(A Complete) List of All Adversarial Example Papers: Replication

← Overview page (NSL, Waseda University)

Continuation of Nicholas Carlini's list, covering arXiv submissions since 2025-09-15. TF-IDF + logistic regression trained on the original 13,697-entry list (held-out AUC 0.998); papers scoring ≥40% shown, grouped by arXiv ID month.
Total: 2937 papers.
Last update: 2026-09-21.
Download: CSV (2937 rows)

2026-09 (125 papers)

• [100%] Robustness Evaluation and Detection of Transferable Adversarial Attacks in ML-Based NIDS
  Huda Ali Alatawi
• [98%] Discovering Natural Transformation Vulnerabilities in Black-Box Vision Models
  Dongsu Song; DaeYun GO; Jay Hoon Jung
• [98%] Neither Adversarial Training Nor Purification: Emergent Adversarial Robustness from Oscillatory Predictive Learning
  Mohammed-Yassine Habibi; Klea Ziu; Martin Takáč; Makoto Yamada
• [98%] What Makes Adversarial Examples Transfer Across Deepfake Detectors?
  Rafael M. Mamede; Pedro C. Neto; Ana F. Sequeira
• [96%] MROP: Mask-Region Optimized Purification Against Backdoor Attack in Deep JSCC
  Seongkyu Yang; Hyeonho Noh; Hyun Jong Yang; Jonggyu Jang
• [96%] Johnny Still Receives Spam SMS: Assessing the Robustness of SMS Spam Detection
  Muhammad Salman; Muhammad Islam; Muhammad Ikram; Mohamed Ali Kaafar
• [96%] Adversarial Vulnerabilities of Neural Biomarker Identification Systems
  Polina Tapal; Bryce-Allen Bagley
• [96%] Adversarial Training for Tabular Credit Scoring: A Multi-Attack Robustness Evaluation in P2P Lending
  Gijs A. F. Niewzwaag; Marijn G. S. Veth; Manuele Massei; Marcos R. Machado
• [96%] Admissable: Training Reinforcement Learning Agents against Adversarial Missingness
  Paul Stahlhofen; Luca Hermes; Tim Kochs; Markus Vieth; Barbara Hammer
• [94%] Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers
  Ahmed Abdelnaby; Mohamed Elmahallawy
• [94%] Preprocessing Failure and Adversarial Detection in Depthwise-Separable Edge Vision Systems
  Jannatul Masruk Mukta; Rifa Sanjida; Adrita Rahman Tory; Md. Saifur Rahman; Khondokar Fida Hasan
• [93%] InfraPatch: Cross-Task Targeted Grayscale Patch Attacks on Infrared-Adapted Vision-Language Models
  Chengyin Hu; Dingyi Lu; Jiaju Han; Xiang Chen; Weiwen Shi; Jiahuan Long; Yiwei Wei; Jiujiang Guo
• [93%] Kernel-Complexity Edge Sanitization for Training-Free Defense against Structural Graph Attacks
  Yaning Jia; Shenyang Deng; Yaoqing Yang; Chiyu Ma; Wenxuan Xu; Soroush Vosoughi
• [93%] Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Attacks
  Xiaoyan Li; Yunli Wang
• [92%] A GAN-Based Framework for Robust DDoS Attack Detection
  Makram Chehayeb; Walid Fahs; Amina Rizk; Rida Khatoun; Omran Berjawi
• [92%] CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation
  Jiale Luo; Eric Han
• [91%] A Black-Box Adversarial Attack on Human Pose Estimation and Keypoint-Based Action Recognition Models
  Kacper Mroczek; Michal Kepski
• [90%] InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation
  Jiachang Zhang; Min Chen; Xiao Ren; Zhenyong Zhang; Yuanchao Shu; Yunjun Gao; Zhikun Zhang
• [90%] Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems
  Qi Rong Sua; Junhao Dong; Nguyen Duc Thai; Yuqing Wen; Cheston Tan; Yew-Soon Ong
• [89%] Certifying Lower Bounds for Risk-Sensitive Reinforcement Learning under Adversarial State Perturbations
  Tong Li; Saunak Kumar Panda; Yisha Xiang
• [88%] Does Reasoning Mitigate Backdoor Attacks? A Neuro-Symbolic Perspective
  Marco Antonio Corallo; Andrea Agiollo; Mauro Conti; Alberto Giaretta
• [88%] CrACK: Adversarial Attacks on Cross-Model Consistency in Collaborative Vision Foundation Models
  Feifei Liu; Jintao Cheng; Chi Man Vong; Xiaoyu Tang
• [88%] Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks
  Aashiq Muhamed; Mona T. Diab; Virginia Smith; Andrew Ilyas; Matthew Jagielski
• [85%] Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain
  Daizong Liu; Junhao Dong; Zhiyuan Ma; Xiaoye Qu; Xiang Fang; Runwei Guan; Keke Tang; Jianfeng Dong; Yew-Soon Ong
• [85%] Robust Policy Optimization via Adversarial Importance Sampling
  Amine Andam; Jamal Bentahar; Mustapha Hedabou
• [84%] PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation
  Md Ajwad Akil; Adrian Shuai Li; Imtiaz Karim; Arun Iyengar; Ashish Kundu; Elisa Bertino
• [84%] Poisoning Attacks on the PGM-index
  Atsuki Sato; Martin Aumüller; Yusuke Matsui
• [84%] AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks
  Jakub Reš; Petr Kaška; Martin Perešíni; Martin Ukrop; Kamil Malinka
• [84%] Towards a Resilience-Theoretic Foundation for Adversarial Robustness in Industrial Control System Anomaly Detection
  Branka Stojanović; Andreas Flatscher; Michael Somma
• [83%] Empirical Evaluation of Data Poisoning Attacks in Supervised Learning
  Toshif Khan; Muhammad Abusaqer
• [82%] Breadth Beats Depth: Improving GCG-Based Jailbreak Optimization with Breadth-Oriented Suffix Search
  Shiliang Xiao; Jingsong Wei; Yuzhi Liang; Yufan Zheng; Xia Li; Qiliang Lin
• [82%] FreqDoor: A Hidden Trojan in the Frequency Domain for Backdoor Attacks on Vision-Language Models
  Yasir Arafat Prodhan; Sadad Hasan; Mohammed Imamul Hassan Bhuiyan
• [81%] Investigating Adversarial Robustness of Heterogeneous Cooperative Perception
  Chenyi Wang; Yutong Liu; Qingzhao Zhang; Ming F. Li
• [81%] SoK: Trading Agents or Market Crashers? Dissecting Robustness and Security Failures in Academic Financial LLM Trading Schemes
  Mengxiao Wang; Nitesh Saxena
• [79%] A Unified and Constrained View of Regularization-Based Robust Reinforcement Learning
  Amine Andam; Jamal Bentahar; Mustapha Hedabou
• [78%] VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models
  Zhiqi Huang; Vivek Datla; Zhichao Xu; Puxuan Yu; Vivek Srikumar; Alfy Samuel
• [78%] SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment
  Qingyu Meng; Yiwei Zha; Jiahuan Pei; Koen Hindriks; Herbert Bos; Min Chen
• [78%] Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access
  Ji Guan; Mingyu Huang
• [78%] End-to-End Hard-Label Cryptanalytic Model Extraction Using Efficient Sign Recovery
  Akira Ito; Takayuki Miura; Yosuke Todo
• [77%] CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
  Varun Gadey; Ziad Marey; Alexandra Dmitrienko
• [76%] Fine-grained Distributed Backdoor Attacks in Federated Learning
  Jian Wang; Hong Shen; Wei Ke; Xue Hua Liu
• [76%] Robust Workflow Generation via Adversarial Learning for Audio Deepfake Detection
  Xiang Li; Pin-Yu Chen; Wenqi Wei
• [74%] Repeat-After-Me: Black-Box Adaptive Visual Prompt Injection
  Sizhe Chen; Yu-Lin Tsai; Ivan Evtimov; Kamalika Chaudhuri; Raluca Ada Popa; David Wagner; Arman Zharmagambetov
• [74%] Stealthy in Semantics, Antagonistic in Space: Attacking Visible-Infrared Object Detectors via Object-Level Misalignment
  Yueqi Zhu; Qi Ming; Guo Cheng; Yongkang Zhang; Feiran Liu; Juan Fang; Jiahuan Zhou; Jiangmeng Li; Yuhan Zhang
• [73%] SoK: Privacy Attacks on Machine Learning via Explainable AI
  Abdullah Caglar Oksuz; Anisa Halimi; Erman Ayday
• [73%] Red-Teaming Auto Mode: Improving Blocking Classifiers Against Malign Coding Agents
  Alex Remedios; Simon Storf; Fabien Roger; John Hughes
• [72%] Windows Malware Detector as a Compound AI System: Trade-Offs in Accuracy, Efficiency, and Adversarial Robustness
  Andrea Ponte; Luca Demetrio; Luca Oneto; Battista Biggio; Fabio Roli
• [70%] TRIS: A Tri-Layer Retrieval Integrity Sieve Against Knowledge Poisoning
  Muhaimin Bin Munir; Akib Jawad Ononto; Nazia Shehnaz Joynab; Bhavani Thuraisingham; Latifur Khan
• [70%] SoK: Rethinking Jailbreaking in the Era of Agentic AI: Attacks, Defenses, and Practical Consideration
  Md Jueal Mia; Yanzhao Wu; Selcuk Uluagac; M. Hadi Amini
• [70%] ViTeGate: Visual-Textual Triggered Knowledge Poisoning for Vision-Language Retrieval-Augmented Generation
  Xue Tan; Xuandi Zeng; Yu Shao; Zhongli Fang; Mingyu Luo; Xiaoyan Sun; Ping Chen; Jun Dai
• [69%] MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Tasks
  Ziyan Liu; Chengshuai Zhao; Huan Liu
• [69%] Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs
  Xue Tan; Changhui Wang; Sanrui Yang; Hao Luan; Zhuyang Yu; Jin Wei; Ping Chen; Xiaoyan Sun; Jun Dai
• [67%] AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs
  Chua Jin Chou; Sarang Nambiar; Murali Srinivasan; Ezekiel Soremekun
• [67%] MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks
  Kairong Li; Zhikun Zhang; Xiao Ren; Yunjun Gao
• [65%] Bait-and-Recover: Poisoning Internal Refusal Signals to Defend LLMs against White-Box Editing Jailbreaks
  Tian Gao; Zhipeng Xie; Yuhao Wu; Junhua Liu; Xin Fang
• [65%] A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition
  Yashovardhan Sharma
• [64%] Do Input-Level Defenses Transfer to Observation-Level Attacks on VideoLLMs?
  Bangshuo Zhu; Wei Song; Yuxin Cao; Yuezhong Wu; Zhiquan Liu; Yuekang Li; Jingling Xue
• [64%] ASGARD: Action-Space Guard for UAV Resilience via Reinforcement Learning
  Mohsen Salehi; Karthik Pattabiraman
• [63%] Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation
  Sri Hrushikesh Varma Bhupathiraju; Tetsu Ishizue; Nicholas U. Costagliola; Ozora Sako; Kentaro Yoshioka; Takeshi Sugawara; Sara Rampazzi
• [62%] SAFEGuard: Detect Optimization-Based Jailbreak Attacks Through Harmful Semantic Analysis and Fluency Measurement
  Quoc Viet Vo; Trung Le; Damith C. Ranasinghe; Ehsan Abbasnejad
• [61%] Towards One-for-All Robustness Across a Continuum of Threat Levels
  Zhichao Hou; Xiaorui Liu
• [61%] Robust Dynamic Expansion for Continual Learning under Backdoor Attacks via Purification and Selective Recovery
  Keyu Lin; Fei Ye; Qihe Liu; Shijie Zhou; Jiguo Yu
• [61%] Adversarial Testing of Automated Program Repair Agents for Security Vulnerabilities
  Fares Trad; Simin Chen; Hung Viet Pham; Gias Uddin; Baishakhi Ray
• [61%] Competition, Collusion, and Corruption: The Spectrum of MEV Attacks on DAG-Based BFT Consensus Protocols
  Iliya Mirzaei; Heer Patel; Chenyuan Wu; Mohammad Javad Amiri
• [61%] Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems
  Pedro Pereira; Eva Maia; Isabel Praça
• [60%] Does Deeper Reasoning Compromise Alignment? Revealing and Mitigating of Alignment Collapse in Large Reasoning Models
  Yu-Hang Wu; Yu-Jie Xiong; Henghua Zhang; Bairui Zhang; Jia-Chen Zhang; Shaohua Li
• [60%] Arbitrary Cipher Attacks Against Large Language Models Do Not Require Fine-Tuning
  Thomas Rivasseau
• [60%] On Identifying Adversarial Intent Injection in AI-Native 6G Networks
  Nilesh Chakraborty; Petar Djukic; Burak Kantarci
• [60%] Benchmarking Factual Robustness of LLMs via Multi-conversation Persuasion
  Zhuoang Cai
• [59%] Beyond Patch Removal: Persistent Adversarial Effects in Vision-Language-Action Policies
  Enhao Wu; Fusen Guo; Yuxin Cao; Ziyang Lyu; Lin Li; Wei Song
• [58%] Fusing Spectral Signatures and Activation Clustering for Backdoor Detection in Healthcare Imaging Models: Method, Implementation, and Evaluation
  Suresh Tamang
• [58%] ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers
  Hyeongjun Choi; Wonyoung Jung; Haehoon Seo; Sungyup Nam
• [57%] MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms
  Zhen Guo; Shanghao Shi; Shamim Yazdani; Ning Zhang; Reza Tourani
• [57%] Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration
  Aashiq Muhamed; Mona T. Diab; Virginia Smith
• [56%] CoRL: Co-Evolutionary Reinforcement Learning for Adaptive Indirect Prompt-Injection Attacks and Defenses
  Boyang Zhang; Qingxin Xiao; Lingwei Dang; Qingyao Wu
• [56%] Sparsity-Adaptive Sharpness-Aware Minimization
  Shiryu Ueno; Yoshikazu Hayashi; Kunihito Kato
• [56%] Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks
  Franziska Roesner; Tadayoshi Kohno
• [55%] Leveraging Imperfect Restoration for Data Availability Attack
  Yi Huang; Jeremy Styborski; Mingzhi Lyu; Fan Wang; Adams Kong
• [55%] Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization
  Zhaoxiong Ni; Yatie Xiao; Chi-Man Pun; Fei Peng; Qingxiao Guan; Keke Tang
• [55%] Robust Industrial Cyber Physical Classification Using Neuromorphic Temporal Embeddings and Hybrid SNN XGBoost Under Machine Unlearning Attacks
  Ammar Kamoona; Sajad Koushkbaghi; Mahdi Jalili; Peter McTaggart; Xinghuo Yu
• [55%] AGENTQ: Quantization-Conditioned Backdoor Attacks on LLM Agents
  Xiaoqun Liu; Qiben Yan
• [54%] Jailbreaking Text-to-Image Models Through Cracks: Navigating Heterogeneous Safety Filters via Multi-Agent Debate
  Kaiyan Wen; Shijie Zhang; Lu Yu; Guangdong Bai
• [53%] Privacy, Robustness, and Fairness Trade-offs in Federated Intrusion Detection: Geometric Indistinguishability at the Aggregation Interface
  Adrita Rahman Tory; ABM Shawkat Ali; Md Abu Layek; Khondokar Fida Hasan
• [52%] Context Inference Attacks Without Jailbreaks
  Prince Jha; Samuele Poppi; Nils Lukas
• [52%] Cryptanalytic Extraction of Neural Networks Without Known Architecture Assumption
  Yantian Shen; Yi Chen; Anyu Wang; Hongbo Yu; Xiaoyun Wang
• [52%] PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift
  Yusuf Khalid Shire; Sang-Chul Kim
• [51%] When Optimization Becomes Manipulation: Defending Generative Search against Malicious Generative Engine Optimization
  Haozhang Li; Yangguang Shao; Xinjie Lin; Zhong Guan; Mi Zhou; Junzheng Shi
• [51%] A Robust Watermark-based Fingerprint Framework for GNNs Ownership Verification
  Han Zhang; Yan Wang; Guanfeng Liu; Pengfei Ding; Huaxiong Wang; Kwok-Yan Lam
• [50%] Privacy Leakage in Federated Learning: Gradient-Based Client Identity Inference and Defenses for Inertial Sensing in Vehicular Edge Networks
  Ali Akarma; Toqeer Ali Syed; Muhammad Khan; Qurat-ul-ain Mastoi; Adeel Ahmad
• [50%] Extracting Forgotten Prompts from Targeted Unlearned Models
  Au Ashley Hoi-Ting; Meghdad Kurmanji; William F. Shen; Nicholas D. Lane; Ligang He
• [50%] Lightweight Detection of Electromagnetic Signal Injection Attacks on Image Sensors
  Youqian Zhang; Chunxi Yang; Eugene Yujun Fu; Sze Yiu Chau; Haibo Hu; Xiapu Luo
• [50%] ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing
  Yi Ting Shen; Kentaroh Toyoda; Alex Leung
• [49%] Chypothermia: Clock Freezing for Static Side-channel Attacks
  Fatemeh Khojasteh Dana; Mehmet Ali Cetin; Xinrui Wang; Andrew Butler; Yuval Yarom; Shahin Tajik
• [48%] Certifying Concept Unlearning in Text-to-Image Diffusion Models
  Mansi; Luca Marzari; Francesco Leofante
• [48%] "Your Robot Was Trained on a Lie": Collision Mesh Poisoning Attacks on Robotic Manipulation
  Gengyang Xu; Dongwei Xiao; Yiteng Peng; Yanbo Dai; Ruochen Zhou; Shing-Chi Cheung; Xiaoyu Ji; Wenyuan Xu; Shuai Wang
• [48%] HE-Guardrail: A Homomorphic Guardrail Against Jailbreak Attacks for Encrypted Large Language Model Inference
  Byeongseo Min; Yongwoo Lee; Young-Sik Kim; Yongjune Kim
• [47%] SISER: Speaker-Invariant Speech Emotion Recognition with Entropy-Based Adversarial Training
  Eunseo Choi; Hyunku Kang; Chanwoo Kim
• [46%] Inferring Hidden User Models from the Behavior of Personalized LLM Agents
  Haoyang Li; Yaxin Xiao; Qingqing Ye; Huadi Zheng; Haibo Hu
• [46%] Rethinking Indirect Prompt Injection as a Test-Time Search Problem
  Duong M. Nguyen; Joon Sik Kim; Blazej Manczak; Vaikkunth Mugunthan
• [46%] Automatic Red Teaming for Implicit Vulnerabilities of Text-to-Image Models
  Chang Ma; Junlin Han; Shuo Chen; Runjia Li; Philip Torr; Jindong Gu
• [46%] When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents
  Shuhuai Huang; Jingfeng Zhang; Hong Jia
• [46%] CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation
  Tan Xue; Huo Chang; Wang Changhui; Yang Sanrui; Li Heng; Chen Ping; Luo Xiapu
• [46%] RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services
  Zihan Wang; Boheng Li; Rui Zhang; Wenshu Fan; Qingchuan Zhao; Tianwei Zhang; Hongwei Li; Guowen Xu
• [46%] Co-Evolving Zero-Day Jamming: Adaptive Attack Synthesis and Graph Attention-Based Online Detection
  Ghilas Aissou; Rémi A. Chou; Taejoon Kim
• [45%] From Detection to Refusal: Safer LLMs via Circuit-Guided Weight Scaling
  Kuan-Lin Chu; Chung-En Sun; Tsui-Wei Weng
• [45%] DART: Distributional Adversarial Recurrent Training for Algorithm Learning
  Hieu Tran Bao; Phung Thanh Dang; Pham Quang Nhat Minh; Hoang Thanh Tung
• [45%] Local Robustness Quantification for Naive Bayes Classifiers and Generative Forests: a General Approach
  Adrián Detavernier; Jasper De Bock
• [44%] SpecGuard: Inference-Time Backdoor Detection For Free
  Rui Wen; Ahmed Salem; Andrew Paverd; Mark Russinovich; Zheng Li
• [44%] The Misery of Mechanistic Interpretability: A Formal Perspective
  Tobias Ladner; Matthias Althoff
• [43%] SRD-GUARD: A Defense Framework of LLMs via Semantic Rewriting and Joint Multi-Model Scoring for Latent Intent Exposure
  Qi Wang; Chengcheng Wan; Jiangtao Wang
• [43%] Kolmogorov--Arnold stability for discontinuous functions
  Sviatoslav V. Dzhenzher
• [43%] PDoS: A Profitable Denial-of-Service Attack against Proof-of-Work Blockchain Liveness
  Junjie Hu; Tianzhu Han; Na Ruan
• [43%] SENTINEL: A Multi-Pathway Architecture for Detecting Living-Off-the-Land APT Attacks on Windows Command Lines
  Ahad Bin Islam Shoeb; Kamrul Hasan; Jamal Uddin Tanvin; Liang Hong; Imtiaz Ahmed; Md Arif Billah; Al Amin
• [42%] Optimizing Byzantine Node Placement in Decentralized Federated Learning
  Edoardo Gabrielli; Gabriele Tolomei
• [42%] Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocols
  Longzhu He; Li Sun; Hao Peng; Ruijie Wang; Raymond Chi-Wing Wong; Sen Su
• [42%] Robust Decentralized Personalized Federated Learning via Prediction-Constrained Neighborhood Collaboration
  Xiao Ma; Hong Shen; Hui Tian; Wenqi Lyu; Wei Ke
• [42%] A Three-Axis Stress Test of LLM vs Classical ML for Network Intrusion Detection under Distribution Shift and Adversarial Evasion
  Muhammad Ebad Atif; Muhammad Haider Ali
• [42%] When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control
  Roberto Riaño; Gorka Abad; Stjepan Picek; Aitor Urbieta
• [41%] DIVA: Exploiting Cross-Step Conditional Propagation for Visual Jailbreaks in Discrete Diffusion Vision-Language Models
  Guorui Song; Runqing Tang; Jingye Zhang; Luyuan Zhang; Feice Huang; Cong Ray; Guocun Wang; Dake Zhong; Choo Sin Wai; Bingquan Dai; Chuming Wang; Tongxu Lin; Wanyu Guo; Haoqian Wang
• [41%] Rethinking Software-Defined Networking Link Discovery with Dynamic Randomization
  Mingming Chen; Teryl Taylor; Frederico Araujo; Benjamin E. Ujcich; Thomas La Porta; Trent Jaeger
• [41%] The MAL Simulator: Cyber Operations Simulation based on Attack & Defense Graphs
  Jakob Nyberg; Sandor Berglund; Andrei Buhaiu; Joakim Loxdal; Pontus Johnson; Mathias Ekstedt
• [41%] Market Signal Injection: Adversarial Context Manipulation of LLM Pricing Agents
  Dohun Lee; Hyunwoo Park
• [41%] TERMon: Detecting Persistent Behavioral Threats in Edge AI via Hardware-Native Ternary Runtime Monitor
  Arish Sateesan; Edlira Dushku
• [40%] NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces
  Zahra Tarkhani; Georgios Akkogiounoglou; Lorena Qendro; Isabel Tscherniak; Anil Madhavapeddy
• [40%] Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2
  Yedidel Louck; Amit Dvir; Ariel Stulman

2026-08 (226 papers)

