{"total":398,"rows":[{"id":"2311.17600","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","created":"2023-11-29","cited_by_count":274,"area":"mllm"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2402.02207","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","created":"2024-02-03","cited_by_count":167,"area":"safety"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2403.09572","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","created":"2024-03-14","cited_by_count":124,"area":"lr"},{"id":"2401.02906","title":"MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance","created":"2024-01-05","cited_by_count":117,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2311.16101","title":"How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMs","created":"2023-11-27","cited_by_count":108,"area":"lr"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2411.19939","title":"VLSBench: Unveiling Visual Leakage in Multimodal Safety","created":"2024-11-29","cited_by_count":63,"area":"mllm"},{"id":"2412.00473","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","created":"2024-11-30","cited_by_count":62,"area":"safety"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2409.15310","title":"Visual Prompting in Multimodal Large Language Models: A Survey","created":"2024-09-05","cited_by_count":54,"area":"mllm"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2406.11036","title":"garak: A Framework for Security Probing Large Language Models","created":"2024-06-16","cited_by_count":49,"area":"safety"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2502.15806","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","created":"2025-02-19","cited_by_count":43,"area":"lr"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2410.18057","title":"CLEAR: Character Unlearning in Textual and Visual Modalities","created":"2024-10-23","cited_by_count":39,"area":"safety"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2406.06302","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","created":"2024-06-10","cited_by_count":38,"area":"safety"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2410.23861","title":"Audio Is the Achilles' Heel: Red Teaming Audio Large Multimodal Models","created":"2024-10-31","cited_by_count":37,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2502.12520","title":"SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning","created":"2025-02-18","cited_by_count":32,"area":"mllm"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2504.08813","title":"SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models","created":"2025-04-09","cited_by_count":29,"area":"lr"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2504.01081","title":"ShieldGemma 2: Robust and Tractable Image Content Moderation","created":"2025-04-01","cited_by_count":28,"area":null},{"id":"2505.11842","title":"Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs","created":"2025-05-17","cited_by_count":28,"area":"mllm"},{"id":"2406.15279","title":"Safe Inputs but Unsafe Output: Benchmarking Cross-modality Safety Alignment of Large Vision-Language Model","created":"2024-06-21","cited_by_count":26,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2407.21659","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","created":"2024-07-31","cited_by_count":25,"area":"mllm"},{"id":"2507.02844","title":"Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection","created":"2025-07-03","cited_by_count":25,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2501.13772","title":"Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Models","created":"2025-01-23","cited_by_count":23,"area":"safety"},{"id":"2506.01616","title":"MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments","created":"2025-06-02","cited_by_count":23,"area":"agents"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2501.18533","title":"Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models","created":"2025-01-30","cited_by_count":21,"area":"lr"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2410.11459","title":"Jigsaw Puzzles: Splitting Harmful Questions to Jailbreak Large Language Models","created":"2024-10-15","cited_by_count":19,"area":"lr"},{"id":"2410.12662","title":"Cross-Modal Safety Mechanism Transfer in Large Vision-Language Models","created":"2024-10-16","cited_by_count":19,"area":"mllm"},{"id":"2410.14148","title":"Fine-Grained Verifiers: Preference Modeling as Next-token Prediction in Vision-Language Alignment","created":"2024-10-18","cited_by_count":19,"area":"alignment"},{"id":"2411.02708","title":"Exploring Response Uncertainty in MLLMs: An Empirical Evaluation under Misleading Scenarios","created":"2024-11-05","cited_by_count":19,"area":"mllm"},{"id":"2412.18826","title":"RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting","created":"2024-12-25","cited_by_count":19,"area":"mllm"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2508.07173","title":"Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models","created":"2025-08-10","cited_by_count":18,"area":"safety"},{"id":"2408.03554","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","created":"2024-08-07","cited_by_count":17,"area":"mllm"},{"id":"2412.05892","title":"PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization","created":"2024-12-08","cited_by_count":17,"area":"mllm"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2509.25885","title":"SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents","created":"2025-09-30","cited_by_count":17,"area":"agents"},{"id":"2603.15714","title":"How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2403.13507","title":"FMM-Attack: A Flow-based Multi-modal Adversarial Attack on Video-based LLMs","created":"2024-03-20","cited_by_count":14,"area":null},{"id":"2503.11519","title":"Exploring Typographic Visual Prompts Injection Threats in Cross-Modality Generation Models","created":"2025-03-14","cited_by_count":14,"area":null},{"id":"2409.19149","title":"Multimodal Pragmatic Jailbreak on Text-to-image Models","created":"2024-09-27","cited_by_count":13,"area":"diffusion"},{"id":"2504.04893","title":"SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Models","created":"2025-04-07","cited_by_count":13,"area":"mllm"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2501.10057","title":"MSTS: A Multimodal Safety Test Suite for Vision-Language Models","created":"2025-01-17","cited_by_count":12,"area":"mllm"},{"id":"2502.11455","title":"Adversary-Aware DPO: Enhancing Safety Alignment in Vision Language Models via Adversarial Training","created":"2025-02-17","cited_by_count":12,"area":"alignment"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"}],"next_cursor":"100"}