{"total":135,"rows":[{"id":"2402.17177","title":"Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Models","created":"2024-02-27","cited_by_count":477,"area":null},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2501.02189","title":"A Survey of State of the Art Large Vision Language Models: Alignment, Benchmark, Evaluations and Challenges","created":"2025-01-04","cited_by_count":47,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35,"area":"safety"},{"id":"2406.14477","title":"SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Dataset","created":"2024-06-20","cited_by_count":35,"area":"alignment"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2503.15092","title":"Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findings","created":"2025-03-19","cited_by_count":27,"area":null},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2402.14859","title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative","created":"2024-02-20","cited_by_count":21,"area":"agents"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2505.19684","title":"VisCRA: A Visual Chain Reasoning Attack for Jailbreaking Multimodal Large Language Models","created":"2025-05-26","cited_by_count":13,"area":"lr"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2406.16746","title":"The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resources","created":"2024-06-24","cited_by_count":11,"area":null},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2512.06589","title":"OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation","created":"2025-12-06","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2411.11496","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","created":"2024-11-18","cited_by_count":10,"area":"lr"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2405.00711","title":"Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunities","created":"2024-04-25","cited_by_count":8,"area":"diffusion"},{"id":"2504.01735","title":"AdPO: Enhancing the Adversarial Robustness of Large Vision-Language Models with Preference Optimization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2512.20168","title":"Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography","created":"2025-12-23","cited_by_count":8,"area":"mllm"},{"id":"2603.03637","title":"Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions","created":"2026-03-04","cited_by_count":8,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2506.16760","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","created":"2025-06-20","cited_by_count":6,"area":"mllm"},{"id":"2509.23573","title":"Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence","created":"2025-09-28","cited_by_count":6,"area":null},{"id":"2602.16931","title":"Narrow Fine-Tuning Erodes Safety Alignment in Vision-Language Agents","created":"2026-02-18","cited_by_count":6,"area":"mllm"},{"id":"2605.02946","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","created":"2026-05-01","cited_by_count":6,"area":"alignment"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2506.07153","title":"Mind the Web: The Security of Web Use Agents","created":"2025-06-08","cited_by_count":5,"area":"agents"},{"id":"2509.00373","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","created":"2025-08-30","cited_by_count":5,"area":"mllm"},{"id":"2510.02677","title":"ARMs: Adaptive Red-Teaming Agent against Multimodal Models with Plug-and-Play Attacks","created":"2025-10-03","cited_by_count":5,"area":"mllm"},{"id":"2512.05853","title":"VRSA: Jailbreaking Multimodal Large Language Models through Visual Reasoning Sequential Attack","created":"2025-12-05","cited_by_count":5,"area":"lr"},{"id":"2411.04291","title":"Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models","created":"2024-11-06","cited_by_count":4,"area":"mllm"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2501.19017","title":"Benchmarking Gaslighting Negation Attacks Against Multimodal Large Language Models","created":"2025-01-31","cited_by_count":3,"area":"mllm"},{"id":"2506.15734","title":"The Safety Reminder: A Soft Prompt to Reactivate Delayed Safety Awareness in Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2512.02973","title":"Contextual Image Attack: How Visual Context Exposes Multimodal Safety Vulnerabilities","created":"2025-12-02","cited_by_count":3,"area":"mllm"},{"id":"2512.08503","title":"Disrupting Hierarchical Reasoning: Adversarial Protection for Geographic Privacy in Multimodal Reasoning Models","created":"2025-12-09","cited_by_count":3,"area":"lr"},{"id":"2602.11096","title":"Safety Recovery in Reasoning Models Is Only a Few Early Steering Steps Away","created":"2026-02-11","cited_by_count":3,"area":"lr"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2605.17248","title":"Image-to-Video Diffusion: From Foundations to Open Frontiers","created":"2026-05-17","cited_by_count":3,"area":"diffusion"},{"id":"2407.03045","title":"JailbreakHunter: A Visual Analytics Approach for Jailbreak Prompts Discovery from Large-Scale Human-LLM Conversational Datasets","created":"2024-07-03","cited_by_count":2,"area":"safety"},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2507.11968","title":"Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluation","created":"2025-07-16","cited_by_count":2,"area":"mllm"},{"id":"2508.09201","title":"Learning to Detect Unseen Jailbreak Attacks in Large Vision-Language Models","created":"2025-08-08","cited_by_count":2,"area":"mllm"},{"id":"2508.10955","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","created":"2025-08-14","cited_by_count":2,"area":"mllm"},{"id":"2509.21401","title":"JaiLIP: Jailbreaking Vision-Language Models via Loss Guided Image Perturbation","created":"2025-09-24","cited_by_count":2,"area":"lr"},{"id":"2511.16229","title":"Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security","created":"2025-11-20","cited_by_count":2,"area":"mllm"}],"next_cursor":"100"}