{"total":92,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2406.17126","title":"MM-SpuBench: Towards Better Understanding of Spurious Biases in Multimodal LLMs","created":"2024-06-24","cited_by_count":33,"area":"mllm"},{"id":"2406.10638","title":"Unveiling the Ignorance of MLLMs: Seeing Clearly, Answering Incorrectly","created":"2024-06-15","cited_by_count":30,"area":"mllm"},{"id":"2410.05474","title":"R-Bench: Are your Large Multimodal Model Robust to Real-world Corruptions?","created":"2024-10-07","cited_by_count":30,"area":"mllm"},{"id":"2410.06699","title":"Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models","created":"2024-10-09","cited_by_count":27,"area":"mllm"},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2507.01790","title":"How Do Vision-Language Models Process Conflicting Information Across Modalities?","created":"2025-07-02","cited_by_count":23,"area":"mllm"},{"id":"2509.16645","title":"ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents","created":"2025-09-20","cited_by_count":23,"area":"lr"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2509.10147","title":"Virtual Agent Economies","created":"2025-09-12","cited_by_count":21,"area":null},{"id":"2505.11454","title":"HumaniBench: A Human-Centric Framework for Large Multimodal Models Evaluation","created":"2025-05-16","cited_by_count":19,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2504.04716","title":"On the Robustness of GUI Grounding Models Against Image Attacks","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12,"area":"agents"},{"id":"2412.08108","title":"Exploiting Vision Encoder Vulnerabilities for Universal Adversarial Perturbations on Large Vision-Language Models","created":"2024-12-11","cited_by_count":11,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2412.14056","title":"A Review of Multimodal Explainable Artificial Intelligence: Past, Present and Future","created":"2024-12-18","cited_by_count":9,"area":null},{"id":"2501.19164","title":"Poison as Cure: Visual Noise for Mitigating Object Hallucinations in LVMs","created":"2025-01-31","cited_by_count":9,"area":"mllm"},{"id":"2505.14289","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","created":"2025-05-20","cited_by_count":9,"area":"agents"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2501.01042","title":"Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach","created":"2025-01-02","cited_by_count":7,"area":"mllm"},{"id":"2409.14488","title":"Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks","created":"2024-09-22","cited_by_count":6,"area":"driving"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2601.21531","title":"On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression","created":"2026-01-29","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2407.11121","title":"Towards Adversarially Robust Vision-Language Models: Insights from Design Choices and Prompt Formatting Techniques","created":"2024-07-15","cited_by_count":5,"area":"mllm"},{"id":"2412.03002","title":"AdvDreamer Unveils: Are Vision-Language Models Truly Ready for Real-World 3D Variations?","created":"2024-12-04","cited_by_count":5,"area":"mllm"},{"id":"2502.16593","title":"Tracking the Copyright of Large Vision-Language Models through Parameter Learning Adversarial Images","created":"2025-02-23","cited_by_count":5,"area":"mllm"},{"id":"2505.13946","title":"Visual Instruction Bottleneck Tuning","created":"2025-05-20","cited_by_count":5,"area":"mllm"},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2407.02716","title":"Light-weight Fine-tuning Method for Defending Adversarial Noise in Pre-trained Medical Vision-Language Models","created":"2024-07-02","cited_by_count":4,"area":"mllm"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2502.14888","title":"Beyond Cross-Modal Alignment: Measuring and Leveraging Modality Gap in Vision-Language Models","created":"2025-02-16","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2604.06950","title":"Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation","created":"2026-04-08","cited_by_count":4,"area":"mllm"},{"id":"2507.23202","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","created":"2025-07-31","cited_by_count":3,"area":"diffusion"},{"id":"2511.15435","title":"HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation","created":"2025-11-19","cited_by_count":3,"area":"mllm"},{"id":"2602.19418","title":"PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention","created":"2026-02-23","cited_by_count":3,"area":"mllm"},{"id":"2604.09574","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","created":"2026-02-24","cited_by_count":3,"area":"agents"},{"id":"2606.15608","title":"On the Adversarial Robustness of Multimodal LLM Judges","created":"2026-06-14","cited_by_count":3,"area":"mllm"},{"id":"2408.13274","title":"Robust Image Classification: Defensive Strategies against FGSM and PGD Adversarial Attacks","created":"2024-08-20","cited_by_count":2,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2606.31933","title":"No Place to Hide: Benchmarking Video Hallucination with Background-Controlled