• [100%] Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning
  Zuobin Xiong; Deval Mukherjee; Homook Cho; Wei Li
• [99%] Understanding Fault Tolerance of Adversarially Robust Pruned Models
  Manali Dangarikar; Cory Merkel
• [99%] Multi-Task Consistency-based Detection of Adversarial Attacks
  Cong Chen; Jean-Philippe Monteuuis; Jonathan Petit
• [99%] Distilling Vision-Language Models for Robust Traffic Sign Perception in Autonomous Vehicles
  Pedram MohajerAnsari; Amir Salarpour; Mert D. Pesé
• [99%] Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples
  Kaisheng Liang; Yiming Cao; Bin Xiao
• [99%] Breaking the weakest link to evade vision language models
  Ilan Zini; Boussad Addad; Katarzyna Kapusta
• [99%] KAN-Robust-Bench: A Benchmark for Evaluating the Robustness of Kolmogorov-Arnold Networks
  Mohammad Meymani; Roozbeh Razavi-Far
• [99%] Defending Network Intrusion Detection Systems Based on Graph Neural Networks Against Structural Adversarial Attacks
  Dimitri Galli; Andrea Venturi; Dario Stabili; Mauro Andreolini; Mirco Marchetti
• [99%] REPLICANT: Learning Policies for Evading and Hardening Malware Detectors
  Shae McFadden; Ilias Tsingenopoulos; Mario D'Onghia; Alexander Herzog; Myles Foley; Chris Hicks; Lorenzo Cavallaro; Fabio Pierazzi
• [99%] ARMOR: Manifold-Oriented Training for Adversarially Robust Aerial Object Detection under Data Scarcity
  Haoran Wang; Matthew Lau; Alec Helbling; Matthew Hull; ShengYun Peng; Mansi Phute; Martin Andreoni; Willian T. Lunardi; Duen Horng Chau; Wenke Lee
• [98%] Double Down on Defense: Strengthening Deep Perceptual Hashes against Evasion Attacks without Retraining
  Bangjie Sun; Nayoung Kim; Mun Choon Chan; Jun Han
• [98%] Training-Free Reconstruction-Based AI-Generated Image Detectors Are Inherently Vulnerable to Adversarial Examples
  Roman Demchenko; Jonas Ricker; Asja Fischer
• [98%] RL-FAT: Reinforcement Learning for Fair Adversarial Training
  Tejaswini Medi; Levan Mikeladze; Margret Keuper
• [97%] Hidden in Plain Sight: Diffusion-Based Unrestricted Robotic Attacks on Vision-Language-Action Models
  Jiahui Han; Yuhui Yao; Xin Wang; Jiafei Cao; Mingxuan Zhang; Danfeng Shan; Huiqi Deng; Guanchu Wang; Xia Hu
• [97%] GENADA: efficient generative time series adversarial attack framework
  Michael Baronov; Denis Vorobev; Margarita Rusanova; Petr Sokerin; Alexey Zaytsev
• [97%] Fast Test-Time Refinement for Robust Learned Image Compression
  Jiaming Liang; Chi-Man Pun; Weisi Lin
• [97%] AdROD: HyperNetwork-based Adversarially Robust Object Detection for Autonomous Driving
  Yuting Wu; Dongfang Guo; Xiangzhong Luo; Qun Song; Rui Tan
• [96%] Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers
  Ridma Jayasundara; Shaheer Mohamed; Tharindu Fernando; Harshala Gammulle; Basura Fernando; Sanka Rasnayake; A V Subramanyam; Sridha Sridharan; Clinton Fookes
• [96%] Why Does Robustness Reduce Superposition?
  Adam Elimadi
• [96%] FraudBench: Protocol-Sensitive Benchmarking of Adversarial Robustness for Financial Risk Assessment
  Xitong Zeng; Zhaoge Bi; Yitian Yang; Huaming Chen; Quan Z. Sheng
• [96%] Low-ASR Backdoors: Exploiting Attack Success Rate Reduction and Attacker-Defender Asymmetry
  Arham Riaz; Ting Yu
• [95%] Eliciting Intrinsic Hallucinations in LLMs via Semantically Equivalent Adversarial Attacks
  Atri Vivek Sharma; Brian Formento; Alessio Lomuscio
• [94%] Robust Context-Aware Detection of Malicious Instructions in Text
  Buzhao Liu; Xinhang Ma; Yevgeniy Vorobeychik
• [94%] TOFD: Target-Oriented Feature Decoupling against Poisoning Attacks in Split Federated Learning
  Yuhan Xie; Jingrong Huang; Chen Lyu
• [94%] Adversarial Attacks on Deep OCR Systems
  Wenbo Sun; Hongzong LI; Yanyun Wang; Jiahao MA; Shuxin Zhuang; Rong Feng; Shiqin Tang; Zi Liang
• [94%] IDATA: Scalable Invertible Diffusion for Unrestricted Adversarial Transfer Attack
  Yi Pan; Jun-Jie Huang; Tianrui Liu; Zihan Chen; Lin Liu; Zhao Wentao
• [94%] Adversarial Training Without Input Gradients via Low-Rank Householder Expansions
  Tiana C. Johnson; Donsub Rim
• [93%] ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection
  Tiannuo Guo; Guhang Qiu; Yuzhen Xie; Rui Feng; Ligang Li; Deliang Xiang
• [93%] Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks
  Yaohua Liu; Yifan Guo; Jiaxin Gao
• [92%] Crushing the Evidence: A Dual-Penalty Evasion Framework for Fooling White-Box Explainable AI Auditors
  Niraj Kumar; Harsh Kasyap
• [92%] The Boy Who Cried Wolf: Adversarial Misclassification of Safe Inputs as Unsafe in Multimodal Guardrails
  Shuo Shi; Rui Yin; Naen Xu; Jiahao Chen; Chunyi Zhou; Tianyu Du; Zhihui Fu; Jun Wang; Zhaoxiang Wang; Shouling Ji
• [92%] DRIFT: Derailing Denoising Trajectories of Flow-Matching VLAs with Adversarial Patch Attack
  Hoseong Tae; Jong-Seok Lee
• [92%] Adversarial Training of Linear Models under Stealthy Attacks
  Lovisa Eriksson; Dave Zachariah; André M. H. Teixeira
• [92%] Physical Adversarial Examples for Person Detectors in Thermal Images Based on 3D Modeling
  Xiaopei Zhu; Siyuan Huang; Zhanhao Hu; Jianmin Li; Jun Zhu; Xiaolin Hu
• [91%] A Survey of Adversarial Efficiency Degradation for Vision Transformer by Exploiting Input-adaptive Optimization
  Anadi Goyal; Nandish Chattopadhyay; Anupam Chattopadhyay; Chandan Karfa
• [91%] Dual-Adversarial Safety Alignment: Cultivating Intrinsic Threat Comprehension in LRMs
  Hongli Shen; Shaopeng Fu; Qinbo Zhang; Jian Li; Di Wang
• [91%] DSPrompt: Dynamic Soft Prompt Defense Against M-RAG Corruption
  Chang Liu; Yuni Lai; Mingyue Cui; Cong Tian; Yunyan Zhang; Xian Wu; Kai Zhou; Bin Xiao
• [91%] Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer
  Qi Song; Ziyuan Luo; Haoliang Han; Renjie Wan
• [90%] Targeted Label-Flipping and Oversampling Attacks on Federated Conditional GANs
  Panav Shah; Avishek Ghosh
• [90%] Defending against Model Extraction for GNNs with Model Reprogramming
  Yan Wen; Zhenyi Wang; Heng Huang
• [89%] Decoy Images Amplify Caption-Mediated Defenses Against Encoded Jailbreaks
  Haoyu Zhang; Xiangchen Guan; Shibo Zheng; Mohammad Zandsalimy; Shanu Sushmita
• [89%] Chameleon: Robust Defense Against Tor Website Fingerprinting via Many-to-Many Traffic Morphing
  Yuwen Cui; Kai Wei; Kehan Shen; Ning Wang; Zhuo Lu; Yao Liu; Guangjing Wang
• [89%] OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attacks
  Qian Chen; Shiliang Xiao; Yuzhi Liang
• [88%] Two Sides of the Same Coin: Co-Evolving Search for Cross-Task Attacks on Vision-Language Models
  Xuanhui Lin; Junhao Dong; Mingrong Gong; Yucheng Chen; Xinghua Qu; Yew-Soon Ong
• [88%] On the Adversarial Robustness of Remote Sensing Semantic Change Detection
  Weikang Yu; Yonghao Xu; Pedram Ghamisi
• [87%] MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs
  Anadi Goyal; Nandish Chattopadhyay; Chandan Karfa; Anupam Chattopadhyay; Norrathep Rattanavipanon
• [87%] Learning What Not to Learn: Adversarial Disentangled Prompt Tuning for Robust Vision-Language Models
  Yang Chen; Zhan Zhuang; Yanbin Wei; Zebin Chen; Hua Liu; Yu Zhang
• [86%] Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Turn Attacks
  Siyuan Li; Zehao Liu; Haoyu Li; Xi Lin; Ning Liu; Jun Wu; Jianhua Li; Mohsen Guizani
• [86%] ReACT-CLIP: Response-Aware Test-Time Defense for Vision--Language Models
  Hashmat Shadab Malik; Toluwani Aremu; Samuele Poppi; Muzammal Naseer; Salman Khan
• [86%] Beyond Decision Boundaries: Relational Geometry Attacks on Contrastive Embedding Manifolds
  Fei Zhao; Peiyuan Zhang; Xi Li; Chengcui Zhang; Nitesh Saxena
• [86%] QuISE: Defense against Typographic Attacks on VLMs via Query-Irrelevant Semantic Editing
  Shubin Lu; Jiaqi Yin; Yihao Huang
• [86%] Large-scale Testing Global Optimization Methods with Black-box Adversarial Attacks
  Wojciech Zarzecki; Jarosław Arabas
• [86%] COPA: Continual Preference Optimization for Adaptive Prompt Injection Defense
  Roshan Sood; Onat Gungor; Tajana Rosing
• [86%] Vulnerable Code Search: Transferable Attack for Code Language Models
  Kaicheng Wang; Liyan Huang; Jesse Thomason; Weihang Wang
• [85%] Adversarial Agents on Topology Optimization: Understanding the Fragility and Robustness of Deep Learning-based and Physics-Based Design Models under Adversarial Perturbation
  Hoang Anh Nguyen; Yuan Hong; Hongyi Xu
• [83%] AdvTiles: Physical Adversarial Camouflage Clothing against Person Detectors via Learnable Tiles
  Jinlei Wang; Jiahuan Long; Mingkai Sun; Yafei Guo; Yuanhao Huang; Ming Wang; Junqi Wu; Jiacheng Hou; Hongbo Chen; Xingxing Wei; Tingsong Jiang; Wen Yao
• [83%] Breaking and Defending LLM-Powered Social Media Bot Detection Systems
  Nof Orenstein; Yoni Birman
• [83%] FIDA: Feature Instability-Driven Attack on Self-Supervised Facial Representation
  Zhiyang Chen; Changchun Yin; Huiqin Yang; Liming Fang
• [83%] Let Prompts Bridge Defense Knowledge: Transferable Graph Purification via Vulnerability-Aware GPL
  Shuomin Xue; Jingyuan Li; Ju Jia; Jingxuan Yu; Xiaojun Jia
• [83%] Ouroboros: Self-Referential Backdoor Attacks on Speech Enhancement via Clean Audio Triggers
  Yunjie Zhou; Yuheng Huang; Diqun Yan
• [82%] Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attacks
  Shangze Li; Chuancheng Shi; Simiao Xie; Lingzhi He; Cheng Ji; Zifeng Cheng; Fei Shen; Chao Wu; Tat-Seng Chua
• [82%] Empirical Analysis of Evasion and Poisoning Against Malware Data Drift Detection
  Mingyue Yang; David Lie; Nicolas Papernot
• [82%] MissClick: Exploiting Digit-Serialized Coordinates to Attack GUI Grounding Models
  Yu Ran; Wentao Zhao; Xin Zhang; Yi Pan
• [82%] Robust CurveMoE: Multi-Norm Adversarial Defense for Mixture-of-Experts Models via Mode Connectivity
  Xu Zhang; Ren Wang
• [82%] CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents
  Jaewon Jung; Haizhong Zheng; Hongsun Jang; Jaeyong Song; Beidi Chen; Jinho Lee
• [82%] Text-Guided Diffusion-Based Adversarial Attacks on Chest X-Ray Images
  Basudha Pal; Arjun Narayanan; Neha Ajith; Vikas R Bhat; Muhammad Umair
• [81%] Mind the Gap: Zero-Query Jailbreaks via Filter-Generator Discrepancy in Text-to-Image Systems
  Wanguang Li; Zhaoxin Wang; Handing Wang
• [81%] Season: Spectrum-Aware Orthogonal Gradient Refinement for Transfer-Based Adversarial Attacks
  Tianyi Wang; Zhenghao Gao; Shengjie Xu
• [81%] Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs
  Tao Lin; Gaojie Jin; Zongxin Liu; Peng Wu; Lijia Yu
• [81%] TRACE: Trajectory Aware Reasoning for Multi-Turn Adversarial Conversation Evaluation
  Md Messal Monem Miah; Adrita Anika; Zhiyuan Yu; Ruihong Huang
• [81%] CertVLA: Certified Defense against Physical Visual Attacks for Vision-Language-Action Models
  Hui Lu; Zhijie Peng; Yuqi Lin; Zaijia Yang; Jiaming He; Shuhan Ye; Yi Yu; Hanwei Zhu; Bingquan Shen; Alex Kot; Xudong Jiang
• [80%] Diversity Matters: Distributional Feature Coverage Sample Selection for Data-Efficient Backdoor Attacks
  Yi Yang; Xiaoke Chen; Jinyang Huang; Feng-Qi Cui; Yu-Tong Guo; Jia-Cheng Zhao; Haiming Jin; Xiaokang Zhou; Meng Li
• [80%] Adversarial Robustness in Smishing Detection: A Comparative Analysis of Adversarial Fragility in Classical vs. Transformer-Based Detection Systems
  Denzel Chiuseni; Athanase Bahizire; Silva Hama; Jema David Ndibwile
• [80%] STAR-FL: Secure Federated Learning with Spatial-Temporal Analysis and Robust Aggregation
  Nawrin Tabassum; Yanzhao Wu
• [80%] NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution
  Anjun Gao; Yueyang Quan; Yufei Xia; Zhuqing Liu; Minghong Fang
• [80%] RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation
  Yueyang Quan; Anjun Gao; Yufei Xia; Minghong Fang; Zhuqing Liu
• [80%] The Fragility of Jailbreak Robustness Across Operational States
  Yuna Park; Hwang Youn Kim; Yujin Kim; Won Woo Ro; Suhyun Kim; Jae-In Hwang
• [79%] Salami Attack: Stealthy Collusive Memory Poisoning against OpenClaw
  Zheng Lin; Yuzhe Huang; Zhenxing Niu; Xianmin Ye; Haichang Gao
• [78%] Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle
  Jiaming Zhang; Boyang Chen; Zherui Li; Fuyao Zhang; Xinyu Yan; Hong Xi Tae; Wenwen He; Xuan Wang; Siqi Guo; Junhao Dong; Kun Wang; Hanxun Huang; Yige Li; Xingjun Ma; Yang Cao; Lingjuan Lyu; Wei Yang Bryan Lim
• [78%] DiSCO: Defending text-to-image generation through distribution-guided contrastive prompt optimization
  Tong Zhang; Motasem Alfarra; Carlos Hinojosa; Christos Louizos; Bernard Ghanem
• [77%] A Convolutional Layer Activation Dimensionality Reduction for Out-of-Distribution and Adversarial Attack Detection Methods
  Leandro de Souza Rosa; Lorenzo Capelli; Clara Nunes Barrancos; Mauro Mangia; Riccardo Rovatti
• [77%] Coverage Is Not Containment: A Fundamental Limit of Admission-Time Defenses Against Coordinated Poisoning of Vector Retrieval
  Prashant Kumar Pathak; Tarun Kumar Sharma
• [77%] A Self-Evolving Multi-Agent Framework Defense against LLM Jailbreak Attacks
  Tongyan Hu; Bryan Hooi
• [76%] Can LLMs Truly Forget? Revealing Unlearning Gaps Through Adversarial Evaluation
  Ayush Gupta; Hima Varshini Surisetty; Sreevidya Bollineni; Varad Ingale; Tuhina Tripathi; Abhishek Lalwani; Somya Chatterjee; Sadid Hasan
• [75%] DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial
  Abay Zhurekbay; Tao Liu; Fan Li
• [75%] SRAP: SVD-Refined Adversarial Perturbations for Imperceptible Face-Swap Defense
  Sungwon Cho; Kwanghyun Ko; Myungjoo Kang
• [75%] Diff-DDoS: Realistic Cyber-Physical Attack Synthesis and Robust Detection for 5G-Enabled CPS Using Tabular Diffusion Models
  Bilal Hussain; Xiao Tang; Qinghe Du; Tan Li; Muhammad Azhar; Danista Khan
• [75%] Certified Multi-Turn Robustness for LLM Safety via Compositional Bounds and Safety Persistence
  Yang Liu; Bin Chong; Wenkai Yang; Shuai Zhang; Yancheng Chen; Feiyu Han; GuoZhen; Cheng Zhang; Huaibing Xie; Changze Lv; Shihan Dou; Pluto Zhou
• [74%] Detecting Backdoors in Object Detection via Pre-NMS Prediction Distribution Shift
  Longtian Wang; Zhengyu Zhao; Chenhao Lin; Le Yang; Shiwei Wang; Yuhan Zhi; Xiaofei Xie; Chao Shen
• [73%] Robust and Personalized Federated Learning for Aircraft-Engine Prognostics under Benign and Adversarial Client Heterogeneity
  Chinmoy Mitra; Md. Mehedi Hasan Nipu; Mohammad Sakib Mahmood; Md. Rakibul Islam; M. F. Mridha
• [73%] Enhancing Web Application Firewalls with Machine Learning for SQL Injection Detection
  Lilliane Linnet Musoke; Atta Badii; Ahmed Ashlam
• [72%] Mitigating Backdoors via Decoy Shortcuts and Knowledge Decoupling
  Zixuan Zhu; Rui Wang; Lihua Jing; Jinwen Zhong
• [72%] Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents
  Jia-Chen Zhang; Ze-Yu Zhang; Kai-Wei Zhang
• [72%] Generating Attacks for LLMs with GFlowNets
  Berkay Ozcam; Irem Onen; Mehmet Fatih Amasyali; Emin Islam Tatli
• [72%] TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Models
  Alireza Dehghanpour Farashah; Zhuan Shi; Negar Rostamzadeh; Golnoosh Farnadi
• [72%] Adversarial Calibration Attack on Autonomous Vehicles
  Liangkai Liu; Qingzhao Zhang; Kang G. Shin
• [71%] Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures
  Faisal Haque Bappy; Tahrim Hossain; Tarannum Shaila Zaman; Raiful Hasan; Kamrul Hasan; Tariqul Islam
• [71%] Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts
  Kevin Thomas; Milosz Kasprzyk; Reuel C Igbokwe Onuigbo; Elliott Pert; Cameron Tovey; João A. Leite; Olesya Razuvayevskaya; Carolina Scarton
• [71%] UniTexture: Cross-Task Universal Adversarial Textures for Vision-Language-Action Models
  Yukun Dai; Mingzhe Dai; Tianshi Wang; Fengling Li; Jingjing Li; Lei Zhu
• [71%] IndicDetect: Evaluating Cross-Lingual LLM-Generated Text Detection for Hindi, Telugu, and Tamil
  Bhaskar Ganesh Devalla; Junchao Wu; Nilesh Dokuparthi; Greeshma Yaluru; Tatiana Muniz Rodriguez; Lidia S. Chao; Derek F. Wong
• [70%] PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates
  Zijian Wang; Yubo Zhu; Muzhi Dong; Yanjun Lou; Yisheng Li; ZiLiang Zhang; Wei Tong; Yuan Zhang; Jingyu Hua; Sheng Zhong
• [70%] Hijacking Robots with a Piece of Paper: A Systematic Study of Physical Prompt Injection in VLM-Controlled Robots
  S. M . Bhagya P. Samarakoon; M. A. Viraj J. Muthugala; W. K. R. Sachinthana; Mohan Rajesh Elara
• [70%] Casting the Net! Revisiting MasterFace Impersonation Attacks
  Seunghun Paik; Sunpill Kim; Chanwoo Hwang; Jae Hong Seo
• [70%] Never Stop Speaking: a Denial-of-Service Attack on End-to-End Speech Language Models
  Shuozhe Cheng; Kunlan Xiang; Mingxuan Li; Ji Zhang; Dongxiao Liu; Wenbo Jiang
• [69%] Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets
  Zhida He; Xiaoyu Wen; Han Qi; Ziyuan Zhou; Peng Yu; Jiajia Li; Chaochao Lu; Qiaosheng Zhang
• [69%] TestifAI: Tomography-Based Testing for Deep Learning Systems
  Arooj Arif; Tobias Hartung; Elena Botoeva; Alexandros Koliousis
• [68%] Robust Watermarks Meet Backdoored Models: Evading Diffusion Semantic Watermarks via Stealthy Backdoor
  Jinyuan Liu; Tianshuo Cong; Pei Li; Tianrui Wang; Xinlei He; Anyu Wang; Xiaoyun Wang
• [67%] Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era
  Binze Wang; Jinyu Tian; Xingrun Wang; Xiaochen Yuan; Jianqing Li
• [67%] BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes
  Laiqiao Qin; Tianqing Zhu; Longxiang Gao; Wanlei Zhou
• [67%] Benchmarking Quantum Machine Learning for Power-System Attack Detection: Evaluation Choices Decide the Outcome Before the Models Do
  Md Rezwanul Islam
• [66%] Catastrophic Learning: A New Attack Vector on Continual Learning Networks
  Benedikt Kluss; Niklas Bunzel
• [65%] Fast Object Removal Attacks on Safety-Critical Video-based Perception Systems
  Mohammad Imtiaz Hasan; M Sabbir Salek; Nathan Jones; Mashrur Chowdhury; Rong Ge
• [65%] When Efficiency Becomes Fragility: Exploiting Dynamic Routing Vulnerabilities in Adaptive UAV Tracking
  Shaofeng Liang; Runwei Guan; Wenshuo Chen; Jiemin Wu; Bowen Tian; Haozhe Jia; Kaishen Yuan; Songning Lai; Daizong Liu; Yutao Yue
• [65%] SysEvolve: An AI-native, safe, autonomous adversarial attack-defense co-evolutionary system
  Yuhan Meng; Shaofei Li; Jionghao Huang; Jiandong Jin; Puyi Wang; Hanlin Jiang; Anis Yusof; Peng Jiang; Zhenkai Liang; Yao Guo; Ding Li
• [65%] Text-Anchored Semantic Perturbations for Transferable Jailbreak Attacks on Multimodal Large Language Models
  Wenyun Li; Guiping Cao; Xiangyuan Lan; Zheng Zhang
• [64%] Adaptive Intrusion Detection System using Transformer-Based Neural Networks and Continual Learning Approach with Adversarial Investigation
  Azizi Ariffin; Afif Haris; Faiz Zaki; Hazim Hanif; Nor Badrul Anuar
• [64%] When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse
  Yingtao Ren; Ziyi Zhao; Yiwei Fu; Xiao Luo; Yu-Cheng Chang; Chin-Teng Lin
• [64%] Kolmogorov--Arnold against bounded translations
  Sviatoslav V. Dzhenzher
• [63%] Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks
  Yuchen Chen; Wei Cheng; Yuan Xiao; Wising Sun; Chunrong Fang; Yang Liu; Zhenyu Chen; Baowen Xu
• [62%] Bagging Robustly Learns VC Classes with Linear Sample Complexity
  Omar Montasser
• [62%] Robustness of Anomaly Detection Models for Industrial Control Systems under Training-Time Data Contamination
  Mustafa Umut Ozbek; Taiwo Ojo; Pooria Madani; Khalil El-Khatib; Li Yang
• [62%] Poisoning Agentic Alpha: Adversarial Vulnerabilities Across Roles and Architectures in Multi-Agent Trading Systems
  CheolWon Na; Hao Ni; Lukasz Szpruch; Zhangyang Wang; Dhagash Mehta; Saurabh Nagrecha; Alejandro Lopez-Lira; Chanyeol Choi; Yongjae Lee; Jee-Hyong Lee
• [61%] No Single Neuron of Failure: Distributed Safety Alignment Against White-Box Attacks
  Simiao Xie; Chuancheng Shi; Shangze Li; Wenhua Wu; Fei Shen; Ying Zhou; Zhiyong Wang; Tat-Seng Chua
• [61%] Algebraic Attack on Convolutional Neural Networks with Max Pooling
  Zirui Chen; Shi Tang; Zhengchao Gao; Yongjia Su; Lingyue Qin; Xiaoyang Dong
• [61%] Tripwire: Triggering Aligned Refusal via Statistically Certified Safety Neurons
  Wei Zhao; Zhe Li; Peixin Zhang; Jun Sun
• [61%] Decomposition Attacks Across Unlinkable Identities: Limits of Stateful Defenses for LLM Services
  Bowen Sun; Zhengyue Zhao; Xiaogeng Liu; Yinzhi Cao; Chaowei Xiao
• [61%] STAIN-FL: Stealthy Targeted Attack Injection with Contextual Triggers in Federated Learning
  Ashlinder Kaur; Purnima Murali Mohan; Zengxiang Li; Tram Truong-Huu
• [60%] TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers
  Mehrdad Rostamzadeh; Sidhant Narula; Mohammad Ghasemigol; Daniel Takabi
• [60%] EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion
  Ruijie Jian; Benlei Cui; Ting Ma; Haidong Ding; Kangwei Liu; Ziwen Xu; Longtao Huang; Hui Xue; Ziqiang Zhu; Junjie Li; Haiwen Hong
• [59%] Your Agentic LLMs Secretly Encode Latent Signals of Indirect Prompt-Injection Exposure
  Jianshuo Dong; Yiming Liu; Maosen Zhang; Nan Deng; Xu Peng; Xiaoping Zhang; Tianwei Zhang; Jie Zhang; Han Qiu
• [59%] When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems
  Neha Nagaraja; Amisha Bagari; Hayretdin Bahsi
• [59%] Confusion-Geometry Rebalancing for Long-Tailed Adversarial Training
  Mengnan Zhao; Geyong Min; Lihe Zhang; Tianhang Zheng; Jie Cui
• [59%] MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps
  Sujin Chen; Lijun Li; Tianyi Du; Jing Shao
• [59%] Breaking the Assumptions: Auditing Input-Side Jailbreak Defenses Against Semantic Attacks
  Aaditya Pratap; Harsh Kasyap; Somanath Tripathy
• [59%] Not to Break, but to Attest: Adversarial Probes for Privacy-Preserving LLM Verification
  Cameron Wilding; Mina Shaker; Fatemeh Ganji
• [58%] Steering the Flow: Inverting Face Recognition Models via Gradient-Guided Flow Matching
  Ye Lu; Shen Wang; Zhaoyang Zhang; Yihan Yan; Li Liu; Runze Liu; Fanghui Sun
• [58%] Breaking High Confidence: Practical Face Impersonation under High-Security Thresholds
  Changjin Kim; Seunghun Paik; Dongsoo Kim; Jae Hong Seo
• [58%] CAITLYN: Can LLM Agents Autonomously Synthesize Defenses against Emerging Injection Attacks?
  Zi Liang; Xiaoyu Xu; Yanyun Wang; Minxin Du; Qingqing Ye; Haibo Hu
• [57%] TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Models
  Qi Lu; Zehui Guo; David Yuanda Gan; Zijing Li; Hengda Zhang; Weijun Xu; Qiankun Zhang
• [56%] VLAGuard: A Framework for Evaluating and Mitigating Physical Attention Hijacking in Vision-Language-Action Robots within Wireless Sensor Networks
  Dongfu Yin; Jinquan Zhang
• [56%] No Unique Minimizer, No Problem: On the Consistency of Robust Neural Classifiers
  Subhabrata Majumdar; Anand Deo; Partha Pratim Saha; Abhik Ghosh
• [56%] SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation
  Dongsu Song; DaeYun GO; Boseung Seo; Jay Hoon Jung
• [56%] HarnessRisk: A Lifecycle-Oriented Benchmark for Agent Harness Safety
  Yajing Bai; Jinhao Duan; Jie Peng; Xianfeng Wu; Sijia Liu; Song Wang; Tianlong Chen
• [56%] Robust Validation to Geometric Perturbations for Autonomous Pose Estimation
  Gregoire Theau; Melanie Ducoffe
• [56%] Not All Tokens Are Equal: Region-Aware Consistency Repair of Backdoors in MLLMs
  Jiali Wei; Ming Fan; Mingkun Zhang; Haoyu Wang; Jun Sun; Guoheng Sun; Xiaoning Ren; Haijun Wang; Ting Liu
• [55%] TwinIR: Coordinated Invisible Dual-Point Attacks on Online HD Map Construction
  Haibo Hu; Jianghuai Deng; Chen Tang; Yang Lou; Qian Xu; Jianping Wang
• [55%] Uncertainty-Aware Ensemble Deep Randomized Neural Networks for Classification
  M. Sajid; A. Quadir; A. Rahaman; P. N. Suganthan; M. Tanveer
• [55%] SeFaR: Semantic Feature-aware Robustness Testing of Deep Neural Networks
  Nusrat Jahan Mozumder; Divya Gopinath; Corina Pasareanu; Matthew Dwyer
• [55%] Learning to Persuade Exposes How Easily LLMs Abandon Correct Beliefs
  Nimet Beyza Bozdag; Emre Can Acikgoz; Gokhan Tur; Dilek Hakkani-Tür
• [55%] BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning
  Mouhamed Amine Bouchiha; Gregory Blanc; Yufei Han
• [55%] CG4AI: A Column Generation Framework for Training AI Models Under Constraints
  Youcef Magnouche; Abderrahmane Driouch; Sébastien Martin; Pierre Bauguion
• [53%] Universal Concept Disruption for SAM3 Image Segmentation
  Hao Wang; Yuxuan Zhang; Wei Yang
• [53%] ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization
  Hao Sui; Simeng Qin; Jie Liao; Xiaojun Jia; Bing Chen; Yang Liu
• [53%] CompoSkill: Compositional Skill Chain Attacks from Individually Scanner-Passing LLM Agent Skills
  Mingxiao Liu; Zhoumian Jiang; Jianan Ma; Jian Zhang; Jialuo Chen; Xinhao Deng; Zhen Wang
• [53%] Vis-Poison: Poisoning Visual Knowledge in Multimodal Retrieval-Augmented Generation
  Rujin Liang; Zhongpu Chen; Yuhao Lei; Xin Miao
• [53%] Why Are LLM Backdoor Defenses Fragmented? A Feature-Level Explanation with Sparse Autoencoders
  Yizhe Zeng; Chenxu Niu; Wei Zhang; Hao Huang; Yunpeng Li; Dongxu Han; Dan Du; Cheng Hong; Hequn Xian; Yuling Liu
• [52%] Securing Contrastive mmWave-based Human Activity Recognition against Adversarial Label Flipping
  Amit Singha; Ziqian Bi; Tao Li; Yimin Chen; Yanchao Zhang
• [52%] Does the Competitive Component of Adversarial Self-Play Improve Legal Reasoning? A Controlled Negative Result
  Miseog Shawn Kim
• [52%] LaCache: Robust Semantic Caching for LLM Serving
  Jiacheng Liang; Yuhui Wang; Tanqiu Jiang; Ting Wang
• [52%] Structure-Aware Robust Fine-Tuning: Defending Vision-Language-Action Robots Against Physical Attention Hijacking
  Jinquan Zhang; Dongfu Yin; Run Yang; Yufeng Yan; Zhen Tian; F. Richard Yu
• [52%] CAM-Guided Saliency Cutout and Image-Based Malware Classification
  Yasaman Ebrahimi; Martin Jurecek; Mark Stamp
• [52%] Branch and Bound for Relational Verification of Neural Networks
  Kota Fukuda; Zhenya Zhang; Guanqin Zhang; Jianjun Zhao
• [52%] ROBBIN: Rowhammer-Based Backdoor Injection during Inference
  Saion K. Roy; Yufei Wang; A. Adam Ding; Yunsi Fei
• [51%] Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheating
  Tobias Braun; Jonas Grebe; Louis Rethfeld; Marcus Rohrbach
• [51%] ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization
  Hujian Zhu; Yihao Huang; Felix Juefei-Xu; Xinfeng Li; Peng Zeng; Simeng Qin; Qing Guo; Geguang Pu
• [51%] Toward Metacognitive One-Shot Indirect Prompt Injection: Strategy Abstraction Via Outcome-Conditioned Reflection
  Sihan Hou; Xinmeng Hou; Zhijun Zhang; Zehao Wang; Xuhong Ren; Sibo Qin; Kuntharrgyal Khysru; Qing Guo
• [51%] COMA: A Compositional Misleading Attack Class on Security-RAG, and a Causal Counterfactual Defense
  Chinmay Gondhalekar; Urjitkumar Patel
• [51%] SIR: Self-improving Red-teaming for Compute Use Agents
  Chen Xiong; Zhiyuan He; Pin-Yu Chen; Stjepan Picek; Tsung-Yi Ho
• [50%] Subtype Robustness Is Not Just Accuracy: Calibration Under Unseen Subtype Shift
  Hanyu Su; Carlota Julbe i Juanola; Yibo Hu
• [50%] Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection
  Rahul Deivasigamani; Sayeda Faatin Alvi; Derqui Andrea; Kaushal Punjabi; Stjepan Picek
• [50%] Query-Side Attacks on GNN-Based KGQA: Tracing Failures from Entity Linking to Answer Generation
  Pankaj Kumar; Subhankar Mishra
• [49%] When Explanations Betray Backdoors: Black-Box Auditing for Language Model Classifiers
  Yang Liu; Ran Zou
• [49%] Workspace Topology as an Attack Vector in Agentic Coding Assistants
  Alexandre G. R. Day; Pradeep Yadlapalli; Sriram Venkatapathy; Thomas Paniagua; Nick Raines; Sahil Wadhwa; Himanshu Kumar; Andy Luo; Sudeep Panyam; Rikhiya Ghosh; Pranab Mohanty; Giri Iyengar
• [49%] Certified but Private: Scalable Zero-Knowledge Proofs for Neural Network Guarantees
  Youwei Zhong; Ben Merbaum; Timos Antonopoulos; Ning Luo; Charalampos Papamanthou; Katerina Sotiraki; Ruzica Piskac
• [49%] Whitewashing Hate, Smearing Harmless Content: Annotator-Style Rebuttal Attacks on LLM-Based Moderation
  Junyu Lu; Kaiyuan Liu; Jingyi Kang; Deyi Ji; Hailong Zhang; Lanyun Zhu; Qi Zhu; Bo Xu; Liang Yang; Hongfei Lin
• [49%] Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation
  Minh Tran; Cuong Dang; Tuc Nguyen; Khanh-Tung Tran; Minh Huynh Nguyen; Trinh Chau; Kien Le; Do Xuan Long; Jiahao Zhang; Fali Wang; Hoang D. Nguyen; Thanh Le; Suhang Wang
• [48%] SkillJack: Persistent Skill Backdoors in Self-Evolving Agents
  Zonghao Ying; Xiangfan Wu; Huiyu Wu; Xing Zheng; Huangsheng Cheng; Xiaorong Shi; Jing Guo
• [48%] Learning What to Fail On: Failure-Mode Contextual Bandits for Adversarial Data Curation
  Roie Kazoom; Ofir Cohen; Rami Puzis; Asaf Shabtai; Ofer Hadar
• [48%] Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environments
  Guo Gan; Yilun Zhao; Cong Chen; Jinbiao Wei; Tingyu Song; Zheyuan Yang; Lin Fu; Hong Zhou
• [48%] DEFUSE: Generalizable Backdoor Defense for Self-Supervised Encoders with Generative Priors
  Tuo Chen; Jie Gui; Minjing Dong; Lanting Fang; Ju Jia; Benlei Cui; Jian Liu
• [47%] When Collaboration Becomes a Trigger: Collective Evidence-Threshold Backdoors in Multi-Agent Systems
  Jia-Hao Xiao; Lei Feng; Min-Ling Zhang
• [47%] The Neural Echo: A Signal Processing Perspective for Understanding Neural Networks
  Chongbiao Wang; Daniel Gaa; Joachim Weickert; Karl Schrader
• [47%] From Uncertainty to Failure Attribution: Self-Diagnosing Models for Failure Attribution under Distribution Shift
  Yiyao Yang
• [47%] Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection
  Kaysarul Anas Apurba; Md. Hasibul Hasan; Mahedee Zaman Moon; Sk. Md. Mizanur Rahman; Atsuo Inomata
• [47%] A Four-Axis Trustworthiness Benchmark for LLM-as-Judge in Principle-Based Regulation
  Dipankar Sarkar
• [47%] Assessing Attack Surfaces in Generative Search Engines through Publisher Attributes: A Case Study in Political Domains
  Riku Mochizuki; Shusuke Komatsu; Souta Noguchi; Kazuto Ataka
• [47%] Leveraging Association Context Retrieval in Knowledge Edit- ing to Build White-Box Attacks on LLMs
  Roman Maksimov; Vladimir Aletov; Vladimir Solodkin; Dmitry Bylinkin; Daniil Medyakov; Aleksandr Beznosikov
• [47%] TESTNAV: Pareto-Guided Search for Compositional Robustness Testing
  Arooj Arif; Tobias Hartung; Elena Botoeva; Alexandros Koliousis
• [47%] ArmorOCR: Grounded Adversarial Visual Perception via Observation-Transferred Self-Distillation
  Linhan Cao; Siyuan Li; Jun Lan; Liangbo He; Guannan Li; Xiaolei Huang; Jun Jia; Shuheng Zhou; Huijia Zhu; Weiqiang Wang; Wei Sun
• [46%] Characterizing the Variance Envelope: A Multi-Dimensional Analysis of Spectre Telemetry Across Architectures and Workloads
  Jaya Keshava Chandra Kotha; Jean-Luc Gaudiot
• [46%] Beyond Direct Access: Resource Hijacking in LLM Agents
  Puyu Zeng; Qibing Ren
• [46%] The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges
  Maosen Zhang; Jianshuo Dong; Boting Lu; Wenyue Li; Xiaoping Zhang; Tianwei Zhang; Jie Zhang; Han Qiu
• [45%] Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity
  Anjun Hu; Hanting Xie; Saranya Govindan; Jas Kandola; Kurt Cutajar
• [45%] MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents
  Jiaming Chen; Yisen Gao; Yanping Li; Zifan Liu; Yumeng Zhang; Jun Zhang
• [45%] The Sample Complexity of Distributionally Robust PAC Learning under Cressie--Read Divergences
  Elad Aigner-Horev; Daniel Rosenberg; Roi Weiss
• [45%] LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents
  Longtao Guo; Zelin Zhang; Kaifeng Huang; Yang Shi
• [45%] Breaking Planner Integrity Boundary: Enviroment State-Text Injection Attack on LLM-Driven Embodied Agents
  Jiawei Liu; Jiacheng Guo; Tian Zhang; Yiwei Xu; Juan Wang; Jinlin Fan; Bowen Xiao; Chi Guo; Keyan Guo; Hongxin Hu
• [44%] SynChain: Inducing Computer-Use Agent Systems to Construct Their Own Attack Chains
  Fuyao Zhang; Jiaming Zhang; Che Wang; Boyang Chen; Yurong Hao; Xiongtao Sun; Guowei Guan; Blaise Delattre; Yang Cao; Wei Yang Bryan Lim
• [44%] Robust Reputation-Driven Crowdsourced Federated Learning
  Mouhamed Amine Bouchiha; Gregory Blanc
• [44%] Pragmatic Attack Surface: Vulnerabilities of Implicit Context in Large Language Models
  Bocheng Chen; Han Zi; Roucheng Ou; Yawei Liu; Minyue Chen; Zimo Qi; Rongrong Wang; Guangliang Liu
• [44%] Uncovering the Limits of Proof Sharing for Neural Networks
  Kanak Das; Shubham Ugare; Bor-Yuh Evan Chang; Sasa Misailovic; Gagandeep Singh; Manu Sridharan
• [44%] A Single Suffix to Break Them All: Basin-Aware Jailbreaks for Merged Model Families
  Yu Zhe; Yixin Tan; Junhao Wei; Wang Chen
• [44%] Beyond Global Scalars: Synergizing Token-Level Statistics and Deep Semantics for Adversarial AIGC Text Detection
  Peiming Li; Yifan Wang; Zhiyuan Hu; Shiyu Li; Zheng Wei; Yang Tang
• [44%] Audio-Driven Adversarial Defense for 3D Talking Face Generation with totally Visual Fidelity Preservation
  Rui-Qing Sun; Chen-Hao Cui; Hui-Yang Zhao; Tian Lan; Zhijing Wu; Xian-Ling Mao
• [43%] What the Detector Can See: Evaluating CPS Anomaly Detectors Independently of the Decision Rule
  Peiran Shi; Jian Xiang; Xiang Zhang; Chenglong Fu
• [43%] ActBench: Self-Evolving Benchmark of Behavioral Safety in Cowork Agents
  Hongwei Yao; Yiming Liu; Meihui Chen; Jieling Chen; Zikun Chen; Yiling He; Wangze Ni; Cong Wang; Kui Ren
• [43%] Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks
  Mingyu Luo; Ming Deng; Zilang Qiu; Yiming Cheng; Ci Tao; Xue Tan; Sijin Sun; Yangfu Li; Ping Chen; Jun Dai; Xiaoyan Sun
• [43%] A Formal Methodological Framework for Auditing Robustness and Fidelity in Explainable AI: From Application to Trust Certification
  Rosa Elysabeth Ralinirina; Jean Christian Ralaivao; Niaiko Michaël Ralaivao; Alain Josué Ratovondrahona; Thomas Mahatody
• [43%] ContextLeak: Exfiltrating LLM Agent Context via Malicious Tools
  Yuqi Jia; Ruiqi Wang; Patrick Li; Yuepeng Hu; Peinian Li; Neil Gong
• [42%] Analysis of Federated Aggregation under Model Poisoning and Backdoor Attacks: A Reconstructed Cross-Dataset and Cross-Architecture Benchmark
  Soumya Mazumdar; Vineet Kumar Rakesh; Tapas Samanta
• [42%] Proof-of-Execution Memory: Defending LLM Agents Against Forged-Reasoning Attacks by Verifying What Actually Happened
  Md Habibur Rahman; Jaeho Kim
• [42%] SkillShield: Prompt-Space Security Skills for LLM Coding Agents
  Xiaodong Wu; Zhimin Zhao; Qi Li; Xiangman Li; Yu Shi; Bram Adams; Jianbing Ni
• [41%] A Constitution-Grid Instrument for Data-Efficient RL Alignment (C-Guard)
  Xianling Zhang
• [41%] Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting
  Kihyun Kim; Hee-Seon Kim; Wonjun Lee; Changick Kim
• [41%] Capability-Routed Guard: Defending Large Reasoning Models Against Reasoning-Centric Jailbreaks
  Yiyong Liu; Yixin Wu; Jun Sakuma
• [41%] MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation
  Jie Cao; Qi Li; Zelin Zhang; Xiaodong Wu; Lingshuang Liu; Xiangman Li; Jianbing Ni
• [41%] Threat-guided Policy-aware Scene Perturbation for Safe Autonomous Driving with Online Reinforcement Learning
  Xincong Hu; Lei Ou; Maosen Li; Jingtao Zhang; Liguo Hou; Zongzhang Zhang
• [41%] AdvFD: Boosting Visual Generation via Adversarial Fr'echet Distance Loss
  Mingju Gao; Jingkai Zhou; Kun Gai; Changqian Yu; Hao Tang
• [41%] Clustered Randomized Smoothing for Stochastic Prediction Functions
  Eduardo Figueiredo; Frederik Mathiesen; Julian Schumann; Jens Kober; Arkady Zgonnikov; Luca Laurenti
• [41%] LongPIBench: A Long-Context Benchmark for Prompt Injection
  Yupei Liu; Yuqi Jia; Neil Zhenqiang Gong; Jinyuan Jia
• [41%] ECLIPSE: Self-Evolving Stealthy Prompt Injection Attack against Long-Horizon Agentic Systems
  Shiqian Zhao; Yangfan Zhou; Xinfeng Li; Runyi Hu; Yechao Zhang; Yi Xie; Tianwei Zhang; Luu Anh Tuan
• [40%] DeepInvert: Semi-Supervised Embedding Inversion Against Obfuscated Language Models
  Zhicong Huang; Cheng Hong; Tao Wei
• [40%] AndroidReality: How Far Are Mobile Agents from the Real World?
  Xiaoou Liu; Longchao Da; Hanyang Chen; Yuan Ling; Hua Wei
• [40%] PEAK: Precise and Persistent Concept Erasure via k-Sparse Autoencoders
  Man Jiang; Ouxiang Li; Weibao Xue; Zhenhua Tang; Yuan Wang; Shuo Wang; Yanbin Hao
• [40%] Trojaning the Alignment: Stealthy Backdoor Attacks against Graph Foundation Models
  Minhua Lin; Zhicheng Gao; Yilong Wang; Hanqing Lu; Xiang Zhang; Suhang Wang
• [40%] Networked Multi-Resource Defense Capabilities in a General Lotto Game
  Faezeh Shojaeighadikolaei; Keith Paarporn

2026-07 (220 papers)

