{"total":115,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2311.16194","title":"BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP","created":"2023-11-26","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2406.18844","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","created":"2024-06-27","cited_by_count":49,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2501.13563","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","created":"2025-01-23","cited_by_count":24,"area":"lr"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2505.06679","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","created":"2025-05-10","cited_by_count":21,"area":"diffusion"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2509.22496","title":"Where MLLMs Attend and What They Rely On: Explaining Autoregressive Token Generation","created":"2025-09-26","cited_by_count":16,"area":"mllm"},{"id":"2507.00841","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","created":"2025-07-01","cited_by_count":15,"area":"safety"},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2409.17601","title":"CleanerCLIP: Fine-grained Counterfactual Semantic Augmentation for Backdoor Defense in Contrastive Learning","created":"2024-09-26","cited_by_count":13,"area":"safety"},{"id":"2602.18739","title":"When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models","created":"2026-02-21","cited_by_count":13,"area":"wm"},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2502.18511","title":"ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models","created":"2025-02-22","cited_by_count":11,"area":"safety"},{"id":"2506.05401","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","created":"2025-06-04","cited_by_count":11,"area":"mllm"},{"id":"2409.15968","title":"Adversarial Backdoor Defense in CLIP","created":"2024-09-24","cited_by_count":10,"area":"safety"},{"id":"2504.16907","title":"BadVideo: Stealthy Backdoor Attack against Text-to-Video Generation","created":"2025-04-23","cited_by_count":9,"area":"safety"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2407.02411","title":"Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2411.16154","title":"DeDe: Detecting Backdoor Samples for SSL Encoders via Decoders","created":"2024-11-25","cited_by_count":6,"area":"safety"},{"id":"2412.01528","title":"CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks","created":"2024-12-02","cited_by_count":6,"area":"diffusion"},{"id":"2503.16872","title":"Lie Detector: Unified Backdoor Detection via Cross-Examination Framework","created":"2025-03-21","cited_by_count":6,"area":null},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2510.08094","title":"DarkHash: A Data-Free Backdoor Attack Against Deep Hashing","created":"2025-10-09","cited_by_count":6,"area":null},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2412.11471","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2508.14527","title":"Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles","created":"2025-08-20","cited_by_count":5,"area":"driving"},{"id":"2509.24566","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","created":"2025-09-29","cited_by_count":5,"area":"mllm"},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2412.00727","title":"Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP","created":"2024-12-01","cited_by_count":4,"area":"mllm"},{"id":"2505.07258","title":"No Query, No Access","created":"2025-05-12","cited_by_count":4,"area":null},{"id":"2509.20196","title":"Universal Camouflage Attack on Vision-Language Models for Autonomous Driving","created":"2025-09-24","cited_by_count":4,"area":"mllm"},{"id":"2511.00446","title":"ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training","created":"2025-11-01","cited_by_count":4,"area":"mllm"},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2508.09105","title":"SMA: Who Said That? Auditing Membership Leakage in Semi-Black-box RAG Controlling","created":"2025-08-12","cited_by_count":3,"area":"rag"},{"id":"2509.12990","title":"Dual-Stage Reweighted MoE for Long-Tailed Egocentric Mistake Detection","created":"2025-09-16","cited_by_count":3,"area":"moe"},{"id":"2511.04711","title":"SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking","created":"2025-11-05","cited_by_count":3,"area":"mllm"},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2605.29809","title":"Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing","created":"2026-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2411.12389","title":"Combinational Backdoor Attack against Customized Text-to-Image Models","created":"2024-11-19","cited_by_count":2,"area":"diffusion"},{"id":"2503.08829","title":"Seal Your Backdoor with Variational