{"total":183,"rows":[{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2404.03027","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","created":"2024-04-03","cited_by_count":230,"area":"mllm"},{"id":"2410.05451","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","created":"2024-10-07","cited_by_count":210,"area":"alignment"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2403.09572","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","created":"2024-03-14","cited_by_count":124,"area":"lr"},{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2311.16101","title":"How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMs","created":"2023-11-27","cited_by_count":108,"area":"lr"},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106,"area":"agents"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2410.14669","title":"NaturalBench: Evaluating Vision-Language Models on Natural Adversarial Samples","created":"2024-10-18","cited_by_count":97,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2502.02384","title":"STAIR: Improving Safety Alignment with Introspective Reasoning","created":"2025-02-04","cited_by_count":77,"area":"lr"},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65,"area":"safety"},{"id":"2412.00473","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","created":"2024-11-30","cited_by_count":62,"area":"safety"},{"id":"2501.18841","title":"Trading Inference-Time Compute for Adversarial Robustness","created":"2025-01-31","cited_by_count":61,"area":"lr"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2403.14774","title":"Few-Shot Adversarial Prompt Learning on Vision-Language Models","created":"2024-03-21","cited_by_count":39,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2503.07885","title":"Safety Guardrails for LLM-Enabled Robots","created":"2025-03-10","cited_by_count":35,"area":"safety"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2407.15211","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","created":"2024-07-21","cited_by_count":30,"area":"mllm"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2401.11943","title":"Benchmarking Large Multimodal Models against Common Corruptions","created":"2024-01-22","cited_by_count":24,"area":"lr"},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2405.09981","title":"Adversarial Robustness for Visual Grounding of Multimodal Large Language Models","created":"2024-05-16","cited_by_count":23,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2509.16645","title":"ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents","created":"2025-09-20","cited_by_count":23,"area":"lr"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2509.19870","title":"FreezeVLA: Action-Freezing Attacks against Vision-Language-Action Models","created":"2025-09-24","cited_by_count":21,"area":"vla"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2412.18826","title":"RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting","created":"2024-12-25","cited_by_count":19,"area":"mllm"},{"id":"2405.08317","title":"SpeechGuard: Exploring the Adversarial Robustness of Multimodal Large Language Models","created":"2024-05-14","cited_by_count":18,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2404.11207","title":"Exploring the Transferability of Visual Prompting for Multimodal Large Language Models","created":"2024-04-17","cited_by_count":15,"area":"mllm"},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2404.16557","title":"Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples","created":"2024-04-25","cited_by_count":14,"area":"mllm"},{"id":"2404.18191","title":"Exploring the Robustness of In-Context Learning with Noisy Labels","created":"2024-04-28","cited_by_count":14,"area":null},{"id":"2409.05076","title":"PIP: Detecting Adversarial Examples in Large Vision-Language Models via Attention Patterns of Irrelevant Probe Questions","created":"2024-09-08","cited_by_count":14,"area":"mllm"},{"id":"2504.04716","title":"On the Robustness of GUI Grounding Models Against Image Attacks","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2503.14530","title":"SAUCE: Selective Concept Unlearning in Vision-Language Models with Sparse Autoencoders","created":"2025-03-16","cited_by_count":13,"area":"mllm"},{"id":"2404.13752","title":"Adversarial Representation Engineering: A General Model Editing Framework for Large Language Models","created":"2024-04-21","cited_by_count":12,"area":"mechinterp"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2405.19098","title":"Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior","created":"2024-05-29","cited_by_count":11,"area":null},{"id":"2509.24393","title":"Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2411.11496","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","created":"2024-11-18","cited_by_count":10,"area":"lr"},{"id":"2503.19134","title":"MIRAGE: Multimodal Immersive Reasoning and Guided Exploration for Red-Team Jailbreak Attacks","created":"2025-03-24","cited_by_count":10,"area":"lr"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2411.01604","title":"Large Language Model Supply Chain: Open Problems From the Security Perspective","created":"2024-11-03","cited_by_count":9,"area":null},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2502.09818","title":"On the robustness of multimodal language model towards distractions","created":"2025-02-13","cited_by_count":9,"area":"mllm"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2605.26501","title":"Unveiling the Fragility of Vision-Language Models: Multi-Modal Adversarial Synergy via Texture-Constrained Perturbations and Cross-Modal Optimization","created":"2026-05-26","cited_by_count":9,"area":"mllm"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2405.00711","title":"Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunities","created":"2024-04-25","cited_by_count":8,"area":"diffusion"},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2603.03637","title":"Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions","created":"2026-03-04","cited_by_count":8,"area":"mllm"},{"id":"2407.08970","title":"Self-interpreting Adversarial Images","created":"2024-07-12","cited_by_count":7,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2501.01042","title":"Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach","created":"2025-01-02","cited_by_count":7,"area":"mllm"},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2506.00548","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","created":"2025-05-31","cited_by_count":7,"area":"mllm"},{"id":"2503.00037","title":"Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs","created":"2025-02-25","cited_by_count":6,"area":"mllm"},{"id":"2601.21531","title":"On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression","created":"2026-01-29","cited_by_count":6,"area":"mllm"},{"id":"2602.07892","title":"Safety Alignment as Continual Learning: Mitigating the Alignment Tax via Orthogonal Gradient Projection","created":"2026-02-08","cited_by_count":6,"area":"alignment"},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2405.19668","title":"AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization","created":"2024-05-30","cited_by_count":5,"area":"safety"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"}],"next_cursor":"100"}