• [100%] Binary Iterative Method for Non-targeted Adversarial Attack
  Naman Goyal; Milan Chaudhari
• [100%] LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection
  Vincent Lébé; Yannick Prudent; Corentin Friedrich; Thomas Massena; Ronan Sicre; Franck Mamalet
• [100%] Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks
  Hamid Dashtbani; Mehdi Dousti Gandomani; AmirMahdi Sadeghzadeh
• [100%] A Multi-Model Hybrid Defense Approach Against White-box Adversarial Attacks in Computer Network Traffic
  Khushnaseeb Roshan
• [100%] Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family
  Hanrui Wang; Ruihao Zheng; Shuo Wang; Isao Echizen; Xingbo Dong; Zhe Jin
• [99%] Robustness Meets Uncertainty: Evidential Adversarial Training for Robust Selective Classification
  Nicolas Sournac; Ahmed Baha Ben Jmaa; Bertrand Braeckeveldt
• [99%] Defending from GeoLocalization through Adversarial Road Trips
  Niccolò Niccoli; Federico Becattini; Lorenzo Seidenari
• [99%] Statistically Undetectable Backdoors in Deep Neural Networks
  Andrej Bogdanov; Alon Rosen; Neekon Vafa
• [99%] Adversarial Attacks on Online Handwriting using Salience-based Temporal Editing
  Yataro Tamura; Brian Kenji Iwana; Jiseok Lee
• [99%] A New Kind of Adversarial Example: Measuring the Human-Model Gap, and Its Relationship to OOD Detection
  Ali Borji
• [99%] Revisiting the Adversarial Robustness of Graph-Based Traffic Forecasting
  Qingzhao Zhang
• [99%] Improving the Robustness/Accuracy Tradeoff Against Adversarial Attacks Using Information Bottleneck Distillation Through Dual Teachers
  Vincent Ryusuke Takahashi; Yoshinari Takeishi; Jun'ichi Takeuchi; Kave Salamatian
• [98%] Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT
  Giulia Marchiori Pietrosanti; Giulio Rossolini; Giorgio Buttazzo
• [97%] Beyond Gradient-Based Attacks: Adversarial Robustness and Explainability Stability in Cybersecurity Classifiers
  Mona Rajhans; Vishal Khawarey
• [97%] Adversarially Guided Diffusion for LiDAR Range Image Synthesis
  Stavros Bouras; Antonios Makris; Alexandros Gkillas; Aris S. Lalos; Konstantinos Tserpes
• [97%] GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models
  Li Zeng; Zeyu Ye; Meng Xie; Hangtao Zhang; Xianlong Wang; Yanchun Li; Zhetao Li
• [96%] Detecting Adversarial Evasion Attacks Against Autoencoder-Based Network Intrusion Detection Systems
  Niklas Bunzel; Ashim Siwakoti
• [96%] Does Demand Response Increase Vulnerability to Cyber Attacks by Adversarial Data Modifications?
  Clemens Kortmann; Eike Cramer
• [96%] GeoDetect: Geometric Adversarial Detection for VLPs
  Afsaneh Hasanebrahimi; Hanxun Huang; Christopher Leckie; James Bailey; Sarah Erfani
• [96%] Certified Training for Convolutional Perturbations
  Benedikt Brückner; Alessio Lomuscio
• [96%] Intelligent Disruption: Undetectable Attacks on Wireless Autoencoders
  Han Jiang; Jifa Zhang; Hu Jin; Nan Zhao; Mingqian Liu; Yunfei Chen
• [96%] Evaluation of Adversarial Robustness in Arabic Language Models
  Anwar Alajmi; Ayed Salman; Imtiaz Ahmad
• [95%] Comprehensive Robustness Analysis of LiDAR-based 3D Object Detection in Autonomous Driving
  Adwait Chandorkar; Kai Krink; Yerdana Maulenbay; Hasan Tercan; Tobias Meisen
• [95%] On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces
  Chethan Krishnamurthy Ramanaik; Tobias Callies; Michael Hecht; Eirini Ntoutsi
• [95%] Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks
  Steyn Hommes; Vincent Dankbaar; Tanguy Stekke; Xiaomeng Wang; Lisanne Weidmann; Senna van Hoek; Durba Chatterjee; Lejla Batina; Zhuoran Liu
• [95%] LLM-Guided Program Evolution for Targeted Black-Box Attacks on Perceptual Hash Algorithms
  A. Krylov; D. Rakhov; V. Veselova; D. Bolokhov; Oleg Y. Rogov
• [95%] Reducing information dependency does not cause training data privacy. Adversarially non-robust features do
  Rasmus Torp; Shailen K. Smith; Adam Breuer
• [95%] BadWAM: When World-Action Models Dream Right but Act Wrong
  Qi Li; Xingyi Yang; Xinchao Wang
• [95%] Natural Backdoor Attacks on Speech Recognition Models
  Jinwen Xin; Xixiang Lyu; Jing Ma
• [95%] Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection
  Qiucheng Yu; Tao Ni; Yihe Zhou; Jiayimei Wang; Qingchuan Zhao
• [94%] DRL-CLBA: A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning
  Yueming Huang; Wenhan Yao; Fen Xiao; Xiarun Chen; Weiping Wen
• [94%] Efficient Safety Alignment of Language Models via Latent Personality Traits
  Mohamed Amine Merzouk; Nolan Smyth; Damiano Fornasiere; Linh Le; David Williams-King; Adam Oberman
• [94%] Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation
  Luca Scionis; Luca Melis; Maura Pintor; Fabio Brau; Ambra Demontis; Giorgio Fumera; Fabio Roli; Battista Biggio
• [94%] Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks
  Yuanhao Huang; Yilong Ren; Jinlei Wang; Xuesong Bai; Zheng Zhang; Haiyang Yu
• [94%] Unifying Adversarially Robust Model Experts in Vision-Language Models
  Nguyen Duc Thai; Junhao Dong; Sua Qi Rong; Hua Yu; Yew-Soon Ong
• [93%] A Step Towards Robust Unsupervised Domain Adaptation via Fine-Tuning and Reinforcement Learning
  Sushant Dagaji Desale; Rahul Mishra; Ashutosh Kumar Sinha
• [93%] ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments
  Zixuan Wu; Cristina Nita-Rotaru
• [92%] AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models
  Cong Su; Jiaju Han; Xuemeng Sun; Chengyin Hu; Qike Zhang; Jiujiang Guo; Yiwei Wei; Jiahuan Long
• [92%] AdvNav: Behavior-Guided Black-Box Adversarial Attacks on Vision-Language Navigation
  Chenyang Li; Kaige Li; Zeyu Jiang; Changhao Chen
• [92%] Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents
  Halima Bouzidi; Mboutidem Ekemini Mkpong; Mohammad Abdullah Al Faruque
• [92%] DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection
  Weiwei Qi; Zefeng Wu; Zhilin Guo; Tianhang Zheng; Chaochao Lu; Liang He; Zhan Qin; Kui Ren
• [92%] GeoThreat: Transferable Targeted Adversarial Attacks on Large Vision-Language Models for Remote Sensing Image Interpretation
  Yimin Fu; Yuefeng Bai; Baicheng Pan; Zhunga Liu; Michael K. Ng
• [91%] Assessing the Operational Impact of Poisoning Attacks over Augmented 3D Point Cloud Public Datasets for Connected and Autonomous Vehicles
  Marwan Lazrag; Badis Hammi; Lorena Gonzalez-Manzano; Joaquin Garcia-Alfaro
• [91%] Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints
  Alan Gany; Bogdan Cautis; Silviu Maniu
• [90%] TIER: Trajectory-Invariant Explanation Regularization for Membership Privacy
  Varun Sharma; Kar Wai Fok; Vrizlynn L. L. Thing
• [90%] Statistical Adversaries: Natural Backdoor-like Features in Vision Datasets
  Paul K. Mandal; Pavan Reddy; Tristan Malatynski
• [90%] Boundary-Seeking GAN-Augmented TabTransformer for Adversarially Robust Intrusion Detection
  Raihan Sultan Pasha Basuki; Aliyah Kurniasih
• [90%] Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model
  Sibo Wang; Jie Zhang; Shiguang Shan; Xilin Chen; Wen Gao
• [90%] Just Testing, Move Along: Evasion of LLM-based System Log Interpretation by Prompt Injection
  Max Landauer; Florian Skopik; Markus Wurzenberger; Franciszek Górski; Mateusz Krzysztoń
• [90%] SignDeepSC: A Semantic Signature-based Approach for Robust Semantic Communication
  Khalil Alhaj; Razane Tajeddine; Hadi Sarieddeen
• [90%] Efficient LLM Adversarial Training via Low-Rank Defense and Circuit-Guided Surrogates
  Weiyi He; Yuping Lin; Jiliang Tang; Yue Xing
• [89%] KidnapRAG: A Black-Box Attack for Hijacking Reasoning in Agentic Retrieval-Augmented Generation Systems
  Chanwoo Choi; Euntae Kim; Kyuho Lee; Youngsam Chun; Jinhee Jeong; Eunmi Kim; Myunggyo Oh; Junseo Jang; Buru Chang
• [89%] AMRM-Pure: Semantic-Preserving Adversarial Purification
  Zhihao Dou; Zhiqiang Gao; Dongfei Cui; Weida Wang; Qinjian Zhao; Dinggen Zhang; Jun Yan; Zeke Xie; Shufei Zhang
• [89%] UTS at ELOQUENT 2026 Voight-Kampff: structural shifts in AI writing bypass state-of-the-art detectors
  Dima Galat; Marian-Andrei Rizoiu
• [88%] Pmeta-TLA: Backdoor Attacks for Speech Classification Models via Meta-Learning with Timbre Leakage Attack
  Yueming Huang; Wenhan Yao; Fen Xiao; Xiarun Chen; Weiping Wen
• [88%] InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models
  Xin Li; Jiaju Han; Ma Yaqi; Chengyin Hu; Yingying Zhao; Jiahuan Long; Fengyu Zhang; Yahui Chai
• [88%] I2VShield: An Efficient Proactive Defense Framework against DiT-based Image-to-Video Models
  Yimao Guo; Zuomin Qu; Wei Lu
• [88%] Physically Real-time Infrared Attack against Optical Flow Estimation Networks
  Shen You; Wei Jiang; Jiarui Liu; Yijian Ye; Qiuzhen Lin; Xiangtao Li; Ka-Chun Wong
• [88%] DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models
  Omid Ahmadieh; Nima Karimian
• [87%] Generative Testing of Automated Speech Recognition Systems
  Yanis Xabier Wilbrand Peña; Oliver Weißl; Andrea Stocco
• [87%] VanillaBench: The Hidden Accuracy Cost of Adversarial Robustness
  Niklas Bunzel
• [86%] T5-CSBoost: Adversarial Perturbation Resistant LLM Fingerprinting
  Gayan K. Kulatilleke; Mahsa Baktashmotlagh; Siamak Layeghy; Marius Portmann
• [86%] Target-Aware Interaction-Guided Reinforcement Learning for Black-Box Node Injection Attacks on Graph Neural Networks
  Yi Lan; Ye Yuan
• [86%] Controllability-Aware Adversarial Examples Against LLM-Based Network Traffic Classifiers
  Zhenpeng Li
• [86%] SpeechGuard: Online Defense against Backdoor Attacks on Speech Recognition Models
  Jinwen Xin; Xixiang Lv
• [86%] AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression
  Yuanhao Huang; Yilong Ren; Jinlei Wang; Xuesong Bai; Jinchuan Zhang; Haiyang Yu
• [84%] Banshee: Target Switch Attacks on Gimbal-Stabilized Visual Tracking Systems via Acoustic Injection
  Jiarui Li; Joseph Brewington; Qingzhao Zhang; Z. Morley Mao
• [84%] Imperceptible and Reversible Adversarial Examples against Vision-Language Models for Privacy Protection
  Qi Lu; Ziqi Zhou; Yufei Song; Zijing Li; Lulu Xue; Minghui Li; Shengshan Hu; Leo Yu Zhang
• [84%] ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments
  Mansi Phute; Alexander Greenhalgh; Matthew Hull; Haoran Wang; Alec Helbling; ShengYun Peng; Elliott Faa; Willian Lunardi; Martin Andreoni; Wenke Lee; Duen Horng Chau
• [84%] Generalization and Trade-off in Adversarial Training: An RKHS Perspective via Kernel Integral Operators
  Yiling Xie; Xiaoming Huo
• [83%] ISPCloak: Weaponizing ISP for Optimization-Free Physical Camouflage against Deepfake Detectors
  Jiale Zhao; Jiajun Wan; Lei Tang; Ye Qin; Kebing Jin; Jinghui Qin
• [81%] Occluding the Solution Space: Planner-Agnostic Adversarial Attacks on Tolerance-Aware Manipulation
  Keke Tang; Tianyu Hao; Weilong Peng; Hao Jiang; Feng Wu; Peican Zhu; Jianmin Ji; Zhihong Tian
• [81%] Mechanistic Interpretability of LLM Jailbreaks via Internal Attribution Graphs
  Anupam Wagle; Ifrat Ikhtear Uddin; Chaowei Zhang; Longwei Wang
• [81%] EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability
  Andrea Ponte; Daniel Gibert; Matous Kozak; Dmitrijs Trizna; Maura Pintor; Battista Biggio; Fabio Roli; Luca Demetrio
• [81%] Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs
  Roberto Riaño; Gorka Abad; Stjepan Picek; Aitor Urbieta
• [80%] Embedding Inference Attack
  Cedric Fitiavana Raelijohn; Sébastien Gambs; Jean-Francois Rajotte
• [80%] Adversarial LassoNet: Robust Feature Selection via Stability-Driven Sparse Learning
  Zhen Huang; Peicheng Xu; Junbiao Pang; Yulong Zheng
• [79%] When cheap gradients fail: the measurement cost of attacking quantum classifiers
  Bacui Li; Chandra Thapa; Tansu Alpcan; Udaya Parampalli
• [79%] Input-Aware Dynamic Backdoor Attack Against Quantum Neural Networks
  Junrui Zhang; Zemin Chen; Lusi Li; Mohammad Ghasemigol; Daniel Takabi; Rui Ning
• [79%] Code-Poisoning Property Inference Attacks
  Xukun Luan; Yuhui Gong; Gang Zhang; Zixuan Huang; Yuanguo Bi; Xuesong Li; Jinyan Liu
• [79%] Lilith: Backdoor Generalization under Training-Inference Trigger Shift
  Zhou Feng; Jiahao Chen; Chunyi Zhou; Yuan Su; Tianyu Du; Yuwen Pu; Jianhai Chen; Jinbao Li; Shouling Ji
• [78%] Technical Report on the CVPR 2026@AdvML Workshop Challenge
  Tianyuan Zhang; Zonglei Jing; Jiangfan Liu; Ligong Zhang; Ke Ma; Chengzhi Sun; Xiaohai Xu; Zhirui Zhang; Qianqian Xu; Qingming Huang; Hanyu Fang; Junhua Liu; Zheng Wang; Xiaoliang Liu; Yuanbo Li; Shuai Gui; Bin Wang; Menghe Zheng; Jing Nie; Hanyang Meng; Zeyang Zhang; Xiang Zhang; Yongxuan Zhu; Rui Ding; Hainan Li; Yongkang Zhang; Zhilei Zhu; Xianglong Kong; Jin Hu; Zonghao Ying; Yisong Xiao; Lei Chen; Haotong Qin; Jiakai Wang; Aishan Liu; Ruikai Li; Julia Karbing; Yinpeng Dong; Zhenfei Yin; Shao Jing; Xia Hu; Jingyi Xu; Juntao Dai; Xinyun Chen; Vishal M. Patel; Xianglong Liu; Dawn Song; Alan Yuille; Philip H. S. Torr; Dacheng Tao
• [77%] PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption
  Xue Tan; Yi Zheng; Chang Huo; Yunruo Zhang; Yu Liu; Hao Luan; Zhuyang Yu; Xiaoyan Sun; Ping Chen; Jun Dai
• [77%] Fixed-Set Robustness in Programming by Example: Example Corruption and Semantic Partition Recovery
  Yuan Si; Jialu Zhang
• [77%] Probabilistic Robustness in Medical Image Classification
  Yi Zhang; Siddartha Khastgir; Xingyu Zhao
• [77%] Higher-Order Certified Robustness for Regression
  Jie Zhang; Natalie Frank
• [77%] RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning
  Pushkal Kumar; Tucker Nielson; Tanish Kolhe; Shubham Zala; Vincent Li
• [77%] Recover, Decode, Reguard: Guard-Agnostic Defense Amplification againstEncoded VLM Jailbreaks
  Haoyu Zhang; Zhuoxi Wang; Shibo Zheng; Zijian Xiao; Xiangchen Guan; Mohammad Zandsalimy; Shanu Sushmita
• [77%] IGME: Efficient Chained Method Ensemble for Transferable Semantic Segmentation Attacks
  Mengqi He; Jing Zhang
• [75%] Adversarial Deepfake Generation and an Investigation of Purification-Based Adversarial Detection
  Junghyun Kim; Seunghyun Kim; Jiyoung Woo
• [75%] Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks
  Spyridon Raptis; Haralampos-G. Stratigopoulos
• [74%] Replicating the Signature: Unsupervised Targeted Impersonation Attack on RF Fingerprinting
  Haytham Albousayri; Bechir Hamdaoui
• [74%] The Power of Backdoor Absorption in Community Training
  Issam Seddik; Sami Souihi; Mohamed Tamaazousti; Sara Tucci Piergiovanni
• [74%] CPInj: Uncovering Prompt Injection Risks in Textual Collaborative Prompt Optimization
  Xinting Liao; Behnoosh Zamanlooy; Masoumeh Shafieinejad; David B. Emerson; Ruinan Jin; Deval Pandya; Xiaoxiao Li
• [74%] GPE: Evaluating Robust Evidence Aggregation for Fact Verification under Controllable GEO-Style Poisoning
  Zhaoqi Wang; Zijian Zhang; Xiaomei Yuan; Pengtao Kou; Jiamou Liu; Zhen Li; Liehuang Zhu
• [73%] LBA: Textual Hard-Label Adversarial Attack under Low Query Budgets
  Shixin Guo; Ming Zhong; Xuhong Zhang; Dandan Zhao; Zhe Wang; Bo Zhang; Shouling Ji; Hao Peng
• [73%] Rethinking Brain Decoding with CLIP: The Role of Adversarial Robustness
  Byeongseo Bok; Futa Waseda; Jun Liu; Isao Echizen
• [73%] Robustifying Vision-Language Models via Test-Time Prompt Adaptation
  Xingyu Zhu; Huanshen Wu; Shuo Wang; Beier Zhu; Jiannan Ge; Jiaheng Zhang; Long Chen
• [73%] Defense Against LLM Backdoors using Critical Neuron Isolation Pruning
  Yuxi Li; Zhibo Zhang; Kailong Wang; Xingshuo Han; Ling Shi; Haoyu Wang
• [73%] TIGA: Trajectory-Injected Generative Attack against Black-box AIGC Detectors
  Xia Du; Zhuosen Bao; Zheng Lin; Jizhe Zhou; Jiawei Lian; Chi-man Pun; Jun Luo; Wei Ni; Symeon Chatzinotas
• [73%] ToxScreen: Detecting Whether an LLM Has Been Poisoned
  Anthony Hughes; Nicole Xing; Collin Francel; Andy Kim; Andrew Draganov
• [73%] Benign on Label, Malicious by Design: Clean-Label Dormant-to-Activated Backdoor via Machine Unlearning with Removable Camouflage
  Dongdong Zhao; Can Li; Xiang Yao; Fan He; Qihang Ge; Baogang Song
• [72%] RoME: Robust Mixture of Low-Rank Experts against Multiple Adversarial Perturbations
  Woo Jae Kim; Kyle Min; Suhyeon Ha; Joonsung Jeon; Sung-eui Yoon
• [72%] Adversarial Prompting Framework for AI Safety Assessment
  Yash Bhatnagar; Kunal Banerjee; Anirban Chatterjee
• [72%] On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline
  Yuchen Ren; Zhengyu Zhao; Chenhao Lin; Bo Yang; Chao Shen
• [71%] Signal-based Model Access Risk Analysis for AI System Operations Security
  Maria Mahbub; Steven Young; Amir Sadovnik; Edmon Begoli; Chris Rugenstein; Donald Coulter; Anthony Ayodele
• [71%] How Jailbreak Attacks Inform Safety Alignment: A Defender-Centric, Shapley-Based Evaluation of Jailbreak Contributions
  Yukai Zhou; Feiyang Lu; Xiaokai Mao; Jinfei Liu; Wenjie Wang
• [70%] Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline
  Byunghoon Oh; Sunghwan Park; Jaewoo Lee
• [70%] Optimized Instance Alteration for Explaining and Assessing Robustness of Classifiers
  Evgenii Kuriabov; David Miller; Jia Li
• [70%] Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation
  Genglin Liu; Muye Zhang; Krishnamurthy Viswanathan; Nichole J. Hansen; Blaž Bratanič; Nathan L Clement; Shalini Ghosh; Ariel Fuxman
• [69%] Can Watermarking Techniques Help Prevent LLM Model Stealing?
  Elette Boyle; MohammadTaghi Hajiaghayi; Keivan Rezaei; Suho Shin; Amos Stern
• [69%] PhantomSeal: Proactive Deepfakes Defense with Identity/Context Protection and Forensic Tracing
  Liangqin Ren; Zeyan Liu; Ye Wang; Yuxin Chen; Fengjun Li; Bo Luo
• [68%] Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models
  Dongdong Yang; Deyue Zhang; Zhao Liu; Zonghao Ying; Wenzhuo Xu; Jiankai Jin; Xiangzheng Zhang; Quanchen Zou
• [67%] Adversarial Robustness of Phishing Email Detection: A Comparative Study of TF-IDF + Logistic Regression and Fine-Tuned DistilBERT
  Tanveer Ahmed; Seyedali Pourmoafil
• [67%] SoK: Adversarial Robustness of the Variational Quantum Eigensolver via Red-Teaming
  Ahmed Azaz Humdoon; Cheng Chu; Lei Jiang; Qian Lou; Mengxin Zheng
• [66%] Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
  Soham Gadgil; David Alexander; Sai Sunku; Franziska Roesner
• [66%] Anti-Backdoor Coreset Selection via Cumulative Entropy
  Qi Zhao; Christian Wressnegger
• [66%] Piggybacking on Perception: Stealthy Concurrent Audio Prompt Injections against Multimodal LLM Agents
  Mingxiao Liu; Yitong Li; Haoren Zhao; Yaoxiang Bian; Jianan Ma; Jian Zhang; Jialuo Chen; Xinhao Deng; Zhen Wang
• [65%] Overthink-Triggered Slowdown Attacks on LVLM-Based Robotic Systems
  Qiang Han; Jie Wu; Bo Chen
• [65%] Two Sides of the Same Coin: Learning the Backdoor to Remove the Backdoor
  Qi Zhao; Christian Wressnegger
• [65%] Reasoning as a Double-Edged Sword: Architecture and Cross-Stage Robustness in Vision-Language-Action Models
  Tuan Duong Trinh; Naveed Akhtar; Basim Azam
• [65%] Beyond the Bidirectional Promise: Re-evaluating the Robustness of Diffusion Language Models
  Saurabh Yadav; Badri Narayana Patro; Vijay Srinivas Agneeswaran
• [64%] Chameleon: Recovering Cyber-Physical Systems from Memory Corruption Attacks via ML Surrogates
  Mohsen Salehi; Karthik Pattabiraman
• [64%] Burst Spiking Neural Networks
  Jiahong Zhang; Sijun Shen; Man Yao; Han Xu; Mingqiang Huang; Yonghong Tian; Bo Xu; Guoqi Li
• [64%] Optimizing Against Safety Representations: Activation-Guided Adversarial Suffixes and the Geometry of Refusal
  Ege Çakar; Hannah Guan; Kayden Kehe
• [64%] Event Burst Trigger: An Availability Backdoor Attack on Event-Based SNN Object Detection
  Jaesun Baek; Chanwook Lee; Eun-Kyu Lee
• [64%] DiffUE: Enhancing Utility-Unlearnability Trade-off of Unlearnable Examples via Diffusion Autoencoders
  Syed Irfan Ali Meerza; Oktay Ozturk; Amir Sadovnik; Jian Liu
• [64%] Salience Induction against Multi-Hop RAG Agents: Threat and Defense
  Xingfu Zhou; Pengfei Wang; Yuan Zhou; Wei Xie; Xu Zhou
• [63%] Interval Certifications for Multilayered Perceptrons via Lattice Traversal
  Merkouris Papamichail; Konstantinos Varsos; Giorgos Flouris; João Marques-Silva
• [63%] ChannelGuard: Safe Models Do Not Compose into Safe Multi-Agent Systems
  Elias Hossain; Md Mehedi Hasan Nipu; Fatema Tuj Johora Faria; Tasfia Nuzhat Ornee; Maleeha Sheikh
• [63%] GLST: Defending Confidence-Driven V2X Collaborative Perception Against Stealthy Multi-Attacker Feature Injection
  Ji He; Ying Wang; Lijie Zheng; Xinghui Zhu; Yulong Shen; Xiaohong Jiang
• [63%] Borrowed Strength: Best-of-N Search over a Code EncodingBreaks Self-Check Jailbreak Defenses
  Haoyu Zhang; Shibo Zheng; Xiangchen Guan; Zhuoxi Wang; Zijian Xiao; Mohammad Zandsalimy; Shanu Sushmita
• [62%] Formal Mechanisms for Market Stability in Self-Interested Agent Societies: A Marketplace Simulation Study
  Eugene Ng Yi Sheng; Bingquan Shen
• [62%] ARMOR++: Agentic Orchestration of a Multi-Domain Primitive Set for Transferable Attacks on Deepfake Detectors
  Christos Korgialas; Gabriel Lee Jun Rong; Dion Jia Xu Ho; Pai Chet Ng; Xiaoxiao Miao; Konstantinos N. Plataniotis
• [62%] Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models
  Xingkai Peng; Jun Jiang; Jiayang Liu; Kejiang Chen; Weiming Zhang
• [62%] Defending Against Backdoor Attacks via Alignment Checking in Model-Contrastive Federated Learning
  Hongliang Zhang; Zhongyuan Yu; Guijuan Wang; Tianqing He; Wenshuo Ma; Xiaosong Zhang; Jiguo Yu
• [61%] Intentional Electromagnetic Interference Attacks on Facial Recognition
  Tyler Fitzsimmons; Adam Czajka
• [60%] FedCVESA: Taking Away Training Data in Federated Learning via Correlation Value Encoding and Segmented Aggregation
  Chongkai Li; Bang Zhang; Wenjian Luo
• [60%] Beware of Agentic Botnets: Scalable Untargeted Promptware Attacks via Universal and Transferable Adversarial HalluSquatting
  Aya Spira; Stav Cohen; Elad Feldman; Ron Bitton; Avishai Wool; Ben Nassi
• [60%] World Models as Adversaries: Multi-Agent Self-Play Fine-Tuning for Robust Motion Planning
  Tong Nie; Yuewen Mei; Junlin He; Yihong Tang; Jian Sun; Wei Ma
• [59%] ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models
  Zhihao Dou; Qinjian Zhao; Zhiqiang Gao; Sumon Biswas
• [59%] Seduced by the Narrative: Assessing Rule Adherence in Semi-Open Textual Sandboxes
  Weiying Chen; Junlong Shen; Zhanyuan Guo; Xiaoou Zhou
• [59%] QR-Structured Thermal Triggers for Targeted Semantic Attacks on Infrared Vision-Language Models
  Xiang Chen; Yingying Zhao; Chao Li; Jiaju Han; Ben Zhang; Ang Li; Jiahuan Long; Yiwei Wei; Jiujiang Guo; Chengyin Hu
• [58%] Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Traces
  Junlong Liu; Haobo Wang; Weiqi Luo; Xiaojun Jia
• [58%] ADS-C: Antidistillation Sampling for Classification
  Khawaja Abaid Ullah; Mohammad Javad Khojasteh
• [58%] Pangram 4 Technical Report
  Ben Glickenhaus; Katherine Thai; Jenna Russell; Elyas Masrour; Yue Han; Max Spero; Bradley Emi
• [57%] Privacy-Preserving and Verifiable Approximate Distributed Coded Computing
  Xavier Martínez-Luaña; Alba Gude-Santos; Manuel Fernández-Veiga; Rebeca P. Díaz-Redondo
• [57%] Towards Robustness against Typographic Attack with Training-free Concept Localization
  Bohan Liu; Wenqian Ye; Guangzhi Xiong; Zhenghao He; Sanchit Sinha; Aidong Zhang
• [57%] On the Principles of Deep Feedforward ReLU Networks
  Changcun Huang
• [57%] Securing Autonomous Vehicle Systems via Twin-Aware Federated Reinforcement Learning
  Zifan Zhang; Minghong Fang; Dianwei Chen; Zhuqing Liu; Prashant Khanduri; Xianfeng Yang; Anupam Das; Yuchen Liu
• [57%] Maximally Robust Satisficing Bayesian Optimization
  Samuli Kinnunen; Petrus Mikkola; Antti Niskanen; Arto Klami
• [57%] Security of World-Model-Based Embodied AI: A Lifecycle of Threats, Defenses, and Evaluation
  Fazhong Liu; Zhuoyan Chen; Haozhen Tan; Yan Meng; Guoxing Chen; Haojin Zhu
• [56%] OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks
  Litian Zhang; Chaozhuo Li; Yuting Zhang; Zejian Chen; Bingyu Yan; Qiwei Ye
• [56%] Steal the Patch Size: Adversarially Manipulate Vision-Language Models
  Kai Hu; Akash Bharadwaj; Weichen Yu; Matt Fredrikson
• [56%] Cross-Domain Generalization Failure in Lightweight Intrusion Detection Models for IIoT Networks
  MD Azizul Hakim; Md Shihab Uddin; Talha Ibne Anis
• [55%] Securing Multimodal AI through Internal Information Decomposition
  Jehyeok Yeon; Hyeonjeong Ha; Qiusi Zhan; Heng Ji
• [55%] AGVBench: A Reliability-Oriented Benchmark of Data Augmentation for Vein Recognition
  Haiyang Li; Yuming Fu; Qun Song; Hongchao Liao; Jing Chen; Mounim A. EI-Yacoubi; Yang Liu; Siyuan Ma; Xin Jin
• [55%] Security Analysis for SCONE Logic Locking
  Akashdeep Saha; Mohammed Nabeel; Johann Knechtel; Michail Maniatakos; Ozgur Sinanoglu
• [55%] ORAN-DEFEND: Subspace Detection and Sanitization of Backdoor DRL xApps in Open RAN
  Md Raihan Uddin; Fatemeh Lotfi; Tolunay Seyfi; Fatemeh Afghah
• [55%] (A)iSpy: Parasitic Trojans for Machine Learning Infrastructure
  Habibur Rahaman; Qipan Xu; Zafaryab Haider; Prabuddha Chakraborty; Swarup Bhunia; Fnu Suya
• [55%] Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
  Yimeng Chen; Nathanaël Denis; Roberto Di Pietro; Jürgen Schmidhuber
• [54%] ShadowPickle: Evading Machine Learning Model Scanners via Stealthy Pickle Deserialization Attacks
  Dhruv Pradhan; Sarang Nambiar; Ezekiel Soremekun
• [53%] Adversarial Style Optimization: Enhancing VLM Jailbreaks by GRPO-based Stylistic Triggers Optimization
  Bingjun Luo; Jialin Guo; Yue Yao; Xinpeng Ding
• [53%] Fast SDP certification of neural networks : towards large multi-class datasets
  Margot Boyer; Clément Rambour; Zacharie Alès; Amélie Lambert
• [53%] Robust Bayesian Decision Making under Adversarial Uncertainty
  Haripriya Harikumar; Sammie Katt; Yasir Zubayr Barlas; Samuel Kaski
• [53%] CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks
  Ziyu Lin; Tianlong Su; Yingjie Lin; Prosanta Gope; Yinzhi Cao; Ximeng Liu; Biplab Sikdar
• [52%] Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework
  Om Solanki; Lopamudra Praharaj; Deepti Gupta; Maanak Gupta
• [52%] Active Learning on Adversarially Corrupted Graphs
  Marco Bressan; Nicolò Cesa-Bianchi; Tommaso d`Orsi; Emmanuel Esposito; Silvio Lattanzi
• [52%] Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluation
  Rabimba Karanjai; Yang Lu; Hemanth Hegadehalli Madhavarao; Lei Xu; Weidong Shi
• [52%] Inpainting Insights: Elevating Visual XAI with Photorealistic Perturbations
  Josef Lindl; Mariana Chaves; Damien Garreau
• [52%] Are the High-weight Neurons the Important Ones in Image Classification Neural Networks?
  Qitao Chen; Dongfu Yin; F. Richard Yu
• [51%] TopoGuard: Graph Theory Based Defenses Against Split-Knowledge Attacks on RAG
  Chahana Dahal; Zuobin Xiong
• [51%] AEGIS: A Mechanism-Guided Defense against Visual Synonym Jailbreaks in Text-to-Image Models
  Yuanmin Huang; Zhenfei Zhang; Mi Zhang; Geng Hong; Qinqin He; Jialing Tao; Hui Xue; Min Yang
• [51%] LiST: Lipschitz Scaling Training for Robust and Calibrated Neural Networks
  Arthur Chiron; Franck Mamalet; Thomas Massena; Thomas Deltort; Mathieu Serrurier
• [51%] Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices
  Yaxin Li; Hao Wang; Yanda Shao; Shuhao Zhang; Yan Long
• [51%] Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud
  Bálint Gyevnár; Atoosa Kasirzadeh; Nihar B. Shah
• [50%] A Comparison of Data Augmentation Methods for Training Deep Neural Networks on Synthetic Aperture Sonar
  C. J. Moore; Gregory D. Vetaw; Jordan Malof
• [50%] TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models
  Meng Xie; Li Zeng; Hangtao Zhang; Xianlong Wang; Ziqi Zhou; Pengpeng Qiao; Zhetao Li
• [49%] Beware What You Autocomplete: Forensic Attribution of Backdoored Code Completions
  Anjun Gao; Yueyang Quan; Zhuqing Liu; Minghong Fang
• [48%] Behind the Refusal: Determining Guardrail Activation via Behavioral Monitoring
  William Hackett; Peter Garraghan
• [48%] Overloading Large Vision-Language Models for Jailbreaking
  Haoyu Zhang; Yangyang Guo; Mohan Kankanhalli
• [48%] 1-Lipschitz Neural Networks on Hadamard Manifolds
  Davide Murari; Marta Ghirardelli; Ben Adcock; Elena Celledoni; Brynjulf Owren; Carola-Bibiane Schönlieb
• [48%] VulnGym: Evaluating Vulnerability Management Strategies against Advanced Persistent Threats
  Sofia Della Penna; Lorenzo Parracino; Luciano Pianese; Vittorio Orbinato; Roberto Natella
• [47%] !Imperio, smolVLA: The Implications of Data Poisoning on Open Source Robotics
  Stefan Bühler; Mark Schutera
• [47%] Ball Differential Privacy: How to Mitigate Data Reconstruction with Less Noise
  Joseph Margaryan; Nirupam Gupta
• [47%] Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customization
  Yuxin Huang; Ziming Hong; Mingming Gong; Wanyu Wang; Jing Zhang; Tongliang Liu
• [47%] Rethinking Penetration Testing for AI-Enabled Systems: From Resource Compromise to Behavioral Objective Violation
  Mohammad Allahbakhsh; Mohammad Hassan Bahari; Moslem Attar-Raouf
• [47%] Adversarial Prompts for Acceptance Collapse in Speculative Decoding
  Run Wang; Chaoyi Zhou; Xi Liu; Yi Zhu; Amir Salarpour; Pedram MohajerAnsari; Zhi-Qi Cheng; Feng Luo; Siyu Huang; Mert D. Pesé
• [47%] GPT-Red: Automated Red Teaming via Self-Play at Scale
  Eric Wallace; Christopher A. Choquette-Choo; Nikhil Kandpal; Sam Toyer; Dylan Hunn; Stephanie Lin; Yuxin Wen; Xiangyu Qi; Christopher Wolff; Zizhao Wang; Milad Nasr; Sicheng Zhu; Chuan Guo; Juan Felipe Cerón Uribe; Kaiwen Wang; Aiden Low; Kai Xiao; Kai Chen
• [47%] Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderation
  Marco Alecci; Francesco Marchiori; Iyiola Emmanuel Olatunji; Tegawendé F. Bissyandé; Jacques Klein
• [46%] SoK: Federated Learning for Intrusion Detection in Vehicular Networks
  Yahya Shahsavari; Reza Nourmohammadi; Sara Rouhani; Kaiwen Zhang
• [46%] Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy
  Puning Zhao; Zhikun Zhang; Shaowei Wang; Sheng Yue; Bangzhou Xin; Tianhang Zheng; Pengfei Zhang; Xiaochun Cao
• [44%] On the Limits of Support-Preserving Alignment and Bounded Filtering
  Aryan Dutt; Rui Mao; Anupam Chattopadhyay
• [44%] Vision Token Manipulation Attacks on Cloud-Edge Inference of Large Vision-Language Models
  Zikai Zhang; Rui Hu; Olivera Kotevska; Jiahao Xu
• [44%] MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents
  Jiangrong Wu; Huaijin Wang; Yihao Zhang; Yuhong Nan; Shuai Wang
• [44%] Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring
  Jennifer Za; Julija Bainiaksina; Nikita Ostrovsky; Tanush Chopra; Victoria Krakovna
• [44%] Attacking Graph Foundation Models Through Their Shared Representation
  Pankaj Kumar; Subhankar Mishra
• [44%] Do LLMs Know Their Vulnerable Scenarios?
  Ziheng Peng; Huiqi Deng; Haoran Jing; Xuankun Rong; Jiahui Han; Xiting Wang; Na Zou; Xia Hu
• [43%] Concept-based Visual Counterfactual Explanations with Diffusion Models
  Yassine Oueslati; Daniil Kirilenko; Martin Gjoreski; Marc Langheinrich
• [43%] Distributed Attacks in Persistent-State AI Control
  Josh Hills; Ida Caspary; Asa Cooper Stickland
• [43%] Multi-Agent AI Control: Distributed Attacks Hamper Per-Instance Monitors
  Oliver Makins; Orazio Angelini; Zohreh Shams; Mary Phuong
• [43%] Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data
  Zhi-Yong Wang; Hao Nan Sheng; Werner Stefan; Hing Cheung So; Linqi Song; Weitao Xu
• [43%] MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents
  Jifeng Gao; Kang Xia; Yi Zhang; Xiaobin Hong; Mingkai Lin; Xingshen Wei; Wenzhong Li; Sanglu Lu
• [43%] IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests
  Ankur Singh; Jinqiu Yang; Tse-Hsun Chen
• [43%] MiSS: A Logic-Driven Explanation of Minimal Sufficient Coalitions for Point Cloud Classifiers
  Mengda Xing; Jean-Marie Lagniez
• [43%] The Grokked Illusion: True Equilibrium Mitigates Catastrophic Forgetting
  Xiaotian Zhang; Lai Shun Chan; Yue Shang; Entao Yang; Ge Zhang
• [42%] When Routes Run Out: Adversarial Co-Learning and Explainable Robustness in Quantum Repeater Networks
  Brennan Bell; Inti Gabriel Mendoza Estrada; Andreas Trügler; Paul Erker
• [42%] Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability
  Lingwei Wei; Dou Hu; Wei Zhou; Songlin Hu; Philip S. Yu
• [42%] CoG-Guided Weight Correction for Fault-Tolerant Deep Neural Networks
  Bahram Parchekani; Samira Nazari; Ali Azarpeyvand; Mohammad Hasan Ahmadilivani; Tara Ghasempouri; Jaan Raik
• [42%] End-to-End Differential Privacy in Training Deep Neural Network Classifiers
  Huaiyuan Rao; Calvin Hawkins; Alexander Benvenuti; Matthew Hale
• [41%] Robust Critics: Defending LLMs Against Multi-Turn Attacks
  Roman Belaire; Arunesh Sinha; Pradeep Varakantham
• [41%] MusicMark: A Robust Generative Watermarking Framework for Music Generation
  Seohwan Yun; Jeeyoung Yun; Yongjin Kim; Juyeon Lee; Sungwoong Kim
• [41%] Interleaved Noise Injection Improves Clean, Corrupted, and OOD Performance
  Matt L. Wiemann; Peter Melchior; Andrew K. Saydjari
• [41%] TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation
  Susil Kumar Mohanty; Rohit Patel; Kosuru Yuvaraj; Jeenal Chaudhary; Disha Singhania
• [40%] Population-Based Multi-Objective Training of Discriminators for Semi-Supervised GANs
  Francisco Sedeño; Francisco Chicano; Jamal Toutouh
• [40%] An Exploratory Study of Malicious Link Posting on Social Media Applications
  Muhammad Hassan; Mahnoor Jameel; Masooda Bashir
• [40%] Verification of Dynamic Holographic Behavior in Identity Documents
  Glen Pouliquen; Joseph Chazalon; Guillaume Chiron; Thierry Géraud; Ahmad Montaser Awal
• [40%] When Data Imbalance Helps: Robust Generalization Through Shortcut Saturation
  Cheng-Ting Chou; Duc Binh Hoang
• [40%] Lipschitz Continuity in Deep Learning: A Systematic Review of Theoretical Foundations, Estimation Methods, Regularization Approaches, and Certifiable Robustness
  Róisín Luo; James McDermott; Colm O'Riordan
• [40%] Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models
  Derek Manzella; John D. Hastings

2026-06 (295 papers)

