Steering for Output Redirection in Vision-Language Models","created":"2025-08-11","cited_by_count":0,"area":"mllm"},{"id":"2511.20002","title":"Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation","created":"2025-11-25","cited_by_count":0,"area":"mllm"},{"id":"2603.29418","title":"Covert Visual Prompt Injection against Commercial Multimodal Large Language Models","created":"2026-03-31","cited_by_count":0,"area":"mllm"},{"id":"2604.08846","title":"Dictionary-Aligned Concept Control for Safeguarding Multimodal LLMs","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2605.01449","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","created":"2026-05-02","cited_by_count":0,"area":"mllm"},{"id":"2605.04261","title":"Laundering AI Authority with Adversarial Examples","created":"2026-05-05","cited_by_count":0,"area":"mllm"},{"id":"2606.03793","title":"Exploring Adversarial Robustness and Safety Alignment in Multilingual Multi-Modal Large Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2606.07706","title":"MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models","created":"2026-06-05","cited_by_count":0,"area":"mllm"},{"id":"2606.22779","title":"DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2608.17234","title":"COMIC: Reference-Aware Safety Gating for Multimodal Large Language Models","created":"2026-08-18","cited_by_count":0,"area":"mllm"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.02233","title":"InfraPatch: Cross-Task Targeted Grayscale Patch Attacks on Infrared-Adapted Vision-Language Models","created":"2026-09-02","cited_by_count":0,"area":"mllm"},{"id":"2609.05535","title":"Beyond the Verdict: Evidence-Aligned Evaluation of Visual Prompt-Injection Guardrails","created":"2026-09-02","cited_by_count":0,"area":"mllm"},{"id":"2609.05889","title":"Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization","created":"2026-09-05","cited_by_count":0,"area":"mllm"},{"id":"2609.38298","title":"It Takes Little to Rewrite Perception: Targeted Semantic Substitution in Vision-Language Models at $ε\\leq 4/255$","created":"2026-09-29","cited_by_count":0,"area":"mllm"},{"id":"2610.01871","title":"Walking the Embedding Space: Datastore Extraction from Multimodal RAG","created":"2026-10-01","cited_by_count":0,"area":"mllm"},{"id":"2610.03445","title":"Corrupted but Correct: Why Vision-Language Models Lie to Themselves Internally","created":"2026-10-02","cited_by_count":0,"area":"mllm"}],"next_cursor":null}