Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples
On the map: Multimodal LLMs / vision-language models → Visual token pruning and efficiency
Abstract (arXiv)
Despite the exceptional performance of multi-modal large language models (MLLMs), their deployment requires substantial computational resources. Once malicious users induce high energy consumption and latency time (energy-latency cost), it will exhaust computational resources and harm availability of service. In this paper, we investigate this vulnerability for MLLMs, particularly image-based and video-based ones, and aim to induce high energy-latency cost during inference by crafting an imperceptible perturbation. We find that high energy-latency cost can be manipulated by maximizing the length of generated sequences, which motivates us to propose verbose samples, including verbose images and videos. Concretely, two modality non-specific losses are proposed, including a loss to delay end-of-sequence (EOS) token and an uncertainty loss to increase the uncertainty over each generated token. In addition, improving diversity is important to encourage longer responses by increasing the complexity, which inspires the following modality specific loss. For verbose images, a token diversity loss is proposed to promote diverse hidden states. For verbose videos, a frame feature diversity loss is proposed to increase the feature diversity among frames. To balance these losses, we propose a temporal weight adjustment algorithm. Experiments demonstrate that our verbose samples can largely extend the length of generated sequences.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Visual token pruning and efficiency, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 47 of its 68 references that are in the map. First posted on arXiv 25 Apr 2024.
Builds on
47 of 68 references.
References · 47
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2023Visual Instruction Tuningcited by 7,792
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
35 more
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,855
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,689
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2021Align before Fuse: Vision and Language Representation Learning with Momentum Distillationcited by 1,612
- 2023Video-LLaMA: An Instruction-tuned Audio-Visual Language Model for Video Understandingcited by 1,461
- 2023Video-LLaVA: Learning United Visual Representation by Alignment Before Projectioncited by 1,385
- 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,310
- 2023MVBench: A Comprehensive Multi-modal Video Understanding Benchmarkcited by 1,086
- 2023Kosmos-2: Grounding Multimodal Large Language Models to the Worldcited by 1,075
- 2023Shikra: Unleashing Multimodal LLM's Referential Dialogue Magiccited by 891
- 2018Object Hallucination in Image Captioningcited by 661
- 2023MiniGPT-v2: large language model as a unified interface for vision-language multi-task learningcited by 617
- 2021Carbon Emissions and Large Neural Network Trainingcited by 561
- 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
- 2019On Evaluating Adversarial Robustnesscited by 442
- 2023Are aligned neural networks adversarially aligned?cited by 305
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2021VisualGPT: Data-efficient Adaptation of Pretrained Language Models for Image Captioningcited by 190
- 2023How Robust is Google's Bard to Adversarial Image Attacks?cited by 177
- 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Modelscited by 121
- 2023Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMscited by 117
- 2020Sponge Examples: Energy-Latency Attacks on Neural Networkscited by 108
- 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Imagescited by 69
- 2024Beyond Efficiency: A Systematic Survey of Resource-Efficient Large Language Modelscited by 64
- 2023BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIPcited by 63
- 2023Jailbreaking GPT-4V via Self-Adversarial Attacks with System Promptscited by 62
- 2020A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inferencecited by 61
- 2022NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Modelscited by 47
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2020Improving Query Efficiency of Black-box Adversarial Attackcited by 34
- 2022LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Modelscited by 16
- 2023Universal Multimodal Representation for Language Understandingcited by 14
Built on by
Citing papers per year: 2024: 8; 2025: 4; 2026: 2.
14 papers.
