{"total":202,"rows":[{"id":"2311.17600","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","created":"2023-11-29","cited_by_count":274,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2401.02906","title":"MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance","created":"2024-01-05","cited_by_count":117,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2411.19939","title":"VLSBench: Unveiling Visual Leakage in Multimodal Safety","created":"2024-11-29","cited_by_count":63,"area":"mllm"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2409.15310","title":"Visual Prompting in Multimodal Large Language Models: A Survey","created":"2024-09-05","cited_by_count":54,"area":"mllm"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2410.23861","title":"Audio Is the Achilles' Heel: Red Teaming Audio Large Multimodal Models","created":"2024-10-31","cited_by_count":37,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2502.12520","title":"SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning","created":"2025-02-18","cited_by_count":32,"area":"mllm"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2505.11842","title":"Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs","created":"2025-05-17","cited_by_count":28,"area":"mllm"},{"id":"2406.15279","title":"Safe Inputs but Unsafe Output: Benchmarking Cross-modality Safety Alignment of Large Vision-Language Model","created":"2024-06-21","cited_by_count":26,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2407.21659","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","created":"2024-07-31","cited_by_count":25,"area":"mllm"},{"id":"2507.02844","title":"Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection","created":"2025-07-03","cited_by_count":25,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2410.12662","title":"Cross-Modal Safety Mechanism Transfer in Large Vision-Language Models","created":"2024-10-16","cited_by_count":19,"area":"mllm"},{"id":"2411.02708","title":"Exploring Response Uncertainty in MLLMs: An Empirical Evaluation under Misleading Scenarios","created":"2024-11-05","cited_by_count":19,"area":"mllm"},{"id":"2412.18826","title":"RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Prompting","created":"2024-12-25","cited_by_count":19,"area":"mllm"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2408.03554","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","created":"2024-08-07","cited_by_count":17,"area":"mllm"},{"id":"2412.05892","title":"PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization","created":"2024-12-08","cited_by_count":17,"area":"mllm"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2503.11832","title":"Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning","created":"2025-03-14","cited_by_count":16,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2504.04893","title":"SCAM: A Real-World Typographic Robustness Evaluation for Multimodal Foundation Models","created":"2025-04-07","cited_by_count":13,"area":"mllm"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2501.10057","title":"MSTS: A Multimodal Safety Test Suite for Vision-Language Models","created":"2025-01-17","cited_by_count":12,"area":"mllm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2505.15389","title":"Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Study","created":"2025-05-21","cited_by_count":12,"area":"mllm"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2502.12562","title":"SEA: Low-Resource Safety Alignment for Multimodal Large Language Models via Synthetic Embeddings","created":"2025-02-18","cited_by_count":11,"area":"mllm"},{"id":"2508.05087","title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering","created":"2025-08-07","cited_by_count":11,"area":"mllm"},{"id":"2501.09446","title":"Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness","created":"2025-01-16","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2505.23793","title":"USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2602.12158","title":"SafeNeuron: Neuron-Level Safety Alignment for Large Language Models","created":"2026-02-12","cited_by_count":10,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2504.10000","title":"Do We Really Need Curated Malicious Data for Safety Alignment in Multi-modal Large Language Models?","created":"2025-04-14","cited_by_count":9,"area":"mllm"},{"id":"2506.04704","title":"HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2410.07571","title":"How Does Vision-Language Adaptation Impact the Safety of Vision Language Models?","created":"2024-10-10","cited_by_count":8,"area":"mllm"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2506.09353","title":"DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt","created":"2025-06-11","cited_by_count":8,"area":"mllm"},{"id":"2603.03637","title":"Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions","created":"2026-03-04","cited_by_count":8,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2506.00548","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","created":"2025-05-31","cited_by_count":7,"area":"mllm"},{"id":"2509.19212","title":"Steering Multimodal Large Language Models Decoding for Context-Aware Safety","created":"2025-09-23","cited_by_count":7,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2506.16760","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","created":"2025-06-20","cited_by_count":6,"area":"mllm"},{"id":"2508.05430","title":"Explaining Similarity in Vision-Language Encoders with Weighted Banzhaf Interactions","created":"2025-08-07","cited_by_count":6,"area":"mllm"},{"id":"2510.10846","title":"DUAL-Bench: Measuring Over-Refusal and Robustness in Vision-Language Models","created":"2025-10-12","cited_by_count":6,"area":"mllm"},{"id":"2510.12133","title":"SafeMT: Multi-turn Safety for Multimodal Language Models","created":"2025-10-14","cited_by_count":6,"area":"mllm"},{"id":"2502.04757","title":"ELITE: Enhanced Language-Image Toxicity Evaluation for Safety","created":"2025-02-07","cited_by_count":5,"area":"mllm"},{"id":"2503.16566","title":"REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Models","created":"2025-03-20","cited_by_count":5,"area":"mllm"},{"id":"2505.20362","title":"VSCBench: Bridging the Gap in Vision-Language Model Safety Calibration","created":"2025-05-26","cited_by_count":5,"area":"mllm"},{"id":"2505.21967","title":"Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack","created":"2025-05-28","cited_by_count":5,"area":"mllm"},{"id":"2505.24519","title":"AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders","created":"2025-05-30","cited_by_count":5,"area":"mllm"},{"id":"2509.00373","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","created":"2025-08-30","cited_by_count":5,"area":"mllm"},{"id":"2410.01438","title":"The Great Contradiction Showdown: How Jailbreak and Stealth Wrestle in Vision-Language Models?","created":"2024-10-02","cited_by_count":4,"area":"mllm"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2504.03735","title":"Misaligned Roles, Misplaced Images: Structural Input Perturbations Expose Multimodal Alignment Blind Spots","created":"2025-04-01","cited_by_count":4,"area":"mllm"},{"id":"2505.16104","title":"Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models","created":"2025-05-22","cited_by_count":4,"area":"mllm"},{"id":"2506.17265","title":"SUA: Stealthy Multimodal Large Language Model Unlearning Attack","created":"2025-06-10","cited_by_count":4,"area":"mllm"},{"id":"2507.22037","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","created":"2025-07-29","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2508.09218","title":"Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity","created":"2025-08-11","cited_by_count":4,"area":"mllm"},{"id":"2508.15370","title":"Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation","created":"2025-08-21","cited_by_count":4,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2510.18262","title":"UWBench: A Comprehensive Vision-Language Benchmark for Underwater Understanding","created":"2025-10-21","cited_by_count":4,"area":"mllm"},{"id":"2601.17383","title":"Physical Prompt Injection Attacks on Large Vision-Language Models","created":"2026-01-24","cited_by_count":4,"area":"mllm"},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"}],"next_cursor":"100"}