{"total":87,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2406.12030","title":"SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model","created":"2024-06-17","cited_by_count":85,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2406.18844","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","created":"2024-06-27","cited_by_count":49,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2406.06302","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","created":"2024-06-10","cited_by_count":38,"area":"safety"},{"id":"2505.16640","title":"BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization","created":"2025-05-22","cited_by_count":38,"area":"vla"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2410.01264","title":"Backdooring Vision-Language Models with Out-Of-Distribution Data","created":"2024-10-02","cited_by_count":33,"area":"mllm"},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2408.02882","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","created":"2024-08-06","cited_by_count":31,"area":"agents"},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2501.18624","title":"Membership Inference Attacks Against Vision-Language Models","created":"2025-01-27","cited_by_count":29,"area":"mllm"},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2405.05553","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","created":"2024-05-09","cited_by_count":26,"area":null},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.00934","title":"LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions","created":"2024-06-03","cited_by_count":18,"area":null},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2505.06413","title":"Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving","created":"2025-05-09","cited_by_count":18,"area":"lr"},{"id":"2502.10486","title":"VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap","created":"2025-02-14","cited_by_count":17,"area":"mllm"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2507.00841","title":"SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents","created":"2025-07-01","cited_by_count":15,"area":"safety"},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2506.07214","title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation","created":"2025-06-08","cited_by_count":14,"area":"mllm"},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2505.14418","title":"Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents","created":"2025-05-20","cited_by_count":13,"area":"agents"},{"id":"2602.18739","title":"When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models","created":"2026-02-21","cited_by_count":13,"area":"wm"},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2508.09456","title":"IAG: Input-aware Backdoor Attack on VLM-based Visual Grounding","created":"2025-08-13","cited_by_count":12,"area":"mllm"},{"id":"2502.18511","title":"ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models","created":"2025-02-22","cited_by_count":11,"area":"safety"},{"id":"2506.05401","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","created":"2025-06-04","cited_by_count":11,"area":"mllm"},{"id":"2510.01243","title":"Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing","created":"2025-09-24","cited_by_count":10,"area":"alignment"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2508.02175","title":"Hidden in the Noise: Unveiling Backdoors in Audio LLMs Alignment through Latent Acoustic Pattern Triggers","created":"2025-08-04","cited_by_count":8,"area":"safety"},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2412.01528","title":"CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks","created":"2024-12-02","cited_by_count":6,"area":"diffusion"},{"id":"2503.16872","title":"Lie Detector: Unified Backdoor Detection via Cross-Examination Framework","created":"2025-03-21","cited_by_count":6,"area":null},{"id":"2507.06899","title":"VisualTrap: A Stealthy Backdoor Attack on GUI Agents via Visual Grounding Manipulation","created":"2025-07-09","cited_by_count":6,"area":"agents"},{"id":"2412.11471","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","created":"2024-12-16","cited_by_count":5,"area":null},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2509.22415","title":"Evidence Recomposition and Predictive Context Residualization for Visual Attribution in Multimodal Large Language Models","created":"2025-09-26","cited_by_count":5,"area":"mllm"},{"id":"2509.24566","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","created":"2025-09-29","cited_by_count":5,"area":"mllm"},{"id":"2603.12989","title":"Test-Time Attention Purification for Backdoored Large Vision Language Models","created":"2026-03-13","cited_by_count":5,"area":"mllm"},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2504.03735","title":"Misaligned Roles, Misplaced Images: Structural Input Perturbations Expose Multimodal Alignment Blind Spots","created":"2025-04-01","cited_by_count":4,"area":"mllm"},{"id":"2602.03153","title":"When Attention Betrays: Erasing Backdoor