{"total":125,"rows":[{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2412.00473","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","created":"2024-11-30","cited_by_count":62,"area":"safety"},{"id":"2410.06625","title":"ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time","created":"2024-10-09","cited_by_count":60,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45,"area":"agents"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2407.21659","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","created":"2024-07-31","cited_by_count":25,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2508.07173","title":"Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models","created":"2025-08-10","cited_by_count":18,"area":"safety"},{"id":"2502.13095","title":"Understanding and Rectifying Safety Perception Distortion in VLMs","created":"2025-02-18","cited_by_count":17,"area":"mllm"},{"id":"2501.03012","title":"Analyzing Finetuning Representation Shift for Multimodal LLMs Steering","created":"2025-01-06","cited_by_count":16,"area":"mllm"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2501.15269","title":"Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink","created":"2025-01-25","cited_by_count":15,"area":"mllm"},{"id":"2508.12815","title":"Learning to Steer: Input-dependent Steering for Multimodal LLMs","created":"2025-08-18","cited_by_count":15,"area":"mllm"},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2511.12982","title":"SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization","created":"2025-11-17","cited_by_count":12,"area":"lr"},{"id":"2412.15289","title":"SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage","created":"2024-12-19","cited_by_count":11,"area":"alignment"},{"id":"2508.05087","title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering","created":"2025-08-07","cited_by_count":11,"area":"mllm"},{"id":"2512.06589","title":"OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation","created":"2025-12-06","cited_by_count":11,"area":"safety"},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2504.03770","title":"JailDAM: Jailbreak Detection with Adaptive Memory for Vision-Language Model","created":"2025-04-03","cited_by_count":10,"area":"mllm"},{"id":"2507.01513","title":"SafePTR: Token-Level Jailbreak Defense in Multimodal LLMs via Prune-then-Restore Mechanism","created":"2025-07-02","cited_by_count":10,"area":"lr"},{"id":"2510.06871","title":"SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models","created":"2025-10-08","cited_by_count":10,"area":"lr"},{"id":"2504.10000","title":"Do We Really Need Curated Malicious Data for Safety Alignment in Multi-modal Large Language Models?","created":"2025-04-14","cited_by_count":9,"area":"mllm"},{"id":"2506.04704","title":"HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2506.09353","title":"DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt","created":"2025-06-11","cited_by_count":8,"area":"mllm"},{"id":"2510.17633","title":"SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering","created":"2025-10-20","cited_by_count":8,"area":"safety"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2412.12722","title":"Defending LVLMs Against Vision Attacks through Partial-Perception Supervision","created":"2024-12-17","cited_by_count":7,"area":"mllm"},{"id":"2509.19212","title":"Steering Multimodal Large Language Models Decoding for Context-Aware Safety","created":"2025-09-23","cited_by_count":7,"area":"mllm"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6,"area":"agents"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2505.21967","title":"Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack","created":"2025-05-28","cited_by_count":5,"area":"mllm"},{"id":"2509.00373","title":"Activation Steering Meets Preference Optimization: Defense Against Jailbreaks in Vision Language Models","created":"2025-08-30","cited_by_count":5,"area":"mllm"},{"id":"2510.13190","title":"SHIELD: Classifier-Guided Prompting for Robust and Safer LVLMs","created":"2025-10-15","cited_by_count":5,"area":"lr"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2603.15800","title":"Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memory","created":"2026-03-16","cited_by_count":5,"area":"lr"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2505.16104","title":"Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models","created":"2025-05-22","cited_by_count":4,"area":"mllm"},{"id":"2507.22037","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","created":"2025-07-29","cited_by_count":4,"area":"mllm"},{"id":"2510.13698","title":"Attention Misses Visual Risk: Risk-Adaptive Steering for Multimodal Safety Alignment","created":"2025-10-15","cited_by_count":4,"area":"alignment"},{"id":"2510.17687","title":"CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks","created":"2025-10-20","cited_by_count":4,"area":"lr"},{"id":"2601.06757","title":"MTMCS-Bench: Evaluating Contextual Safety of Multimodal Large Language Models in Multi-Turn Dialogues","created":"2026-01-11","cited_by_count":4,"area":"mllm"},{"id":"2603.17372","title":"Understanding and Defending VLM Jailbreaks via Jailbreak-Related Representation