{"total":32,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2311.16194","title":"BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP","created":"2023-11-26","cited_by_count":67,"area":"mllm"},{"id":"2406.18844","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","created":"2024-06-27","cited_by_count":49,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2509.22496","title":"Where MLLMs Attend and What They Rely On: Explaining Autoregressive Token Generation","created":"2025-09-26","cited_by_count":16,"area":"mllm"},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2506.05401","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","created":"2025-06-04","cited_by_count":11,"area":"mllm"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2509.24566","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","created":"2025-09-29","cited_by_count":5,"area":"mllm"},{"id":"2412.00727","title":"Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP","created":"2024-12-01","cited_by_count":4,"area":"mllm"},{"id":"2509.20196","title":"Universal Camouflage Attack on Vision-Language Models for Autonomous Driving","created":"2025-09-24","cited_by_count":4,"area":"mllm"},{"id":"2511.00446","title":"ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training","created":"2025-11-01","cited_by_count":4,"area":"mllm"},{"id":"2511.04711","title":"SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking","created":"2025-11-05","cited_by_count":3,"area":"mllm"},{"id":"2509.23917","title":"Bridging the Task Gap: Multi-Task Adversarial Transferability in CLIP and Its Derivatives","created":"2025-09-28","cited_by_count":2,"area":"mllm"},{"id":"2502.19269","title":"Neural Antidote: Class-Wise Prompt Tuning for Purifying Backdoors in CLIP","created":"2025-02-26","cited_by_count":1,"area":"mllm"},{"id":"2603.11664","title":"BackdoorIDS: Zero-shot Backdoor Detection for Pretrained Vision Encoder","created":"2026-03-12","cited_by_count":1,"area":"mllm"},{"id":"2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","created":"2026-04-06","cited_by_count":1,"area":"mllm"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2506.15201","title":"Privacy-Shielded Image Compression: Defending Against Exploitation from Vision-Language Pretrained Models","created":"2025-06-18","cited_by_count":0,"area":"mllm"},{"id":"2508.08040","title":"BadPromptFL: A Novel Backdoor Threat to Prompt-based Federated Learning in Multimodal Models","created":"2025-08-11","cited_by_count":0,"area":"mllm"},{"id":"2512.00343","title":"Assimilation Matters: Model-level Backdoor Detection in Vision-Language Pretrained Models","created":"2025-11-29","cited_by_count":0,"area":"mllm"},{"id":"2603.27522","title":"Hidden Ads: Behavior Triggered Semantic Backdoors for Advertisement Injection in Vision Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2604.09101","title":"CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2608.10959","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","created":"2026-08-11","cited_by_count":0,"area":"mllm"},{"id":"2608.21577","title":"Anchoring Bias: A Persistent Fairness Backdoor Attack against MLLMs under Continual Learning","created":"2026-08-21","cited_by_count":0,"area":"mllm"}],"next_cursor":null}