{"total":57,"rows":[{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2410.07112","title":"VHELM: A Holistic Evaluation of Vision Language Models","created":"2024-10-09","cited_by_count":53,"area":"mllm"},{"id":"2406.18844","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","created":"2024-06-27","cited_by_count":49,"area":"mllm"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2407.15211","title":"Failures to Find Transferable Image Jailbreaks Between Vision-Language Models","created":"2024-07-21","cited_by_count":30,"area":"mllm"},{"id":"2501.18624","title":"Membership Inference Attacks Against Vision-Language Models","created":"2025-01-27","cited_by_count":29,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2511.10222","title":"Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guard","created":"2025-11-13","cited_by_count":13,"area":"safety"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2411.11496","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","created":"2024-11-18","cited_by_count":10,"area":"lr"},{"id":"2504.08974","title":"Mixed Signals: Decoding VLMs' Reasoning and Underlying Bias in Vision-Language Conflict","created":"2025-04-11","cited_by_count":10,"area":"lr"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2507.06256","title":"Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World","created":"2025-07-07","cited_by_count":9,"area":null},{"id":"2605.26501","title":"Unveiling the Fragility of Vision-Language Models: Multi-Modal Adversarial Synergy via Texture-Constrained Perturbations and Cross-Modal Optimization","created":"2026-05-26","cited_by_count":9,"area":"mllm"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2507.01020","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-04-18","cited_by_count":8,"area":"safety"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2506.00548","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","created":"2025-05-31","cited_by_count":7,"area":"mllm"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2604.05498","title":"JailWAM: Jailbreaking World Action Models in Robot Control","created":"2026-04-07","cited_by_count":6,"area":"wm"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2510.17687","title":"CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks","created":"2025-10-20","cited_by_count":4,"area":"lr"},{"id":"2511.07315","title":"JPRO: Automated Multimodal Jailbreaking via Multi-Agent Collaboration Framework","created":"2025-11-10","cited_by_count":4,"area":"agents"},{"id":"2601.06460","title":"Tone Matters: The Impact of Linguistic Tone on Hallucination in VLMs","created":"2026-01-10","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2604.18803","title":"LLM-as-Judge Framework for Evaluating Tone-Induced Hallucination in Vision-Language Models","created":"2026-04-20","cited_by_count":3,"area":"mllm"},{"id":"2503.11619","title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense","created":"2025-03-14","cited_by_count":2,"area":"safety"},{"id":"2507.04673","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","created":"2025-07-07","cited_by_count":2,"area":"safety"},{"id":"2607.00174","title":"Steal the Patch Size: Adversarially Manipulate Vision-Language Models","created":"2026-06-30","cited_by_count":2,"area":"mllm"},{"id":"2412.16555","title":"Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Models","created":"2024-12-21","cited_by_count":1,"area":"mllm"},{"id":"2503.13279","title":"Goal2Story: A Multi-Agent Fleet based on Privately Enabled sLLMs for Impacting Mapping on Requirements Elicitation","created":"2025-03-17","cited_by_count":1,"area":"agents"},{"id":"2506.16407","title":"Robustness Evaluation of OCR-based Visual Document Understanding under Multi-Modal Adversarial Attacks","created":"2025-06-19","cited_by_count":1,"area":null},{"id":"2510.17759","title":"VERA-V: Variational Inference Framework for Jailbreaking Vision-Language Models","created":"2025-10-20","cited_by_count":1,"area":"lr"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2510.21214","title":"Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses","created":"2025-10-24","cited_by_count":0,"area":"safety"},{"id":"2511.02376","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-11-04","cited_by_count":0,"area":"safety"},{"id":"2604.08846","title":"Dictionary-Aligned Concept Control for Safeguarding Multimodal LLMs","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2605.00699","title":"STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack","created":"2026-05-01","cited_by_count":0,"area":"safety"},{"id":"2605.25534","title":"StructBreak: Structural Cognitive Overload-Induced Safety Failures in MLLMs","created":"2026-05-25","cited_by_count":0,"area":"lr"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.29099","title":"TraceGuard: Adaptive Multimodal Poison Filtering through Cross-Feature Rank Agreement","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.32489","title":"When Helpful Text Hurts: Option-Redirecting Bias in Vision-Language Models","created":"2026-09-26","cited_by_count":0,"area":"mllm"},{"id":"2610.12516","title":"TraceICL: Thread-Resolved Demonstration Curation with Consistency Calibration for Robust Multimodal In-Context Learning","created":"2026-10-07","cited_by_count":0,"area":"mllm"}],"next_cursor":null}