• [100%] CEAR: Certified Ensemble Adversarial Robustness in DNNs
  Daniel Sadig; Mohammadreza Maleki; Hamed Karimi; Reza Samavi
• [100%] Beyond Waveform Robustness: Robust Feature-Vocoder Adversarial Attacks on Automatic Speech Recognition
  Yifan Liao; Zongmin Zhang; Zhen Sun; Yuhui Sun; Xinhu Zheng; Xinlei He
• [100%] MAPE: Defending Against Transferable Adversarial Attacks Using Multi-Source Adversarial Perturbations Elimination
  Xinlei Liu; Jichao Xie; Tao Hu; Peng Yi; Yuxiang Hu; Shumin Huo; Zhen Zhang
• [99%] A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs
  Nicolas Stalder; Benjamin F. Grewe; Matteo Saponati; Pau Vilimelis Aceituno
• [99%] Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models
  Liangsheng Liu; Si Chen; Jiamin Wu; Weiwei Feng; Zhixin Cheng; Xiaotian Yin; Wenfei Yang; Tianzhu Zhang
• [99%] Reinforcement Learning Disrupts Gradient-Based Adversarial Optimization
  Xinhai Zou; Chang Zhao; Alireza Aghabagherloo; Dave Singelée; Robin Degraeve; Bart Preneel
• [99%] A Classifier-Agnostic Zero-Shot Adversarial Attack Detection via CLIP
  Hodaya Krakover; Meir Yossef Levi; Eyal Gofer; Guy Gilboa
• [98%] Investigating Adversarial Robustness of Multi-modal Large Language Models
  Hashmat Shadab Malik; Muzammal Naseer; Salman Khan
• [98%] Beyond False Stability: High-Noise Drift Gating for Test-Time Adversarial Defenses in Vision-Language Models
  Hashmat Shadab Malik; Muzammal Naseer; Salman Khan
• [98%] Robust Ensemble of Selectively Strengthened and Augmented Predictors
  Parsa Memarzadehsaghezi; Zahra Hashemi; Pooria Madani; Mehran Ebrahimi
• [98%] Mirage: a Clean-Label Backdoor against LiDAR 3D Object Detection
  Ziba Parsons; Ang Li
• [98%] Vulnerability of Natural Language Classifiers to Evolutionary Generated Adversarial Text
  Manjinder Singh; Alexander E. I. Brownlee; Mohamed Elawady
• [97%] Making Brain-Computer Interfaces More Secure
  Md Fahimul Kabir Chowdhury; Gahangir Hossain
• [97%] Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction
  Lijia Yu; Jiuxin Cao; Yuchen Qiang; Changhao Chen; Yifei Huang; Bo Liu
• [97%] Categorical Robustness Assessment for Machine Learning based Network Intrusion Detection Systems
  Mayank Raj; Nathaniel D. Bastian; Lance Fiondella; Gokhan Kul
• [97%] Quality-Preserving Imperceptible Adversarial Attack on Skeleton-based Human Action Recognition
  Ziyi Chang; Kanglei Zhou; Xiaohui Liang; Hubert P. H. Shum
• [97%] Defending against Adaptive Prompt Injection Attacks via Reasoning-enabled Task Alignment
  Lipeng He; Yihan Wang; Jiawen Zhang; N. Asokan
• [97%] Veriphi: Attack-Guided Neural Network Verification with Dataset-Dependent Training Methods
  Pratik Deshmukh; Kartik Arya; Vasili Savin
• [97%] TrajRS: Towards Certified Robustness in Pedestrian Trajectory Prediction
  Liang Zhang; Gaojie Jin; Yao Shi; Quanzhi Li; Cheng-Chao Huang; David N. Jansen; Lijun Zhang
• [97%] Clustering Unsupervised Representations as Defense against Poisoning Attacks on Speech Commands Classification System
  Thomas Thebaud; Sonal Joshi; Henry Li; Martin Sustek; Jesus Villalba; Sanjeev Khudanpur; Najim Dehak
• [97%] Improving Certified Robustness via Adversarial Distillation
  Matteo Melis; Jesus Martinez Del Rincon; Vishal Sharma
• [96%] SORA: Free Second-Order Attacks in Fast Adversarial Training
  Mazdak Teymourian; Ramtin Moslemi; Farzan Rahmani; Mohammad Hossein Rohban
• [96%] Black-box, Adaptive, Efficient, Transferable, Harmful, Applicable... Attacks Are All You Need to Break LLMs
  Vincent Limbach; Jonas Dornbusch; David Lüdke; Stephan Günnemann; Leo Schwinn
• [96%] SHIELD-IDS: Structurally Heterogeneous Ensemble with Integrated Layered Defense for Intrusion Detection Systems
  Maryam Zaman; Muhammad Khuram Shahzad
• [96%] Toward Trustworthy AI: Multi-Target Adversarial Attacks and Robust Defenses for Continuous Data Summarization
  Yuefang Lian; Longkun Guo; Zhongrui Zhao; Zhigang Lu; Yanan Cai; Shuchao Pang; Dachuan Xu; Jason Xue
• [96%] Neural Variability Enhances Artificial Network Robustness
  Robin Preble; Praveen Venkatesh; Stefan Mihalas; Kameron Decker Harris
• [96%] Pseudo-Feature Padding: A Lightweight Defense Against False Data Injection in Power Grids
  Farhin Farhad Riya; Shahinul Hoque; Yingyuan Yang; Jinyuan Sun; Kevin Tomsovic
• [96%] Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks
  Kavindu Herath; Joshua C. Zhao; Saurabh Bagchi
• [96%] The Role of Input Dimensionality in the Emergence and Targeted Control of Adversarial Examples
  Nasrin Malekzadeh Goradel; Niccolo Pancino; Yaser Gholizade Atani; Benedetta Tondi; Giovanni Bellettini; Mauro Barni
• [96%] PLAA: Packet-level Adversarial Attacks in Network Traffic Detection
  Jinhao You; Zan Zhou; Shujie Yang; Yi Sun; Lei Zhang; Changqiao Xu
• [95%] Adversarial Attacks on Robot Localization Systems via Deep Feature Perturbation
  Zhenyu Li; Tianyi Shang
• [95%] ATLAS: A Large-Scale Evaluation Benchmark for Adversarial LiDAR Perception
  Mellon M. Zhang; Siddhant Panse; Zimo Fan; Akshal Dhal; Rishit Sarkar; Glen Chou
• [95%] The Confidence Trap: Calibration Attacks for Graph Neural Networks
  Cuong Dang; Jiahao Zhang; Hieu Ta Quang; Dung Le; Lu Cheng; Suhang Wang
• [95%] Enhancing Stateful Detection of Adversarial Attacks with Soft-labels' Temporality and Robust Similarity Approximations
  De Zhang Lee; Han Fang; Ee-Chien Chang
• [95%] Transferable Attack against Face Swapping in an Extended Space
  Mingzhi Lyu; Yi Huang; Jun Xie; Zihao Zhao; Hong Xu; Adams Wai-Kin Kong
• [95%] AEGIS: A Semantic GAN and Evidential Learning Frameworkfor Robust Adversarial Detection in Vision Sensors
  Maher Boughdiri; Mounira Msahli; Albert Bifet
• [94%] Digital-to-Physical Transfer of Adversarial Patches for Aerial Vehicle Detection
  Jung Heum Woo; Eun-Kyu Lee
• [94%] BYORn: Bootstrap Your Own Responses to Defend Large Vision-Language Models Against Backdoor Attacks
  Ivan Sabolić; Marin Oršić; Josip Šarić; Sven Lončarić
• [94%] Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks
  Bin Duan; Zeyu Bai; Guowei Yang
• [94%] MorphStrata: Layer-Specific Perturbations for Generating Morphence Students in Time-Series Moving Target Defense
  Abhishek Bhardwaj; Arnav Doshi; Anusri Nagarajan; Thanh Quynh Nhu Ta; Mohammad Masum; Robert Chun; Jaydip Sen; Saptarshi Sengupta
• [94%] Blackknife: Hard-Label Query-Limited Black-Box Attacks on Heterogeneous Graph Neural Networks
  Honglin Gao; Junhao Ren; Lan Zhao; Yue Yang; Jindong Chang; Gaoxi Xiao
• [93%] GJDNet: Robust Graph Neural Networks via Joint Disentangled Learning Against Adversarial Attacks
  Canyixing Cui; Tao Wu; Xingping Xian; Xiao-Ke Xu; Mao Wang; Weina Niu
• [93%] Patcher: Post-Hoc Patching of Backdoored Large Language Models
  Anjun Gao; Yueyang Quan; Yufei Xia; Zhuqing Liu; Minghong Fang
• [93%] Measuring Model Robustness via Fisher Information: Spectral Bounds, Theoretical Guarantees, and Practical Algorithms
  Chong Zhang; Xiang Li; Jia Wang; Qiufeng Wang; Xiaobo Jin
• [93%] Adversarial Attack and Disturbance Detection by Hadamard-Coded Output Representations for Object Detection and Semantic Segmentation
  Lucas Görnhardt; Timo Bartels; Niklas Schwarz; Tim Fingscheidt
• [93%] Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework
  David Huang; Jaewon Chang; Avidan Shah; Prateek Mittal; Chawin Sitawarin
• [93%] BadWorld: Adversarial Attacks on World Models
  Linghui Shen; Mingyue Cui; Xingyi Yang
• [93%] Your Privacy My Cloak: Backdoor Attacks on Differentially Private Federated Learning
  Xiaolin Li; Ning Wang; Ninghui Li; Wenhai Sun
• [93%] Improving Adversarial Robustness via Activation Amplification and Attenuation
  Taïga Gonçalves; Yongsong Huang; Tomo Miyazaki; Shinichiro Omachi
• [92%] Sensitivity as a Double-Edged Sword: A Trade-off Between Discriminability and Adversarial Robustness
  Kai Wang
• [92%] On Improving Robustness of Deepfake Image Detectors
  Abu Taib Mohammed Shahjahan; Mohammad Mannan; Abdessamad Ben Hamza; Amr Youssef
• [92%] SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks
  Seungwon Jeong; Jiwoo Jeong; Hyeonjin Kim; Yunseok Lee; Woojin Lee
• [92%] Defending Against Malicious Finetuning by Scaling Train-time Adversarial Attacks
  Haoming Wen; Shi Chen; Qingyu Shi; Siyuan Liu; Minrui Luo; Jingzhao Zhang; Tianxing He
• [92%] Greedy Coordinate Diffusion: Effective and Semantically Coherent Adversarial Attacks via Diffusion Guidance
  Bohdan Turbal; Blossom Metevier; Max Springer; Aleksandra Korolova
• [92%] Automated jailbreak attack targeting multiple defense strategies
  Qi Wang; Chengcheng Wan; Weijia He; Yanqing Li; Hanqi Sun; Xiaodong Gu; Jiangtao Wang
• [92%] TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks
  Mengda Xie; Yiling He; Meie Fang
• [92%] DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors
  Christian Scano; Diego Soi; Angelo Sotgiu; Luca Demetrio; Davide Maiorca; Giorgio Giacinto; Fabio Roli; Battista Biggio
• [92%] AdvScan: Black-Box Adversarial Example Detection at Runtime through Power Analysis
  Robi Paul; Michael Zuzak
• [92%] A Novel Latent-Class Attack and its Detection by Class Subspace Orthogonalization
  Guangmingmei Yang; David J. Miller; George Kesidis
• [92%] RoAd-RL: A Unified Library and Benchmark for Robust Adversarial Reinforcement Learning
  Adithya Mohan; Daniel Kriegl; Torsten Schön
• [92%] The Spectrum Strikes Back: Infrared POV Attacks on Traffic Sign Classification
  Michael Kühr; Mevlüt Yildirim; Maximilian Luedecke; Mohammad Hamad; Sebastian Steinhorst
• [91%] Adversarial Robustness of Activation Steering in Large Language Models
  Kien Le; Thai Le
• [91%] Assessing Automated Prompt Injection Attacks in Agentic Environments
  David Hofer; Edoardo Debenedetti; Florian Tramèr
• [91%] Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models
  Malikeh Ehghaghi; Boglárka Ecsedi; Marsha Chechik; Colin Raffel
• [91%] ARB4WM: An Adversarial Robustness Benchmark for World Models in Continuous Control
  Junjian Zhang; Hao Tan; Ruonan Li; Dong Zhu; Aiping Li; Zhaoquan Gu
• [91%] Convex training of Lipschitz-regularized shallow neural networks
  Chao Yin; Antoine Lesage-Landry
• [90%] On the Adversarial Robustness of Multimodal LLM Judges
  Zihan Wang; Guansong Pang; Zelin Liu; Wenjun Miao; Jin Zheng; Xiao Bai
• [90%] Differential Zonotopes for Verifying Global Robustness of DNNs
  Anagha Athavale; Samuel Teuber; Matteo Maffei; Ezio Bartocci; Dejan Nickovic; Georg Weissenbacher
• [90%] The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks
  Yuhang Jiang; Xiaojing Chen
• [90%] Robustness of neural networks to random noise perturbations of their inputs
  Mark Levene; Martyn Harris
• [89%] What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks
  Qin Yang; Lu Malloy; Joshua Lee; Xiaohan Chang; Meisam Mohammady; Doowon Kim; Yuan Hong
• [89%] Scratched Lenses, Shifted Depth: Passive Camera-Side Optical Attacks
  Qinlin He; Zeming Zhuang; Yongji Wu; Lan Zhang; Xiaoyong; Yuan
• [89%] Robustness Cannot be Reduced to Regularization: Studying Adversarial Training Beyond the Linear Case
  David A. R. Robin; Rafael Pinot; Yann Chevaleyre
• [89%] Learning to Evade: Adaptive Attacks on Audio Watermarking
  Weikang Ding; Hanqing Guo; Rui Duan; Guangjing Wang; Yuanda Wang; Mingzhe Chen; Qiben Yan
• [89%] PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models
  Simone Gallivanone; Hossein Khodadadi; Mauro Dore; Mauro Medda; Nicola Franco
• [89%] What Does It Mean to Break a Distillation Defense?
  Lena Libon; Pura Peetathawatchai; Michael Aerni; Daniel Paleka; Florian Tramèr
• [88%] Model Poisoning Against Federated Model Adaptation with Chain of Bit-Flips
  Bastien Vuillod; Kevin Hector; Pierre-Alain Moellic; Jean-Max Dutertre; Olivier Potin
• [88%] AutoDojo: Adaptive Black-Box Attacks Reveal the Limits of IPI Defenses and Task-Specification Effects in LLM Agents
  Xinhang Ma; Taoran Li; Chaowei Xiao; Zhiyuan Yu; Ning Zhang; Yevgeniy Vorobeychik
• [88%] Budget-Aware Adaptive Adversarial Patches for Black-Box Object Detection
  Pedram MohajerAnsari; Amir Salarpour; David Fernandez; Mert D. Pesé
• [88%] Adversarial observations in probabilistic State-Space Models for robust Reinforcement Learning
  M. Santos-Pascual; D. Ríos Insua
• [88%] Exploiting Neural Audio Codec Latents for Adversarial Audio Attacks
  Sameek Bhattacharya; Bharath Krishnamurthy; Ajita Rattani
• [88%] Explainability-Aware Frustum Attack: Exposing Structural Vulnerabilities in LiDAR-Based 3D Object Detectors
  Chengzeng You; Binbin Xu; Soteris Demetriou
• [87%] Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning
  Zhenqian Zhu; Yamin Hu; Yujiang Liu; Luping Wei; Wenbo Hou; Bin Li; Haodong Li; Wenjian Luo
• [87%] The Platonic Defense: Backdoor Defense for Self-Supervised Encoders in the Era of Large Scale Pre-training
  Tuo Chen; Minjing Dong; Benlei Cui; Jian Liu; Jie Gui
• [86%] CHASE: Adversarial Red-Blue Teaming for Improving LLM Safety using Reinforcement Learning
  Rahul Markasserithodi; Aditya Joshi; Yuekang Li; Ishmanbir Singh; Chris Yoo; Alan Niu
• [86%] Context-Based Adversarial Attacks on AI Code Generators: Vulnerability Analysis and Implications
  Walther A. Del Orbe; John D. Hastings; Varghese Vaidyan
• [86%] S-GBT: Smooth Growth Bound Tensor for Certified Robustness Against Word Substitution Attacks in NLP
  Mohammed Bouri; Mohammed Erradi; Adnane Saoud
• [86%] REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs
  Yifei Zhao; Qian Lou; Mengxin Zheng
• [85%] MultiTurnPSB: Evaluating Multi-Turn Jailbreak Attacks an dClassifier-Based Defenses for Medical AI Safety
  Anushka Sheoran; Yiduo Hao
• [85%] Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models
  Abrar Alotaibi; Moataz Ahmed
• [84%] A Mechanistic Analysis of Adversarial Fine-tuning of Vision Transformers
  Hannah Gao; Isha Agarwal; Dylan Hadfield-Menell; Rachel Ma
• [84%] Post-Hoc Robustness for Model-Based Reinforcement Learning
  Siemen Herremans; Ali Anwar; Siegfried Mercelis
• [84%] GRAFT: Graphlet-Triggered Backdoor Attack on GNN-Based Hardware Security Systems
  Sanaz Kazemi Abharian; Sai Manoj Pudukotai Dinakarrao
• [84%] T-VSS: Test-Time Visual Subspace Steering for Adversarial Robustness of Vision-Language Models
  Jaehyuk Jang; Minseok Seo. Seungju Cho; Kangwook Ko; Changick Kim
• [83%] PAC-Bayesian Adversarially Robust Generalization for Message Passing Graph Neural Networks: A Sensitivity Analysis
  Ziling Liang; Xinping Yi; Qingsong Wen; Shi Jin
• [83%] GRAPE: Guided Parameter-Space Evolution for Compact Adversarial Robustness
  Zhiyuan Ye; Xiangyu Zhou; Ji Qi; Hao Zhang; Yi Zhou
• [82%] Hybrid Adversarial Defence for Natural Language Understanding Tasks
  Manar Abouzaid; Yang Wang; Chenghua Lin; Stuart E. Middleton
• [82%] Towards Robust Personalized Federated Learning: Vulnerability Assessment and Defense Co-Design
  Mingyuan Fan; Cen Chen
• [82%] How Reliable Is Your Jailbreak Judge? Calibration and Adversarial Robustness of Automated ASR Scoring
  Yang Gao
• [82%] Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models
  Yanchen Yin; Dongqi Han; Linghui Li
• [81%] When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines
  Xi Nie; Hongwei Li; Shenghao Wu; Mingxuan Li; Jiachen Li; Wenbo Jiang
• [81%] MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents
  Yv Zhang; Hao Sun; Hao Fang; Kuofeng Gao; Fan Mo; Bin Chen; Shu-Tao Xia; Yaowei Wang
• [81%] DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings
  Xingwei Zhong; Varun Sharma; Kar Wai Fok; Vrizlynn L. L. Thing
• [81%] TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger
  Vu Tuan Truong; Long Bao Le
• [81%] Are Safety Guarantees in Neural Networks Safe? How to Compute Trustworthy Robustness Certifications
  Merkouris Papamichail; Konstantinos Varsos; Giorgos Flouris; João Marques-Silva
• [80%] When CLIP Sees More, It Fights Back Harder: Multi-View Guided Adaptive Counterattacks for Test-Time Adversarial Robustness
  Sunoh Kim; Daeho Um
• [80%] Hybrid Robustness Verification for Spatio-Temporal Neural Networks
  Sherwin Varghese; Matthew Wicker; Alessio Lomuscio
• [80%] Dummy Backdoor as a Defense: Removing Unknown Backdoors via Shared Internal Mechanisms for Generative LLMs
  Kazuki Iwahana; Masaru Matsubayashi; Takuma Koyama; Toshiki Shibahara; Kenichiro Omintato; Akira Ito
• [80%] Backdoor Attacks on Speech Emotion Recognition via TTS-Generated Poisoning
  Yongbin Huang; Xihao Xie; Jia Zhang
• [80%] Reliability-Guided Adaptive Ensembling for Robust Test-Time Adaptation
  Adam Koziak; Yuhong Guo
• [80%] CITADEL: CSI-Based Jamming Detection and Open-Set Classification for IIoT Networks
  Aymen Bouferroum; Ildi Alla; Valeria Loscri; Abderrahim Benslimane; Vincent Lenders
• [80%] Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats
  Poojitha Thota; Yun Lei; Santhosh Thangaraj; Siddhartha Reddy Jonnalagadda; Shirin Nilizadeh
• [80%] Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents
  Praneeth Narisetty; Shiva Nagendra Babu Kore; Uday Kumar Reddy Kattamanchi; Jayaram Kumarapu
• [79%] NeuroArmor: Safe-Variant-Guided Representation Consistency for Selective Re-Anchoring in Jailbreak Defense
  Zhongyang Lin; Ziran Zhao; Feifei Zhai; Pengyuan Liu
• [79%] Stain-Aware Wavelet Regularization for Instant Adversarial Purification in Histopathology
  Zhe Li; Bernhard Kainz
• [79%] Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks
  Aaditya Pai
• [78%] Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review
  Xinyu Zhao; Rana Muhammad Shahroz Khan; Zhen Xu; Zhen Tan; Tianlong Chen
• [78%] PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent
  Junfeng Guo Heng Huang
• [77%] Anti-Hyperspectral Anomaly Detection: A First Study on Stealthy Lipschitz-Forcing Perturbations Against Unknown Detectors
  Chia-Hsiang Lin; Si-Sheng Young; Jon Atli Benediktsson
• [77%] Steering Vectors are an Adversarial Attack Surface
  Abzal Aidakhmetov; Donato Crisostomi; Tommaso Mencattini; Adrian Robert Minut; Iacopo Masi; Emanuele Rodolà
• [77%] Secure-CHG: A Comprehensive Framework for Robust and Fair Federated Learning via Hybrid Defense and Contribution-Aware Trust
  Guanming Che; Qiang Wang; Jian Xu; Fucai Zhou
• [76%] GAS-Leak-LLM: Genetic Algorithm-Based Suffix Optimization for Black-Box LLM Jailbreaking
  Aman Anifer; Vignesh Kumar Kembu; Vishnu M; Antonino Nocera; Vinod P.; Amal Murali PK; Akshay S Rajan
• [76%] Decoherence as Defence and the Magnitude of Noise Regularisation: A Rigorous N -Qubit Theory of Stochastic Quantum Neural Networks for Adversarially Robust Network Intrusion Detection
  Gautier-Edouard Edouard Filardo
• [76%] USAD: Uncertainty-aware Statistical Adversarial Detection
  Zhijian Zhou; Xunye Tian; Jiacheng Zhang; Zesheng Ye; Yiyi Guo; Donghao Zhang; Liuhua Peng; Feng Liu
• [76%] Theory of Continual Learning Against Data Poisoning Attacks
  Yiting Hu; Lingjie Duan
• [75%] Rethinking Evaluation Paradigms in IBP-based Certified Training
  Konstantin Kaulen; Hadar Shavit; Holger H. Hoos
• [75%] Stealthy World Model Manipulation via Data Poisoning
  Yibin Hu; Xiaolin Sun; Zizhan Zheng
• [74%] Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks
  Omid Ahmadieh; Nima Karimian
• [74%] Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systems
  Jiamin Chang; Salil Kanhere; Piotr Koniusz; Jason; Xue; Hammond Pearce
• [74%] ERTS: Adversarial Robustness Testing of Ethical AI via Semantic Perturbation in a Bounded Consequence Space
  Pratyush Chaudhari
• [74%] Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems
  Reza Soosahabi; Vivek Namsani
• [74%] Mind the Intention: Task-Aware Backdoor Attacks for Forecast-Driven Distribution Network Operations
  Yuxuan Chen; Haipeng Xie; Yichi Zhang; Shuo Dai; Zhaohong Bie
• [74%] SCRUB-FL: Sanitizing and Cleansing Representations via Unlearning of Backdoors
  Osama Wehbi; Sarhad Arisdakessian; Omar Abdel Wahab; Azzam Mourad; Hadi Otrok
• [74%] TEMPO-Diffusion: Temporally Exposed Malicious Poisoning of Diffusion Models
  William Aiken; Paula Branco; Guy-Vincent Jourdan; Iosif-Viorel Onut
• [73%] Influence Factors on RAG Poisoning
  Pedro Pereira; Eva Maia; Isabel Praça; Adrien Bécue
• [73%] Breaking TinyML: Why Quantized Neural Networks Need Domain-Specific Security Analysis
  Jacob Huckelberry; Andrea Mattia Garavagno; Yuke Zhang; Peter A. Beerel; James Mickens; Vijay Janapa Reddi
• [73%] DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing
  Xuanyu Yin; Yilin Jiang; Jun Zhou; Kai Chen; Zhengfu Cao; Xiaolei Dong
• [72%] DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation
  Yuyang Gong; Miaokun Chen; Jiawei Liu; Zhuo Chen; Guoxiu He; Wei Lu; XiaoFeng Wang; Xiaozhong Liu
• [72%] Repurposing Adversarial Perturbations for Continual Learning: From Defense to Active Alignment
  Ran Liu; Min Yu; Mingqi Liu; Jianguo Jiang; Gang Li; Rongsheng Li; Ning Li; Zhen Xu; Weiqing Huang; Ming Liu
• [72%] Test-time Adversarial Takeover: A Real-time Hijacking Interface against Robotic Diffusion Policies
  Zi Yin; Peilin Chai; Siyuan Huang; Zhanhao Hu
• [71%] Robust Auto-associative Memory via Convolutional Restricted Hopfield Networks
  Ci Lin; Tet Yeap; Iluju Kiringa
• [71%] LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity
  Kexin Li; Xiao Hu; Ilya Grishchenko; David Lie
• [70%] Flux-Guard: Facial Identity Protection using diffusion models
  Jie Wang; Tao Wang; Ru Zhang; Jianyi Liu
• [69%] Fair Finetuning Mitigates Distribution Inference Attacks
  Rakshit Naidu
• [69%] Securing Code Understanding: Detecting Natural Backdoor Vulnerability in Code Language Models
  Yuchen Chen; Weisong Sun; Haocheng Huang; Yuan Xiao; Chunrong Fang; Yiran Zhang; Tingting Xu; Zhenpeng Chen; An Guo; Peizhuo Lv; Xiaofang Zhang; Zhenyu Chen; Yang Liu; Baowen Xu
• [69%] AutoPRAC: Automating Attack Discovery for PRAC-Based Rowhammer Defenses using Model Checkers
  Joyce Qu; Gururaj Saileshwar
• [68%] Forced Deferral: Manipulating Routing Decisions in Multimodal LLM Cascades
  Zhongye Liu; Yaopei Zeng; Yurui Chang; Lu Lin
• [68%] Triospect: A Three-Dimensional Framework for Robust Statistical AI-Generated Text Detection Against Diverse Attacks
  Guangsheng Bao; Lihua Rong; Yanbin Zhao; Xiao Yu; Qiji Zhou; Yue Zhang
• [67%] Position Paper: Post-Solve Robustness in Decision Engines: Feasible Regions and Smoothness Under Perturbations
  Yi-Xiang Hu
• [67%] MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents
  Xuelong Dai; Jianyu Ma; Boyang Ma; Biwei Yan; Yijun Yang; Yue Zhang
• [67%] A Red-Team Study of Anthropic Fable 5 & Opus 4.8 Models
  Nicola Franco
• [67%] Generalised Eigenvalue Geometry of Semantic Adversarial Attacks
  Martin Anthony; Kaveh Salehzadeh Nobari
• [67%] MIRAGE: Protecting against Malicious Image Editing via False Moderation
  Anshul Nasery; Ramnath Kumar; Cho-Jui Hsieh; Sewoong Oh
• [66%] SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems
  Tarun Sharma
• [66%] PUFFERDOS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities
  Shangzhi Xu; Ziqi Ding; Xiao Cheng; Yuekang Li; Nan Sun; Benjamin Turnbull; Shuangxiang Kan; Siqi Ma
• [65%] AI Model Extraction Attacks: Bypassing Single-Client Assumptions in Defenses
  Maxime Schwarzer; Johannes F. Loevenich; Gustavo Sánchez; Laurin Holz; Thies Möhlenhof; Tobias Hürten; Roberto Rigolin F. Lopes; Veit Hagenmeyer
• [65%] Exploring Adversarial Robustness and Safety Alignment in Multilingual Multi-Modal Large Language Models
  Hashmat Shadab Malik; Muzammal Naseer; Salman Khan
• [65%] Attacking the Trusted Imagination: Oracle-Level Integrity Attacks on Imagine-then-Act World Models
  Linghan Chen; Kaiyan Ji; Minyu Guo
• [64%] RRISE: Robust Radius Inference via a Surrogate Estimator
  Jong-Ik Park; Shreyas Chaudhari; Carlee Joe-Wong; José M. F. Moura
• [64%] Bypassing Copyright Protection in Diffusion-based Customization via Two-Stage Latent Feature Optimization
  Ziang Xu; Wenbo Yu; Hongyao Yu; Hao Fang; Jiawei Kong; Bin Chen; Hao Wu; Shu-Tao Xia; Zhiyong Wu
• [64%] JGRA: Jacobian Geometry Robustness Assessment in NISQ Noise-Aware Quantum Neural Networks
  Gianluca Scanu; Luca Barletta; Stefano Rini
• [64%] Upper Bounds on the Generalization Error of Deep Learning Models via Local Robustness and Stability
  Abdul-Rauf Nuhu; Parham M. Kebria; Vahid Hemmati; Mahmoud N. Mahmoud; Edward Tunstel; Abdollah Homaifar
• [64%] Adversarial Bandit Optimization with Globally Bounded Perturbations to Convex Losses
  Zhuoyu Cheng; Kohei Hatano; Eiji Takimoto
• [64%] What Was That Again? Certified Robustness for Automatic Speech Recognition
  Andrew C. Cullen; Neil G. Marchant; Jiani Xie; Paul Montague; Benjamin I. P. Rubinstein
• [64%] Explaining Machine Learning and Memorization with Statistical Mechanics
  Robin Theriault
• [63%] Testing Neural Networks via Bayesian-Guided Exploration of Decision Landscapes
  Bin Duan; Meiru Che; Guowei Yang
• [63%] Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications
  Nicole Villavicencio-Garduño; Maksim Ekin Eren; Milo Prisbrey; Ben Migliori; Michael Teti
• [62%] Securing Self-supervised Data Curation for Foundation Models Robustness
  Sandeep Gupta; Roberto Passerone
• [62%] Learning from almost nothing: How neural networks survive heavy input corruption
  Justin Tahmassebpur; Asadullah Bhuiyan; Hyejin Kim; Omri Lesser
• [62%] VFACamou: View-Fused Adversarial Camouflage for Environment-Adaptive Physical Evasion
  Shihui Yan; Hu Liu; Junyu Shi; Zihui Zhu; Ziqi Zhou; Yufei Song; Youming Geng; Minghui Li; Shengshan Hu
• [62%] Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning
  Poojitha Thota; Shirin Nilizadeh
• [61%] Leaking Circuit Secrets: Gradient Leakage Attacks on Graph Neural Networks
  Rupesh Raj Karn; Johann Knechtel; Ozgur Sinanoglu
• [61%] Proteus: Automated Adversarial Robustness Testing for Audio Deepfake Detectors
  Nicolas M. Müller; Aditya Tirumala Bukkapatnam; Zohaib Ahmed
• [61%] Wireless Backdoor Attack and Defense for Semantic Communications over Multiple Access Channel
  Yalin E. Sagduyu; Tugba Erpek; Aylin Yener; Sennur Ulukus
• [61%] Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense
  Mitchell Hermon; Rahul Gupta; Weitong Ruan; Ekraam Sabir; Haohan Wang
• [60%] SS-TPT: Stability and Suitability-Guided Test-Time Prompt Tuning for Adversarially Robust Vision-Language Models
  Sunoh Kim; Daeho Um
• [60%] Hidden in Plain Sight: Benchmarking Agent Safety Against Decomposition Attacks with DECOMPBENCH
  Vikhyath Kothamasu; Virginia Smith; Chhavi Yadav
• [60%] Rethinking Generative Reconstruction Attacks against Graph Neural Network Models
  Adebayo Keji; Sayanton Dibbo
• [60%] Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations
  Halima Bouzidi; Mboutidem Ekemini Mkpong; Haoyu Liu; Mohammad Abdullah Al Faruque
• [59%] No Hidden Prompts Needed! You Can Game AI Peer Review with Presentation-Only Revisions
  Xu Yang; Zhizhou Sha; Junbo Li; Jian Yu; Yifan Sun; Matthew Zhao; Jinrui Fang; Xinyue Guo; Yining Wu; Xu Hu; Yifu Luo; Qiang Liu; Zhangyang Wang
• [59%] SPHINX: First Explain, Then Explore
  Nguyen Do; Tue M. Cao; Tien Van Do; András Hajdu; Tamás Bérczes; My T. Thai
• [59%] Shoot the Honey, Cloak the Player: Towards Zero-Runtime-Overhead Proactive Defense and Detection for Visual Game Cheating
  Jianing Wang; Chuqi Zhang; Yuancheng Jiang; Adil Ahmad; Shanqing Guo
• [59%] Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective
  Cheng-Yi Lee; Yichi Zhang; Yuchen Yang; Chun-Shien Lu; Jun-Cheng Chen
• [58%] The Invitation Trap: Proactive Availability Backdoor in LLMs via Conversational Induction
  He Wang; Jun Feng; Hong Sun; Pengfei Zhang
• [58%] Dive into Ambiguity: A*-Inspired Multi-Agents Commonsense Obfuscation Attack on LLM Prompts
  Boxuan Wang; Zhuoyun Li; Xiaowei Huang; Yi Dong
• [58%] Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift
  Md Anas Biswas
• [57%] Defenses & Enablers For Skill Injection Attacks on Terminal Based Agents
  Yoshinari Fujinuma; Varun Gangal; Traian Rebedea; Makesh Narsimhan Sreedhar; Prasoon Varshney; Rebecca Qian; Anand Kannappan
• [57%] Beyond Homophily: Towards Generalized Graph Reconstruction Attack and Defense
  Zhanke Zhou; Bo Han; Xuan Li; Jiangchao Yao; Sanmi Koyejo; Michael K. Ng
• [57%] Exposing the Illusion of Erasure in Knowledge Editing for LLMs
  Advik Raj Basani; Anshuman Chhabra
• [57%] Phantom: A Unified Face-Swap Deepfake Protection Framework with Latent and Spatial Constraints
  Jungkon Kim; Cheolseung Jung; Jong-Min Choi; Juseong Lee
• [56%] Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety
  Ting Ma; Xiufeng Huang; Benlei Cui; Xiaowen Xu; Shikai Qiu; Ruijie Jian; Hongxing Li; Guanghui Wang; Longtao Huang; Haiwen Hong; Haolei Xu; Wenjing Jiang; Ziwen Xu; Zhaoyu Fan; Shaoxuan He; Chuxi Xiao; Yujian Li; Xinyue Chen; Chunyang Chai; Wenxuan Liu; Ziheng Wang; Dongjie Zhang; Yangfan Zhou; Libin Dong; Yupeng Cao; Xiaoqian Xia; Jing Wang; Zhe Jiang; Zhenan Ye; Guang Yang; Bin Liu; Wei Peng; Ziqiang Zhu; Meihui Lian; Kaiwen Lv Kacuila; Haidong Ding; Bingyu Zhu; Yan Wang; Hai Zhao; Xuan Jin; Wei Zhao; Pengfei Sun; Wei Wang; Huiming Zhang; Bin Li; Hui Xue
• [55%] Adaptive Causal Alignment for High-Confidence Adversarial Training
  Zhiming Luo; Kejia Zhang; Yingxin Lai; Junwei Wu; Juanjuan Weng; Shaozi Li
• [55%] Latent Anchor-Driven Test Generation for Deep Neural Networks
  Bin Duan; Matthew B. Dwyer; Guowei Yang
• [55%] Discard the Dross and Select the Essential: Pre-query Sample Selection for Black-box Membership Inference Attacks
  Dongdong Zhao; Jinrong Hu; Changtian Song; Jian Chen; Hongmin Wang; Baogang Song
• [54%] Passive Reconnaissance of Routing-Layer Defenses in OLSR-Based MANETs using ML
  Nadav Schweitzer; Kiril Danilchenko; Ariel Stulman
• [54%] From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents
  Pritam Dash; Tongyu Ge; Aditi Jain; Tanmay Shah; Zhiwei Shang
• [54%] T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking
  Jian-Ping Mei; Weibin Zhang; Ao Yao; Tiantian Zhu; Jie Xiao
• [54%] Structured Adversarial Camouflage via Voronoi Diagrams
  Jens Bayer; Stefan Becker; David Münch; Michael Arens; Jürgen Beyerer
• [54%] VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks
  Yining Sun; Haoyu Kang; Jiajun Wu; Heng Zhang; Danyang Zhang; Zhenjun Zhao; Haochen Han; Fangming Liu; Wai Kin Victor Chan; Alex Jinpeng Wang
• [53%] Cross-Generational Transfer of Adversarial Attacks Reveals Non-Monotonic Safety Alignment in LLMs
  Subhadip Mitra
• [53%] When Large Language Models Fail in Healthcare: Evaluating Sensitivity to Prompt Variations
  Mahdi Alkaeed
• [53%] POISE: Position-Aware Undetectable Skill Injection on LLM Agents
  Haochang Hao; Dehai Min; Zhifang Zhang; Yunbei Zhang; Miao Xu; Yingqiang Ge; Lu Cheng
• [53%] Safe-RULE: Safe Reinforcement UnLEarning
  Shixiong Jiang; Taozheng Zhu; Fanxin Kong
• [53%] Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning
  Eitan Cohen; Idan Simai; Uri Shaham
• [53%] Trajectory-Level Redirection Attacks on Vision-Language-Action Models
  Gokul Puthumanaillam; Vardhan Dongre; Pranay Thangeda; Hooshang Nayyeri; Dilek Hakkani-Tür; Melkior Ornik
• [53%] Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications
  Yong Yang; Chong Fu; Tong Zhang; Rui Zeng; Qingming Li; Tianyu Du; Zonghui Wang; Shouling Ji; Wenzhi Chen
• [53%] The Unseen Hand: Manipulating Model Fairness and SHAP with Targeted Identity Re-Association Attacks
  Sannaan Khan; Muhammad U. S. Khan
• [52%] Operationalizing Cyber Attack Prediction: A Gap-Prioritized Framework with Dataset and Model Selection Guidelines
  Aminu Muhammad Auwal
• [52%] Hearing the Unspoken: Language Model Priors for Acoustic Adversarial Attacks
  Jiani Xie; Andrew C. Cullen; Paul Montague; Benjamin I. P. Rubinstein
• [52%] Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot
  Yuyang Dai; Yushun Dong
• [52%] Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs
  Md Abdullah Al Mamun; Ngoc Phu Doan; Pedram Zaree; Nael Abu-Ghazaleh; Ihsen Alouani
• [52%] Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems
  Xinru Liu; Xianglong Zhang; Di Cai; Zhumin Chen; Pengfei Hu; Xin Xin
• [52%] Heterogeneous LLM Debate Under Adversarial Peers: Honest Gains, Replacement Costs, and Resilience
  Prashanti Nilayam; Kiran Kumar Ramanna; Prashil Tumbade; Sankalp Nayak
• [52%] FlipGuard: Defending Large Language Models Against Quantization-Conditioned Backdoor Attacks
  Aoying Zheng; Anqi Du; Zizhuang Deng; Yuxuan Chen
• [52%] On the Vulnerability of Parameter-Level Defenses to Model Merging
  Kuangpu Guo; Qingyan Zheng; Jian Liang; Yongcan Yu; Zilei Wang; Ran He; Tieniu Tan
• [51%] SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction
  Yuting Ning; Zhehao Zhang; Yash Kumar Lal; Boyu Gou; Junyi Li; Weitong Ruan; Chentao Ye; Rahul Gupta; Diyi Yang; Yu Su; Huan Sun
• [51%] Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models
  Jianwei Fei; Yunshu Dai; Zhihua Xia; Xiaochun Cao; Jiantao Zhou; Alessandro Piva; Benedetta Tondi
• [51%] Dynamic Malicious Skills in Agentic AI
  Tianhao Chen; Zhengyuan Jiang; Yuepeng Hu; Yebei Gou; Neil Zhenqiang Gong
• [51%] Rethinking Molecular Graph Backdoors under Chemistry-aware Admission
  Thinh T. H. Nguyen; Sze Jue Yang; Khoa D. Doan; Chee Seng Chan; Kok-Seng Wong
• [51%] Can LLMs Reliably Self-Report Adversarial Prefills, and How?
  Quang Minh Nguyen; Uzair Ahmed; Taegyoon Kim
• [51%] Automated Background Swapping for Robustness against Spurious Backgrounds
  Cesar Roder; Kajetan Schweighofer
• [50%] Beyond $\ell_2$-norm and $\ell_\infty$-norm: A Curvature-Inspired $\ell_p$-Norm Scheme for Deep Neural Networks
  Jianhao Xu; Zhuang Yang
• [50%] Consistency Training Along the Transformer Stack
  Sukrati Gautam; Neil Shah; Arav Dhoot; Bryan Maruyama; Caroline Wei; Rohan Kapoor; Robert Sidey; Prakhar Gupta; Zi Cheng Huang; David Demitri Africa
• [50%] PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections
  Pengfei He; Lesly Miculicich; Vishesh Sharma; Ash Fox; George Lee; Jiliang Tang; Tomas Pfister; Long T. Le
• [50%] Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents
  Zihao Wang; Yiming Li; Yutong Wu; Kangjie Chen; Zheyu Liu; Fok Kar Wai; Pin-Yu Chen; Vrizlynn L. L. Thing; Bo Li; Dacheng Tao; Tianwei Zhang
• [50%] Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents
  Zesen Liu; Zihan Zhang; Dongdong She
• [49%] Inference-Time Vulnerability Beyond Shallow Safety: Alignment Along Generation Trajectories
  Kyungmin Park; Taesup Kim
• [49%] Non-Parametric Machine Text Detection via Multi-View Gaussian Processes
  Aleem Khan; Nicholas Andrews
• [49%] Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution
  Yan-Lun Chen; Pin-Yu Chen; Chia-Mu Yu; Ying-Dar Lin; Yu-Sung Wu; Wei-Bin Lee
• [49%] When the Aggregator Cheats: Data-Free Backdoors in Federated LLM-based QA Systems
  Chenqing Zhu; Yanbo Dai; Yulong Tian; Qingming Li; Songze Li
• [49%] Fairness Attacks on Recommender Systems
  Yanan Wang; Yong Ge
• [48%] PsychoPass: Geometric Profiling of Multi-Turn Adversarial LLM Conversations
  Muberra Ozmen; Subhabrata Majumdar
• [48%] Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics
  Hangtao Zhang; Yucheng Zhao; Sishun Liu; Ziqi Zhou; Zeyu Ye; Wei Wan; Minghui Li; Shengshan Hu; Yanjun Zhang; Yi Liu; Leo Yu Zhang
• [48%] VOID: Defeating Unauthorized Mimicry in Latent Diffusion Models
  Chunlin Qiu; Ang Li; Tianxiao Huang; Ruilin Gan; Yunjie Ge; Shenyi Zhang; Huayi Duan; Lingchen Zhao; Chao Shen; Qian Wang
• [48%] RIVET: Robust Idempotent Voice Attribute Editing
  Dareen Alharthi; Bhuvan Koduru; Rita Singh; Bhiksha Raj
• [47%] RogueMerge: Robust and Unified Attacks against LLM Model Merging
  Jinghuai Zhang; Yetian He; Kunlin Cai; Han Zhao; Fnu Suya; Yuan Tian
• [47%] Representation Matters in Randomized Smoothing for Audio Classification
  Jong-Ik Park; Shreyas Chaudhari; José M. F. Moura; Carlee Joe-Wong
• [47%] Learning to Attack and Defend: Adaptive Red Teaming of Language Models via GRPO
  Blake Bullwinkel; Eugenia Kim; Amanda Minnich; Mark Russinovich
• [47%] Fed-FBD: Federated Functional Block Diversification for Isolation, Privacy, and Surgical Unlearning
  Weijie Chen; Alan B. McMillan
• [47%] Contrast-Informed Augmentation and Domain-Adversarial Training for Adult-to-Neonatal MR Reconstruction Generalization
  Stephen Moore; Lara Leijser; Richard Frayne; Roberto Souza
• [47%] From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails
  Yuguang Zhou; Xunguang Wang; Pingchuan Ma; Zhantong Xue; Zhaoyu Wang; Shuai Wang
• [47%] Evaluating the Robustness of Proof Autoformalization in Lean 4
  Zhengtao Gui; Sheng Yang; Zhouxing Shi
• [47%] How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation
  Yimeng Chen; Zhe Ren; Firas Laakom; Yu Li; Dandan Guo; Jürgen Schmidhuber
• [47%] Silent Failures in Physics-Informed Neural Networks: Parameter Poisoning and the Limits of Loss-Based Validation
  David McShannon; Nicholas Dietrich
• [46%] Detecting Aimbot Cheaters in MOGs
  Salman Shaikh; Tao Ni; Marc Dacier
• [46%] Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming
  Nicholas Saban
• [46%] Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense
  Minseok Choi; Seungbin Yang; Dongjin Kim; Subin Kim; Jungmin Son; Yunseung Lee; Jaegul Choo; Youngjun Kwak
• [46%] MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models
  Rishabh Makwana; Mamta; Deeksha Varshney; Oana Cocarascu
• [46%] Beyond Pass/Fail: Using Process Mining to Understand How LLMs Resist (and Fail) Red Team Attacks
  Zvi Topol
• [46%] JailbreakOPT: Tool-Assisted Iterative Jailbreak Prompt Optimization
  Ge Shi; Jun Yin; Donglin Xie; Fangyi Liu; Yucan Li; Menglin Liu
• [46%] Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning
  Shanghao Shi; Xiao Wang; Chaoyu Zhang; Hao Li; Wenjing Lou; Thomas Hou; Yevgeniy Vorobeychik; Chongjie Zhang; Ning Zhang
• [46%] Closing the Activation-Cone Blind Spot: Response-Time Probing and Unified Defense
  Subhadip Mitra
• [46%] MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems
  Kunyang Li; Kyle Domico; Jonathan Gregory; Patrick McDaniel
• [45%] Persona Attack: Incremental Memory Injection Jailbreak Attack against Large Language Models
  Junyoung Park; Seongyong Ju; Sunghwan Park; Jaewoo Lee
• [45%] A Closer Look at In-Distribution vs. Out-of-Distribution Accuracy for Open-Set Test-time Adaptation
  Zefeng Li; Evan Shelhamer
• [45%] veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection System
  Idan Refaeli; Maya Swisa; Itay Buchnik; Alon Zada; Guy Amir; Elad Mandelbaum; Ziv Freund; Guy Katz
• [45%] Attack Selection in Agentic AI Control Evaluations Meaningfully Decreases Safety
  Catherine Ge-Wang; Tyler Crosse; Benjamin Hadad; Joachim Schaeffer; Ram Potham; Tyler Tracy
• [45%] FoeGlass: Simple In-Context Learning Is Enough for Red Teaming Audio Deepfake Detectors
  Sepehr Dehdashtian; Jacob H Seidman; Vishnu N Boddeti; Gaurav Bharaj
• [45%] Robustness Verification of Recurrent Neural Networks with Abstraction Refinement
  Li-Jen Lin; Chih-Duo Hong
• [45%] Anywhere, Any-Stymie: Remote Activation of Trojan Malware on LiDAR with Modulated Signals
  R. Spencer Hallyburton; Miroslav Pajic
• [45%] Zero-Shot Test-Time Canonicalization using Out-of-Distribution Scoring
  Dominik Lindner; Johann Schmidt; Tom Siegl; Martin Becker; Sebastian Stober
• [45%] How Robust is OCR-Reasoning? Evaluating OCR-Reasoning Robustness of Vision-Language Models under Visual Perturbations
  Yuxing Cheng; Yuan Wu; Yi Chang
• [45%] Full spectrum Unlearnable Examples via Spectral Equalization
  Jiale Cai; Gezheng Xu; Zhihao Li; Ruiyi Fang; Ruizhi Pu; Di Wu; Qicheng Lao; Charles Ling; Boyu Wang
• [45%] Jailbreaking for the Average Jane: Choosing Optimal Jailbreaks via Bandit Algorithms for Automatically Enhanced Queries
  Prarabdh Shukla; Ritik; Suhas Rao; Arpit Agarwal; Arjun Bhagoji
• [44%] Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMs
  Lisa Bouger; Théo Lasnier; Philippe Loubet Moundi; Yannick Teglia; Djamé Seddah
• [44%] Hybrid CNN-LSTM Framework for Intelligent Cyber Attack Detection and Prevention in U.S. Critical Digital Infrastructure: A Comparative Machine Learning Evaluation on CSE-CIC-IDS2018
  Md. Iqbal Hossan; Md. Serajul Kabir Chowdhury Rubel; Md. Arifur Rahman; B. M. Taslimul Haque
• [44%] Steering LLM Viewpoints through Fabricated Evidence Injection
  Xi Yang; Chang Liu; Zhenglin Huang; Haoran Li; Weiming Zhang; Jian Weng; Yangqiu Song
• [44%] Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem
  Jiahao Chen; Xing He; Yong Yang; Xinfeng Li; Chunyi Zhou; Junhao Li; Zhe Ma; Tianyu Du; Shouling Ji
• [44%] Muon Learns More Robust and Transferable Features than Adam
  Tianyu Ruan; Fengzhuo Zhang; Shuche Wang; Shihua Zhang
• [44%] Some Complexity Results for Robustness Verification for Binarized Neural Networks
  Harshit Goyal; Sudakshina Dutta
• [44%] Adversarial Domain Prompt Tuning and Generation for Single Domain Generalization
  Zhipeng Xu; De Cheng; Xinyang Jiang; Nannan Wang; Dongsheng Li; Xinbo Gao
• [43%] Jailbreaking Multimodal Large Language Models using Multi-Clip Video
  Choongwon Kang; Seungjong Sun; Hyunmin Jun; Jang Hyun Kim
• [43%] RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing
  Weilin Lin; Ziqi Lin; Zhenxing Zhou; Jianze Li; Tong Zhang; Hui Xiong; Li Liu
• [43%] When Behavioral Safety Evaluation Fails: A Representation-Level Perspective
  Enyi Jiang; Anders Gjølbye; Yibo Jacky Zhang; Sanmi Koyejo
• [43%] Beyond Native Success: Auditing Deployment-Interface Exposure of CLIP Backdoors
  Kunlan Xiang; Haomiao Yang; Wenbo Jiang
• [43%] OTTER: A Red-Teaming System for Toxicity-Evading Jailbreak Prompt Optimization
  Jerry Wang; Hsin-Ling Hsu; Yi-Cheng Lai; Nai-Chia Chen; Fang Yu
• [43%] Breaking the Rounding Trap: Securing LLMs against Quantization-Conditioned Backdoors
  Aoying Zheng; Anqi Du; Zizhuang Deng; Yuxuan Chen
• [42%] Ghost: Plausible Yet Unlearnable Trajectories via On-Manifold Substitution for Next-POI Privacy
  Zhenyu Yu; Jihong Guan; Shuigeng Zhou
• [42%] Quantifying the Privacy of Counterfactuals by Leveraging Membership Inference Attacks Against Synthetic Data
  Maryam Babaei; Yingke Wang; Hadrien Lautraite; Heber H. Arcolezi; Ulrich Aivodji; Sebastien Gambs
• [42%] Unsupervised Style Representation Learning for AI-Text Detection via Paraphrase Inversion
  Rafael Rivera Soto; Barry Chen; Nicholas Andrews
• [42%] Model Stealing Through the Lens of Model Multiplicity
  Eliott Baltz; Satoshi Hara; Ulrich Aïvodji
• [41%] Auditing Inference-Time Defense Evaluation for Multimodal Large Language Models
  Bulat Nutfullin; Vladimir Evgrafov; Dmitry Namiot
• [41%] Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code
  Yitong Zhang; Shiteng Lu; Jia Li
• [41%] MAStrike: Shapley-Guided Collusive Red-Teaming on Multi-Agent Systems
  Chejian Xu; Zhaorun Chen; Jingyang Zhang; Freddy Lecue; Avni Kothari; Sarah Tan; Wenbo Guo; Bo Li
• [41%] Detecting Hidden ML Training With Zero-Overhead Telemetry
  Robi Rahman; Sabiha Tajdari
• [41%] Quantization as a Malicious Task: Removing Quantization-Conditioned Backdoors via Task Arithmetic
  Kaihsun Yang; Min-Yan Tsai; Chia-Mu Yu
• [41%] NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms
  Hanwool Lee; Dasol Choi; Bokyeong Kim; Haon Park; Seung Geun Kim
• [41%] Public Diffusion Models, Private Images: Key-Controlled Inversion for Conditional Reconstruction
  Lijunxian Zhang; Weihai Li; Bin Liu; Zikai Xu
• [41%] Sublinearly Structured Deep Neural Networks Achieve Feature Learning Consistency for Compositional Functions
  Sehwan Kim; Yan Sun; Faming Liang
• [41%] Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees
  Yedidel Louck
• [41%] Concept Removal Guidance: Evidence-Calibrated Negative Guidance for Safe Diffusion Sampling
  Yoonseok Choi; Chaeyoung Oh; Hyunjun Choi; Seokin Seo; Kee-Eung Kim
• [40%] Attack Detection using Time Series Foundation Models
  Sribalaji C. Anand; Anh Tung Nguyen; George J. Pappas
• [40%] Robust-U1: Can MLLMs Self-Recover Corrupted Visual Content for Robust Understanding?
  Jiaqi Tang; Jianmin Chen; Youyang Zhai; Wei Wei; Runtao Liu; Mengjie Zhao; Xiangyu Wu; Qingfa Xiao; Qifeng Chen
• [40%] From Parameters to Feature Space: Task Arithmetic for Backdoor Mitigation in Model Merging
  Zhenqian Zhu; Yamin Hu; Yiya Diao; Weixiang Li; Haodong Li; Wenjian Luo
• [40%] Your "Pro" LLM Subscription May Actually Be "Free": Exposing Fingerprint Spoofing Risks in LLM Inference Services
  Jiahao Zhang; Xiuyu Li; Suhang Wang

2026-05 (341 papers)