Shift","created":"2026-03-18","cited_by_count":4,"area":"mllm"},{"id":"2603.20198","title":"Visual Exclusivity Attacks: Automatic Multimodal Red Teaming via Agentic Planning","created":"2026-02-05","cited_by_count":4,"area":"agents"},{"id":"2604.25562","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","created":"2026-04-28","cited_by_count":4,"area":"agents"},{"id":"2606.09125","title":"Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges","created":"2026-06-08","cited_by_count":4,"area":"mllm"},{"id":"2408.08464","title":"$\\textit{MMJ-Bench}$: A Comprehensive Study on Jailbreak Attacks and Defenses for Multimodal Large Language Models","created":"2024-08-16","cited_by_count":3,"area":"safety"},{"id":"2503.10872","title":"TAIJI: Textual Anchoring for Immunizing Jailbreak Images in Vision Language Models","created":"2025-03-13","cited_by_count":3,"area":"mllm"},{"id":"2505.24208","title":"Bootstrapping LLM Robustness for VLM Safety via Reducing the Pretraining Modality Gap","created":"2025-05-30","cited_by_count":3,"area":"mllm"},{"id":"2506.15734","title":"The Safety Reminder: A Soft Prompt to Reactivate Delayed Safety Awareness in Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2511.16743","title":"SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge","created":"2025-11-20","cited_by_count":3,"area":"mllm"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2602.01834","title":"Concept-Based Dictionary Learning for Inference-Time Safety in Vision Language Action Models","created":"2026-02-02","cited_by_count":3,"area":"vla"},{"id":"2602.11096","title":"Safety Recovery in Reasoning Models Is Only a Few Early Steering Steps Away","created":"2026-02-11","cited_by_count":3,"area":"lr"},{"id":"2603.08486","title":"Visual Self-Fulfilling Alignment: Shaping Safety-Oriented Personas via Threat-Related Images","created":"2026-03-09","cited_by_count":3,"area":"mllm"},{"id":"2603.22882","title":"TreeTeaming: Autonomous Red-Teaming of Vision-Language Models via Hierarchical Strategy Exploration","created":"2026-03-24","cited_by_count":3,"area":"mllm"},{"id":"2604.12284","title":"WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents","created":"2026-04-14","cited_by_count":3,"area":"agents"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2503.06989","title":"Probabilistic Modeling of Jailbreak on Multimodal LLMs: From Quantification to Application","created":"2025-03-10","cited_by_count":2,"area":"mllm"},{"id":"2503.11619","title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense","created":"2025-03-14","cited_by_count":2,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.24232","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2507.21637","title":"Self-Aware Safety Augmentation: Leveraging Internal Semantic Understanding to Enhance Safety in Vision-Language Models","created":"2025-07-29","cited_by_count":2,"area":"mllm"},{"id":"2508.09016","title":"A Survey on Training-free Alignment of Large Language Models","created":"2025-08-12","cited_by_count":2,"area":"alignment"},{"id":"2508.10955","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","created":"2025-08-14","cited_by_count":2,"area":"mllm"},{"id":"2510.25179","title":"Agentic Moderation: Multi-Agent Design for Safer Vision-Language Models","created":"2025-10-29","cited_by_count":2,"area":"mllm"},{"id":"2602.03402","title":"Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utility","created":"2026-02-03","cited_by_count":2,"area":"lr"},{"id":"2603.22094","title":"Principled Steering via Null-space Projection for Jailbreak Defense in Vision-Language Models","created":"2026-03-23","cited_by_count":2,"area":"mllm"},{"id":"2607.09697","title":"Safe responses matter: Output-aware safety guardrail mitigate over-refusal in MLLMs","created":"2026-06-20","cited_by_count":2,"area":"mllm"},{"id":"2607.22716","title":"Visual Token Compression Enhances Robustness of MLLMs","created":"2026-07-21","cited_by_count":2,"area":"mllm"},{"id":"2608.04192","title":"Behavioral Skill Reconstruction: Reconstructing Hidden Functionality from LLM Agent Skills","created":"2026-08-04","cited_by_count":2,"area":"agents"},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2504.16134","title":"Multimodal Large Language Models for Enhanced Traffic Safety: A Comprehensive Review and Future Trends","created":"2025-04-21","cited_by_count":1,"area":"mllm"},{"id":"2505.17132","title":"Dynamic Token Reweighting for Robust Vision-Language Models","created":"2025-05-22","cited_by_count":1,"area":"mllm"},{"id":"2512.01185","title":"DefenSee: Dissecting Threat from Sight and Text -- A Multi-View Defensive Pipeline for Multi-modal Jailbreaks","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2601.03416","title":"GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models","created":"2026-01-06","cited_by_count":1,"area":"lr"},{"id":"2602.24027","title":"GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models","created":"2026-02-27","cited_by_count":1,"area":"mllm"},{"id":"2603.14825","title":"Two Birds, One Projection: Harmonizing Safety and Utility in LVLMs via Inference-time Feature Projection","created":"2026-03-16","cited_by_count":1,"area":"mllm"}],"next_cursor":"100"}