Pairs","created":"2026-06-30","cited_by_count":2,"area":null},{"id":"2502.07905","title":"DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities","created":"2025-02-11","cited_by_count":1,"area":"mllm"},{"id":"2507.07709","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","created":"2025-07-10","cited_by_count":1,"area":"mllm"},{"id":"2508.16972","title":"Robust Diagram Reasoning: A Framework for Enhancing LVLM Performance on Visually Perturbed Scientific Diagrams","created":"2025-08-23","cited_by_count":1,"area":"lr"},{"id":"2509.25896","title":"LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models","created":"2025-09-30","cited_by_count":1,"area":"mllm"},{"id":"2512.04554","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","created":"2025-12-04","cited_by_count":1,"area":null},{"id":"2602.09431","title":"Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models","created":"2026-02-10","cited_by_count":1,"area":"mllm"},{"id":"2602.18845","title":"Echoes of ownership: Adversarial-guided dual injection for copyright protection in MLLMs","created":"2026-02-21","cited_by_count":1,"area":null},{"id":"2602.19096","title":"The Power of Decaying Steps: Enhancing Attack Stability and Transferability for Sign-based Optimizers","created":"2026-02-22","cited_by_count":1,"area":null},{"id":"2605.07250","title":"Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety Alignment","created":"2026-05-08","cited_by_count":1,"area":"alignment"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2605.22536","title":"SpaceDG: Benchmarking Spatial Intelligence under Visual Degradation","created":"2026-05-21","cited_by_count":1,"area":"lr"},{"id":"2607.03165","title":"Rethinking Brain Decoding with CLIP: The Role of Adversarial Robustness","created":"2026-07-03","cited_by_count":1,"area":null},{"id":"2608.04244","title":"SIGNPOST-Bench: Benchmarking Text-Vision Conflict Resolution in Multimodal Large Language Models","created":"2026-08-04","cited_by_count":1,"area":"mllm"},{"id":"2506.22982","title":"Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models","created":"2025-06-28","cited_by_count":0,"area":"mllm"},{"id":"2510.21214","title":"Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses","created":"2025-10-24","cited_by_count":0,"area":"safety"},{"id":"2510.21794","title":"Token-Level Inference-Time Alignment for Vision-Language Models","created":"2025-10-20","cited_by_count":0,"area":"mllm"},{"id":"2512.14188","title":"Optimizing the Adversarial Perturbation with a Momentum-based Adaptive Matrix","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2512.18651","title":"Adversarial Robustness in Zero-Shot Learning:An Empirical Study on Class and Concept-Level Vulnerabilities","created":"2025-12-21","cited_by_count":0,"area":null},{"id":"2601.01804","title":"V-CORE: Temporally Consistent Video Understanding for Video-LLM","created":"2026-01-05","cited_by_count":0,"area":"lr"},{"id":"2601.07315","title":"VLM-CAD: VLM-Optimized Collaborative Agent Design Workflow for Analog Circuit Sizing","created":"2026-01-12","cited_by_count":0,"area":"lr"},{"id":"2601.16200","title":"Feature-Space Smoothing: Certified Robustness of Deep Representations","created":"2026-01-22","cited_by_count":0,"area":null},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2603.04453","title":"Induced Numerical Instability: Hidden Costs in Multimodal Large Language Models","created":"2026-02-27","cited_by_count":0,"area":"mllm"},{"id":"2603.27558","title":"Learning to See through Illumination Extremes with Event Streaming in Multimodal Large Language Models","created":"2026-03-29","cited_by_count":0,"area":"lr"},{"id":"2603.27759","title":"When Surfaces Lie: Exploiting Wrinkle-Induced Attention Shift to Attack Vision-Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2603.29418","title":"Covert Visual Prompt Injection against Commercial Multimodal Large Language Models","created":"2026-03-31","cited_by_count":0,"area":"mllm"},{"id":"2604.01010","title":"PDA: Text-Augmented Defense Framework for Robust Vision-Language Models against Adversarial Image Attacks","created":"2026-04-01","cited_by_count":0,"area":"mllm"},{"id":"2604.12833","title":"Challenging Vision-Language Models with Physically Deployable Multimodal Semantic Lighting Attacks","created":"2026-04-14","cited_by_count":0,"area":"mllm"},{"id":"2605.04261","title":"Laundering AI Authority with Adversarial Examples","created":"2026-05-05","cited_by_count":0,"area":"mllm"},{"id":"2605.14750","title":"EVA: Editing for Versatile Alignment against Jailbreaks","created":"2026-05-14","cited_by_count":0,"area":"mllm"},{"id":"2605.17658","title":"When a Zero-Shooter Cheats: Improving Age Estimation via Activation Steering","created":"2026-05-17","cited_by_count":0,"area":"safety"},{"id":"2605.27927","title":"Structure-Guided Visual Perturbation Neutralization for LVLMs","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2606.22779","title":"DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.19407","title":"Vision-Language Models Integrate Conflicting Evidence Like Biased Bayesian Observers","created":"2026-10-14","cited_by_count":0,"area":"mllm"}],"next_cursor":null}