• [99%] Almost for Free: Crafting Adversarial Examples with Convolutional Image Filters
  Alexander Warnecke; Konrad Rieck
• [99%] Fight Poison with Poison: Enhancing Robustness in Few-shot Machine-Generated Text Detection with Adversarial Training
  Wenjing Duan; Qi Zhou; Yuanfan Li
• [99%] Enhancing Adversarial Robustness in Network Intrusion Detection: A Layer-wise Adaptive Regularization Approach
  Hira Nasir; Eiman Javed; Balawal Shabir; Zunera Jalil; Ahmad Mohsin
• [99%] SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directions
  Thushari Hapuarachchi; Kaiqi Xiong
• [99%] Taming the Long Tail: Rebalancing Adversarial Training via Adaptive Perturbation
  Lilin Zhang; Yimo Guo; Yue Li; Jiancheng Shi; Xianggen Liu
• [99%] Threats to Arabic Handwriting Recognition: Investigating Black-Box Adversarial Attacks on embedded ConvNet models
  Mohsine EL Khayati; Abdelillah Semma; Abdelaziz Courr; Rachid Elouahbi
• [99%] A No-Defense Defense Against Gradient-Based Adversarial Attacks on ML-NIDS: Is Less More?
  Mohamed elShehaby; Ashraf Matrawy
• [99%] SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack
  Han Liu; Zhi Xu; Xiaotong Zhang; Feng Zhang; Xiaoming Xu; Wei Wang; Fenglong Ma; Hong Yu
• [99%] Opportunistic Target Selection: Early Directional Commitment for Query-Efficient Black-Box Adversarial Attacks
  Florent Tariolle; Florian Yger
• [98%] Laundering AI Authority with Adversarial Examples
  Jie Zhang; Pura Peetathawatchai; Florian Tramèr; Avital Shafran
• [98%] Information Theoretic Adversarial Training of Large Language Models
  Yiwei Zhang; Jeremiah Birrell; Reza Ebrahimi; Rouzbeh Behnia; Jason Pacheco; Elisa Bertino
• [98%] Adversarial Graph Neural Network Benchmarks: Towards Practical and Fair Evaluation
  Tran Gia Bao Ngo; Zulfikar Alom; Federico Errica; Murat Kantarcioglu; Cuneyt Gurcan Akcora
• [98%] Band Together: Untargeted Adversarial Training with Multimodal Coordination against Evasion-based Promotion Attacks
  Guanmeng Xian; Ning Yang; Philip S. Yu
• [98%] A Mimetic Detector for Adversarial Image Perturbations
  Johnny Corbino
• [98%] Semantic Smoothing via Novel View Synthesis for Robust SAR Image Classification
  Daniel Brignac; Fengwei Tian; Banafsheh Latibari; Abhijit Mahalanobis; Ravi Tandon
• [98%] Universal Adversarial Triggers
  Benedict Florance Arockiaraj; Alexander Feng; Jianxiong Cai; Xiaoyu Cheng
• [98%] Sample-wise Targeted Adversarial Attacks on Test-time Adaptation
  Phuc Duc Nguyen; Quang Duc Nguyen
• [98%] Unveiling the Fragility of Vision-Language Models: Multi-Modal Adversarial Synergy via Texture-Constrained Perturbations and Cross-Modal Optimization
  Xiang Fang; Wanlong Fang; Changshuo Wang
• [98%] JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models
  Jiachen Qian
• [97%] Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving
  Xinyu Zeng; Xiangkun He; Lei Tao; Chen Lv; Hong Cheng
• [97%] A Robust Out-of-Distribution Detection Framework via Synergistic Smoothing
  Maria Stoica; Abdelrahman Hekal; Alessio Lomuscio
• [97%] Streaming Adversarial Robustness in Fuzzy ARTMAP: Mechanism-Aligned Evaluation, Progressive Training, and Interpretable Diagnostics
  Shane Cairns; Leonardo Enzo Brito da Silva; Sasha Petrenko; Donald C. Wunsch; Jian Liu
• [97%] Backbone is All You Need: Assessing Vulnerabilities of Frozen Foundation Models in Synthetic Image Forensics
  Chiara Musso; Joy Battocchio; Andrea Montibeller; Giulia Boato
• [97%] Fast Adversarial Attacks with Gradient Prediction
  Kamil Ciosek; Aleksandr V. Petrov; Nicolò Felicioni; Konstantina Palla
• [97%] Attacking the First-Principle: A Black-Box, Query-Free Targeted Mimicry Attack on Binary Function Classifiers
  Gabriel Sauger; Jean-Yves Marion; Sazzadur Rahaman; Victor Matrat; Vincent Tourneur; Muaz Ali
• [97%] Targeted Downstream-Agnostic Attack
  Zhuxin Lei; Ziyuan Yang; Yi Zhang
• [97%] Building an Adversarial Malware Dataset by Family and Type: Generation, Evasion, and Poisoning Evaluation
  David Košťál; Martin Jureček
• [96%] Detecting Adversarial Data via Provable Adversarial Noise Amplification
  Furkan Mumcu; Yasin Yilmaz
• [96%] Manifold-Constrained Adversarial Training for Long-Tailed Robustness via Geometric Alignment
  Guanmeng Xian; Ning Yang; Philip S. Yu
• [96%] Backdoor Mitigation in Object Detection via Adversarial Fine-Tuning
  Kealan Dunnett; Reza Arablouei; Dimity Miller; Volkan Dedeoglu; Raja Jurdak
• [96%] Enabling Adversarial Robustness in AI Models through Kubeflow MLOps
  Stavros Bouras; Ioannis Korontanis; Antonios Makris; Konstantinos Tserpes
• [96%] Escaping the Linearity Trap: Manifold Detours for Black-Box Adversarial Attacks on Singing Audio Deepfake Detection
  Yifan Liao; Yule Liu; Zhen Sun; Zongmin Zhang; Yupeng He; Jiaheng Wei; Xinhu Zheng; Xinlei He
• [96%] MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks
  Hyo Seo Kim; Gang Luo; Can Chen; Binghui Wang; Yue Duan; Ren Wang
• [96%] Mind Your Margin and Boundary: Are Your Distilled Datasets Truly Robust?
  Muquan Li; Yingyi Ma; Yihong Huang; Hang Gou; Ke Qin; Ming Li; Yuan-Fang Li; Tao He
• [96%] Adversarial Vulnerability Under Temporal Concept Drift: A Longitudinal Study of Android Malware Detection
  Ahmed Sabbah; Mohammed Kharma; Radi Jarrar; Samer Zein; David Mohaisen
• [96%] When Interpretability Becomes a Liability: Adversarial Attacks on CBM Concept Layers
  Aditya Sridhar
• [95%] Controlled Steering-Based State Preparation for Adversarial-Robust Quantum Machine Learning
  Sahan Sanjaya; Hari Krishna Parvatham; Emma Andrews; Prabhat Mishra
• [95%] Checkerboard: A Simple, Effective, Efficient and Learning-free Clean Label Backdoor Attack with Low Poisoning Budget
  Yi Yang; Jinyang Huang; Binbin Liu; Feng-Qi Cui; Xiaokang Zhou; Zhi Liu; Jie Zhang; Meng Li
• [95%] Beyond Defenses: Manifold-Aligned Regularization for Intrinsic 3D Point Cloud Robustness
  Pedro Alonso; Chongshou Li; Tianrui Li
• [95%] DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models
  Ye Sun; Xin Wang; Jiaming Zhang; Yifeng Gao; Yixu Wang; Yifan Ding; Qixian Zhang; Henghui Ding; Xingjun Ma; Yu-Gang Jiang
• [95%] Codec-Robust Attacks on Audio LLMs
  Jaechul Roh; Jean-Philippe Monteuuis; Jonathan Petit; Amir Houmansadr
• [95%] Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy
  Aman Saxena; Jan Schuchardt; Yan Scholten; Stephan Günnemann
• [95%] Self-supervised Adversarial Purification for Graph Neural Networks
  Woohyun Lee; Hogun Park
• [95%] Localization then Neutralization: Gradient-guided Token Suppression against Visual Prompt Injection Attack
  Dongpeng Zhang; Ke Ma; Yangbangyan Jiang; Gaozheng Pei; Longtao Huang; Qianqian Xu; Qingming Huang
• [95%] Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks
  Ei Hmue Khine; Yao Li; Jiebao Sun; Shengzhu Shi; Zhichang Guo; Boying Wu
• [94%] Asymmetric Invertible Threat: Learning Reversible Privacy Defense for Face Recognition
  Jiabei Zhang; Ziyuan Yang; Andrew Beng Jin Teoh; Yi Zhang
• [94%] LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training
  Yuyang Gong; Zihao Wang; Jiawei Liu; XiaoFeng Wang
• [94%] SDM: A Powerful Tool for Evaluating Model Robustness
  Xinlei Liu; Tao Hu; Jichao Xie; Peng Yi; Hailong Ma; Baolin Li
• [93%] Quantum Interval Bound Propagation for Certified Training of Quantum Neural Networks
  Emma Andrews; Nahyeon Kim; Prabhat Mishra
• [93%] TsallisPGD: Adaptive Gradient Weighting for Adversarial Attacks on Semantic Segmentation
  Alexander Matyasko; Xin Lou; Indriyati Atmosukarto; Wei Zhang
• [93%] Sparse Autoencoders as Plug-and-Play Firewalls for Adversarial Attack Detection in VLMs
  Hao Wang; Yiqun Sun; Pengfei Wei; Lawrence B. Hsieh; Daisuke Kawahara
• [93%] Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms
  Linh Le; David Williams-King; Mohamed Amine Merzouk; Aton Kamanda; Adam Oberman
• [93%] Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models
  Zhiqiang Wang; Dongrui Liu; Yan Li; Zonghao Ying; Wei Xue; Wenhan Luo; Yike Guo
• [92%] Dissociating spatial frequency reliance from adversarial robustness advantages in neurally guided deep convolutional neural networks
  Zhenan Shao; Tianyu Ren; Chengxiao Wang; Leyla Isik; Diane M. Beck
• [92%] Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations
  Yuan Du; Mitchel Hill; HanQin Cai
• [92%] Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment
  Haobo Wang; Xiaorong Ma; Weiqi Luo; Xiaojun Jia; Jiwu Huang
• [92%] Finding the Weakest Link: Adversarial Attack against Multi-Agent Communications
  Maxwell Standen; Junae Kim; Claudia Szabo
• [92%] Dithering Defense: Adversarial Robustness of Vision Foundation Models via Multi-Level Floyd-Steinberg Dithering
  Yury Belousov; Brian Pulfer; Vitaliy Kinakh; Slava Voloshynovskiy
• [92%] Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models
  Arian Komaei Koma; Seyed Amir Kasaei; AmirMahdi Sadeghzadeh; Mohammad Hossein Rohban
• [91%] Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity
  Joy Dhar; Song Xia; Manish Kumar Pandey; Maryam Haghighat; Azadeh Alavi; Ferdous Sohel; Wenyu Zhang; Nayyar Zaidi
• [91%] WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections
  Tri Cao; Yulin Chen; Hieu Cao; Yibo Li; Khoi Le; Thong Nguyen; Yuexin Li; Yufei He; Yue Liu; Shuicheng Yan; Bryan Hooi
• [91%] Adversarial Trust Poisoning in Vehicular Collaborative Perception
  Yutong Liu; Chenyi Wang; Ming F. Li; Qingzhao Zhang
• [91%] Backdoor Attacks on Fault Detection and Localization in Cyber-Physical Systems
  Abile Jean; Kuniyilh S
• [90%] Robust Multi-Agent Path Finding under Observation Attacks: A Principled Adversarial-Plus-Smoothing Training Recipe
  Riad Ahmed
• [90%] Right Predictions, Misleading Explanations: On the Vulnerability of Vision-Language Model Explanations
  Narges Babadi; Hadis Karimipour
• [90%] Unleashing the Representational Power of Fourier Shapes for Attacking Infrared Object Detection
  Yixing Yong; Jian Wang; Ming Lei; Lijun He; Fan Li
• [90%] "What is the Problem Space?" Defining Host-space Adversarial Perturbations against Network Intrusion Detection Systems
  Miel Verkerken; Laurens D'hooge; Bruno Volckaert; Filip De Turck; Giovanni Apruzzese
• [90%] Cordyceps: Covert Control Attacks on LLMs via Data Poisoning
  Zedian Shao; Charles Fleming; Teodora Baluta
• [89%] VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models
  Pang Liu; Yingjie Lao
• [89%] Gray-Box Poisoning of Continuous Malware Ingestion Pipelines
  Jan Dolejš; Martin Jureček; Róbert Lórencz
• [89%] Still Camouflage, Moving Illusion: View-Induced Trajectory Manipulation in Autonomous Driving
  Shuo Ju; Qingzhao Zhang; Huashan Chen; Xuheng Wang; Haotang Li; Wanqian Zhang; Feng Liu; Kebin Peng; Sen He
• [89%] LymphNode: A Plug-and-Play Access Control Method for Deep Neural Networks
  Hanyu Pei; Shang Liu; Zeyan Liu
• [88%] One Step to the Side: Why Defenses Against Malicious Finetuning Fail Under Adaptive Adversaries
  Itay Zloczower; Eyal Lenga; Gilad Gressel; Yisroel Mirsky
• [88%] Towards Universal Physical Adversarial Attacks via a Joint Multi-Objective and Multi-Model Optimization Framework
  Ziyang Liu; Hongyuan Wang; Zijian Wang; Yinxi Lu; Yunzhao Zang; Zhiqiang Yan; Qianhao Ning
• [88%] Certified Robustness from Approximate Gaussian Mixture Structures in Pretrained Latent Spaces
  Konstantinos Emmanouilidis; Tianjiao Ding; Nghia Nguyen; Nicolas Loizou; René Vidal
• [87%] Led to Mislead: Adversarial Content Injection for Attacks on Neural Ranking Models
  Amin Bigdeli; Amir Khosrojerdi; Radin Hamidi Rad; Morteza Zihayat; Charles L. A. Clarke; Ebrahim Bagheri
• [87%] Model-Agnostic Lifelong LLM Safety via Externalized Attack-Defense Co-Evolution
  Xiaozhe Zhang; Chaozhuo Li; Hui Liu; Shaocheng Yan; Bingyu Yan; Qiwei Ye; Haoliang Li
• [87%] Open-Weight LLM Fine-Tuning Defenses are Susceptible to Simple Attacks
  Kevin Kuo; Chhavi Yadav; Virginia Smith
• [87%] EvoDefense: Co-Evolving Black-Box Defense with Large Language Models
  Yu Li; Yuenan Hou; Yingmei Wei; Yanming Guo; Chaochao Lu
• [86%] Dual-branch Robust Unlearnable Examples
  Xianlong Wang; Hangtao Zhang; Wenbo Pan; Ziqi Zhou; Changsong Jiang; Li Zeng; Xiaohua Jia
• [86%] Real-Time Evaluation of Autonomous Systems under Adversarial Attacks
  Adithya Mohan; Xujun Xie; Venkatesh Thirugnana Sambandham; Torsten Schön
• [86%] Architecture Matters: Comparing RAG Systems under Knowledge Base Poisoning
  Samuel Korn
• [86%] Trapping Attacker in Dilemma: Examining Internal Correlations and External Influences of Trigger for Defending GNN Backdoors
  Fan Yang; Binyan Xu; Di Tang; Kehuan Zhang
• [86%] Control Your View: High-Resolution Global Semantic Manipulation in Learned Image Compression
  Jiaming Liang; Chi-Man Pun; Weisi Lin; Greta Seng Peng Mok
• [85%] Fortifying Time Series: DTW-Certified Robust Anomaly Detection
  Shijie Liu; Tansu Alpcan; Christopher Leckie; Sarah Erfani
• [85%] Systematic Discovery of Semantic Attacks in Online Map Construction through Conditional Diffusion
  Chenyi Wang; Ruoyu Song; Raymond Muller; Jean-Philippe Monteuuis; Jonathan Petit; Z. Berkay Celik; Ryan Gerdes; Ming F. Li
• [85%] Watermarks Attack Watermarks: Re-Watermarking as a Generic Removal Strategy
  Maria Bulychev; Neil G. Marchant; Benjamin I. P. Rubinstein
• [85%] AdvScene: Rethinking Adversarial Patch Evaluation Through Scene Robustness
  Xiaoyong; Yuan; Lan; Zhang
• [84%] Redefining AI Red Teaming in the Agentic Era: From Weeks to Hours
  Raja Sekhar Rao Dheekonda; Will Pearce; Nick Landers
• [84%] SoK: Robustness in Large Language Models against Jailbreak Attacks
  Feiyue Xu; Hongsheng Hu; Chaoxiang He; Sheng Hang; Hanqing Hu; Xiuming Liu; Yubo Zhao; Zhengyan Zhou; Bin Benjamin Zhu; Shi-Feng Sun; Dawu Gu; Shuo Wang
• [84%] BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts
  Xiaoting Lyu; Yufei Han; Hangwei Qian; Haoyuan Yu; Xiang Ao; Bin Wang; Chenxu Wang; Xiaobo Ma; Wei Wang
• [84%] Quantum Adversarial Machine Learning: From Classical Adaptations to Quantum-Native Methods
  Roozbeh Razavi-Far; Mohammad Meymani; Erfan Mahmoudinia; Dorsa Vazirzade; Peyman Paknezhad; Fateme Ghasemi; Saeed Saravani; Somayeh Nikkhoo; Kimia Haghjooei
• [84%] REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations
  Buyun Liang; Jinqi Luo; Liangzu Peng; Kwan Ho Ryan Chan; Darshan Thaker; Kaleab A. Kinfu; Fengrui Tian; Hamed Hassani; René Vidal
• [84%] Interaction-Breaking Adversarial Learning Framework for Robust Multi-Agent Reinforcement Learning
  Sunwoo Lee; Mingu Kang; Yonghyeon Jo; Seungyul Han
• [84%] Density-aware Sample-specific Attack
  Qiyuan Wang; Yao Li; Raymond K. W. Wong
• [83%] The Great Pretender: A Stochasticity Problem in LLM Jailbreak
  Jean-Philippe Monteuuis; Cong Chen; Jonathan Petit
• [83%] Closed-Loop Bidirectional Prompting for Adversarial Robustness of Vision Language Models
  Xiao Liu; Jiaxiang Liu; Boci Peng; Boren Hu; Yusong Wang; Xiwen Chen; Prayag Tiwari; Liming Zhang; Mingkun Xu
• [83%] When Muon Optimizer Meets Adversarial Training: A Theoretical and Empirical Study
  Jun Yan; Weiquan Huang; Jiankai Zuo; Yujian Mo; Xi Fang; Chengliang Wu; Zeming Wei
• [83%] BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning
  Ziqing Yang; Rui Wen; Xinlei He; Yun Shen; Michael Backes; Yang Zhang
• [82%] STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack
  Xutao Mao; Liangjie Zhao; Tao Liu; Xiang Zheng; Hongying Zan; Cong Wang
• [82%] "Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking
  Xinyu Zhang; Ziping Dong; Qingyu Liu; Yuan Hong; Zhongjie Ba; Kui Ren
• [82%] Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Security
  Xiang Fang; Wanlong Fang
• [81%] AGC: Adaptive Geodesic Correction for Adversarial Robustness on Vision-Language Models
  Zhiwei Li; Jiacheng Xue; Weining Wang; Ajian Liu; Xingyu Gao; Zhenan Sun; Qi Li
• [81%] Lightweight and Fast Backdoor Model Detection
  Yinbo Yu; Jing Fang; Xuewen Zhang; Chunwei Tian; Qi Zhu; Daoqiang Zhang; Jiajia Liu
• [81%] BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation
  Chengcai Gao; Zhihong Sun; Xiaochuan Shi; Qiufeng Wang; Chao Liang
• [81%] Steering Beyond the Support: Adversarial Training on Unsupervised Jailbroken Activation Simulation
  Luoyu Chen; Weiqi Wang; Zhiyi Tian; Chenhan Zhang; Feng Wu; Jianhuan Huang; Ahmed Asiri; Shui Yu
• [80%] From Stealthy Data Fabrication to Unsafe Driving: Realistic Scenario Attacks on Collaborative Perception
  Qingzhao Zhang; Runting Zhang; Z. Morley Mao
• [80%] Persona-Conditioned Adversarial Prompting (PCAP): Multi-Identity Red-Teaming for Enhanced Adversarial Prompt Discovery
  Cristian Morasso; Anisa Halimi; Muhammad Zaid Hameed; Douglas Leith
• [80%] Compositional Adversarial Training for Robust Visual Watermarking
  Anirudh Satheesh; Michael-Andrei Panaitescu-Liess; Andrew Xu; Georgios Milis; Heng Huang; Zikui Cai; Furong Huang
• [80%] Quantum-Enhanced Adversarial Robustness in Artificial Intelligence
  Jaydip Sen
• [79%] Misrouter: Exploiting Routing Mechanisms for Input-Only Attacks on Mixture-of-Experts LLMs
  Zekun Fei; Zihao Wang; Weijie Liu; Ruiqi He; Jianing Geng; Zheli Liu; XiaoFeng Wang
• [79%] Physical Adversarial Clothing Evades Visible-Thermal Detectors via Non-Overlapping RGB-T Pattern
  Xiaopei Zhu; Guanning Zeng; Zhanhao Hu; Jun Zhu; Xiaolin Hu
• [79%] COPYCOP: Ownership Verification for Graph Neural Networks
  Rahul Nandakumar; Deepayan Chakrabarti
• [79%] Learning to Look Benign: Targeted Evasion of Malware Detectors via API Import Injection
  Juozas Dautartas; Olga Kurasova; Juozapas Rokas Čypas; Viktor Medvedev
• [79%] TASER: Task-Aware Stein Regularisation for Geometry-Driven Robustness
  Michał Kozyra; Gesine Reinert
• [78%] A Theoretical Game of Attacks via Compositional Skills
  Xinbo Wu; Huan Zhang; Abhishek Umrawal; Lav R. Varshney
• [78%] Research on Security Enhancement Methods for Adversarial Robust Large Language Model Intelligent Agents for Medical Decision-Making Tasks
  Saisai Hu
• [78%] TARO: Temporal Adversarial Rectification Optimization Using Diffusion Models as Purifiers
  Daniel Wesego; Pedram Rooshenas
• [78%] Re-Triggering Safeguards within LLMs for Jailbreak Detection
  Zheng Lin; Zhenxing Niu; Haoxuan Ji; Yuzhe Huang; Haichang Gao
• [78%] FedSurrogate: Backdoor Defense in Federated Learning via Layer Criticality and Surrogate Replacement
  Fatima Z. Abacha; Sin G. Teo; Yuanxiang Wu; Lucas C. Cordeiro; Mustafa A. Mustafa
• [78%] Universal Graph Backdoor Defense: A Feature-based Homophily Perspective
  Mengting Pan; Fan Li; Chen Chen; Xiaoyang Wang
• [78%] TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models
  Xin Wang; Yixu Wang; Jiaming Zhang; Ruofan Wang; Jiaqi Yu; Kai Chen; Jingjing Chen; Xingjun Ma; Yu-Gang Jiang
• [78%] RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents
  Doguhuan Yeke; Yanming Zhou; Leo Y. Lin; Hongyu Cai; Antonio Bianchi; Z. Berkay Celik
• [78%] Learning to Perturb Hidden Representations for Generalizable Deep Learning
  Hua Li
• [77%] RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs
  Zhiyuan Xu; Joseph Gardiner; Sana Belguith; Lichao Wu
• [77%] Cross-Modal Backdoors in Multimodal Large Language Models
  Runhe Wang; Li Bai; Haibo Hu; Songze Li
• [77%] PCDM: A Diffusion-Based Data Poisoning Attack Against Federated Learning Systems
  Wei Sun; Yijun Chen; Bo Gao; Ke Xiong; Yuwei Wang; Pingyi Fan; Khaled Ben Letaief
• [77%] Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling
  Ziwei Wang; Jing Chen; Ruichao Liang; Zhi Wang; Yebo Feng; Ju Jia; Ruiying Du; Cong Wu; Yang Liu
• [77%] Mitigating Adaptive Attacks against Reasoning Models with Activation Consistency Training
  Avidan Shah; Jannik Brinkmann; Rico Angell
• [77%] GEO-Bench: Benchmarking Ranking Manipulation in Generative Engine Optimization
  Ojas Nimase; Zhe Chen; Gengpei Qi; Yue Zhao; Xiyang Hu
• [77%] ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving
  Mohammadreza Teymoorianfard; Jean-Philippe Monteuuis; Jonathan Petit; Amir Houmansadr
• [77%] Audio Jailbreaks in Large Audio-Language Models: Taxonomy, Attack-Defense Analysis, and Cost-Aware Evaluation
  Bo-Han Feng; Yu-Hsuan Li Liang; Chien-Feng Liu; You-Hsuan Chang; Yun-Nung Chen
• [77%] When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech
  Qingwen Zeng; Zhenghao Zhao; Yitian Yang; Yiqi Zhu; Fangchen Liu; Zhaoge Bi; Moe Thandar Kyaw Wynn; Kim-Kwang Raymond Choo; Huaming Chen
• [76%] CleanBase: Detecting Malicious Documents in RAG Knowledge Databases
  Weifei Jin; Xilong Wang; Wei Zou; Jinyuan Jia; Neil Gong
• [76%] Revisiting JBShield: Breaking and Rebuilding Representation-Level Jailbreak Defenses
  Kemal Derya; Berk Sunar
• [76%] GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?
  Kaixiang Zhao; Bolin Shen; Yuyang Dai; Shayok Chakraborty; Yushun Dong
• [76%] Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs
  Yifei Wang; Tianlin Li; Xiaohan Zhang; Yida Yang; Xiaoyu Zhang; Li Pan
• [76%] Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents
  Yongxiang Li; Moxin Li; Zhixin Ma; Fengbin Zhu; Dongrui Liu; Wenjie Wang; Fuli Feng
• [75%] Adversarial Update-Based Federated Unlearning for Poisoned Model Recovery
  Wenwei Zhao; Xiaowen Li; Yao Liu; Zhuo Lu
• [75%] CBV: Clean-label Backdoor Attacks on Vision Language Models via Diffusion Models
  Ji Guo; Xiaolong Qin; Cencen Liu; Jielei Wang; Jierun Chen; Wenbo Jiang
• [75%] Adversarial Reframing: A Framework for Targeted Generation in Language Models
  Shahnewaz Karim Sakib; Swati Kar; Anindya Bijoy Das
• [74%] Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment
  Jiajia Li; Xiaoyu Wen; Zhongtian Ma; Shuyue Hu; Qiaosheng Zhang; Zhen Wang
• [74%] Phantom Force: Injecting Adversarial Tactile Perceptions into Embodied Intelligence via EMI
  Zirui Kong; Youqian Zhang; Sze Yiu Chau
• [74%] Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks
  John T. Halloran; Noopur S. Bhatt
• [74%] Poisoning the Watchtower: Prompt Injection Attacks Against LLM-Augmented Security Operations Through Adversarial Log Content
  Rohan Pandey; Archit Bhujang
• [74%] Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling
  Luoyu Chen; Weiqi Wang; Zhiyi Tian; Feng Wu; Ahmed Asiri; Shui Yu
• [73%] A New Framework to Analyse the Distributional Robustness of Deep Neural Networks
  Divij Khaitan; Subhashis Banerjee
• [73%] Boundary-targeted Membership Inference Attacks on Safety Classifiers
  Anthony Hughes; Alexander Goldberg; Prince Jha; Adam Perer; Nikolaos Aletras; Niloofar Mireshghallah
• [73%] SPARD: Defending Harmful Fine-Tuning Attack via Safety Projection with Relevance-Diversity Data Selection
  Shuhao Chen; Weisen Jiang; Yeqi Gong; Shengda Luo; Chengxiang Zhuo; Zang Li; James T. Kwok; Yu Zhang
• [73%] VLA-Hijack: A Transferable Patch Attack against Vision-Language-Action Models via Visual Proprioception Hijacking
  Jiyuan Fu; Kaixun Jiang; Jingkai Jia; Zhaoyu Chen; Xueyao Chen; Lingyi Hong; Shuyong Gao; Chenzhi Tan; Dingkang Yang; Wenqiang Zhang
• [72%] Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering
  Tejas Kulkarni; Antti Koskela; Laith Zumot
• [72%] Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions
  Sarthak Choudhary; Atharv Singh Patlan; Nils Palumbo; Ashish Hooda; Kassem Fawaz; Somesh Jha
• [72%] Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and Mitigation
  Cristian Morasso; Anisa Halimi; Muhammad Zaid Hameed; Douglas Leith
• [72%] Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs
  Leitao Yuan; Qinghua Mao; Daizong Liu; Kun Wang; Wenjie Wang; Yan Teng; Jing Shao; Dongrui Liu
• [72%] CCLab: Adversarial Testing of Learning- and Non-Learning-Based Congestion Controllers
  Zhi Chen; Shehab Sarar Ahmed; Chenkai Wang; Brighten Godfrey; Gang Wang
• [71%] MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents
  Ishrith Gowda
• [71%] Can It Reach the Generator? Investigating the Survival of Prompt-Injection Attacks in Realistic RAG Settings
  Yu Yin; Shuai Wang; Bevan Koopman; Guido Zuccon
• [70%] The Power of Order: Fooling LLMs with Adversarial Table Permutations
  Xinshuai Dong; Haifeng Chen; Xuyuan Liu; Shengyu Chen; Haoyu Wang; Shaoan Xie; Kun Zhang; Zhengzhang Chen
• [70%] LLM-Agnostic Semantic Representation Attack
  Jiawei Lian; Jianhong Pan; Lefan Wang; Yi Wang; Tairan Huang; Shaohui Mei; Lap-Pui Chau
• [70%] GAMBIT: A Three-Mode Benchmark for Adversarial Robustness in Multi-Agent LLM Collectives
  Alexandre Le Mercier; Chris Develder; Thomas Demeester
• [70%] Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing
  Zheng Lin; Zhenxing Niu; Haoxuan Ji; Haichang Gao
• [70%] STRIDE-AI: A Threat Modeling Framework for Generative AI Security Assessment
  Tsafac Nkombong Regine Cyrille; Franziska Schwarz
• [70%] Can Quantum Federated Learning Withstand Circuit-Level Backdoors?
  Aakar Mathur; Mohammed Ruknuddin; Ashish Gupta
• [70%] Toward Understanding Adversarial Distillation: Why Robust Teachers Fail
  Hongsin Lee; Hye Won Chung
• [70%] Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflection
  Lixing Lin; Juli You; Yue Li; Luyun Lin; Yiqing Wang; Zhen Zhang; Moxuan Zheng
• [70%] PAST2HARM: A Simple Adaptive Past Tense Attack for Jailbreaking Multimodal AI
  Snehasis Mukhopadhyay
• [69%] Backdoor Threats in Variational Quantum Circuits: Taxonomy, Attacks, and Defenses
  Lei Jiang; Fan Chen
• [69%] OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences
  Kaixiang Wang; Jiong Lou; Zhaojiacheng Zhou; Jie Li
• [69%] LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models
  Abdullah Al Nomaan Nafi; Fnu Suya; Swarup Bhunia; Prabuddha Chakraborty
• [68%] I can't recognize (yet): Delayed Rendering to Defeat Visual Phishing Detectors
  Ying Yuan; Cristiano Alex Rado; Giovanni Apruzzese; Mauro Conti; Luigi Vincenzo Mancini
• [68%] WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents
  Zhixiang Guo; Siyuan Liang; Shi Fu; Cheng Guo; Andras Balogh; Mark Jelasity; Dacheng Tao
• [68%] Test-Time Collective Action: Proxy-Based Perturbations for Correcting Algorithmic Harms
  Meghana Bhange; Ulrich Aïvodji; Elliot Creager
• [67%] Defense against Poisoning Attacks under Shuffle-DP
  Siyi Wang; Qiyao Luo; Yihua Hu; Lixu Wang; Quanqing Xu; Chuanhui Yang; Zhan Qin; Kui Ren; Wei Dong
• [67%] On the Hardness of Junking LLMs
  Marco Rando; Samuel Vaiter
• [67%] Hybrid Quantum-Classical GANs for the Generation of Adversarial Network Flows
  Prateek Paudel; Nitin Jha; Abhishek Parakh; Mahadevan Subramaniam
• [67%] Poison with Style: A Practical Poisoning Attack on Code Large Language Models
  Khang Tran; Yazan Boshmaf; Issa Khalil; NhatHai Phan; Ting Yu; Md Rizwan Parvez
• [66%] Your Neighbors Know: Leveraging Local Neighborhoods for Backdoor Detection in Decentralized Learning
  Sayan Biswas; Antoine Boutet; Davide Frey; Romaric Gaudel; Rachid Guerraoui; Maxime Jacovella; Anne-Marie Kermarrec; Dimitri Lerévérend; François Taïani; Martijn de Vos
• [66%] Exposing Vulnerabilities in Visible-Infrared VLMs: A Unified Geometric Adversarial Framework with Cross-Task Transferability
  Xiang Chen; Yuxian Dong; Chao Li; Chengyin Hu; Jiaju Han; Fengyu Zhang; Yiwei Wei; Jiahuan Long; Jiujiang Guo
• [66%] When Stronger Triggers Backfire: A High-Dimensional Theory of Backdoor Attacks
  Donald Flynn; Hadas Yaron Goldhirsh; Jonathan P. Keating; Inbar Seroussi
• [66%] Capability and Robustness Cannot Both Be Free: An Information-Theoretic Bound for Vision-Language-Action Models
  Jianwei Tai
• [66%] Structure-Guided Visual Perturbation Neutralization for LVLMs
  Yuanhe Zhang; Xueting Wang; YanBin Ren; Haoran Gao; Xinhan Zheng; Zhenhong Zhou; Fanyu Meng; Li Sun; Sen Su
• [66%] Investigating Detection and Obfuscation of Prompt Injection Attacks Against Software Reverse Engineering AI Agents
  Brian Crawford; Patrick McClure
• [65%] BehaviorGuard: Online Backdoor Defense for Deep Reinforcement Learning
  Yinbo Yu; Xueyu Yin; Jiadai Wang; Chunwei Tian; Sai Xu; Qi Zhu; Daoqiang Zhang
• [65%] The Art of the Jailbreak: Formulating Jailbreak Attacks for LLM Security Beyond Binary Scoring
  Ismail Hossain; Tanzim Ahad; Md Jahangir Alam; Sai Puppala; Syed Bahauddin Alam; Sajedul Talukder
• [65%] Latent-space Attacks for Refusal Evasion in Language Models
  Giorgio Piras; Raffaele Mura; Fabio Brau; Maura Pintor; Luca Oneto; Fabio Roli; Battista Biggio
• [65%] PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs
  Luze Sun; Anshuman Suri; Harsh Chaudhari; Cristina Nita-Rotaru; Alina Oprea
• [65%] Improving Adversarial Robustness of Attribution via Implicit Regularization
  Amir Mehrpanah; Matteo Gamba; Hossein Azizpour
• [64%] Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning
  Zhiyang Dai; Yansong Gao; Boyu Kuang; Haodong Li; Qi Chang; Gaurav Varshney; Derek Abbott; Anmin Fu
• [64%] When Actions Disappear: Adversarial Action Removal in Self-Play Reinforcement Learning
  Arahan Kujur
• [64%] ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts
  Yang Luo; Zifeng Kang; Tiantian Ji; Xinran Liu; Yong Liu; Shuyu Li; Lingyun Peng
• [64%] PGID: Progressive Guided Inversion and Denoising for Robust Watermark Detection
  Minh Quoc Duong; Chun Tong Lei; Chun Pong Lau
• [64%] Protecting On-Device AI Inference: A Systematic Review of Attacks and Defence Mechanisms
  Zisis Tsiatsikas; Alexandros Fakis; Georgios Karopoulos; Vasileios Kouliaridis; Marios Anagnostopoulos
• [64%] Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs
  David Gros; Adam Gleave
• [63%] Mitigating Many-shot Jailbreak Attacks with One Single Demonstration
  Kejia Chen; Jiawen Zhang; Boheng Li; Pengcheng Li; Jian Lou; Zunlei Feng; Mingli Song; Ruoxi Jia; Tianwei Zhang
• [63%] MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs
  Rui Wen; Mark Russinovich; Andrew Paverd; Jun Sakuma; Ahmed Salem
• [63%] Prompt Overflow: What the Guardrail Inspects Is Not What the Model Infers
  Yuanbo Zhou; Changjia Zhu; Junyu Wang; Xu He; Yan Zhai; Kun Sun; Mingkui Wei; Junjie Xiong
• [62%] Plan2Cleanse: Test-Time Backdoor Defense via Monte-Carlo Planning in Deep Reinforcement Learning
  Sze-Ann Chen; Zhi-Yi Chin; Kui-Yuan Chen; Chi-Yu Li; Ping-Chun Hsieh
• [62%] When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models
  Ziyu Liu; Tao Li; Tianjie Ni; Xiaolong Lan; Wengang Ma; Tao Yang; Guohua Wang; Junjiang He
• [61%] Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
  Chi Zhang; Changjia Zhu; Xiaowen Li; Yao Liu; Zhuo Lu
• [61%] Uncovering Hidden Systematics in Neural Network Models for High Energy Physics
  Lucie Flek; Philipp Alexander Jungs; Akbar Karimi; Timo Saala; Alexander Schmid; Matthias Schott; Philipp Soldin; Christopher Wiebusch; Ulrich Willemsen
• [61%] AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelines
  Tingxi Li; Mingfang Ji; Ravishka Shemal Rathnasuriya; Simin Chen; Yitao Hu; Wei Yang
• [61%] Quantifying Cyber-Vulnerability in Power Electronics Systems via an Impedance-Based Attack Reachable Domain
  Hongwei Zhen; Ze Yu; Xin Xiang; Wuhua Li; Mingyang Sun
• [61%] Widening the Gap: Exploiting LLM Quantization via Outlier Injection
  Xiaohua Zhan; Kazuki Egashira; Robin Staab; Mark Vero; Martin Vechev
• [61%] Fast and Lightweight Backdoor Detection via Head Random Probing
  Yinbo Yu; Xueyu Yin; Jing Fang; Chunwei Tian; Qi Zhu; Jiajia Liu; Daoqiang Zhang
• [61%] Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification
  Yaoyang Luo; Zhi Zheng; Ziwei Zhao; Tong Xu; Zhao Jielun; Wenjun Xue; Yong Chen; Enhong Chen
• [60%] FLRSP: Privacy-Preserving Federated Learning Using Randomly Selected Model Parameters
  Hiroto Sawada; Shoko Imaizumi; Hitoshi Kiya
• [60%] Lightweight Stylistic Consistency Profiling: Robust Detection of LLM-Generated Textual Content for Multimedia Moderation
  Siyuan Li; Aodu Wulianghai; Xi Lin; Xibin Yuan; Qinghua Mao; Guangyan Li; Xiang Chen; Jun Wu; Jianhua Li
• [60%] Disagreement-Regularized Importance Sampling for Adversarial Label Corruption
  Csongor Horváth; Ida-Maria Sintorn; Prashant Singh
• [60%] Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization
  Mengqi He; Xinyu Tian; Xin Shen; Shu Zou; Jinhong Ni; Zhaoyuan Yang; Weikang Li; Xuesong Li; Jing Zhang
• [60%] Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs
  Reinelle Jan Bugnot; Soohyeon Choi; Hoon Wei Lim; Yue Duan
• [60%] When and Why Adversarial Training Improves PINNs: A Neural Tangent Kernel Perspective
  Yuan-dong Cao; Chi Chiu SO; Jun-Min Wang; He Wang
• [60%] Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models
  Tobias Braun; Jonas Henry Grebe; Hossein Shakibania; Anna Rohrbach; Marcus Rohrbach
• [60%] TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting
  Quang Duc Nguyen; Siyuan Liang; Yiming Li; Fushuo Huo; Dacheng Tao
• [60%] Turning Bias into Bugs: Bandit-Guided Style Manipulation Attacks on LLM Judges
  Xianglin Yang; Bryan Hooi; Gelei Deng; Tianwei Zhang; Jin Song Dong
• [60%] Probabilistic Smoothing with Ratio-Monotone Transforms for Global Optimization
  Kukyoung Jang; Taehyun Cho; Junrui Zhang; Ping Xu; Kyungjae Lee
• [59%] Homoglyph-based Adversarial Perturbation of Introductory Computer Science Theory Problems
  Aidan Alexander; Chitrangada Juneja; Napaluck Tontrasathien; Miro Vanek; Reyan Ahmed; Saumya Debray; Sazzadur Rahaman
• [59%] Self-ReSET: Learning to Self-Recover from Unsafe Reasoning Trajectories
  Dongcheng Zhang; Yi Zhang; Yuxin Chen; An Zhang; Xiang Wang; Chaochao Lu
• [59%] Hierarchical End-to-End Taylor Bounds for Complete Neural Network Verification
  Taha Entesari; Mahyar Fazlyab
• [59%] AIM: Adversarial Information Masking for Faithfulness Evaluation of Saliency Maps
  Chia-Ying Hsieh; Hsin-Yuan Fang; Chun-Shu Wei
• [59%] When Efficiency Backfires: Cascading LLMs Trigger Cascade Failure under Adversarial Attack
  Zehan Sun; Dingfan Chen; Songze Li
• [59%] Test-Time Training Undermines Safety Guardrails
  Simone Antonelli; Sadegh Akhondzadeh; Aleksandar Bojchevski
• [59%] Lipschitz Optimization for Formal Verification of Homographies
  Jean-Guillaume Durand; Panagiotis Kouvaros; Maxime Gariel; Alessio Lomuscio
• [59%] SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning
  Jiachen Qian
• [59%] Evolving Skill-Structured Attack Memory Enhances LLM Jailbreaking
  Junke Zhang; Jianwei Wang; Sishuo Chen; Yizhang He; Qingshuai Feng; Zhengyi Yang
• [58%] WebTrap: Stealthy Mid-Task Hijacking of Browser Agents During Navigation
  Zhichao Liu; Wenbo Pan; Haining Yu; Ge Gao; Tianqing Zhu; Xiaohua Jia
• [58%] When Prompts Become Payloads: A Framework for Mitigating SQL Injection Attacks in Large Language Model-Driven Applications
  Farzad Nourmohammadzadeh Motlagh; Mehrdad Hajizadeh; Mehryar Majd; Pejman Najafi; Feng Cheng; Christoph Meinel
• [58%] Robust Biomedical Publication Type and Study Design Classification with Knowledge-Guided Perturbations
  Shufan Ming; Joe D. Menke; Neil R. Smalheiser; Halil Kilicoglu
• [58%] KG-ASG: Collision-Knowledge-Guided Closed-Loop Adversarial Scenario Generation With Primary-Support Attribution
  Cheng Wang; Chen Xiong; Ziwen Wang; Yuchen Zhou; Qiang Liu
• [58%] Few-Shot Network Intrusion Detection Using Online Triplet Mining
  Jack Wilkie; Hanan Hindy; Christos Tachtatzis; Miroslav Bures; Robert Atkinson
• [58%] Harnessing non-adversarial robustness in large language models
  Qinghua Zhou; Ellina Aleshina; Andrey Lovyagin; Oleg Somov; Mikhail Seleznyov; Alexander Panchenko; Ivan Oseledets; Elena Tutubalina; Ivan Y. Tyukin
• [58%] Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction
  Hongtao Wang; Se Yang; Yu Chen; Puzhuo Liu
• [57%] Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defenses
  Zhen Sun; Zongmin Zhang; Leyi Sheng; Yule Liu; Yifan Liao; Ke Li; Xinhu Zheng; Jiaheng Wei; Wenyuan Yang; Xinlei He
• [57%] Exposing and Mitigating Temporal Attack in Deepfake Video Detection
  Zheyuan Gu; Minghao Shao; Zhen Wang; Yusong Wang; Mingkun Xu; Shijie Zhang; Hao Jiang
• [57%] Generate "Normal", Edit Poisoned: Branding Injection via Hint Embedding in Image Editing
  Desen Sun; Jason Hon; Howe Wang; Saarth Rajan; Meng Xu; Sihang Liu
• [57%] To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Model
  Chengshuai Zhao; Zhen Tan; Dawei Li; Zhiyuan Yu; Huan Liu
• [57%] ASPI: Seeking Ambiguity Clarification Amplifies Prompt Injection Vulnerability in LLM Agents
  Udari Madhushani Sehwag; Zhengyang Shan; Heming Liu; Dileepa Lakshan; Joseph Brandifino; Max Fenkell
• [57%] Agent Security is a Systems Problem
  Mihai Christodorescu; Earlence Fernandes; Ashish Hooda; Somesh Jha; Johann Rehberger; Kamalika Chaudhuri; Xiaohan Fu; Khawaja Shams; Guy Amir; Jihye Choi; Sarthak Choudhary; Nils Palumbo; Andrey Labunets; Nishit V. Pandya
• [57%] From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors
  Jiejun Tan; Zhicheng Dou; Xinyu Yang; Yuyang Hu; Yiruo Cheng; Xiaoxi Li; Ji-Rong Wen
• [56%] Single-Configuration Attack Success Rate Is Not Enough: Jailbreak Evaluations Should Report Distributional Attack Success
  Carsten Maple; Abhishek Kumar; Riya Tapwal
• [56%] FAME: Feature Activation Map Explanation on Image Classification and Face Recognition
  Xinyi Zhang; Manuel Günther
• [56%] EnCAgg: Enhanced Clustering Aggregation for Robust Federated Learning against Dynamic Model Poisoning
  Tianyun Zhang; Zhen Yang; Haozhao Wang; Ru Zhang; Yongfeng Huang
• [56%] AI Security Research Should Better Incentivize Defense Research
  Youqian Zhang
• [56%] Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions
  Wenjuan Li; Yitao Liu; Runze Chen; Rajkumar Buyya
• [55%] Jailbreaking Vision-Language Models Through the Visual Modality
  Aharon Azulay; Jan Dubiński; Zhuoyun Li; Atharv Mittal; Yossi Gandelsman
• [55%] Narrow Secret Loyalty Dodges Black-Box Audits
  Alfie Lamerton; Fabien Roger
• [55%] Towards Fine-Grained Robustness: Attention-Guided Test-Time Prompt Tuning for Vision-Language Models
  Jia-Wei Hai; Yijun Wang; Xiu-Shen Wei
• [55%] Beyond Attack Success Rate: Temporal Logit Observability for LLM Safety Failures
  Junyoung Park; Sunghwan Park; Seongyong Ju; Jaewoo Lee
• [55%] Can Subgraph Explanations Be Weaponized to Steal Graph Neural Networks?
  Ojas Nimase; Jiate Li; Yue Zhao; Yushun Dong
• [54%] TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks
  Quanchen Zou; Nizhang Li; Wenxin Zhang; Jiaye Lin; Yangchen Zeng; Xiangzheng Zhang; Zonghao Ying
• [54%] A Generalized Singular Value Theory for Neural Networks
  Brian Charles Brown; Robert Bridges; David Grimsman; Mauricio Munoz; Sean Warnick
• [54%] Backdoor Channels Hidden in Latent Space: Cryptographic Undetectability in Modern Neural Networks
  Marte Eggen; Eirik Reiestad; Kristian Gjøsteen; Inga Strümke
• [54%] Inducing Overthink: Hierarchical Genetic Algorithm-based DoS Attack on Black-Box Large Language Reasoning Models
  Shuqiang Wang; Wei Cao; Jiaqi Weng; Jialing Tao; Licheng Pan; Hui Xue; Zhixuan Chu
• [54%] Guided Diffusion Sampling for Precipitation Forecast Interventions
  Ayumu Ueyama; Kazuhiko Kawamoto; Hiroshi Kera
• [54%] LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection
  Lei Zhao; Abhay Bhaskar; Edgar Dobriban
• [54%] Not What You Asked For: Typographic Attacks in Household Robot Manipulation
  Ali Iranmanesh; Peng Liu
• [54%] Automatically Attacking Software Reverse Engineering AI Agents
  Brian Crawford; Justin Phillips; Patrick McClure
• [53%] Distributed Learning with Adversarial Gradient Perturbations
  Nawapon Sangsiri; Yufei Tao
• [53%] Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing
  Blaise Delattre; Hengyu Wu; Paul Caillon; Wei Yang Bryan Lim; Yang Cao
• [53%] On the Robustness of Machine Unlearning for Vision-Language Models
  Yujie Lin; Kaidi Jia; Jiayao Ma; Chengyi Yang; Jinsong Su
• [52%] Zero Day Attacks: Novel Behaviour or Novel Vulnerability?
  Nnamdi Jibunoh; Sara Khanchi; Adetokunbo Makanju
• [52%] Adversarial SQL Injection Generation with LLM-Based Architectures
  Ali Karakoc; H. Birkan Yilmaz
• [52%] The Distillation Game: Adaptive Attacks & Efficient Defenses
  Youssef Allouah; Mahdi Haghifam; Sanmi Koyejo; Reza Shokri
• [52%] Out of Sight, Not Out of Mind: Unveiling Latent Attack in Latent-based Multi-Agent Systems
  Chenxi Wang; Ruiyang Huang; Jiayan Sun; Lei Wei; Yifan Wu
• [52%] The Surface You Test Is Not the Surface That Breaks
  Shifat E Arman; Syed Nazmus Sakib; Nafiul Haque; Shahrear Bin Amin
• [51%] The Adversarial Discount -- AI, Signal Correlation, and the Cybersecurity Arms Race
  James W. Bono
• [51%] A Systematic Investigation of RL-Jailbreaking in LLMs
  Montaser Mohammedalamen; Kevin Roice; Reginald McLean; Alyssa Lefaivre Škopac
• [50%] Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration
  Debeshee Das; Julien Piet; Darya Kaviani; Luca Beurer-Kellner; Florian Tramèr; David Wagner
• [50%] Self-Mined Hardness for Safety Fine-Tuning
  Prakhar Gupta; Garv Shah; Donghua Zhang
• [50%] Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis
  Haoyu Zhang; Mohammad Zandsalimy; Shanu Sushmita
• [50%] Causal Explanations from the Geometric Properties of ReLU Neural Networks
  Hector Woods; Philippa Ryan; Rob Alexander
• [50%] PROWL: Prioritized Regret-Driven Optimization for World Model Learning
  Ahmet H. Güzel; Jenny Seidenschwarz; Benjamin Graham; Jonathan Sadeghi; Jeffrey Hawke; Ilija Bogunovic
• [50%] AI Agents May Always Fall for Prompt Injections
  Sahar Abdelnabi; Eugene Bagdasarian
• [50%] An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments
  Hongjang Yang; Hyunsik Na; Daeseon Choi
• [50%] MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content
  Ruoqi Guo; Yi Liu; Gelei Deng; Yiheng Xiong; Yuekang Li; Ying Zhang; Leo Yu Zhang; Lida Zhao; Ji Jie; Yuxiao Lu
• [49%] Attention Is Where You Attack
  Aviral Srivastava; Sourav Panda
• [49%] When Embedding-Based Defenses Fail: Rethinking Safety in LLM-Based Multi-Agent Systems
  Lingxi Zhang; Guangtao Zheng; Hanjie Chen
• [49%] Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models
  Zeyuan Chen; Yihan Ma; Xinyue Shen; Michael Backes; Yang Zhang
• [49%] The Geometric Structure of Models Learning Sparse Data
  Thomas Walker; T. Mitchell Roddenberry; Ahmed Imtiaz Humayun; Randall Balestriero; Richard Baraniuk
• [49%] Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation
  Peiru Yang; Haoran Zheng; Tong Ju; Shiting Wang; Wanchun Ni; Jiajun Liu; Shangguang Wang; Yongfeng Huang; Tao Qi
• [49%] SoK: Unlearnability and Unlearning for Model Dememorization
  Mengying Zhang; Derui Wang; Ruoxi Sun; Xiaoyu Xia; Shuang Hao; Minhui Xue
• [49%] Quantifying LLM Safety Degradation Under Repeated Attacks Using Survival Analysis
  Zvi Topol
• [49%] Backdooring Masked Diffusion Language Models
  Daniel Yiming Cao; Chengzhong Wang; Sheng-Yen Chou; Chengyu Huang; Pin-Yu Chen; Shengwei An
• [49%] HARP: Measuring Harm Amplification in Multi-Agent LLM Systems
  Md Hafizur Rahman; Zafaryab Haider; Tanzim Mahfuz; Prabuddha Chakraborty
• [49%] Gradient Perturbation: Learning to Perturb Gradients for Adaptive Training
  Hua Li
• [48%] On the explainability of max-plus neural networks
  Ikhlas Enaieh; Olivier Fercoq; García Ángel
• [48%] Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning
  Hao Zhou; Tiru Wu; Yan Jiang; Wanqi Zhou; Junxing Hu; Ai Han
• [48%] Devilray: A Systematic Adversarial Model Revealing Blind Spots in Fake Base Station Detection
  Taekkyung Oh; Duckwoo Kim; Hansung Bae; Beomseok Oh; CheolJun Park; Tyler Tucker; Nathaniel Bennett; Sangwook Bae; Byeongdo Hong; Patrick Traynor; Yongdae Kim
• [48%] Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting
  Jingyi Kang; Junyu Lu; Bo Xu; Hongbo Wang; Linlin zong; Roy Ka-Wei Lee; Hongfei Lin
• [47%] Beyond Semantic Relevance: Counterfactual Risk Minimization for Robust Retrieval-Augmented Generation
  Peiyang Liu; Qiang Yan; Ziqiang Cui; Di Liang; Xi Wang; Wei Ye
• [47%] MIND: Monge Inception Distance for Generative Models Evaluation
  Quentin Berthet; Yu-Han Wu; Clement Crepy; Romuald Elie; Klaus Greff; Michael Eli Sander
• [47%] From Clouds to Hallucinations: Atmospheric Retrieval Hijacking in Remote Sensing Vision-Language RAG
  Jiaju Han; Chao Li; Chengyin Hu; Qike Zhang; Xuemeng Sun; Xin Wang; Fengyu Zhang; Xiang Chen; Yiwei Wei; Jiahuan Long; Jiujiang Guo
• [47%] A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation
  Hao Yang; Zhuo Ma; Yang Liu; Yilong Yang; Guancheng Wang; JianFeng Ma
• [47%] Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment
  Nguyen Linh Bao Nguyen; Wanlun Ma; Viet Vo; Alsharif Abuadbba; Minghong Fang; Jun Zhang; Yang Xiang
• [46%] On the Geometric Limits of Transformer Defenses against Obfuscation Attacks: Latent Embedding Collapse & Performance Robustness Gap
  Becky Mashaido; Tapadhir Das
• [46%] On the Impact of Class Imbalance on the Learning Dynamics of Deep Neural Networks:An Intuitive Insight
  Ismail B. Mustapha; Shafaatunnur Hasan; Sunday O. Olatunji; Hatem S. Y. Nabus
• [46%] Bounded Behavioral Indistinguishability for Black-Box LLM Distillation
  Munawar Hasan
• [45%] PINSIGHT: A Comprehensive Threat Exploration of Domain-Adaptive Wi-Fi based PIN Code Inference
  Johannes Kortz; Paul Staat; Christof Paar; Christian Zenger
• [45%] TUANDROMD-X: Advanced Entropy and Visual Analytics Dataset for Enhanced Malware Detection and Classification
  Parthajit Borah; Upasana Sarmah; D. K. Bhattacharyya; J. K. Kalita
• [45%] Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment
  Jiaqing Li; Yajuan Lu; Xiaochuan Shi; Gang Wu; ZhongYuan Wang; Chao Liang
• [45%] The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure
  Qiqi Liu; Runhan Song; Shilin Ye
• [45%] Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models
  Yanyun Wang; Yu Huang; Zi Liang; Xixin Wu; Li Liu
• [45%] Attention-Guided Reward for Reinforcement Learning-based Jailbreak against Large Reasoning Models
  Zheng Lin; Zhenxing Niu; Haoxuan Ji; Yuzhe Huang; Haichang Gao
• [45%] Detecting Fluent Optimization-Based Adversarial Prompts via Sequential Entropy Changes
  Mohammed Alshaalan; Miguel R. D. Rodrigues
• [45%] LLM-as-a-Reviewer: Benchmarking Their Ability, Divergence, and Prompt Injection Resistance as Paper Reviewers
  Lingyao Li; Junjie Xiong; Changjia Zhu; Runlong Yu; Chen Chen; Junyu Wang; Renkai Ma; Zhicong Lu
• [45%] Audio Pirates: Black-box Audio Watermark Removal via Diffusion Priors
  Lingfeng Yao; Xincong Zhong; Chenpei Huang; Xuandong Zhao; Hanqing Guo; Aohan Li; Jiang Liu; Tomoaki Ohtsuki; Miao Pan
• [44%] Batch Normalization for Neural Networks on Complex Domains
  Xuan Son Nguyen; Nistor Grozavu
• [44%] Stable Agentic Control: Tool-Mediated LLM Architecture for Autonomous Cyber Defense
  Kerri Prinos; Lilianne Brush; Cameron Denton; Zhanqi Wang; Joshua Knox; Snehal Antani; Anton Foltz; Amy Villaseñor
• [44%] Empirical Evidence for Simply Connected Decision Regions in Image Classifiers
  Arjhun Swaminathan; Mete Akgün
• [44%] The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems
  Tanzim Ahad; Ismail Hossain; Md Jahangir Alam; Sai Puppala; Syed Bahauddin Alam; Sajedul Talukder
• [44%] XAI and Statistical Analysis for Reliable Intrusion Detection in the UAVIDS-2025 Dataset: From Tree to Hybrid and Tabular DNN Ensembles
  Iakovos-Christos Zarkadis; Christos Douligeris
• [44%] EntropyScan: Towards Model-level Backdoor Detection in LVLMs via Visual Attention Entropy
  Xuanyu Ge; Zhongqi Wang; Jie Zhang; Shiguang Shan; Xilin Chen
• [44%] Detecting and Mitigating Backdoor Attacks in OTA-FL Systems: A Two-Stage Robust Aggregation Scheme
  Xiaoyan Ma; Seohyun Lee; Taejoon Kim; Christopher G. Brinton
• [44%] From Automation to Collaboration: Human-in-the-Loop Methods for Safe and Trustworthy NLP
  Most. Sharmin Sultana Samu; MD. Tanvir Ahmed Seum; Md. Rakibul Islam
• [44%] Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models
  Tao Qi; Huili Wang; Yuanhong Huang; Wendan Wang; Lianchao Zhao; Jinrui Wang; Zichen Qin; Shangguang Wang; Yongfeng Huang
• [43%] Dimensionality-Aware Anomaly Detection in Learned Representations of Self-Supervised Speech Models
  Sandra Arcos-Holzinger; Sarah M. Erfani; James Bailey; Sanjeev Khudanpur
• [43%] OrchJail: Jailbreaking Tool-Calling Text-to-Image Agents by Orchestration-Guided Fuzzing
  Jianming Chen; Yawen Wang; Junjie Wang; Zhe Liu; Qing Wang; Fanjiang Xu
• [43%] FragBench: Cross-Session Attacks Hidden in Benign-Looking Fragments
  Astha Mehta; Niruthiha Selvanayagam; Cedric Lam; Hengxu Li; Phuc-Nguyen Nguyen; Raymond Lee; Olivia McGoffin; My; Luong; Arthur Collé; Jamie Johnson; David Williams-King; Linh Le
• [43%] SCI-Defense: Defending Manipulation Attacks from Generative Engine Optimization
  Xucheng Yu; Haibo Jin; Huimin Zeng; Haohan Wang
• [43%] RADAR: Defending RAG Dynamically against Retrieval Corruption
  Ziyuan Chen; Yueming Lyu; Yi Liu; Weixiang Han; Jing Dong; Caifeng Shan; Tieniu Tan
• [43%] MRMMIA: Membership Inference Attacks on Memory in Chat Agents
  Kai Chen; Yan Pang; Tianhao Wang
• [43%] Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization
  Zhihao Liu; Yifan Wu; Jian Lou; Di Wang; Yuxi Zhou; Yuke Hu
• [42%] BadDLM: Backdooring Diffusion Language Models with Diverse Targets
  Shengfang Zhai; Xiaoyang Ji; Yuling Shi; Haoran Gao; Fanyu Meng; Yan Zeng; Yuejian Fang; Yinpeng Dong; Jiaheng Zhang
• [42%] AgentShield: Deception-based Compromise Detection for Tool-using LLM Agents
  Yassin H. Rassul; Tarik A. Rashid
• [42%] Safety Context Injection: Inference-Time Safety Alignment via Static Filtering and Agentic Analysis
  Zhenhao Xu; Wenhan Chang; Yichuan Chen; Yuxin Fang; Junhao Liu; Tianqing Zhu
• [42%] A Transfer Learning Evaluation of Deep Neural Networks for Image Classification
  Nermeen Abou Baker; Nico Zengeler; Uwe Handmann
• [42%] Hidden in Memory: Sleeper Memory Poisoning in LLM Agents
  Sidharth Pulipaka; Stanislau Hlebik; Leonidas Raghav; Sahar Abdelnabi; Vyas Raina; Ivaxi Sheth; Mario Fritz
• [42%] Membership Inference Attacks on Discrete Diffusion Language Models
  Shailesh Kasivelrajan
• [42%] Who Owns This Agent? Tracing AI Agents Back to Their Owners
  Ruben Chocron; Doron Jonathan Ben Chayim; Eyal Lenga; Gilad Gressel; Alina Oprea; Yisroel Mirsky
• [42%] Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing
  Leyi Qi; Yiming Li; Siyuan Liang; Zhengzhong Tu; Dacheng Tao
• [41%] Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses
  Xiao Li; Xiang Zheng; Yifeng Gao; Xinyu Xia; Yixu Wang; Xin Wang; Ye Sun; Yunhan Zhao; Ming Wen; Jiayu Li; Zixing Chen; Xun Gong; Yi Liu; Yige Li; Yutao Wu; Cong Wang; Jun Sun; Yixin Cao; Zhineng Chen; Jingjing Chen; Tao Gui; Qi Zhang; Zuxuan Wu; Xipeng Qiu; Xuanjing Huang; Tiehua Zhang; Zhipeng Wei; Kun Wang; Xinfeng Li; Hanxun Huang; Sarah Erfani; James Bailey; Jianping Wang; Chaowei Xiao; Ran He; Bo Li; Xingjun Ma; Yu-Gang Jiang
• [41%] Efficient Preference Poisoning Attack on Offline RLHF
  Chenye Yang; Weiyu Xu; Lifeng Lai
• [41%] PIIGuard: Mitigating PII Harvesting under Adversarial Sanitization
  Mingshuo Liu; Yiwei Zha; Min Chen
• [41%] Membership Inference Attacks on Vision-Language-Action Models
  Yuefeng Peng; Mingzhe Li; Kejing Xia; Renhao Zhang; Amir Houmansadr
• [41%] New Wide-Net-Casting Jailbreak Attacks Risk Large Models
  Qiuchi Xiang; Haoxuan Qu; Hossein Rahmani; Jun Liu
• [41%] Mental Damage: Caption Poisoning Attacks on Retrieval-Augmented Text-to-Music Generation
  Yizhu Wen; Shuhao Zhang; Nan Zhang; Long Cheng; Hanqing Guo
• [41%] New Insight of Variance reduce in Zero-Order Hard-Thresholding: Mitigating Gradient Error and Expansivity Contradictions
  Xinzhe Yuan; William de Vazelhes; Bin Gu; Huan Xiong
• [41%] Landseer: Exploring the Machine Learning Defense Landscape
  Ayushi Sharma; Rosemary Agbozo; Santiago Torres-Arias; Zahra Ghodsi
• [40%] PAMPOS: Causal Transformer-based Trajectory Prediction for Attack-Agnostic Misbehavior Detection in V2X Networks
  Konstantinos Kalogiannis; Ahmed Mohamed Hussain; Panos Papadimitratos
• [40%] Benchmarking Sensor-Fault Robustness in Forecasting
  Alexander Windmann; Philipp Wittenberg; Gianluca Manca; Marcel Dix; Jens U. Brandt; Oliver Niggemann
• [40%] AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters
  Jacob Lagogiannis; William Agnew; Rosa I. Arriaga; Sauvik Das
• [40%] DMN: A Compositional Framework for Jailbreaking Multimodal LLMs with Multi-Image Inputs
  Wenzhuo Xu; Zhipeng Wei; Zonghao Ying; Deyue Zhang; Dongdong Yang; Xiangzheng Zhang; Quanchen Zou