Defense","created":"2025-03-11","cited_by_count":2,"area":null},{"id":"2506.10776","title":"ME: Trigger Element Combination Backdoor Attack on Copyright Infringement","created":"2025-06-12","cited_by_count":2,"area":"diffusion"},{"id":"2506.22506","title":"SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning","created":"2025-06-25","cited_by_count":2,"area":"safety"},{"id":"2508.01272","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","created":"2025-08-02","cited_by_count":2,"area":null},{"id":"2508.06837","title":"Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models","created":"2025-08-09","cited_by_count":2,"area":"diffusion"},{"id":"2509.22356","title":"RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulation","created":"2025-09-26","cited_by_count":2,"area":"agents"},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2510.08016","title":"Backdoor Vectors: a Task Arithmetic View on Backdoor Attacks and Defenses","created":"2025-10-09","cited_by_count":2,"area":null},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2602.22246","title":"Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models","created":"2026-02-24","cited_by_count":2,"area":"diffusion"},{"id":"2603.27999","title":"CLIP-AUTT: Test-Time Personalization with Action Unit Prompting for Fine-Grained Video Emotion Recognition","created":"2026-03-30","cited_by_count":2,"area":null},{"id":"2402.09164","title":"Less is More: Fewer Interpretable Region via Submodular Subset Selection","created":"2024-02-14","cited_by_count":1,"area":null},{"id":"2502.16167","title":"PersGuard: Preventing Malicious Personalization in Text-to-Image Diffusion Models via Model Backdoors","created":"2025-02-22","cited_by_count":1,"area":"diffusion"},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2502.19269","title":"Neural Antidote: Class-Wise Prompt Tuning for Purifying Backdoors in CLIP","created":"2025-02-26","cited_by_count":1,"area":"mllm"},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2510.14845","title":"Backdoor Unlearning by Linear Task Decomposition","created":"2025-10-16","cited_by_count":1,"area":null},{"id":"2511.14106","title":"Stealth Fine-Tuning: Efficiently Breaking Alignment in RVLMs Using Self-Generated CoT","created":"2025-11-18","cited_by_count":1,"area":"lr"},{"id":"2603.05921","title":"BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2603.11664","title":"BackdoorIDS: Zero-shot Backdoor Detection for Pretrained Vision Encoder","created":"2026-03-12","cited_by_count":1,"area":"mllm"},{"id":"2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","created":"2026-04-06","cited_by_count":1,"area":"mllm"},{"id":"2607.05783","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","created":"2026-07-07","cited_by_count":1,"area":"driving"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2506.15201","title":"Privacy-Shielded Image Compression: Defending Against Exploitation from Vision-Language Pretrained Models","created":"2025-06-18","cited_by_count":0,"area":"mllm"},{"id":"2507.17934","title":"Multimodal Fine-grained Reasoning for Post Quality Evaluation","created":"2025-07-21","cited_by_count":0,"area":null},{"id":"2508.08040","title":"BadPromptFL: A Novel Backdoor Threat to Prompt-based Federated Learning in Multimodal Models","created":"2025-08-11","cited_by_count":0,"area":"mllm"},{"id":"2509.21400","title":"SafeSteer: Adaptive Subspace Steering for Efficient Jailbreak Defense in Vision-Language Models","created":"2025-09-24","cited_by_count":0,"area":"safety"},{"id":"2511.06947","title":"FoCLIP: A Feature-Space Misalignment Framework for CLIP-Based Image Manipulation and Detection","created":"2025-11-10","cited_by_count":0,"area":null},{"id":"2511.12735","title":"Backdoor Attacks on Open Vocabulary Object Detectors via Multi-Modal Prompt Tuning","created":"2025-11-16","cited_by_count":0,"area":"safety"},{"id":"2512.00343","title":"Assimilation Matters: Model-level Backdoor Detection in Vision-Language Pretrained Models","created":"2025-11-29","cited_by_count":0,"area":"mllm"},{"id":"2601.11006","title":"Backdoor Attacks on Multi-modal Contrastive Learning","created":"2026-01-16","cited_by_count":0,"area":null},{"id":"2603.27522","title":"Hidden Ads: Behavior Triggered Semantic Backdoors for Advertisement Injection in Vision Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2604.05809","title":"Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Models","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2604.09101","title":"CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2605.01834","title":"Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning","created":"2026-05-03","cited_by_count":0,"area":null}],"next_cursor":"100"}