Attacks in Robotic Policies by Reconstructing Visual Tokens","created":"2026-02-03","cited_by_count":4,"area":"vla"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2508.05414","title":"Physical Adversarial Camouflage through Gradient Calibration and Regularization","created":"2025-08-07","cited_by_count":3,"area":null},{"id":"2509.11662","title":"MindVL: Towards Efficient and Effective Training of Multimodal Large Language Models on Ascend NPUs","created":"2025-09-15","cited_by_count":3,"area":"mllm"},{"id":"2510.00319","title":"DecepChain: Inducing Deceptive Reasoning in Large Language Models","created":"2025-09-30","cited_by_count":3,"area":"lr"},{"id":"2605.02202","title":"CBV: Clean-label Backdoor Attacks on Vision Language Models via Diffusion Models","created":"2026-05-04","cited_by_count":3,"area":"mllm"},{"id":"2605.29809","title":"Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing","created":"2026-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2408.02980","title":"Sample-agnostic Adversarial Perturbation for Vision-Language Pre-training Models","created":"2024-08-06","cited_by_count":2,"area":"mllm"},{"id":"2506.10776","title":"ME: Trigger Element Combination Backdoor Attack on Copyright Infringement","created":"2025-06-12","cited_by_count":2,"area":"diffusion"},{"id":"2507.00724","title":"Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2509.22356","title":"RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulation","created":"2025-09-26","cited_by_count":2,"area":"agents"},{"id":"2511.20710","title":"Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2602.22246","title":"Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models","created":"2026-02-24","cited_by_count":2,"area":"diffusion"},{"id":"2603.05872","title":"Evolving Deception: When Agents Evolve, Deception Wins","created":"2026-03-06","cited_by_count":2,"area":"agents"},{"id":"2506.13205","title":"Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents","created":"2025-06-16","cited_by_count":1,"area":"mllm"},{"id":"2510.17759","title":"VERA-V: Variational Inference Framework for Jailbreaking Vision-Language Models","created":"2025-10-20","cited_by_count":1,"area":"lr"},{"id":"2511.22441","title":"GEO-Detective: Unveiling Location Privacy Risks in Images with LLM Agents","created":"2025-11-27","cited_by_count":1,"area":"mllm"},{"id":"2603.05921","title":"BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2607.05783","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","created":"2026-07-07","cited_by_count":1,"area":"driving"},{"id":"2410.04884","title":"Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models","created":"2024-10-07","cited_by_count":0,"area":"mllm"},{"id":"2603.27522","title":"Hidden Ads: Behavior Triggered Semantic Backdoors for Advertisement Injection in Vision Language Models","created":"2026-03-29","cited_by_count":0,"area":"mllm"},{"id":"2604.19083","title":"ProjLens: Unveiling the Role of Projectors in Multimodal Model Safety","created":"2026-04-21","cited_by_count":0,"area":"mllm"},{"id":"2605.07490","title":"Cross-Modal Backdoors in Multimodal Large Language Models","created":"2026-05-08","cited_by_count":0,"area":"safety"},{"id":"2605.22365","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2606.02947","title":"BYORn: Bootstrap Your Own Responses to Defend Large Vision-Language Models Against Backdoor Attacks","created":"2026-06-01","cited_by_count":0,"area":"mllm"},{"id":"2606.23362","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","created":"2026-06-22","cited_by_count":0,"area":"diffusion"},{"id":"2607.00361","title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","created":"2026-07-01","cited_by_count":0,"area":"safety"},{"id":"2607.02995","title":"VISTA: Auditing Semantic Divergence in Vision-Language Models","created":"2026-07-03","cited_by_count":0,"area":"mllm"},{"id":"2607.12571","title":"TrustVLA: Mechanism-Guided Inference-Time Defense Against Vision-Language-Action Backdoors","created":"2026-07-14","cited_by_count":0,"area":"vla"},{"id":"2607.25479","title":"Architectural Backdoors in Vision-Language Model Supply Chains via Representation Steering","created":"2026-07-28","cited_by_count":0,"area":"mllm"},{"id":"2608.04565","title":"Breadcrumbing Search Agents","created":"2026-08-05","cited_by_count":0,"area":"agents"},{"id":"2608.18095","title":"Backdoor Learning in Language Models and Vision-Language Models","created":"2026-06-08","cited_by_count":0,"area":"mllm"},{"id":"2609.07048","title":"FreqDoor: A Hidden Trojan in the Frequency Domain for Backdoor Attacks on Vision-Language Models","created":"2026-09-07","cited_by_count":0,"area":"mllm"},{"id":"2609.07499","title":"CrACK: Adversarial Attacks on Cross-Model Consistency in Collaborative Vision Foundation Models","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2609.29099","title":"TraceGuard: Adaptive Multimodal Poison Filtering through Cross-Feature Rank Agreement","created":"2026-09-24","cited_by_count":0,"area":null}],"next_cursor":null}