2026-04 (241 papers)

• [100%] Can Drift-Adaptive Malware Detectors Be Made Robust? Attacks and Defenses Under White-Box and Black-Box Threats
  Adrian Shuai Li; Md Ajwad Akil; Elisa Bertino
• [100%] Fragile Reconstruction: Adversarial Vulnerability of Reconstruction-Based Detectors for Diffusion-Generated Images
  Haoyang Jiang; Mingyang Yi; Shaolei Zhang; Junxian Cai; Qingbin Liu; Xi Chen; Ju Fan
• [100%] Adversarial Robustness of NTK Neural Networks
  Yuxuan Hou
• [100%] Defending Quantum Classifiers against Adversarial Perturbations through Quantum Autoencoders
  Emma Andrews; Sahan Sanjaya; Prabhat Mishra
• [99%] PDA: Text-Augmented Defense Framework for Robust Vision-Language Models against Adversarial Image Attacks
  Jingning Xu; Haochen Luo; Chen Liu
• [99%] Spike-PTSD: A Bio-Plausible Adversarial Example Attack on Spiking Neural Networks via PTSD-Inspired Spike Scaling
  Lingxin Jin; Wei Jiang; Maregu Assefa Habtie; Letian Chen; Jinyu Zhan; Xingzhi Zhou; Lin Zuo; Naoufel Werghi
• [99%] Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition
  Wei Zhang; Xinyu Chang; Xiao Li; Yiming Zhu; Xiaolin Hu
• [99%] QShield: Securing Neural Networks Against Adversarial Attacks using Quantum Circuits
  Navid Azimi; Aditya Prakash; Yao Wang; Li Xiong
• [99%] Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving
  Zihui Zhu; Ziqi Zhou; Yichen Wang; Lulu Xue; Minghui Li; Shengshan Hu
• [99%] Robust Alignment: Harmonizing Clean Accuracy and Adversarial Robustness in Adversarial Training
  Yanyun Wang; Qingqing Ye; Li Liu; Zi Liang; Haibo Hu
• [98%] Towards Physically Realizable Adversarial Attenuation Patch against SAR Object Detection
  Yiming Zhang; Weibo Qin; Feng Wang
• [98%] HQA-VLAttack: Towards High Quality Adversarial Attack on Vision-Language Pre-Trained Models
  Han Liu; Jiaqi Li; Zhi Xu; Xiaotong Zhang; Xiaoming Xu; Fenglong Ma; Yuanman Li; Hong Yu
• [98%] APC: Transferable and Efficient Adversarial Point Counterattack for Robust 3D Point Cloud Recognition
  Geunyoung Jung; Soohong Kim; Inseok Kong; Jiyoung Jung
• [98%] Benign Overfitting in Adversarial Training for Vision Transformers
  Jiaming Zhang; Meng Ding; Shaopeng Fu; Jingfeng Zhang; Di Wang
• [98%] The Unseen Adversaries: Robust and Generalized Defense Against Adversarial Patches
  Vishesh Kumar; Akshay Agarwal
• [98%] Low Rank Adaptation for Adversarial Perturbation
  Han Liu; Shanghao Shi; Yevgeniy Vorobeychik; Chongjie Zhang; Ning Zhang
• [97%] Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation
  Zhiheng Li; Zongyang Ma; Yuntong Pan; Ziqi Zhang; Xiaolei Lv; Bo Li; Jun Gao; Jianing Zhang; Chunfeng Yuan; Bing Li; Weiming Hu
• [97%] CAAP: Capture-Aware Adversarial Patch Attacks on Palmprint Recognition Models
  Renyang Liu; Jiale Li; Jie Zhang; Cong Wu; Xiaojun Jia; Shuxin Li; Wei Zhou; Kwok-Yan Lam; See-kiong Ng
• [97%] XFED: Non-Collusive Model Poisoning Attack Against Byzantine-Robust Federated Classifiers
  Israt Jahan Mouri; Muhammad Ridowan; Muhammad Abdullah Adnan
• [97%] Topo-ADV: Generating Topology-Driven Imperceptible Adversarial Point Clouds
  Gayathry Chandramana Krishnan Nampoothiry; Raghuram Venkatapuram; Anirban Ghosh; Ayan Dutta
• [97%] GF-Score: Certified Class-Conditional Robustness Evaluation with Fairness Guarantees
  Arya Shah; Kaveri Visavadiya; Manisha Padala
• [97%] Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification
  Weiwei Zhuang; Wangze Xie; Qi Zhang; Xia Du; Zihan Lin; Zheng Lin; Hanlin Cai; Jizhe Zhou; Zihan Fang; Chi-man Pun; Wei Ni; Jun Luo
• [97%] Towards Certified Malware Detection: Provable Guarantees Against Evasion Attacks
  Nandakrishna Giri; Asmitha K. A.; Serena Nicolazzo; Antonino Nocera; Vinod P
• [97%] Adversarial Evasion in Non-Stationary Malware Detection: Minimizing Drift Signals through Similarity-Constrained Perturbations
  Pawan Acharya; Lan Zhang
• [97%] Adversarial Co-Evolution of Malware and Detection Models: A Bilevel Optimization Perspective
  Olha Jurečková; Martin Jureček; Matouš Kozák; Róbert Lórencz
• [96%] Diffusion-Guided Adversarial Perturbation Injection for Generalizable Defense Against Facial Manipulations
  Yue Li; Linying Xue; Kaiqing Lin; Hanyu Quan; Dongdong Lin; Hui Tian; Hongxia Wang; Bin Wang
• [96%] Adversarial Robustness of Near-Field Millimeter-Wave Imaging under Waveform-Domain Attacks
  Lhamo Dorje; Jordan Madden; Soamar Homsi; Xiaohua Li
• [96%] UniAda: Universal Adaptive Multi-objective Adversarial Attack for End-to-End Autonomous Driving Systems
  Jingyu Zhang; Jacky Wai Keung; Yan Xiao; Yihan Liao; Yishu Li; Xiaoxue Ma
• [95%] Finetune Like You Pretrain: Boosting Zero-shot Adversarial Robustness in Vision-language Models
  Songlong Xing; Weijie Wang; Zhengyu Zhao; Jindong Gu; Philip Torr; Nicu Sebe
• [95%] TopFeaRe: Locating Critical State of Adversarial Resilience for Graphs Regarding Topology-Feature Entanglement
  Xinxin Fan; Wenxiong Chen; Quanliang Jing; Chi Lin; Shaoye Luo; Wenbo Song; Yunfeng Lu
• [95%] Hierarchically Robust Zero-shot Vision-language Models
  Junhao Dong; Yifei Zhang; Hao Zhu; Yew-Soon Ong; Piotr Koniusz
• [95%] Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models
  Shihui Yan; Ziqi Zhou; Yufei Song; Yifan Hu; Minghui Li; Shengshan Hu
• [94%] Backdoor Attacks on Decentralised Post-Training
  Oğuzhan Ersoy; Nikolay Blagoev; Jona te Lintelo; Stefanos Koffas; Marina Krček; Stjepan Picek
• [94%] Adversarial Robustness of Deep State Space Models for Forecasting
  Sribalaji C. Anand; George J. Pappas
• [94%] Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory
  Shaopeng Fu; Di Wang
• [94%] Stochasticity in Tokenisation Improves Robustness
  Sophie Steger; Rui Li; Sofiane Ennadir; Anya Sims; Arno Solin; Franz Pernkopf; Martin Trapp
• [93%] CoopGuard: Stateful Cooperative Agents Safeguarding LLMs Against Evolving Multi-Round Attacks
  Siyuan Li; Zehao Liu; Xi Lin; Qinghua Mao; Yuliang Chen; Haoyu Li; Jun Wu; Jianhua Li; Xiu Su
• [93%] Adversarial Robustness of Time-Series Classification for Crystal Collimator Alignment
  Xaver Fink; Borja Fernandez Adiego; Daniele Mirarchi; Eloise Matheson; Alvaro Garcia Gonzales; Gianmarco Ricci; Joost-Pieter Katoen
• [93%] Route to Rome Attack: Directing LLM Routers to Expensive Models via Adversarial Suffix Optimization
  Haochun Tang; Yuliang Yan; Jiahua Lu; Huaxiao Liu; Enyan Dai
• [93%] When Background Matters: Breaking Medical Vision Language Models by Transferable Attack
  Akash Ghosh; Subhadip Baidya; Sriparna Saha; Xiuying Chen
• [93%] CSC: Turning the Adversary's Poison against Itself
  Yuchen Shi; Xin Guo; Huajie Chen; Tianqing Zhu; Bo Liu; Wanlei Zhou
• [93%] Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training
  Mengnan Zhao; Lihe Zhang; Tianhang Zheng; Bo Wang; Baocai Yin
• [92%] Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning
  Ajinkya Mohgaonkar; Lukas Gosch; Mahalakshmi Sabanayagam; Debarghya Ghoshdastidar; Stephan Günnemann
• [92%] Learning Robustness at Test-Time from a Non-Robust Teacher
  Stefano Bianchettin; Giulio Rossolini; Giorgio Buttazzo
• [92%] Beyond Attack Success Rate: A Multi-Metric Evaluation of Adversarial Transferability in Medical Imaging Models
  Emily Curl; Kofi Ampomah; Md Erfan; Sayanton Dibbo
• [92%] SafeReview: Defending LLM-based Review Systems Against Adversarial Hidden Prompts
  Yuan Xin; Yixuan Weng; Minjun Zhu; Ying Ling; Chengwei Qin; Michael Backes; Yue Zhang; Linyi Yang
• [91%] Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters
  Ahmed B Mustafa; Zihan Ye; Yang Lu; Michael P Pound; Shreyank N Gowda
• [91%] Challenging Vision-Language Models with Physically Deployable Multimodal Semantic Lighting Attacks
  Yingying Zhao; Chengyin Hu; Qike Zhang; Xin Li; Xin Wang; Yiwei Wei; Jiujiang Guo; Jiahuan Long; Tingsong Jiang; Wen Yao
• [91%] ArmSSL: Adversarial Robust Black-Box Watermarking for Self-Supervised Learning Pre-trained Encoders
  Yongqi Jiang; Yansong Gao; Boyu Kuang; Chunyi Zhou; Anmin Fu; Liquan Chen
• [90%] Stealthy and Adjustable Text-Guided Backdoor Attacks on Multimodal Pretrained Models
  Yiyang Zhang; Chaojian Yu; Ziming Hong; Yuanjie Shao; Qinmu Peng; Tongliang Liu; Xinge You
• [90%] INTARG: Informed Real-Time Adversarial Attack Generation for Time-Series Regression
  Gamze Kirman Tokgoz; Onat Gungor; Tajana Rosing; Baris Aksanli
• [89%] Street-Legal Physical-World Adversarial Rim for License Plates
  Nikhil Kalidasu; Sahana Ganapathy
• [89%] Retina gap junctions support the robust perception by warping neural representational geometries along the visual hierarchy
  Yang Yue; Shenjian Zhang; Yonghong Tian; Kai Du; Tiejun Huang
• [89%] ProtoGuard-SL: Prototype Consistency Based Backdoor Defense for Vertical Split Learning
  Yuhan Shui; Ruobin Jin; Zhihao Dou; Zhiqiang Gao
• [89%] Explainability-Guided Adversarial Attacks on Transformer-Based Malware Detectors Using Control Flow Graphs
  Andrew Wheeler; Kshitiz Aryal; Maanak Gupta
• [89%] Beyond Standard Benchmarks: A Systematic Audit of Vision-Language Model's Robustness to Natural Semantic Variation Across Diverse Tasks
  Jia Chengyu; AprilPyone MaungMaung; Huy H. Nguyen; Jinyin Chen; Isao Echizen
• [89%] Compression as an Adversarial Amplifier Through Decision Space Reduction
  Lewis Evans; Harkrishan Jandu; Zihan Ye; Yang Lu; Shreyank N Gowda
• [89%] Follow My Eyes: Backdoor Attacks on Goal-Directed Scanpath Prediction
  Diana Romero; Mutahar Ali; Momin Ahmad Khan; Habiba Farrukh; Fatima Anwar; Salma Elmalaki
• [89%] Penny Wise, Pixel Foolish: Bypassing Price Constraints in Multimodal Agents via Visual Adversarial Perturbations
  Jiachen Qian; Zhaolu Kang
• [89%] NeuroTrace: Inference Provenance-Based Detection of Adversarial Examples
  Firas Ben Hmida; Philemon Hailemariam; Kashif Ali Khan; Birhanu Eshete
• [88%] Fluently Lying: Adversarial Robustness Can Be Substrate-Dependent
  Daye Kang; Hyeongboo Baek
• [88%] A Unified Perspective on Adversarial Membership Manipulation in Vision Models
  Ruize Gao; Kaiwen Zhou; Yongqiang Chen; Feng Liu
• [88%] Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasion
  Miguel A. DelaCruz; Patricia Mae Santos; Rafael T. Navarro
• [88%] Robustness Analysis of Machine Learning Models for IoT Intrusion Detection Under Data Poisoning Attacks
  Fortunatus Aabangbio Wulnye; Justice Owusu Agyemang; Kwame Opuni-Boachie Obour Agyekum; Kwame Agyeman-Prempeh Agyekum; Kingsford Sarkodie Obeng Kwakye; Francisca Adomaa Acheampong
• [88%] Mitigating Error Amplification in Fast Adversarial Training
  Mengnan Zhao; Lihe Zhang; Bo Wang; Tianhang Zheng; Hong Zhong; Geyong Min
• [87%] Tex3D: Objects as Attack Surfaces via Adversarial 3D Textures for Vision-Language-Action Models
  Jiawei Chen; Simin Huang; Jiawei Du; Shuaihang Chen; Yu Tian; Mingjie Wei; Chao Yu; Zhaoxia Yin
• [87%] Towards Understanding the Robustness of Sparse Autoencoders
  Ahson Saiyed; Sabrina Sadiekh; Chirag Agarwal
• [87%] Toward Polymorphic Backdoor against Semantic Communication via Intensity-Based Poisoning
  Xiao Yang; Yuni Lai; Gaolei Li; Jun Wu; Kai Zhou; Jianhua Li; Mingzhe Chen
• [86%] Adversarial Robustness Analysis of Cloud-Assisted Autonomous Driving Systems
  Maher Al Islam; Amr S. El-Wakeel
• [86%] Stealthy Backdoor Attacks against LLMs Based on Natural Style Triggers
  Jiali Wei; Ming Fan; Guoheng Sun; Xicheng Zhang; Haijun Wang; Ting Liu
• [86%] Sharpness-Aware Poisoning: Enhancing Transferability of Injective Attacks on Recommender Systems
  Junsong Xie; Yonghui Yang; Pengyang Shao; Le Wu
• [86%] Adversarial Malware Generation in Linux ELF Binaries via Semantic-Preserving Transformations
  Lukáš Hrdonka; Martin Jureček
• [85%] The Deployment Gap in AI Media Detection: Platform-Aware and Visually Constrained Adversarial Evaluation
  Aishwarya Budhkar; Trishita Dhara; Siddhesh Sheth
• [85%] Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safety
  Marcello Galisai; Susanna Cifani; Francesco Giarrusso; Piercosma Bisconti; Matteo Prandi; Federico Pierucci; Federico Sartore; Daniele Nardi
• [85%] How Adversarial Environments Mislead Agentic AI?
  Zhonghao Zhan; Huichi Zhou; Zhenhao Li; Peiyuan Jing; Krinos Li; Hamed Haddadi
• [84%] SECURE: Stable Early Collision Understanding via Robust Embeddings in Autonomous Driving
  Wenjing Wang; Wenxuan Wang; Songning Lai
• [84%] Efficient Adversarial Training via Criticality-Aware Fine-Tuning
  Wenyun Li; Zheng Zhang; Dongmei Jiang; Yaowei Wang; Xiangyuan Lan
• [84%] Temporary Power Adjusting Withholding Attack
  Mustafa Doger; Sennur Ulukus
• [83%] Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers
  Jiancheng Wang; Lidan Liang; Yong Wang; Zengzhen Su; Haifeng Xia; Yuanting Yan; Wei Wang
• [83%] PIArena: A Platform for Prompt Injection Evaluation
  Runpeng Geng; Chenlong Yin; Yanting Wang; Ying Chen; Jinyuan Jia
• [83%] PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers
  Dazhuang Liu; Yanqi Qiao; Rui Wang; Kaitai Liang; Georgios Smaragdakis
• [83%] Agentic Adversarial Rewriting Exposes Architectural Vulnerabilities in Black-Box NLP Pipelines
  Mazal Bethany; Kim-Kwang Raymond Choo; Nishant Vishwamitra; Peyman Najafirad
• [82%] Towards Robust Content Watermarking Against Removal and Forgery Attacks
  Yifan Zhu; Yihan Wang; Xiao-Shan Gao
• [82%] Phantasia: Context-Adaptive Backdoors in Vision Language Models
  Nam Duong Tran; Phi Le Nguyen
• [82%] Understanding Adversarial Transferability in Vision-Language Models for Autonomous Driving: A Cross-Architecture Analysis
  David Fernandez; Pedram MohajerAnsari; Amir Salarpour; Mert D. Pese
• [81%] Evaluating Answer Leakage Robustness of LLM Tutors against Adversarial Student Attacks
  Jin Zhao; Marta Knežević; Tanja Käser
• [80%] Reading Between the Pixels: An Inscriptive Jailbreak Attack on Text-to-Image Models
  Zonghao Ying; Haowen Dai; Lianyu Hu; Zonglei Jing; Quanchen Zou; Yaodong Yang; Aishan Liu; Xianglong Liu
• [79%] Seeing No Evil: Blinding Large Vision-Language Models to Safety Instructions via Adversarial Attention Hijacking
  Jingru Li; Wei Ren; Tianqing Zhu
• [78%] The Persistent Vulnerability of Aligned AI Systems
  Aengus Lynch
• [78%] MirageBackdoor: A Stealthy Attack that Induces Think-Well-Answer-Wrong Reasoning
  Yizhe Zeng; Wei Zhang; Yunpeng Li; Juxin Xiao; Xiao Wang; Yuling Liu
• [78%] Reading Between the Pixels: Linking Text-Image Embedding Alignment to Typographic Attack Success on Vision-Language Models
  Ravikumar Balakrishnan; Sanket Mendapara; Ankit Garg
• [78%] Useful nonrobust features are ubiquitous in biomedical images
  Coenraad Mouton; Randle Rabe; Niklas C. Koser; Nicolai Krekiehn; Christopher Hansen; Jan-Bernd Hövener; Claus-C. Glüer
• [77%] Out of Sight, Out of Track: Adversarial Attacks on Propagation-based Multi-Object Trackers via Query State Manipulation
  Halima Bouzidi; Haoyu Liu; Yonatan Gizachew Achamyeleh; Praneetsai Vasu Iddamsetty; Mohammad Abdullah Al Faruque
• [77%] Towards Verified and Targeted Explanations through Formal Methods
  Hanchen David Wang; Diego Manzanas Lopez; Preston K. Robinette; Ipek Oguz; Taylor T. Johnson; Meiyi Ma
• [77%] RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement
  Ziye Wang; Guanyu Wang; Kailong Wang
• [77%] DETOUR: A Practical Backdoor Attack against Object Detection
  Dazhuang Liu; Yanqi Qiao; Rui Wang; Kaitai Liang; Georgios Smaragdakis
• [76%] SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement
  Zenghao Duan; Yuxin Tian; Zhiyi Yin; Liang Pang; Jingcheng Deng; Zihao Wei; Shicheng Xu; Yuyao Ge; Xueqi Cheng
• [76%] Conjunctive Prompt Attacks in Multi-Agent LLM Systems
  Nokimul Hasan Arif; Qian Lou; Mengxin Zheng
• [75%] Beyond Uniform Sampling: Synergistic Active Learning and Input Denoising for Robust Neural Operators
  Samrendra Roy; Souvik Chakraborty; Syed Bahauddin Alam
• [75%] Poisoning Learned Index Structures: Static and Dynamic Adversarial Attacks on ALEX
  Allen Jue
• [74%] Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection
  Wenkui Yang; Chao Jin; Haisu Zhu; Weilin Luo; Derek Yuen; Kun Shao; Junxian Duan; Huaibo Huang; Jie Cao; Ran He
• [73%] Beyond Semantic Manipulation: Token-Space Attacks on Reward Models
  Yuheng Zhang; Mingyue Huo; Minghao Zhu; Mengxue Zhang; Nan Jiang
• [73%] Scaling Exposes the Trigger: Input-Level Backdoor Detection in Text-to-Image Diffusion Models via Cross-Attention Scaling
  Zida Li; Jun Li; Yuzhe Sha; Ziqiang Li; Lizhi Xiong; Zhangjie Fu
• [73%] Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs
  Jianhao Chen; Haoyang Chen; Hanjie Zhao; Haozhe Liang; Tieyun Qian
• [73%] Adaptive Prompt Embedding Optimization for LLM Jailbreaking
  Miles Q. Li; Benjamin C. M. Fung; Boyang Li; Radin Hamidi Rad; Ebrahim Bagheri
• [72%] Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation
  Wentao Zhang; Yan Zhuang; ZhuHang Zheng; Mingfei Zhang; Jiawen Deng; Fuji Ren
• [72%] Detection of T-shirt Presentation Attacks in Face Recognition Systems
  Mathias Ibsen; Loris Tim Ide; Christian Rathgeb; Christoph Busch
• [72%] ID-Eraser: Proactive Defense Against Face Swapping via Identity Perturbation
  Junyan Luo; Peipeng Yu; Jianwei Fei; Shiya Zeng; Xiaoyu Zhou; Zhihua Xia; Xiang Liu
• [71%] Thinking Wrong in Silence: Backdoor Attacks on Continuous Latent Reasoning
  Swapnil Parekh
• [71%] Find the Differences: Differential Morphing Attack Detection vs Face Recognition
  Una M. Kelly; Luuk J. Spreeuwers; Raymond N. J. Veldhuis
• [70%] On the Robustness of Watermarking for Autoregressive Image Generation
  Andreas Müller; Denis Lukovnikov; Shingo Kodama; Minh Pham; Anubhav Jain; Jonathan Petit; Niv Cohen; Asja Fischer
• [70%] Transient Turn Injection: Exposing Stateless Multi-Turn Vulnerabilities in Large Language Models
  Naheed Rayhan; Sohely Jahan
• [69%] A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models
  Tianmeng Fang; Yong Wang; Zetai Kong; Zengzhen Su; Jun Wang; Chengjin Yu; Wei Wang
• [69%] FastAT Benchmark: A Comprehensive Framework for Fair Evaluation of Fast Adversarial Training Methods
  Chao Pan; Xin Yao
• [68%] AtomEval: Validity-Aware Atomic Evaluation of Adversarial Claim Rewriting in Fact Verification
  Hongyi Cen; Mingxin Wang; Yule Liu; Jingyi Zheng; Hanze Jia; Tan Tang
• [68%] When Can You Poison Rewards? A Tight Characterization of Reward Poisoning in Linear MDPs
  Jose Efraim Aguilar Escamilla; Haoyang Hong; Jiawei Li; Haoyu Zhao; Xuezhou Zhang; Sanghyun Hong; Huazheng Wang
• [67%] Mosaic: Multimodal Jailbreak against Closed-Source VLMs via Multi-View Ensemble Optimization
  Yuqin Lan; Gen Li; Yuanze Hu; Weihao Shen; Zhaoxin Fan; Faguo Wu; Xiao Zhang; Laurence T. Yang; Zhiming Zheng
• [67%] Short Message Service (SMS) Phishing Attacks and Defenses: A Systematic Review
  Mir Mehedi A. Pritom; Seyed Mohammad Sanjari; Maraz Mia; Ashfak Md Shibli; S M Mostaq Hossain; Muhammad Ismail; Shouhuai Xu
• [67%] Evaluating Jailbreaking Vulnerabilities in LLMs Deployed as Assistants for Smart Grid Operations: A Benchmark Against NERC Standards
  Taha Hammadia; Lucas Rea; Ahmad Mohammad Saber; Amr Youssef; Deepa Kundur
• [65%] Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion
  Vishal Pramanik; Maisha Maliha; Susmit Jha; Sumit Kumar Jha
• [65%] The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems
  Yihao Zhang; Kai Wang; Jiangrong Wu; Haolin Wu; Yuxuan Zhou; Zeming Wei; Dongxian Wu; Xun Chen; Jun Sun; Meng Sun
• [65%] RACF: A Resilient Autonomous Car Framework with Object Distance Correction
  Chieh Tsai; Hossein Rastgoftar; Salim Hariri
• [64%] ResGuard: Enhancing Robustness Against Known Original Attacks in Deep Watermarking
  Hanyi Wang; Han Fang; Yupeng Qiu; Shilin Wang; Ee-Chien Chang
• [64%] Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection
  Meng Chen; Kun Wang; Li Lu; Jiaheng Zhang; Tianwei Zhang
• [64%] Improving Diversity in Black-box Few-shot Knowledge Distillation
  Tri-Nhan Vo; Dang Nguyen; Kien Do; Sunil Gupta
• [63%] WARP: Guaranteed Inner-Layer Repair of NLP Transformers
  Hsin-Ling Hsu; Min-Yu Chen; Nai-Chia Chen; Yan-Ru Chen; Yi-Ling Chang; Fang Yu
• [63%] Understanding the Effects of Safety Unalignment on Large Language Models
  John T. Halloran
• [63%] AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models
  Jackson Wang
• [63%] Harnessing Hyperbolic Geometry for Harmful Prompt Detection and Sanitization
  Igor Maljkovic; Maria Rosaria Briglia; Iacopo Masi; Antonio Emanuele Cinà; Fabio Roli
• [63%] ACIArena: Toward Unified Evaluation for Agent Cascading Injection
  Hengyu An; Minxi Li; Jinghuai Zhang; Naen Xu; Chunyi Zhou; Changjiang Li; Xiaogang Xu; Tianyu Du; Shouling Ji
• [63%] Critical-CoT: A Robust Defense Framework against Reasoning-Level Backdoor Attacks in Large Language Models
  Vu Tuan Truong; Long Bao Le
• [63%] One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations
  Ravikumar Balakrishnan; Sanket Mendapara
• [62%] BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning
  Guiyao Tie; Jiawen Shi; Pan Zhou; Lichao Sun
• [62%] Ranking Abuse via Strategic Pairwise Data Perturbations
  Junyi Yao; Zihao Zheng; Jiayu Long
• [62%] Towards a Systematic Risk Assessment of Deep Neural Network Limitations in Autonomous Driving Perception
  Svetlana Pavlitska; Christopher Gerking; J. Marius Zöllner
• [62%] Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing
  Abhijit Talluri
• [61%] Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw
  Zijun Wang; Haoqin Tu; Letian Zhang; Hardy Chen; Juncheng Wu; Xiangyan Liu; Zhenlong Yuan; Tianyu Pang; Michael Qizhe Shieh; Fengze Liu; Zeyu Zheng; Huaxiu Yao; Yuyin Zhou; Cihang Xie
• [61%] Extending ZACH-ViT to Robust Medical Imaging: Corruption and Adversarial Stress Testing in Low-Data Regimes
  Athanasios Angelakis; Marta Gomez-Barrero
• [60%] Adversarial Label Invariant Graph Data Augmentations for Out-of-Distribution Generalization
  Simon Zhang; Ryan P. DeMilt; Kun Jin; Cathy H. Xia
• [60%] DeepSeek Robustness Against Semantic-Character Dual-Space Mutated Prompt Injection
  Junyu Ren; Xingjian Pan; Wensheng Gan; Philip S. Yu
• [60%] Robustness of Vision Foundation Models to Common Perturbations
  Hongbin Liu; Zhengyuan Jiang; Cheng Hong; Neil Zhenqiang Gong
• [60%] When Safe Concepts Become Unsafe: Multi-Concept Compositional Vulnerabilities in Text-to-Image Models
  Chaoshuo Zhang; Yibo Liang; Mengke Tian; Chenhao Lin; Zhengyu Zhao; Le Yang; Chong Zhang; Yang Zhang; Qian Wang; Chao Shen
• [60%] Spore: Efficient and Training-Free Privacy Extraction Attack on LLMs via Inference-Time Hybrid Probing
  Yu Cui; Ruiqing Yue; Hang Fu; Sicheng Pan; Zhuoyu Sun; Baohan Huang; Haibin Zhang; Cong Zuo; Licheng Wang
• [60%] The Forensic Cost of Watermark Removal: From Dedicated Attacks to Image Editing
  Gautier Evennou; Ewa Kijak
• [60%] Latent Adversarial Detection: Adaptive Probing of LLM Activations for Multi-Turn Attack Detection
  Prashant Kulkarni
• [59%] Can You Trust the Vectors in Your Vector Database? Black-Hole Attack from Embedding Space Defects
  Hanxi Li; Jianan Zhou; Jiale Lao; Yibo Wang; Zhengmao Ye; Yang Cao; Junfen Wang; Mingjie Tang
• [59%] SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems
  Yunhao Feng; Yifan Ding; Yingshui Tan; Boren Zheng; Yanming Guo; Xiaolong Li; Kun Zhai; Yishan Li; Wenke Huang
• [59%] TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs
  Qingchao Shen; Zibo Xiao; Lili Huang; Enwei Hu; Yongqiang Tian; Junjie Chen
• [59%] AdaBFL: Multi-Layer Defensive Adaptive Aggregation for Bzantine-Robust Federated Learning
  Zehui Tang; Yuchen Liu; Feihu Huang
• [58%] Preference Redirection via Attention Concentration: An Attack on Computer Use Agents
  Dominik Seip; Matthias Hein
• [58%] Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game
  Yuanbo Xie; Yingjie Zhang; Yulin Li; Shouyou Song; Xiaokun Chen; Zhihan Liu; Liya Su; Tingwen Liu
• [57%] Revealing Physical-World Semantic Vulnerabilities: Universal Adversarial Patch for Infrared Vision-Language Models
  Chengyin Hu; Yuxian Dong; Yikun Guo; Xiang Chen; Qike Zhang; Junqi Wu; Jiahuan Long; Jiujiang Guo; Yiwei Wei; Tingsong Jiang; Wen Yao
• [57%] Label Leakage Attacks in Machine Unlearning: A Parameter and Inversion-Based Approach
  Weidong Zheng; Kongyang Chen; Yao Huang; Yuanwei Guo; Yatie Xiao
• [57%] Into the Gray Zone: Domain Contexts Can Blur LLM Safety Boundaries
  Ki Sen Hung; Xi Yang; Chang Liu; Haoran Li; Kejiang Chen; Changxuan Fan; Tsun On Kwok; Weiming Zhang; Xiaomeng Li; Yangqiu Song
• [56%] Adversarial Attacks in AI-Driven RAN Slicing: SLA Violations and Recovery
  Deemah H. Tashman; Soumaya Cherkaoui
• [56%] Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems
  Yubin Qu; Yi Liu; Tongcheng Geng; Gelei Deng; Yuekang Li; Leo Yu Zhang; Ying Zhang; Lei Ma
• [56%] GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking
  Yunqiang Wang; Hengyuan Na; Di Wu; Miao Hu; Guocong Quan
• [56%] No More Guessing: a Verifiable Gradient Inversion Attack in Federated Learning
  Francesco Diana; Chuan Xu; André Nusser; Giovanni Neglia
• [56%] SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models
  Yifei Zhao; Qian Lou; Mengxin Zheng
• [56%] Do Protective Perturbations Really Protect Portrait Privacy under Real-world Image Transformations?
  Ruiqing Sun; Xingshan Yao; Zhijing Wu; Tian Lan; Chenhao Cui; Huiyang Zhao; Jialing Shi; Chen Yang; Xianling Mao
• [55%] AutoEG: Exploiting Known Third-Party Vulnerabilities in Black-Box Web Applications
  Ruozhao Yang; Mingfei Cheng; Gelei Deng; Junjie Wang; Tianwei Zhang; Xiaofei Xie
• [55%] SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
  Lingyun Zhang; Yu Xie; Zhongli Fang; Yu Liu; Ping Chen
• [55%] Immune2V: Image Immunization Against Dual-Stream Image-to-Video Generation
  Zeqian Long; Ozgur Kara; Haotian Xue; Yongxin Chen; James M. Rehg
• [54%] Variational Feature Compression for Model-Specific Representations
  Zinan Guo; Zihan Wang; Chuan Yan; Liuhuo Wan; Ethan Ma; Guangdong Bai
• [54%] Mechanistic Anomaly Detection via Functional Attribution
  Hugo Lyons Keenan; Christopher Leckie; Sarah Erfani
• [54%] Laplace-Bridged Randomized Smoothing for Fast Certified Robustness
  Miao Lin; MD Saifur Rahman Mazumder; Feng Yu; Daniel Takabi; Rui Ning
• [53%] Best of both worlds: Stochastic & adversarial best-arm identification
  Yasin Abbasi-Yadkori; Peter L. Bartlett; Victor Gabillon; Alan Malek; Michal Valko
• [53%] When Can We Trust Deep Neural Networks? Towards Reliable Industrial Deployment with an Interpretability Guide
  Hang-Cheng Dong; Yuhao Jiang; Yibo Jiao; Lu Zou; Kai Zheng; Bingguo Liu; Dong Ye; Guodong Liu
• [53%] Certified geometric robustness -- Super-DeepG
  Noémie Cohen; Mélanie Ducoffe; Christophe Gabreau; Claire Pagetti; Xavier Pucel
• [52%] Backdoors in RLVR: Jailbreak Backdoors in LLMs From Verifiable Reward
  Weiyang Guo; Zesheng Shi; Zeen Zhu; Yuan Zhou; Min Zhang; Jing Li
• [52%] CCAR: Intrinsic Robustness as an Emergent Geometric Property
  Akash Samanta; Manish Pratap Singh; Debasis Chaudhuri
• [52%] On the Properties of Feature Attribution for Supervised Contrastive Learning
  Leonardo Arrighi; Julia Eva Belloni; Aurélie Gallet; Ivan Gentile; Matteo Lippi; Marco Zullich
• [51%] Robust Multimodal Safety via Conditional Decoding
  Anurag Kumar; Raghuveer Peri; Jon Burnsky; Alexandru Nelus; Rohit Paturi; Srikanth Vishnubhotla; Yanjun Qi
• [51%] Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
  Omur Sahin; Man Zhang; Andrea Arcuri
• [51%] Enhancing Gradient Inversion Attacks in Federated Learning via Hierarchical Feature Optimization
  Hao Fang; Wenbo Yu; Bin Chen; Xuan Wang; Shu-Tao Xia; Qing Liao; Ke Xu
• [51%] PoInit-of-View: Poisoning Initialization of Views Transfers Across Multiple 3D Reconstruction Systems
  Weijie Wang; Songlong Xing; Zhengyu Zhao; Nicu Sebe; Bruno Lepri
• [51%] Generating Synthetic Malware Samples Using Generative AI
  Tiffany Bao; Kylie Trousil; Quang Duy Tran; Fabio Di Troia; Younghee Park
• [51%] Detecting Avalanche Effect in Adversarial Settings: Spotting the Encryption Loops in Ransomware
  Nanqing Luo; Xusheng Li; Haizhou Wang; Shuangyi Zhu; Yuan Ma; Peng Liu
• [50%] Jailbreaking Large Language Models with Morality Attacks
  Ying Su; Mingen Zheng; Weili Diao; Haoran Li
• [50%] TrEEStealer: Stealing Decision Trees via Enclave Side Channels
  Jonas Sander; Anja Rabich; Nick Mahling; Felix Maurer; Jonah Heller; Qifan Wang; Thomas Eisenbarth; David Oswald
• [50%] Membership Inference Attacks Against Video Large Language Models
  Wei Song; Yuxin Cao; Ziqi Ding; Yi Liu; Gelei Deng; Yuekang Li
• [50%] Dynamic Adversarial Fine-Tuning Reorganizes Refusal Geometry
  Wenhao Lan; Shan Li; Xinhua Lai; Meiqi Wu; Junbin Yang; Haihua Shen; Yijun Yang
• [49%] Learning Without Adversarial Training: A Physics-Informed Neural Network for Secure Power System State Estimation under False Data Injection Attacks
  Solon Falas; Markos Asprou; Charalambos Konstantinou; Maria K. Michael
• [49%] SecureAFL: Secure Asynchronous Federated Learning
  Anjun Gao; Feng Wang; Zhenglin Wan; Yueyang Quan; Zhuqing Liu; Minghong Fang
• [49%] VLMShield: Efficient and Robust Defense of Vision-Language Models against Malicious Prompts
  Peigui Qi; Kunsheng Tang; Yanpu Yu; Jialin Wu; Yide Song; Wenbo Zhou; Zhicong Huang; Cheng Hong; Weiming Zhang; Nenghai Yu
• [49%] Steered LLM Activations are Non-Surjective
  Aayush Mishra; Daniel Khashabi; Anqi Liu
• [49%] Supervised Learning Has a Necessary Geometric Blind Spot: Theory, Consequences, and Minimal Repair
  Vishal Rajput
• [48%] Convergence of Byzantine-Resilient Gradient Tracking via Probabilistic Edge Dropout
  Amirhossein Dezhboro; Fateme Maleki; Arman Adibi; Erfan Amini; Jose E. Ramirez-Marquez
• [48%] Robust Semi-Supervised Temporal Intrusion Detection for Adversarial Cloud Networks
  Anasuya Chattopadhyay; Daniel Reti; Hans D. Schotten
• [48%] MetaCloak-JPEG: JPEG-Robust Adversarial Perturbation for Preventing Unauthorized DreamBooth-Based Deepfake Generation
  Tanjim Rahaman Fardin; S M Zunaid Alam; Mahadi Hasan Fahim; Md Faysal Mahfuz
• [48%] Semantic Denial of Service in LLM-controlled robots
  Jonathan Steinberg; Oren Gal
• [47%] CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion
  Akshit Jindal; Saket Anand; Chetan Arora; Vikram Goyal
• [47%] PlanGuard: Defending Agents against Indirect Prompt Injection via Planning-based Consistency Verification
  Guangyu Gong; Zizhuang Deng
• [47%] Robust Adversarial Policy Optimization Under Dynamics Uncertainty
  Mintae Kim; Koushil Sreenath
• [47%] RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience
  Hanbo Huang; Xuan Gong; Yiran Zhang; Hao Zheng; Shiyu Liang
• [47%] Temporal UI State Inconsistency in Desktop GUI Agents: Formalizing and Defending Against TOCTOU Attacks on Computer-Use Agents
  Wenpeng Xu
• [47%] Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks
  Pranav Pallerla; Wilson Naik Bhukya; Bharath Vemula; Charan Ramtej Kodi
• [47%] Training a General Purpose Automated Red Teaming Model
  Aishwarya Padmakumar; Leon Derczynski; Traian Rebedea; Christopher Parisien
• [46%] QUEST: A robust attention formulation using query-modulated spherical attention
  Hariprasath Govindarajan; Per Sidén; Jacob Roll; Fredrik Lindsten
• [46%] Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents
  Wei Zou; Mingwen Dong; Miguel Romero Calvo; Shuaichen Chang; Jiang Guo; Dongkyu Lee; Xing Niu; Xiaofei Ma; Yanjun Qi; Jiarong Jiang
• [46%] DuCodeMark: Dual-Purpose Code Dataset Watermarking via Style-Aware Watermark-Poison Design
  Yuchen Chen; Yuan Xiao; Chunrong Fang; Zhenyu Chen; Baowen Xu
• [46%] QUACK! Making the (Rubber) Ducky Talk: A Systematic Study of Keystroke Dynamics for HID Injection Detection
  Alessandro Lotto; Francesco Marchiori; Mauro Conti
• [45%] Synthetic Trust Attacks: Modeling How Generative AI Manipulates Human Decisions in Social Engineering Fraud
  Muhammad Tahir Ashraf
• [45%] SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems
  KrishnaSaiReddy Patil
• [45%] On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stability
  Yongkang Li; Panagiotis Eustratiadis; Yixing Fan; Evangelos Kanoulas
• [45%] The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification
  Merkouris Papamichail; Konstantinos Varsos; Giorgos Flouris; João Marques-Silva
• [45%] If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems
  Jiamin Chang; Minhui Xue; Ruoxi Sun; Shuchao Pang; Salil S. Kanhere; Hammond Pearce
• [45%] Breaking MCP with Function Hijacking Attacks: Novel Threats for Function Calling and Agentic Models
  Yannis Belkhiter; Giulio Zizzo; Sergio Maffeis; Seshu Tirupathi; John D. Kelleher
• [45%] PermaFrost-Attack: Stealth Pretraining Seeding(SPS) for planting Logic Landmines During LLM Training
  Harsh Kumar; Rahul Maity; Tanmay Joshi; Aman Chadha; Vinija Jain; Suranjana Trivedy; Amitava Das
• [45%] CAP-CoT: Cycle Adversarial Prompt for Improving Chain of Thoughts in LLM Reasoning
  Shuxu Chen; Yitian Zhou; Jiaquan Zhang; Haoyu Bian; Wenrui Hu; Aming Wu; Sungyoung Lee; Chaoning Zhang; Hyundong Shin
• [44%] AgentGuard: A Multi-Agent Framework for Robust Package Confusion Detection via Hybrid Search and Metadata-Content Fusion
  Yu Li; Wei Ma; Zhi Chen; Ye Liu; Lingxiao Jiang; Junyi Tao; Hao Liu; Yongqiang Lyu; Qiang Hu
• [44%] Preventing overfitting in deep learning using differential privacy
  Alizishaan Anwar Hussein Khatri
• [44%] Mitigating Reward Hacking in RLHF via Advantage Sign Robustness
  Shinnosuke Ono; Johannes Ackermann; Soichiro Nishimori; Takashi Ishida; Masashi Sugiyama
• [44%] Invisible Adversaries: A Systematic Study of Session Manipulation Attacks on VPNs
  Yuxiang Yang; Ao Wang; Xuewei Feng; Qi Li; Ke Xu
• [44%] Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection
  Zedian Shao; Hongbin Liu; Yuepeng Hu; Neil Zhenqiang Gong
• [44%] Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy Backdoors
  Rui Yin; Tianxu Han; Naen Xu; Changjiang Li; Ping He; Chunyi Zhou; Jun Wang; Zhihui Fu; Tianyu Du; Jinbao Li; Shouling Ji
• [44%] Security and Resilience in Autonomous Vehicles: A Proactive Design Approach
  Chieh Tsai; Murad Mehrab Abrar; Salim Hariri
• [44%] Black-Box Skill Stealing Attack from Proprietary LLM Agents: An Empirical Study
  Zihan Wang; Rui Zhang; Yu Liu; Chi Liu; Qingchuan Zhao; Hongwei Li; Guowen Xu
• [43%] A Systematic Study of Cross-Modal Typographic Attacks on Audio-Visual Reasoning
  Tianle Chen; Deepti Ghadiyaram
• [43%] Empirical Characterization of Rationale Stability Under Controlled Perturbations for Explainable Pattern Recognition
  Abu Noman Md Sakib; Zhensen Wang; Merjulah Roby; Zijie Zhang
• [43%] Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs
  Eric Easley; Sebastian Farquhar
• [43%] CoLA: A Choice Leakage Attack Framework to Expose Privacy Risks in Subset Training
  Qi Li; Cheng-Long Wang; Yinzhi Cao; Di Wang
• [43%] Data-driven Reachable Set Estimation with Tunable Adversarial and Wasserstein Distributional Guarantees
  Georgios Pantazis; Michelle S. Chong
• [43%] Evaluation of Prompt Injection Defenses in Large Language Models
  Priyal Deep; Shane Emmons; Amy Fox; Kyle Bacon; Kelley McAllister; Peter Ortiz; Krisztian Flautner
• [42%] One Word at a Time: Incremental Completion Decomposition Breaks LLM Safety
  Samee Arif; Naihao Deng; Zhijing Jin; Rada Mihalcea
• [42%] Uncovering Linguistic Fragility in Vision-Language-Action Models via Diversity-Aware Red Teaming
  Baoshun Tong; Haoran He; Ling Pan; Yang Liu; Liang Lin
• [42%] MetaErr: Towards Predicting Error Patterns in Deep Neural Networks
  Varun Totakura; Shayok Chakraborty
• [42%] Quantum-Inspired Robust and Scalable SAR Object Classification
  Maximilian Scharf; Marco Trenti; Felix Bock; Padraig Davidson; Tobias Brosch; Benjamin Rodrigues de Miranda; Sigurd Huber; Timo Felser
• [41%] Hijacking online reviews: sparse manipulation and behavioral buffering in popularity-biased rating systems
  Itsuki Fujisaki; Kunhao Yang
• [41%] Re-Mask and Redirect: Exploiting Denoising Irreversibility in Diffusion Language Models
  Arth Singh
• [41%] FlowHijack: A Dynamics-Aware Backdoor Attack on Flow-Matching Vision-Language-Action Models
  Xinyuan An; Tao Luo; Gengyun Peng; Yaobing Wang; Kui Ren; Dongxia Wang
• [41%] AEGIS: Adversarial Entropy-Guided Immune System -- Thermodynamic State Space Models for Zero-Day Network Evasion Detection
  Vickson Ferrel
• [41%] Safety, Security, and Cognitive Risks in State-Space Models: A Systematic Threat Analysis with Spectral, Stateful, and Capacity Attacks
  Manoj Parmar
• [41%] Conflicts Make Large Reasoning Models Vulnerable to Attacks
  Honghao Liu; Chengjin Xu; Xuhui Jiang; Cehao Yang; Shengming Yin; Zhengwu Ma; Lionel Ni; Jian Guo
• [41%] AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization
  Zonghao Ying; Haozheng Wang; Jiangfan Liu; Quanchen Zou; Aishan Liu; Jian Yang; Yaodong Yang; Xianglong Liu
• [40%] Convolutional Neural Network and Adversarial Autoencoder in EEG images classification
  Albert Nasybullin; Semen Kurkin
• [40%] Dynamic Free-Rider Detection in Federated Learning via Simulated Attack Patterns
  Motoki Nakamura
• [40%] Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions
  Yuming Xu; Mingtao Zhang; Zhuohan Ge; Haoyang Li; Nicole Hu; Yongqi Zhang; Zhiyuan Wen; Jason Chen Zhang; Qing Li; Lei Chen
• [40%] Robust Explanations for User Trust in Enterprise NLP Systems
  Guilin Zhang; Kai Zhao; Jeffrey Friedman; Xu Chu; Amine Anoun; Jerry Ting
• [40%] Optimistic Policy Learning under Pessimistic Adversaries with Regret and Violation Guarantees
  Sourav Ganguly; Kartik Pandit; Arnob Ghosh
• [40%] Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning
  Jiachen Qian