Sort:
By area:
- 2024Denial-of-Service Poisoning Attacks against Large Language Modelscited by 34
- 2024Adversarial Robustness for Visual Grounding of Multimodal Large Language Modelscited by 23
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Surveycited by 23
- 2024CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attackscited by 19
- 2024BoostAdapter: Improving Vision-Language Test-Time Adaptation via Regional Bootstrappingcited by 17
- 2024Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Modelscited by 16
- 2025LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loopscited by 9
- 2024Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMscited by 7
- 2025RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attackscited by 7
- 2024Make Your Home Safe: Time-aware Unsupervised User Behavior Anomaly Detection in Smart Homes via Loss-guided Maskcited by 5
- 2026Resource Consumption Threats in Large Language Modelscited by 2
- 2025Efficiency Robustness of Dynamic Deep Learning Systemscited by 1
- 2026Structure-Guided Visual Perturbation Neutralization for LVLMs27 May 2026
- 2026Resource Consumption Threats in Large Language Models17 Mar 2026
- 2025RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attacks27 Nov 2025
- 2025An Image Is Worth Ten Thousand Words: Verbose-Text Induction Attacks on VLMs20 Nov 2025
- 2025LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loops17 Jun 2025
- 2025Efficiency Robustness of Dynamic Deep Learning Systems12 Jun 2025
- 2024BoostAdapter: Improving Vision-Language Test-Time Adaptation via Regional Bootstrapping20 Oct 2024
- 2024Denial-of-Service Poisoning Attacks against Large Language Models14 Oct 2024
- 2024CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks14 Jul 2024
- 2024Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs2 Jul 2024
- 2024Make Your Home Safe: Time-aware Unsupervised User Behavior Anomaly Detection in Smart Homes via Loss-guided Mask16 Jun 2024
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey8 Jun 2024
- 2024Adversarial Robustness for Visual Grounding of Multimodal Large Language Modelscited by 23
- 2024BoostAdapter: Improving Vision-Language Test-Time Adaptation via Regional Bootstrappingcited by 17
- 2025LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loopscited by 9
- 2025An Image Is Worth Ten Thousand Words: Verbose-Text Induction Attacks on VLMscited by 0
- 2026Structure-Guided Visual Perturbation Neutralization for LVLMscited by 0
- 2026Structure-Guided Visual Perturbation Neutralization for LVLMs27 May 2026
- 2025An Image Is Worth Ten Thousand Words: Verbose-Text Induction Attacks on VLMs20 Nov 2025
- 2025LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loops17 Jun 2025
- 2024BoostAdapter: Improving Vision-Language Test-Time Adaptation via Regional Bootstrapping20 Oct 2024
- 2024Adversarial Robustness for Visual Grounding of Multimodal Large Language Models16 May 2024
- 2024Denial-of-Service Poisoning Attacks against Large Language Modelscited by 34
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Surveycited by 23
- 2024CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attackscited by 19
- 2024Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Modelscited by 16
- 2025RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attackscited by 7
- 2024Make Your Home Safe: Time-aware Unsupervised User Behavior Anomaly Detection in Smart Homes via Loss-guided Maskcited by 5
- 2026Resource Consumption Threats in Large Language Modelscited by 2
- 2025Efficiency Robustness of Dynamic Deep Learning Systemscited by 1
- 2026Resource Consumption Threats in Large Language Models17 Mar 2026
- 2025RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attacks27 Nov 2025
- 2025Efficiency Robustness of Dynamic Deep Learning Systems12 Jun 2025
- 2024Denial-of-Service Poisoning Attacks against Large Language Models14 Oct 2024
- 2024CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks14 Jul 2024
- 2024Make Your Home Safe: Time-aware Unsupervised User Behavior Anomaly Detection in Smart Homes via Loss-guided Mask16 Jun 2024
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey8 Jun 2024
- 2024Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Models9 May 2024
Similar, not cited
Close in wording, no citation either way
- 2025Modality Inflation: Energy Characterization and Optimization Opportunities for MLLM Inference ↗
- 2025FOLDER: Accelerating Multi-modal Large Language Models with Enhanced Performance
- 2024LongLLaVA: Scaling Multi-modal LLMs to 1000 Images Efficiently via a Hybrid Architecture
- 2026Reducing Peak Memory Usage for Modern Multimodal Large Language Model Pipelines
- 2026Jailbreaking Multimodal Large Language Models using Multi-Clip Video
- 2025A Survey of Token Compression for Efficient Multimodal Large Language Models
- 2024AIM: Adaptive Inference of Multi-Modal LLMs via Token Merging and Pruning
- 2024MVTamperBench: Evaluating Robustness of Vision-Language Models