2026-03 (248 papers)

• [100%] Enhancing Network Intrusion Detection Systems: A Multi-Layer Ensemble Approach to Mitigate Adversarial Attacks
  Nasim Soltani; Shayan Nejadshamsi; Zakaria Abou El Houda; Raphael Khoury; Kelton A. P. Costa; Tiago H. Falk; Anderson R. Avila
• [100%] Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?
  Anna Chistyakova; Mikhail Pautov
• [99%] Explanation-Guided Adversarial Training for Robust and Interpretable Models
  Chao Chen; Yanhui Chen; Shanshan Lin; Dongsheng Hong; Shu Wu; Xiangwen Liao; Chuanyi Liu
• [99%] Solving adversarial examples requires solving exponential misalignment
  Alessandro Salvatore; Stanislav Fort; Surya Ganguli
• [99%] Hide and Find: A Distributed Adversarial Attack on Federated Graph Learning
  Jinshan Liu; Ken Li; Jiazhe Wei; Bin Shi; Bo Dong
• [99%] Evaluating randomized smoothing as a defense against adversarial attacks in trajectory prediction
  Julian F. Schumann; Eduardo Figueiredo; Frederik Baymler Mathiesen; Luca Laurenti; Jens Kober; Arkady Zgonnikov
• [99%] RTD-Guard: A Black-Box Textual Adversarial Detection Framework via Replacement Token Detection
  He Zhu; Yanshu Li; Wen Liu; Haitian Yang
• [99%] Over-the-air White-box Attack on the Wav2Vec Speech Recognition Neural Network
  Protopopov Alexey
• [99%] Adversarial Attacks on Locally Private Graph Neural Networks
  Matta Varun; Ajay Kumar Dhakar; Yuan Hong; Shamik Sural
• [99%] OmniPatch: A Universal Adversarial Patch for ViT-CNN Cross-Architecture Transfer in Semantic Segmentation
  Aarush Aggarwal; Akshat Tomar; Amritanshu Tiwari; Sargam Goyal
• [99%] Attack Assessment and Augmented Identity Recognition for Human Skeleton Data
  Joseph G. Zalameda; Megan A. Witherow; Alexander M. Glandon; Jose Aguilera; Khan M. Iftekharuddin
• [99%] Efficient Preemptive Robustification with Image Sharpening
  Jiaming Liang; Chi-Man Pun
• [99%] NERO-Net: A Neuroevolutionary Approach for the Design of Adversarially Robust CNNs
  Inês Valentim; Nuno Antunes; Nuno Lourenço
• [99%] Detection of Adversarial Attacks in Robotic Perception
  Ziad Sharawy; Mohammad Nakshbandi; Sorin Mihai Grigorescu
• [98%] Towards Highly Transferable Vision-Language Attack via Semantic-Augmented Dynamic Contrastive Interaction
  Yuanbo Li; Tianyang Xu; Cong Hu; Tao Zhou; Xiao-Jun Wu; Josef Kittler
• [98%] NetDiffuser: Deceiving DNN-Based Network Attack Detection Systems with Diffusion-Generated Adversarial Traffic
  Pratyay Kumar; Abu Saleh Md Tayeen; Satyajayant Misra; Huiping Cao; Jiefei Liu; Qixu Gong; Jayashree Harikumar
• [98%] CAMA: Exploring Collusive Adversarial Attacks in c-MARL
  Men Niu; Xinxin Fan; Quanliang Jing; Shaoye Luo; Yunfeng Lu
• [98%] Precision-Varying Prediction (PVP): Robustifying ASR systems against adversarial attacks
  Matías Pizarro; Raghavan Narasimhan; Jonas Killian; Asja Fischer
• [98%] Claudini: Autoresearch Discovers State-of-the-Art Adversarial Attack Algorithms for LLMs
  Alexander Panfilov; Peter Romov; Igor Shilov; Yves-Alexandre de Montjoye; Jonas Geiping; Maksym Andriushchenko
• [98%] ROAST: Risk-aware Outlier-exposure for Adversarial Selective Training of Anomaly Detectors Against Evasion Attacks
  Mohammed Elnawawy; Gargi Mitra; Shahrear Iqbal; Karthik Pattabiraman
• [98%] A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models
  Mujtaba Hussain Mirza; Antonio D'Orazio; Odelia Melamed; Iacopo Masi
• [98%] Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses
  Yunrui Yu; Xuxiang Feng; Pengda Qin; Pengyang Wang; Kafeng Wang; Cheng-zhong Xu; Hang Su; Jun Zhu
• [97%] Analyzing Physical Adversarial Example Threats to Machine Learning in Election Systems
  Khaleque Md Aashiq Kamal; Surya Eada; Aayushi Verma; Subek Acharya; Adrian Yemin; Benjamin Fuller; Kaleel Mahmood
• [97%] CaptionFool: Universal Image Captioning Model Attacks
  Swapnil Parekh
• [97%] AMDS: Attack-Aware Multi-Stage Defense System for Network Intrusion Detection with Two-Stage Adaptive Weight Learning
  Oluseyi Olukola; Nick Rahimi
• [97%] S2O: Enhancing Adversarial Training with Second-Order Statistics of Weights
  Gaojie Jin; Xinping Yi; Wei Huang; Sven Schewe; Xiaowei Huang
• [97%] In-the-Wild Camouflage Attack on Vehicle Detectors through Controllable Image Editing
  Xiao Fang; Yiming Gong; Stanislav Panev; Celso de Melo; Shuowen Hu; Shayok Chakraborty; Fernando De la Torre
• [97%] Targeted Adversarial Traffic Generation : Black-box Approach to Evade Intrusion Detection Systems in IoT Networks
  Islam Debicha; Tayeb Kenaza; Ishak Charfi; Salah Mosbah; Mehdi Sehaki; Jean-Michel Dricot
• [97%] Physical Backdoor Attack Against Deep Learning-Based Modulation Classification
  Younes Salmi; Hanna Bogucka
• [96%] Lyapunov Stable Graph Neural Flow
  Haoyu Chu; Xiaotong Chen; Wei Zhou; Wenjun Cui; Kai Zhao; Shikui Wei; Qiyu Kang
• [96%] AI Evasion and Impersonation Attacks on Facial Re-Identification with Activation Map Explanations
  Noe Claudel; Weisi Guo; Yang Xing
• [96%] REFORGE: Multi-modal Attacks Reveal Vulnerable Concept Unlearning in Image Generation Models
  Yong Zou; Haoran Li; Fanxiao Li; Shenyang Wei; Yunyun Dong; Li Tang; Wei Zhou; Renyang Liu
• [96%] rSDNet: Unified Robust Neural Learning against Label Noise and Adversarial Attacks
  Suryasis Jana; Abhik Ghosh
• [96%] From Pixels to Reality: Physical-Digital Patch Attacks on Real-World Camera
  Victoria Leonenkova; Ekaterina Shumitskaya; Dmitriy Vatolin; Anastasia Antsiferova
• [95%] IU: Imperceptible Universal Backdoor Attack
  Hsin Lin; Yan-Lun Chen; Ren-Hung Hwang; Chia-Mu Yu
• [95%] Latent Transfer Attack: Adversarial Examples via Generative Latent Spaces
  Eitan Shaar; Ariel Shaulov; Yalcin Tur; Gal Chechik; Ravid Shwartz-Ziv
• [95%] Comparative Analysis of Patch Attack on VLM-Based Autonomous Driving Architectures
  David Fernandez; Pedram MohajerAnsari; Amir Salarpour; Long Cheng; Abolfazl Razi; Mert D. Pesé
• [95%] Generative Adversarial Perturbations with Cross-paradigm Transferability on Localized Crowd Counting
  Alabi Mehzabin Anisha; Guangjing Wang; Sriram Chellappan
• [94%] Identifying Adversary Characteristics from an Observed Attack
  Soyon Choi; Scott Alfeld; Meiyi Ma
• [94%] RESQ: A Unified Framework for REliability- and Security Enhancement of Quantized Deep Neural Networks
  Ali Soltan Mohammadi; Samira Nazari; Ali Azarpeyvand; Mahdi Taheri; Milos Krstic; Michael Huebner; Christian Herglotz; Tara Ghasempouri
• [94%] Adversarial attacks against Modern Vision-Language Models
  Alejandro Paredes La Torre
• [94%] STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling
  Kun Wang; Meng Chen; Junhao Wang; Yuli Wu; Li Lu; Chong Zhang; Peng Cheng; Jiaheng Zhang; Kui Ren
• [94%] PoiCGAN: A Targeted Poisoning Based on Feature-Label Joint Perturbation in Federated Learning
  Tao Liu; Jiguang Lv; Dapeng Man; Weiye Xi; Yaole Li; Feiyu Zhao; Kuiming Wang; Yingchao Bian; Chen Xu; Wu Yang
• [94%] Knowledge-Guided Adversarial Training for Infrared Object Detection via Thermal Radiation Modeling
  Shiji Zhao; Shukun Xiong; Maoxun Yuan; Yao Huang; Ranjie Duan; Qing Guo; Jiansheng Chen; Haibin Duan; Xingxing Wei
• [94%] On the Vulnerability of Deep Automatic Modulation Classifiers to Explainable Backdoor Threats
  Younes Salmi; Hanna Bogucka
• [93%] Learning to Attack: A Bandit Approach to Adversarial Context Poisoning
  Ray Telikani; Amir H. Gandomi
• [93%] Multi-Paradigm Collaborative Adversarial Attack Against Multi-Modal Large Language Models
  Yuanbo Li; Tianyang Xu; Cong Hu; Tao Zhou; Xiao-Jun Wu; Josef Kittler
• [93%] STRAP-ViT: Segregated Tokens with Randomized -- Transformations for Defense against Adversarial Patches in ViTs
  Nandish Chattopadhyay; Anadi Goyal; Chandan Karfa; Anupam Chattopadhyay
• [93%] Thermal Topology Collapse: Universal Physical Patch Attacks on Infrared Vision Systems
  Chengyin Hu; Yikun Guo; Yuxian Dong; Qike Zhang; Kalibinuer Tiliwalidi; Yiwei Wei; Haitao Shi; Jiujiang Guo; Jiahuan Long; Xiang Chen
• [92%] Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks
  Jiahao Zhang; Yilong Wang; Suhang Wang
• [92%] Adversarial Vulnerabilities in Neural Operator Digital Twins: Gradient-Free Attacks on Nuclear Thermal-Hydraulic Surrogates
  Samrendra Roy; Kazuma Kobayashi; Souvik Chakraborty; Rizwan-uddin; Syed Bahauddin Alam
• [92%] The Geometry of Robustness: Optimizing Loss Landscape Curvature and Feature Manifold Alignment for Robust Finetuning of Vision-Language Models
  Shivang Chopra; Shaunak Halbe; Chengyue Huang; Brisa Maneechotesuwan; Zsolt Kira
• [92%] InkDrop: Invisible Backdoor Attacks Against Dataset Condensation
  He Yang; Dongyi Lv; Song Ma; Wei Xi; Zhi Wang; Hanlin Gu; Yajie Wang
• [91%] Poisoning the Inner Prediction Logic of Graph Neural Networks for Clean-Label Backdoor Attacks
  Yuxiang Zhang; Bin Ma; Enyan Dai
• [91%] Experimental Evaluation of Security Attacks on Self-Driving Car Platforms
  Viet K. Nguyen; Nathan Lee; Mohammad Husain
• [90%] Diffusion-Based Feature Denoising and Using NNMF for Robust Brain Tumor Classification
  Hiba Adil Al-kharsan; Róbert Rajkó
• [89%] AdvSplat: Adversarial Attacks on Feed-Forward Gaussian Splatting Models
  Yiran Qiao; Yiren Lu; Yunlai Zhou; Rui Yang; Linlin Hou; Yu Yin; Jing Ma
• [88%] Mitigating Evasion Attacks in Fog Computing Resource Provisioning Through Proactive Hardening
  Younes Salmi; Hanna Bogucka
• [88%] EnsembleSHAP: Faithful and Certifiably Robust Attribution for Random Subspace Method
  Yanting Wang; Jinyuan Jia
• [87%] AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models
  Yubo Cui; Xianchao Guan; Zijun Xiong; Zheng Zhang
• [86%] Adversarial Patch Generation for Visual-Infrared Dense Prediction Tasks via Joint Position-Color Optimization
  He Li; Wenyue He; Weihang Kong; Xingchen Zhang
• [86%] What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models
  Sen Nie; Jie Zhang; Zhongqi Wang; Zhaoyang Wei; Shiguang Shan; Xilin Chen
• [86%] Poisoning the Pixels: Revisiting Backdoor Attacks on Semantic Segmentation
  Guangsheng Zhang; Huan Tian; Leo Zhang; Tianqing Zhu; Ming Ding; Wanlei Zhou; Bo Liu
• [86%] Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey
  Bhavuk Jain; Sercan Ö. Arık; Hardeo K. Thakur
• [85%] Training for Trustworthy Saliency Maps: Adversarial Training Meets Feature-Map Smoothing
  Dipkamal Bhusal; Md Tanvirul Alam; Nidhi Rastogi
• [85%] Complementary Text-Guided Attention for Zero-Shot Adversarial Robustness
  Lu Yu; Haiyang Zhang; Changsheng Xu
• [85%] Adversarial Camouflage
  Paweł Borsukiewicz; Daniele Lunghi; Melissa Tessa; Jacques Klein; Tegawendé F. Bissyandé
• [84%] Co-Evolutionary Multi-Modal Alignment via Structured Adversarial Evolution
  Guoxin Shi; Haoyu Wang; Zaihui Yang; Yuxing Wang; Yongzhe Chang
• [84%] Image-based Prompt Injection: Hijacking Multimodal LLMs through Visually Embedded Adversarial Instructions
  Neha Nagaraja; Lan Zhang; Zhilong Wang; Bo Zhang; Pawan Patil
• [84%] RESBev: Making BEV Perception More Robust
  Lifeng Zhuo; Kefan Jin; Zhe Liu; Hesheng Wang
• [84%] PEANUT: Perturbations by Eigenvector Alignment for Attacking Graph Neural Networks Under Topology-Driven Message Passing
  Bhavya Kohli; Biplab Sikdar
• [83%] Backdoor Directions in Vision Transformers
  Sengim Karayalcin; Marina Krcek; Pin-Yu Chen; Stjepan Picek
• [83%] PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses
  Chenlong Yin; Runpeng Geng; Yanting Wang; Jinyuan Jia
• [83%] Is Monitoring Enough? Strategic Agent Selection For Stealthy Attack in Multi-Agent Discussions
  Qiuchi Xiang; Haoxuan Qu; Hossein Rahmani; Jun Liu
• [83%] PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems
  Haozhen Wang; Haoyue Liu; Jionghao Zhu; Zhichao Wang; Yongxin Guo; Xiaoying Tang
• [83%] Robust Multi-Agent Reinforcement Learning for Small UAS Separation Assurance under GPS Degradation and Spoofing
  Alex Zongo; Filippos Fotiadis; Ufuk Topcu; Peng Wei
• [82%] SNEAKDOOR: Stealthy Backdoor Attacks against Distribution Matching-based Dataset Condensation
  He Yang; Dongyi Lv; Song Ma; Wei Xi; Jizhong Zhao
• [81%] Beyond the Patch: Exploring Vulnerabilities of Visuomotor Policies via Viewpoint-Consistent 3D Adversarial Object
  Chanmi Lee; Minsung Yoon; Woojae Kim; Sebin Lee; Sung-eui Yoon
• [81%] Why the Maximum Second Derivative of Activations Matters for Adversarial Robustness
  Yunrui Yu; Hang Su; Jun Zhu
• [81%] ARTA: Adversarial-Robust Multivariate Time--Series Anomaly Detection via Sparsity-Constrained Perturbations
  Hadi Hojjati; Narges Armanfard
• [80%] Shapes are not enough: CONSERVAttack and its use for finding vulnerabilities and uncertainties in machine learning applications
  Philip Bechtle; Lucie Flek; Philipp Alexander Jung; Akbar Karimi; Timo Saala; Alexander Schmidt; Matthias Schott; Philipp Soldin; Christopher Wiebusch; Ulrich Willemsen
• [80%] Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphs
  Zihui Chen; Yuling Wang; Pengfei Jiao; Kai Wu; Xiao Wang; Xiang Ao; Dalin Zhang
• [80%] Statistical Guarantees for Distributionally Robust Optimization with Optimal Transport and OT-Regularized Divergences
  Jeremiah Birrell; Xiaoxi Shen
• [80%] Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning
  Kavindu Herath; Joshua Zhao; Saurabh Bagchi
• [79%] XSPA: Crafting Imperceptible X-Shaped Sparse Adversarial Perturbations for Transferable Attacks on VLMs
  Chengyin Hu; Jiaju Han; Xuemeng Sun; Qike Zhang; Yiwei Wei; Ang Li; Chunlei Meng; Xiang Chen; Jiahuan Long
• [78%] A Coin Flip for Safety: LLM Judges Fail to Reliably Measure Adversarial Robustness
  Leo Schwinn; Moritz Ladenburger; Tim Beyer; Mehrnaz Mofakhami; Gauthier Gidel; Stephan Günnemann
• [78%] BadLLM-TG: A Backdoor Defender powered by LLM Trigger Generator
  Ruyi Zhang; Heng Gao; Songlei Jian; Yusong Tan; Haifang Zhou
• [78%] ADV-0: Closed-Loop Min-Max Adversarial Training for Long-Tail Robustness in Autonomous Driving
  Tong Nie; Yihong Tang; Junlin He; Yuewen Mei; Jie Sun; Lijun Sun; Wei Ma; Jian Sun
• [77%] Reward Under Attack: Analyzing the Robustness and Hackability of Process Reward Models
  Rishabh Tiwari; Aditya Tomar; Udbhav Bamba; Monishwaran Maheswaran; Heng Yang; Michael W. Mahoney; Kurt Keutzer; Amir Gholami
• [77%] FL-PBM: Pre-Training Backdoor Mitigation for Federated Learning
  Osama Wehbi; Sarhad Arisdakessian; Omar Abdel Wahab; Azzam Mourad; Hadi Otrok; Jamal Bentahar
• [76%] ROKA: Robust Knowledge Unlearning against Adversaries
  Jinmyeong Shin; Joshua Tapia; Nicholas Ferreira; Gabriel Diaz; Moayed Daneshyari; Hyeran Jeon
• [75%] Benchmarking the Energy Cost of Assurance in Neuromorphic Edge Robotics
  Sylvester Kaczmarek
• [75%] Directional Embedding Smoothing for Robust Vision Language Models
  Ye Wang; Jing Liu; Toshiaki Koike-Akino
• [75%] Fingerprinting Deep Neural Networks for Ownership Protection: An Analytical Approach
  Guang Yang; Ziye Geng; Yihang Chen; Changqing Luo
• [74%] RAIN: Secure and Robust Aggregation under Shuffle Model of Differential Privacy
  Yuhang Li; Yajie Wang; Xiangyun Tang; Peng Jiang; Yu-an Tan; Liehuang Zhu
• [74%] Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search
  Yulin Shen; Xudong Pan; Geng Hong; Min Yang
• [74%] Uncovering Memorization in Timeseries Imputation models: LBRM Membership Inference and its link to attribute Leakage
  Faiz Taleb; Ivan Gazeau; Maryline Laurent
• [73%] When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG
  Junchen Li; Chao Qi; Rongzheng Wang; Qizhi Chen; Liang Xu; Di Liang; Bob Simons; Shuang Liang
• [73%] Dynamic Meta-Layer Aggregation for Byzantine-Robust Federated Learning
  Reek Das; Biplab Kanti Sen
• [73%] SLAM Adversarial Lab: An Extensible Framework for Visual SLAM Robustness Evaluation under Adverse Conditions
  Mohamed Hefny; Karthik Dantu; Steven Y. Ko
• [73%] Adversarial Prompt Injection Attack on Multimodal Large Language Models
  Meiwen Ding; Song Xia; Chenqi Kong; Xudong Jiang
• [72%] Mathematical Foundations of Poisoning Attacks on Linear Regression over Cumulative Distribution Functions
  Atsuki Sato; Martin Aumüller; Yusuke Matsui
• [72%] How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition
  Mateusz Dziemian; Maxwell Lin; Xiaohan Fu; Micha Nowak; Nick Winter; Eliot Jones; Andy Zou; Lama Ahmad; Kamalika Chaudhuri; Sahana Chennabasappa; Xander Davies; Lauren Deason; Benjamin L. Edelman; Tanner Emek; Ivan Evtimov; Jim Gust; Maia Hamin; Kat He; Klaudia Krawiecka; Riccardo Patana; Neil Perry; Troy Peterson; Xiangyu Qi; Javier Rando; Zifan Wang; Zihan Wang; Spencer Whitman; Eric Winsor; Arman Zharmagambetov; Matt Fredrikson; Zico Kolter
• [71%] DSBA: Dynamic Stealthy Backdoor Attack with Collaborative Optimization in Self-Supervised Learning
  Jiayao Wang; Mohammad Maruf Hasan; Yiping Zhang; Xiaoying Lei; Jiale Zhang; Qilin Wu; Junwu Zhu; Dongfang Zhao
• [71%] Structure-Aware Distributed Backdoor Attacks in Federated Learning
  Wang Jian; Shen Hong; Ke Wei; Liu Xue Hua
• [71%] FedTrident: Resilient Road Condition Classification Against Poisoning Attacks in Federated Learning
  Sheng Liu; Panos Papadimitratos
• [71%] Trojan-Speak: Bypassing Constitutional Classifiers with No Jailbreak Tax via Adversarial Finetuning
  Bilgehan Sel; Xuanli He; Alwin Peng; Ming Jin; Jerry Wei
• [70%] Adversarial Reinforcement Learning for Detecting False Data Injection Attacks in Vehicular Routing
  Taha Eghtesad; Yevgeniy Vorobeychik; Aron Laszka
• [70%] Noise-Aware Misclassification Attack Detection in Collaborative DNN Inference
  Shima Yousefi; Saptarshi Debroy
• [70%] Neural Uncertainty Principle: A Unified View of Adversarial Fragility and LLM Hallucination
  Dong-Xiao Zhang; Hu Lou; Jun-Jie Zhang; Jun Zhu; Deyu Meng
• [70%] Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?
  Yuhang Ma; Jie Wang; Zheng Yan
• [69%] Analyzing the Impact of Adversarial Attacks on C-V2X-Enabled Road Safety: An Age of Information Perspective
  Mahmudul Hassan Ashik; Moinul Hossain
• [69%] Delayed Backdoor Attacks: Exploring the Temporal Dimension as a New Attack Surface in Pre-Trained Models
  Zikang Ding; Haomiao Yang; Meng Hao; Wenbo Jiang; Kunlan Xiang; Runmeng Du; Yijing Liu; Ruichen Zhang; Dusit Niyato
• [69%] CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models
  Shuhan Xu; Siyuan Liang; Hongling Zheng; Yong Luo; Han Hu; Lefei Zhang; Dacheng Tao
• [69%] The Autonomy Tax: Defense Training Breaks LLM Agents
  Shawn Li; Yue Zhao
• [69%] Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs
  Qi Luo; Minghui Xu; Dongxiao Yu; Xiuzhen Cheng
• [69%] Diffusion-Based Feature Denoising with NNMF for Robust handwritten digit multi-class classification
  Hiba Adil Al-kharsan; Róbert Rajkó
• [68%] Inevitable Encounters: Backdoor Attacks Involving Lossy Compression
  Qian Li; Yunuo Chen; Yuntian Chen
• [68%] When Minor Edits Matter: LLM-Driven Prompt Attack for Medical VLM Robustness in Ultrasound
  Yasamin Medghalchi; Milad Yazdani; Amirhossein Dabiriaghdam; Moein Heidari; Mojan Izadkhah; Zahra Kavian; Giuseppe Carenini; Lele Wang; Dena Shahriari; Ilker Hacihaliloglu
• [66%] Test-Time Attention Purification for Backdoored Large Vision Language Models
  Zhifang Zhang; Bojun Yang; Shuo He; Weitong Chen; Wei Emma Zhang; Olaf Maennel; Lei Feng; Miao Xu
• [66%] CivicShield: A Cross-Domain Defense-in-Depth Framework for Securing Government-Facing AI Chatbots Against Multi-Turn Adversarial Attacks
  KrishnaSaiReddy Patil
• [65%] Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation
  Kennedy Edemacu; Mohammad Mahdi Shokri
• [65%] Scores Know Bobs Voice: Speaker Impersonation Attack
  Chanwoo Hwang; Sunpill Kim; Yong Kiam Tan; Tianchi Liu; Seunghun Paik; Dongsoo Kim; Mondal Soumik; Khin Mi Mi Aung; Jae Hong Seo
• [65%] TRAP: Hijacking VLA CoT-Reasoning via Adversarial Patches
  Zhengxian Huang; Wenjun Zhu; Haoxuan Qiu; Xiaoyu Ji; Wenyuan Xu
• [65%] IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness
  Ziye Geng; Guang Yang; Yihang Chen; Changqing Luo
• [64%] Physical Evaluation of Naturalistic Adversarial Patches for Camera-Based Traffic-Sign Detection
  Brianna D'Urso; Tahmid Hasan Sakib; Syed Rafay Hasan; Terry N. Guo
• [64%] TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models
  Zhi Xu; Jiaqi Li; Xiaotong Zhang; Hong Yu; Han Liu
• [64%] Semantic Chameleon: Corpus-Dependent Poisoning Attacks and Defenses in RAG Systems
  Scott Thornton
• [64%] Perturbation: A simple and efficient adversarial tracer for representation learning in language models
  Joshua Rozner; Cory Shain
• [63%] Dual-Modality Multi-Stage Adversarial Safety Training: Robustifying Multimodal Web Agents Against Cross-Modal Attacks
  Haoyu Liu; Dingcheng Li; Lukas Rutishauser; Zeyu Zheng
• [63%] TASER: Task-Aware Spectral Energy Refine for Backdoor Suppression in UAV Swarms Decentralized Federated Learning
  Sizhe Huang; Shujie Yang
• [63%] Removing the Trigger, Not the Backdoor: Alternative Triggers and Latent Backdoors
  Gorka Abad; Ermes Franch; Stefanos Koffas; Stjepan Picek
• [63%] Principled Steering via Null-space Projection for Jailbreak Defense in Vision-Language Models
  Xingyu Zhu; Beier Zhu; Shuo Wang; Junfeng Fang; Kesen Zhao; Hanwang Zhang; Xiangnan He
• [62%] On Optimizing Multimodal Jailbreaks for Spoken Language Models
  Aravind Krishnan; Karolina Stańczak; Dietrich Klakow
• [62%] Cyber Deception for Mission Surveillance via Hypergame-Theoretic Deep Reinforcement Learning
  Zelin Wan; Jin-Hee Cho; Mu Zhu; Ahmed H. Anwar; Charles Kamhoua; Munindar P. Singh
• [62%] DTVI: Dual-Stage Textual and Visual Intervention for Safe Text-to-Image Generation
  Binhong Tan; Zhaoxin Wang; Handing Wang
• [62%] ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning
  Xiangyu Yin; Yi Qi; Chih-Hong Cheng
• [61%] Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning
  Shenao Yan; Shimaa Ahmed; Shan Jin; Sunpreet S. Arora; Yiwei Cai; Yizhen Wang; Yuan Hong
• [60%] ThreatFormer-IDS: Robust Transformer Intrusion Detection with Zero-Day Generalization and Explainable Attribution
  Srikumar Nayak
• [60%] Blockchain Communication Vulnerabilities
  Andrei Lebedev; Vincent Gramoli
• [60%] Detection of adversarial intent in Human-AI teams using LLMs
  Abed K. Musaffar; Ambuj Singh; Francesco Bullo
• [59%] Exact and Asymptotically Complete Robust Verifications of Neural Networks via Ising Solvers
  Wenxin Li; Wenchao Liu; Weihao Li; Chuan Wang; Qi Gao; Yin Ma; Hai Wei; Kai Wen
• [59%] Understanding and Mitigating Dataset Corruption in LLM Steering
  Cullen Anderson; Narmeen Oozeer; Foad Namjoo; Remy Ogasawara; Amirali Abdullah; Jeff M. Phillips
• [59%] Jailbreak Scaling Laws for Large Language Models: Polynomial-Exponential Crossover
  Indranil Halder; Annesya Banerjee; Cengiz Pehlevan
• [58%] FAME: Formal Abstract Minimal Explanation for Neural Networks
  Ryma Boumazouza; Raya Elsaleh; Melanie Ducoffe; Shahaf Bassan; Guy Katz
• [58%] Colluding LoRA: A Compositional Vulnerability in LLM Safety Alignment
  Sihao Ding
• [58%] Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems
  Patrick Levi
• [58%] Cyber-Resilient Digital Twins: Discriminating Attacks for Safe Critical Infrastructure Control
  Mohammadhossein Homaei; Iman Khazrak; Rubén Molano; Andrés Caro; Mar Ávila
• [57%] From Shallow to Deep: Pinning Semantic Intent via Causal GRPO
  Shuyi Zhou; Zeen Song; Wenwen Qiang; Jiyan Sun; Yao Zhou; Yinlong Liu; Wei Ma
• [57%] Guiding Sparse Neural Networks with Neurobiological Principles to Elicit Biologically Plausible Representations
  Patrick Inoue; Florian Röhrbein; Andreas Knoblauch
• [57%] KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation
  Qizhi Chen; Chao Qi; Yihong Huang; Muquan Li; Rongzheng Wang; Dongyang Zhang; Ke Qin; Shuang Liang
• [57%] Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks
  Yanming Mu; Hao Hu; Feiyang Li; Qiao Yuan; Jiang Wu; Zichuan Liu; Pengcheng Liu; Mei Wang; Hongwei Zhou; Yuling Liu
• [57%] A Unified Spatial Alignment Framework for Highly Transferable Transformation-Based Attacks on Spatially Structured Tasks
  Jiaming Liang; Chi-Man Pun
• [56%] BadRSSD: Backdoor Attacks on Regularized Self-Supervised Diffusion Models
  Jiayao Wang; Yiping Zhang; Mohammad Maruf Hasan; Xiaoying Lei; Jiale Zhang; Junwu Zhu; Qilin Wu; Dongfang Zhao
• [56%] Margin and Consistency Supervision for Calibrated and Robust Vision Models
  Salim Khazem
• [56%] Mitigating Backdoor Attacks in Federated Learning Using PPA and MiniMax Game Theory
  Osama Wehbi; Sarhad Arisdakessian; Omar Abdel Wahab; Anderson Avila; Azzam Mourad; Hadi Otrok
• [56%] Emotion Diffusion Classifier with Adaptive Margin Discrepancy Training for Facial Expression Recognition
  Rongkang Dong; Cuixin Yang; Cong Zhang; Yushen Zuo; Kin-Man Lam
• [55%] Silent Sabotage During Fine-Tuning: Few-Shot Rationale Poisoning of Compact Medical LLMs
  Jingyuan Xie; Wenjie Wang; Ji Wu; Jiandong Gao
• [55%] SRasP: Self-Reorientation Adversarial Style Perturbation for Cross-Domain Few-Shot Learning
  Wenqian Li; Pengfei Fang; Hui Xue
• [55%] BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation
  Feiran Li; Qianqian Xu; Shilong Bao; Zhiyong Yang; Xilin Zhao; Xiaochun Cao; Qingming Huang
• [55%] Unveiling the Security Risks of Federated Learning in the Wild: From Research to Practice
  Jiahao Chen; Zhiming Zhao; Yuwen Pu; Chunyi Zhou; Zhou Feng; Songze Li; Shouling Ji
• [54%] Differential Privacy in Two-Layer Networks: How DP-SGD Harms Fairness and Robustness
  Ruichen Xu; Kexin Chen
• [54%] Lipschitz-Based Robustness Certification Under Floating-Point Execution
  Toby Murray
• [54%] All Vehicles Can Lie: Efficient Adversarial Defense in Fully Untrusted-Vehicle Collaborative Perception via Pseudo-Random Bayesian Inference
  Yi Yu; Libing Wu; Zhuangzhuang Zhang; Jing Qiu; Lijuan Huo; Jiaqi Feng
• [54%] Rotated Robustness: A Training-Free Defense against Bit-Flip Attacks on Large Language Models
  Deng Liu; Song Chen
• [54%] R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting
  Tianrui Lou; Siyuan Liang; Jiawei Liang; Yuze Gao; Xiaochun Cao
• [53%] Detecting and Eliminating Neural Network Backdoors Through Active Paths with Application to Intrusion Detection
  Eirik Høyheim; Magnus Wiik Eckhoff; Gudmund Grov; Robert Flood; David Aspinall
• [53%] Do Not Leave a Gap: Hallucination-Free Object Concealment in Vision-Language Models
  Amira Guesmi; Muhammad Shafique
• [52%] Protection against Source Inference Attacks in Federated Learning
  Andreas Athanasiou; Kangsoo Jung; Catuscia Palamidessi
• [52%] From Decoupled to Coupled: Robustness Verification for Learning-based Keypoint Detection with Joint Specifications
  Xusheng Luo; Changliu Liu
• [52%] Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning
  Sheng Pan; Niansheng Tang
• [52%] LipsAM: Lipschitz-Continuous Amplitude Modifier for Audio Signal Processing and its Application to Plug-and-Play Dereverberation
  Kazuki Matsumoto; Ren Uchida; Kohei Yatabe
• [52%] Anti-I2V: Safeguarding your photos from malicious image-to-video generation
  Duc Vu; Anh Nguyen; Chi Tran; Anh Tran
• [51%] Sim2Act: Robust Simulation-to-Decision Learning via Adversarial Calibration and Group-Relative Perturbation
  Hongyu Cao; Jinghan Zhang; Kunpeng Liu; Dongjie Wang; Feng Xia; Haifeng Chen; Xiaohua Hu; Yanjie Fu
• [51%] The System Prompt Is the Attack Surface: How LLM Agent Configuration Shapes Security and Creates Exploitable Vulnerabilities
  Ron Litvak
• [50%] Visual Exclusivity Attacks: Automatic Multimodal Red Teaming via Agentic Planning
  Yunbei Zhang; Yingqiang Ge; Weijie Xu; Yuhui Xu; Jihun Hamm; Chandan K. Reddy
• [50%] Why Does It Look There? Structured Explanations for Image Classification
  Jiarui Li; Zixiang Yin; Samuel J Landry; Zhengming Ding; Ramgopal R. Mettu
• [50%] Probabilistic Verification of Voice Anti-Spoofing Models
  Evgeny Kushnir; Alexandr Kozodaev; Dmitrii Korzh; Mikhail Pautov; Oleg Kiriukhin; Oleg Y. Rogov
• [50%] Robustness, Cost, and Attack-Surface Concentration in Phishing Detection
  Julian Allagan; Mohamed Elbakary; Zohreh Safari; Weizheng Gao; Gabrielle Morgan; Essence Morgan; Vladimir Deriglazov
• [50%] Design and Development of an ML/DL Attack Resistance of RC-Based PUF for IoT Security
  Joy Acharya; Smit Patel; Paawan Sharma; Mohendra Roy
• [49%] Amnesia: Adversarial Semantic Layer Specific Activation Steering in Large Language Models
  Ali Raza; Gurang Gupta; Nikolay Matyunin; Jibesh Patra
• [49%] GroupGuard: A Framework for Modeling and Defending Collusive Attacks in Multi-Agent Systems
  Yiling Tao; Xinran Zheng; Shuo Yang; Meiling Tao; Xingjun Wang
• [49%] H-Node Attack and Defense in Large Language Models
  Eric Yocam; Varghese Vaidyan; Yong Wang
• [49%] HSFM: Hard-Set-Guided Feature-Space Meta-Learning for Robust Classification under Spurious Correlations
  Aryan Yazdan Parast; Khawar Islam; Soyoun Won; Basim Azam; Naveed Akhtar
• [48%] On the Rate of Convergence of GD in Non-linear Neural Networks: An Adversarial Robustness Perspective
  Guy Smorodinsky; Sveta Gimpleson; Itay Safran
• [48%] TraceGuard: Process-Guided Firewall against Reasoning Backdoors in Large Language Models
  Zhen Guo; Shanghao Shi; Hao Li; Shamim Yazdani; Ning Zhang; Reza Tourani
• [48%] Adversarial Batch Representation Augmentation for Batch Correction in High-Content Cellular Screening
  Lei Tong; Xujing Yao; Adam Corrigan; Long Chen; Navin Rathna Kumar; Kerry Hallbrook; Jonathan Orme; Yinhai Wang; Huiyu Zhou
• [48%] Taming the Adversary: Stable Minimax Deep Deterministic Policy Gradient via Fractional Objectives
  Taeho Lee; Donghwan Lee
• [48%] The Cognitive Firewall:Securing Browser Based AI Agents Against Indirect Prompt Injection Via Hybrid Edge Cloud Defense
  Qianlong Lan; Anuj Kaul
• [48%] Adversarial Bandit Optimization with Globally Bounded Perturbations to Linear Losses
  Zhuoyu Cheng; Kohei Hatano; Eiji Takimoto
• [47%] DualSentinel: A Lightweight Framework for Detecting Targeted Attacks in Black-box LLM via Dual Entropy Lull Pattern
  Xiaoyi Pang; Xuanyi Hao; Pengyu Liu; Qi Luo; Song Guo; Zhibo Wang
• [47%] Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads
  Jinman Wu; Yi Xie; Shiqian Zhao; Xiaofeng Chen
• [47%] Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClaw
  Zhengyang Shan; Jiayun Xin; Yue Zhang; Minghui Xu
• [47%] BackdoorIDS: Zero-shot Backdoor Detection for Pretrained Vision Encoder
  Siquan Huang; Yijiang Li; Ningzhi Gao; Xingfu Yan; Leyu Shi; Ying Gao
• [47%] AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents
  Yutao Luo; Haotian Zhu; Shuchao Pang; Zhigang Lu; Tian Dong; Yongbin Zhou; Minhui Xue
• [47%] Probabilistic Abstract Interpretation on Neural Networks via Grids Approximation
  Zhuofan Zhang; Herbert Wiklicky
• [47%] With a Little Help From My Friends: Collective Manipulation in Risk-Controlling Recommender Systems
  Giovanni De Toni; Cristian Consonni; Erasmo Purificato; Emilia Gomez; Bruno Lepri
• [46%] ACES: Accent Subspaces for Coupling, Explanations, and Stress-Testing in Automatic Speech Recognition
  Swapnil Parekh
• [46%] Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information
  Yifan Zhu; Yibo Miao; Yinpeng Dong; Xiao-Shan Gao
• [46%] When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretraining
  Zhihao Li; Gezheng Xu; Jiale Cai; Ruiyi Fang; Di Wu; Qicheng Lao; Charles Ling; Boyu Wang
• [46%] UNBOX: Unveiling Black-box visual models with Natural-language
  Simone Carnemolla; Chiara Russo; Simone Palazzo; Quentin Bouniot; Daniela Giordano; Zeynep Akata; Matteo Pennisi; Concetto Spampinato
• [46%] SpectralGuard: Detecting Memory Collapse Attacks in State Space Models
  Davi Bonetto
• [45%] Antibody: Strengthening Defense Against Harmful Fine-Tuning for Large Language Models via Attenuating Harmful Gradient Influence
  Quoc Minh Nguyen; Trung Le; Jing Wu; Anh Tuan Bui; Mehrtash Harandi
• [45%] IoUCert: Robustness Verification for Anchor-based Object Detectors
  Benedikt Brückner; Alejandro J. Mercado; Yanghao Zhang; Panagiotis Kouvaros; Alessio Lomuscio
• [45%] Adversarial Latent-State Training for Robust Policies in Partially Observable Domains
  Angad Singh Ahuja
• [45%] ToolFlood: Beyond Selection -- Hiding Valid Tools from LLM Agents via Semantic Covering
  Hussein Jawad; Nicolas J-B Brunel
• [45%] Don't Trust Stubborn Neighbors: A Security Framework for Agentic Networks
  Samira Abedini; Sina Mavali; Lea Schönherr; Martin Pawelczyk; Rebekka Burkholz
• [45%] ORACAL: A Robust and Explainable Multimodal Framework for Smart Contract Vulnerability Detection with Causal Graph Enrichment
  Tran Duong Minh Dai; Triet Huynh Minh Le; M. Ali Babar; Van-Hau Pham; Phan The Duy
• [44%] When Prompt Optimization Becomes Jailbreaking: Adaptive Red-Teaming of Large Language Models
  Zafir Shamsi; Nikhil Chekuru; Zachary Guzman; Shivank Garg
• [44%] Osmosis Distillation: Model Hijacking with the Fewest Samples
  Yuchen Shi; Huajie Chen; Heng Xu; Zhiquan Liu; Jialiang Shen; Chi Liu; Shuai Zhou; Tianqing Zhu; Wanlei Zhou
• [44%] Robust Single-message Shuffle Differential Privacy Protocol for Accurate Distribution Estimation
  Xiaoguang Li; Hanyi Wang; Yaowei Huang; Jungang Yang; Qingqing Ye; Haonan Yan; Ke Pan; Zhe Sun; Hui Li
• [44%] Where Do LLM-based Systems Break? A System-Level Security Framework for Risk Assessment and Treatment
  Neha Nagaraja; Hayretdin Bahsi
• [44%] Models as Lego Builders: Assembling Malice from Benign Blocks via Semantic Blueprints
  Chenxi Li; Xianggan Liu; Dake Shen; Yaosong Du; Zhibo Yao; Hao Jiang; Linyi Jiang; Chengwei Cao; Jingzhe Zhang; RanYi Peng; Peiling Bai; Xiande Huang
• [43%] FERRET: Framework for Expansion Reliant Red Teaming
  Ninareh Mehrabi; Vitor Albiero; Maya Pavlova; Joanna Bitton
• [43%] MIDAS: Multi-Image Dispersion and Semantic Reconstruction for Jailbreaking MLLMs
  Yilian Liu; Xiaojun Jia; Guoshun Nan; Jiuyang Lyu; Zhican Chen; Tao Guan; Shuyuan Luo; Zhongyi Zhai; Yang Liu
• [43%] Tuning Just Enough: Lightweight Backdoor Attacks on Multi-Encoder Diffusion Models
  Ziyuan Chen; Yujin Jeong; Tobias Braun; Anna Rohrbach
• [43%] EmbTracker: Traceable Black-box Watermarking for Federated Language Models
  Haodong Zhao; Jinming Hu; Yijie Bai; Tian Dong; Wei Du; Zhuosheng Zhang; Yanjiao Chen; Haojin Zhu; Gongshen Liu
• [43%] Robustness Quantification for Discriminative Models: a New Robustness Metric and its Application to Dynamic Classifier Selection
  Rodrigo F. L. Lassance; Jasper De Bock
• [43%] Prototype Fusion: A Training-Free Multi-Layer Approach to OOD Detection
  Shreen Gul; Mohamed Elmahallawy; Ardhendu Tripathy; Sanjay Madria
• [43%] Hidden Ads: Behavior Triggered Semantic Backdoors for Advertisement Injection in Vision Language Models
  Duanyi Yao; Changyue Li; Zhicong Huang; Cheng Hong; Songze Li
• [43%] Robust Smart Contract Vulnerability Detection via Contrastive Learning-Enhanced Granular-ball Training
  Zeli Wang; Qingxuan Yang; Shuyin Xia; Yueming Wu; Bo Liu; Longlong Lin
• [43%] FedFG: Privacy-Preserving and Robust Federated Learning via Flow-Matching Generation
  Ruiyang Wang; Rong Pan; Zhengan Yao
• [42%] AutoFFS: Adversarial Deformations for Facial Feminization Surgery Planning
  Paul Friedrich; Florentin Bieder; Florian M. Thieringer; Philippe C. Cattin
• [42%] FedCova: Robust Federated Covariance Learning Against Noisy Labels
  Xiangyu Zhong; Xiaojun Yuan; Ying-Jun Angela Zhang
• [42%] Targeted Bit-Flip Attacks on LLM-Based Agents
  Jialai Wang; Ya Wen; Zhongmou Liu; Yuxiao Wu; Bingyi He; Zongpeng Li; Ee-Chien Chang
• [42%] Systematic Scaling Analysis of Jailbreak Attacks in Large Language Models
  Xiangwen Wang; Ananth Balashankar; Varun Chandrasekaran
• [42%] Spectral Defense Against Resource-Targeting Attack in 3D Gaussian Splatting
  Yang Chen; Yi Yu; Jiaming He; Yueqi Duan; Zheng Zhu; Yap-Peng Tan
• [42%] Purify Once, Edit Freely: Breaking Image Protections under Model Mismatch
  Qichen Zhao; Shengfang Zhai; Xinjian Bai; Qingni Shen; Qiqi Lin; Yansong Gao; Zhonghai Wu
• [42%] Safety-Potential Pruning for Enhancing Safety Prompts Against VLM Jailbreaking Without Retraining
  Chongxin Li; Hanzhang Wang; Lian Duan
• [42%] Code-A1: Adversarial Evolving of Code LLM and Test LLM via Reinforcement Learning
  Aozhe Wang; Yuchen Yan; Nan Zhou; Zhengxi Lu; Weiming Lu; Jun Xiao; Yueting Zhuang; Yongliang Shen
• [42%] ALIGN: Adversarial Learning for Generalizable Speech Neuroprosthesis
  Zhanqi Zhang; Shun Li; Bernardo L. Sabatini; Mikio Aoi; Gal Mishne
• [42%] JANUS: A Lightweight Framework for Jailbreaking Text-to-Image Models via Distribution Optimization
  Haolun Zheng; Yu He; Tailun Chen; Shuo Shao; Zhixuan Chu; Hongbin Zhou; Lan Tao; Zhan Qin; Kui Ren
• [42%] IP-Bench: Benchmark for Image Protection Methods in Image-to-Video Generation Scenarios
  Xiaofeng Li; Leyi Sheng; Zhen Sun; Zongmin Zhang; Jiaheng Wei; Xinlei He
• [41%] High-order Knowledge Based Network Controllability Robustness Prediction: A Hypergraph Neural Network Approach
  Shibing Mo; Jiarui Zhang; Jiayu Xie; Xiangyi Teng; Jing Liu
• [41%] Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction
  Huajie Chen; Tianqing Zhu; Hailin Yang; Yuchen Zhong; Yang Zhang; Hui Sun; Heng Xu; Zuobin Ying; Lihua Yin; Wanlei Zhou
• [41%] Statistical Effort Modelling of Game Resource Localisation Attacks
  Alessandro Sanna; Waldo Verstraete; Leonardo Regano; Davide Maiorca; Bjorn De Sutter
• [41%] Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions
  Najeeb Jebreel; Mona Khalil; David Sánchez; Josep Domingo-Ferrer
• [41%] SimCert: Probabilistic Certification for Behavioral Similarity in Deep Neural Network Compression
  Jingyang Li; Fu Song; Guoqiang Li
• [41%] MAED: Mathematical Activation Error Detection for Mitigating Physical Fault Attacks in DNN Inference
  Kasra Ahmadi; Saeed Aghapour; Mehran Mozaffari Kermani; Reza Azarderakhsh
• [41%] Beyond Weighted Summation: Learnable Nonlinear Aggregation Functions for Robust Artificial Neurons
  Berke Deniz Bozyigit
• [41%] SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense
  Bibek Das; Chandranath Adak; Soumi Chattopadhyay; Zahid Akhtar; Soumya Dutta
• [41%] Exons-Detect: Identifying and Amplifying Exonic Tokens via Hidden-State Discrepancy for Robust AI-Generated Text Detection
  Xiaowei Zhu; Yubing Ren; Fang Fang; Shi Wang; Yanan Cao; Li Guo
• [41%] GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models
  Md Jueal Mia; Joaquin Molto; Yanzhao Wu; M. Hadi Amini
• [41%] Disentangled Graph Prompting for Out-Of-Distribution Detection
  Cheng Yang; Yu Hao; Qi Zhang; Chuan Shi
• [40%] Cascade: Composing Software-Hardware Attack Gadgets for Adversarial Threat Amplification in Compound AI Systems
  Sarbartha Banerjee; Prateek Sahu; Anjo Vahldiek-Oberwagner; Jose Sanchez Vicarte; Mohit Tiwari
• [40%] Byzantine-Robust Optimization under $(L_0, L_1)$-Smoothness
  Arman Bolatov; Samuel Horváth; Martin Takáč; Eduard Gorbunov
• [40%] SFCoT: Safer Chain-of-Thought via Active Safety Evaluation and Calibration
  Yu Pan; Wenlong Yu; Tiejun Wu; Xiaohu Ye; Qiannan Si; Guangquan Xu; Bin Wu
• [40%] Byzantine-Robust and Differentially Private Federated Optimization under Weaker Assumptions
  Rustem Islamov; Grigory Malinovsky; Alexander Gaponov; Aurelien Lucchi; Peter Richtárik; Eduard Gorbunov

2026-02 (231 papers)

• [99%] Learning Better Certified Models from Empirically-Robust Teachers
  Alessandro De Palma
• [99%] A Comparative Study of Adversarial Robustness in CNN and CNN-ANFIS Architectures
  Kaaustaaub Shankar; Bharadwaj Dogga; Kelly Cohen
• [99%] Evaluating False Alarm and Missing Attacks in CAN IDS
  Nirab Hossain; Pablo Moriano
• [99%] Most Convolutional Networks Suffer from Small Adversarial Perturbations
  Amit Daniely; Idan Mehalel
• [99%] Perturbing the Phase: Analyzing Adversarial Robustness of Complex-Valued Neural Networks
  Florian Eilers; Christof Duhme; Xiaoyi Jiang
• [99%] Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation
  Shuyu Chang; Haiping Huang; Yanjun Zhang; Yujin Huang; Fu Xiao; Leo Yu Zhang
• [99%] Brain Tumor Classifiers Under Attack: Robustness of ResNet Variants Against Transferable FGSM and PGD Attacks
  Ryan Deem; Garrett Goodman; Waqas Majeed; Md Abdullah Al Hafiz Khan; Michail S. Alexiou
• [99%] Temporally Unified Adversarial Perturbations for Time Series Forecasting
  Ruixian Su; Yukun Bao; Xinze Zhang
• [99%] Benchmarking Adversarial Robustness and Adversarial Training Strategies for Object Detection
  Alexis Winter; Jean-Vincent Martini; Romaric Audigier; Angelique Loesch; Bertrand Luvison
• [98%] Empirical Analysis of Adversarial Robustness and Explainability Drift in Cybersecurity Classifiers
  Mona Rajhans; Vishal Khawarey
• [98%] Generating Adversarial Events: A Motion-Aware Point Cloud Framework
  Hongwei Ren; Youxin Jiang; Qifei Gu; Xiangqian Wu
• [97%] "Someone Hid It": Query-Agnostic Black-Box Attacks on LLM-Based Retrieval
  Jiate Li; Defu Cao; Li Li; Wei Yang; Yuehan Qin; Chenxiao Yu; Tiannuo Yang; Ryan A. Rossi; Yan Liu; Xiyang Hu; Yue Zhao
• [97%] BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron
  Abdullah Arafat Miah; Kevin Vu; Yu Bi
• [97%] Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks
  Yanzhang Fu; Zizheng Guo; Jizhou Luo
• [97%] Advantage-based Temporal Attack in Reinforcement Learning
  Shenghong He
• [97%] Learning Mutual View Information Graph for Adaptive Adversarial Collaborative Perception
  Yihang Tao; Senkang Hu; Haonan An; Zhengru Fang; Hangcheng Cao; Yuguang Fang
• [97%] Decoupling Defense Strategies for Robust Image Watermarking
  Jiahui Chen; Zehang Deng; Zeyu Zhang; Chaoyang Li; Lianchen Jia; Lifeng Sun
• [96%] Beyond Suffixes: Token Position in GCG Adversarial Attacks on Large Language Models
  Hicham Eddoubi; Umar Faruk Abdullahi; Fadi Hassan
• [96%] Robustness of Vision Language Models Against Split-Image Harmful Input Attacks
  Md Rafi Ur Rashid; MD Sadik Hossain Shanto; Vishnu Asutosh Dasu; Shagufta Mehnaz
• [96%] Adversarial Robustness of Deep Learning-Based Thyroid Nodule Segmentation in Ultrasound
  Nicholas Dietrich; David McShannon
• [96%] Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation
  Xiaosen Wang; Zhijin Ge; Bohan Liu; Zheng Fang; Fengfan Zhou; Ruixuan Zhang; Shaokang Wang; Yuyang Luo
• [95%] DECEIVE-AFC: Adversarial Claim Attacks against Search-Enabled LLM-based Fact-Checking Systems
  Haoran Ou; Kangjie Chen; Gelei Deng; Hangcheng Liu; Jie Zhang; Tianwei Zhang; Kwok-Yan Lam
• [95%] Unifying Adversarial Robustness and Training Across Text Scoring Models
  Manveer Singh Tamber; Hosna Oyarhoseini; Jimmy Lin
• [95%] Efficient Adversarial Attacks on High-dimensional Offline Bandits
  Seyed Mohammad Hadi Hosseini; Amir Najafi; Mahdieh Soleymani Baghshah
• [95%] AD$^2$: Analysis and Detection of Adversarial Threats in Visual Perception for End-to-End Autonomous Driving Systems
  Ishan Sahu; Somnath Hazra; Somak Aditya; Soumyajit Dey
• [95%] Zero-Sacrifice Persistent-Robustness Adversarial Defense for Pre-Trained Encoders
  Zhuxin Lei; Ziyuan Yang; Yi Zhang
• [95%] A Low-Rank Defense Method for Adversarial Attack on Diffusion Models
  Jiaxuan Zhu; Siyu Huang
• [95%] TCRL: Temporal-Coupled Adversarial Training for Robust Constrained Reinforcement Learning in Worst-Case Scenarios
  Wentao Xu; Zhongming Yao; Weihao Li; Zhenghang Song; Yumeng Song; Tianyi Li; Yushuai Li
• [95%] Vulnerability Analysis of Safe Reinforcement Learning via Inverse Constrained Reinforcement Learning
  Jialiang Fan; Shixiong Jiang; Mengyu Liu; Fanxin Kong
• [94%] Optimal Transport-Guided Adversarial Attacks on Graph Neural Network-Based Bot Detection
  Kunal Mukherjee; Zulfikar Alom; Tran Gia Bao Ngo; Cuneyt Gurcan Akcora; Murat Kantarcioglu
• [94%] Bypassing Prompt Injection Detectors through Evasive Injections
  Md Jahedur Rahman; Ihsen Alouani
• [94%] Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models
  Xinwei Zhang; Li Bai; Tianwei Zhang; Youqian Zhang; Qingqing Ye; Yingnan Zhao; Ruochen Du; Haibo Hu
• [93%] RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance
  Miao Lin; Feng Yu; Rui Ning; Lusi Li; Jiawei Chen; Qian Lou; Mengxin Zheng; Chunsheng Xin; Hongyi Wu
• [93%] Invisible Clean-Label Backdoor Attacks for Generative Data Augmentation
  Ting Xiang; Jinhui Zhao; Changjian Chen; Zhuo Tang
• [93%] Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection
  Chanhui Lee; Donggyu Choi; Seunghyun Shin; Hae-Gon Jeon; Jeany Son
• [93%] Boundary Point Jailbreaking of Black-Box LLMs
  Xander Davies; Giorgi Giglemiani; Edmund Lau; Eric Winsor; Geoffrey Irving; Yarin Gal
• [93%] Intent Laundering: AI Safety Datasets Are Not What They Seem
  Shahriar Golchin; Marc Wetter
• [93%] On the Adversarial Robustness of Discrete Image Tokenizers
  Rishika Bhagwatkar; Irina Rish; Nicolas Flammarion; Francesco Croce
• [92%] Stage-wise Attention-Guided Region Sequencing for Adversarial Attacks on Large Vision-Language Models
  Jaehyun Kwak; Nam Cao; Boryeong Cho; Segyu Lee; Sumyeong Ahn; Se-Young Yun
• [92%] Cross-Modal Robustness Transfer (CMRT): Training Robust Speech Translation Models Using Adversarial Text
  Abderrahmane Issam; Yusuf Can Semerci; Jan Scholtes; Gerasimos Spanakis
• [92%] Dynamic Deception: When Pedestrians Team Up to Fool Autonomous Cars
  Masoud Jamshidiyan Tehrani; Marco Gabriel; Jinhan Kim; Paolo Tonella
• [91%] Time Is All It Takes: Spike-Retiming Attacks on Event-Driven Spiking Neural Networks
  Yi Yu; Qixin Zhang; Shuhan Ye; Xun Lin; Qianshan Wei; Kun Wang; Wenhan Yang; Dacheng Tao; Xudong Jiang
• [91%] Lite-BD: A Lightweight Black-box Backdoor Defense via Reviving Multi-Stage Image Transformations
  Abdullah Arafat Miah; Yu Bi
• [91%] Closing the Distribution Gap in Adversarial Training for LLMs
  Chengzhi Hu; Jonas Dornbusch; David Lüdke; Stephan Günnemann; Leo Schwinn
• [90%] Enhancing Adversarial Robustness with Signed Distance Fields for Harmonizing Geometric Invariance and Texture
  Zhe Li; Bernhard Kainz
• [89%] PurSAMERE: Reliable Adversarial Purification via Sharpness-Aware Minimization of Expected Reconstruction Error
  Vinh Hoang; Sebastian Krumscheid; Holger Rauhut; Raúl Tempone
• [89%] Exploring Sparsity and Smoothness of Arbitrary $\ell_p$ Norms in Adversarial Attacks
  Christof Duhme; Florian Eilers; Xiaoyi Jiang
• [89%] Robustness in sparse artificial neural networks trained with adaptive topology
  Bendegúz Sulyok; Gergely Palla; Filippo Radicchi; Santo Fortunato
• [88%] Key Principles of Graph Machine Learning: Representation, Robustness, and Generalization
  Yassine Abbahaddou
• [88%] Provable Defense Framework for LLM Jailbreaks via Noise-Augumented Alignment
  Zehua Cheng; Jianwei Yang; Wei Dai; Jiahao Sun
• [88%] Formal Synthesis of Certifiably Robust Neural Lyapunov-Barrier Certificates
  Chengxiao Wang; Haoze Wu; Gagandeep Singh
• [88%] NutVLM: A Self-Adaptive Defense Framework against Full-Dimension Attacks for Vision Language Models in Autonomous Driving
  Xiaoxu Peng; Dong Zhou; Jianwen Zhang; Guanghui Sun; Anh Tu Ngo; Anupam Chattopadhyay
• [88%] MANATEE: Inference-Time Lightweight Diffusion Based Safety Defense for LLMs
  Chun Yan Ryan Kan; Tommy Tran; Vedant Yadav; Ava Cai; Kevin Zhu; Ruizhe Li; Maheep Chaudhary
• [88%] Is the Trigger Essential? A Feature-Based Triggerless Backdoor Attack in Vertical Federated Learning
  Yige Liu; Yiwei Lou; Che Wang; Yongzhi Cao; Hanpin Wang
• [88%] Poisoned Acoustics
  Harrison Dahme
• [87%] Safety-Efficacy Trade Off: Robustness against Data-Poisoning
  Diego Granziol
• [87%] On the Fragility of AI-Based Channel Decoders under Small Channel Perturbations
  Haoyu Lei; Mohammad Jalali; Chin Wa Lau; Farzan Farnia
• [87%] Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming
  Philip Sosnin; Jodie Knapp; Fraser Kennedy; Josh Collyer; Calvin Tsay
• [87%] VALD: Multi-Stage Vision Attack Detection for Efficient LVLM Defense
  Nadav Kadvil; Malak Fares; Ayellet Tal
• [87%] Robust Spiking Neural Networks Against Adversarial Attacks
  Shuai Wang; Malu Zhang; Yulin Jiang; Dehao Zhang; Ammar Belatreche; Yu Liang; Yimeng Shan; Zijian Zhou; Yang Yang; Haizhou Li
• [86%] SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models
  Haobo Wang; Weiqi Luo; Xiaojun Jia; Xiaochun Cao
• [86%] The Role of Learning in Attacking ML-based Network Intrusion Detection
  Kyle Domico; Jean-Charles Noirot Ferrand; Patrick McDaniel
• [86%] Kill it with FIRE: On Leveraging Latent Space Directions for Runtime Backdoor Mitigation in Deep Neural Networks
  Enrico Ahlers; Daniel Passon; Yannic Noller; Lars Grunske
• [86%] Semantic-aware Adversarial Fine-tuning for CLIP
  Jiacheng Zhang; Jinhao Li; Hanxun Huang; Sarah M. Erfani; Benjamin I. P. Rubinstein; Feng Liu
• [86%] ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models
  Mitchell Piehl; Zhaohan Xi; Zuobin Xiong; Pan He; Muchao Ye
• [86%] PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention
  Hefei Mei; Zirui Wang; Chang Xu; Jianyuan Guo; Minjing Dong
• [85%] Syntax- and Compilation-Preserving Evasion of LLM Vulnerability Detectors
  Luze Sun; Alina Oprea; Eric Wong
• [85%] GradingAttack: Exposing Security Vulnerabilities in LLM Based Educational Grading Agents
  Xueyi Li; Zhuoneng Zhou; Zitao Liu; Yongdong Wu
• [85%] Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models
  Kaiyuan Cui; Yige Li; Yutao Wu; Xingjun Ma; Sarah Erfani; Christopher Leckie; Hanxun Huang
• [85%] SEW: Strengthening Robustness of Black-box DNN Watermarking via Specificity Enhancement
  Huming Qiu; Mi Zhang; Junjie Sun; Peiyi Chen; Xiaohan Zhang; Min Yang
• [85%] Laws of Learning Dynamics and the Core of Learners
  Inkee Jung; Siu Cheong Lau
• [85%] ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networks
  Yu Zhang; Sean Bin Yang; Arijit Khan; Cuneyt Gurcan Akcora
• [85%] Backdooring Bias in Large Language Models
  Anudeep Das; Prach Chantasantitam; Gurjot Singh; Lipeng He; Mariia Ponomarenko; Florian Kerschbaum
• [85%] Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting
  Xiaohan Zhao; Zhaoyi Li; Yaxin Luo; Jiacheng Cui; Zhiqiang Shen
• [85%] A Geometric Probe of the Accuracy-Robustness Trade-off: Sharp Boundaries in Symmetry-Breaking Dimensional Expansion
  Yu Bai; Zhe Wang; Jiarui Zhang; Dong-Xiao Zhang; Yinjun Gao; Jun-Jie Zhang
• [83%] LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings
  Abdullah Caglar Oksuz; Anisa Halimi; Erman Ayday
• [83%] CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks
  Bolin Shen; Zhan Cheng; Neil Zhenqiang Gong; Fan Yao; Yushun Dong
• [82%] PWAVEP: Purifying Imperceptible Adversarial Perturbations in 3D Point Clouds via Spectral Graph Wavelets
  Haoran Li; Renyang Liu; Hongjia Liu; Chen Wang; Long Yin; Jian Xu
• [82%] Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification
  Mohammadreza Maleki; Rushendra Sidibomma; Arman Adibi; Reza Samavi
• [82%] TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking
  Mengyao Du; Han Fang; Haokai Ma; Gang Yang; Quanjun Yin; Shouling Ji; Ee-Chien Chang
• [82%] DefenseSplat: Enhancing the Robustness of 3D Gaussian Splatting via Frequency-Aware Filtering
  Yiran Qiao; Yiren Lu; Yunlai Zhou; Rui Yang; Linlin Hou; Yu Yin; Jing Ma
• [82%] BiRQA: Bidirectional Robust Quality Assessment for Images
  Aleksandr Gushchin; Dmitriy S. Vatolin; Anastasia Antsiferova
• [81%] SAGE-5GC: Security-Aware Guidelines for Evaluating Anomaly Detection in the 5G Core Network
  Cristian Manca; Christian Scano; Giorgio Piras; Fabio Brau; Maura Pintor; Battista Biggio
• [81%] Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profit
  Qi Sun; Ahmed Abdo; Luis Burbano; Ziyang Li; Yaxing Yao; Alvaro Cardenas; Yinzhi Cao
• [81%] Robustness of Deep ReLU Networks to Misclassification of High-Dimensional Data
  Věra Kůrková
• [80%] Exposing Vulnerabilities in Explanation for Time Series Classifiers via Dual-Target Attacks
  Bohan Wang; Zewen Liu; Lu Lin; Hui Liu; Li Xiong; Ming Jin; Wei Jin
• [80%] Phantom Transfer: Data Poisoning can Survive Data-Level Defences
  Andrew Draganov; Tolga H. Dur; Anandmayi Bhongade; Mary Phuong
• [80%] Stop Testing Attacks, Start Diagnosing Defenses: The Four-Checkpoint Framework Reveals Where LLM Safety Breaks
  Hayfa Dhahbi; Kashyap Thimmaraju
• [80%] Consistency of Large Reasoning Models Under Multi-Turn Attacks
  Yubo Li; Ramayya Krishnan; Rema Padman
• [80%] Is Mamba Reliable for Medical Imaging?
  Banafsheh Saber Latibari; Najmeh Nazari; Daniel Brignac; Hossein Sayadi; Houman Homayoun; Abhijit Mahalanobis
• [79%] Exposing and Defending the Achilles' Heel of Video Mixture-of-Experts
  Songping Wang; Qinglong Liu; Yueming Lyu; Ning Li; Ziwen He; Caifeng Shan
• [79%] HPE: Hallucinated Positive Entanglement for Backdoor Attacks in Federated Self-Supervised Learning
  Jiayao Wang; Yang Song; Zhendong Zhao; Jiale Zhang; Qilin Wu; Wenliang Yuan; Junwu Zhu; Dongfang Zhao
• [79%] StealthRL: Reinforcement Learning Paraphrase Attacks for Multi-Detector Evasion of AI-Text Detectors
  Suraj Ranganath; Atharv Ramesh
• [78%] Monotonicity as an Architectural Bias for Robust Language Models
  Patrick Cooper; Alireza Nadali; Ashutosh Trivedi; Alvaro Velasquez
• [78%] Confundo: Learning to Generate Robust Poison for Practical RAG Systems
  Haoyang Hu; Zhejun Jiang; Yueming Lyu; Junyuan Zhang; Yi Liu; Ka-Ho Chow
• [78%] DCInject: Persistent Backdoor Attacks via Frequency Manipulation in Personal Federated Learning
  Nahom Birhan; Daniel Wesego; Dereje Shenkut; Frank Liu; Daniel Takabi
• [78%] RobPI: Robust Private Inference against Malicious Client
  Jiaqi Xue; Mengxin Zheng; Qian Lou
• [77%] Not-in-Perspective: Towards Shielding Google's Perspective API Against Adversarial Negation Attacks
  Michail S. Alexiou; J. Sukarno Mertoguno
• [76%] MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety
  Xiaoyu Wen; Zhida He; Han Qi; Ziyu Wan; Zhongtian Ma; Ying Wen; Tianhang Zheng; Xingcheng Xu; Chaochao Lu; Qiaosheng Zhang
• [76%] Semantic-level Backdoor Attack against Text-to-Image Diffusion Models
  Tianxin Chen; Wenbo Jiang; Hongqiao Chen; Zhirun Zheng; Cheng Huang
• [76%] Visual Memory Injection Attacks for Multi-Turn Conversations
  Christian Schlarmann; Matthias Hein
• [76%] When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models
  Zhixiang Guo; Siyuan Liang; Andras Balogh; Noah Lunberry; Rong-Cheng Tu; Mark Jelasity; Dacheng Tao
• [75%] Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbations
  Philip Jacobson; Ben Feinberg; Suhas Kumar; Sapan Agarwal; T. Patrick Xiao; Christopher Bennett
• [75%] Resilient Federated Chain: Transforming Blockchain Consensus into an Active Defense Layer for Federated Learning
  Mario García-Márquez; Nuria Rodríguez-Barroso; M. Victoria Luzón; Francisco Herrera
• [74%] Beware Untrusted Simulators -- Reward-Free Backdoor Attacks in Reinforcement Learning
  Ethan Rathbun; Wo Wei Lin; Alina Oprea; Christopher Amato
• [74%] TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering
  Saad Hossain; Tom Tseng; Punya Syon Pandey; Samanvay Vajpayee; Matthew Kowal; Nayeema Nonta; Samuel Simko; Stephen Casper; Zhijing Jin; Kellin Pelrine; Sirisha Rambhatla
• [74%] BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning
  Siyuan Liang; Yongcheng Jing; Yingjie Wang; Jiaxing Huang; Ee-chien Chang; Dacheng Tao
• [73%] Learning to Inject: Automated Prompt Injection via Reinforcement Learning
  Xin Chen; Jie Zhang; Florian Tramèr
• [73%] The Double-Edged Sword of Data-Driven Super-Resolution: Adversarial Super-Resolution Models
  Haley Duba-Sullivan; Steven R. Young; Emma J. Reid
• [73%] Can a Teenager Fool an AI? Evaluating Low-Cost Cosmetic Attacks on Age Estimation Systems
  Xingyu Shen; Tommy Duong; Xiaodong An; Zengqi Zhao; Zebang Hu; Haoyu Hu; Ziyou Wang; Finn Guo; Simiao Ren
• [72%] Revisiting Backdoor Threat in Federated Instruction Tuning from a Signal Aggregation Perspective
  Haodong Zhao; Jinming Hu; Gongshen Liu
• [71%] TFL: Targeted Bit-Flip Attack on Large Language Model
  Jingkai Guo; Chaitali Chakrabarti; Deliang Fan
• [71%] Triggering hallucinations in model-based MRI reconstruction via adversarial perturbations
  Suna Buğday; Yvan Saeys; Jonathan Peck
• [70%] MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems
  Jonathan Nöther; Adish Singla; Goran Radanovic
• [70%] When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models
  Jiacheng Hou; Yining Sun; Ruochong Jin; Haochen Han; Fangming Liu; Wai Kin Victor Chan; Alex Jinpeng Wang
• [70%] Generating adversarial inputs for a graph neural network model of AC power flow
  Robert Parker
• [69%] Tracking Finite-Time Lyapunov Exponents to Robustify Neural ODEs
  Tobias Wöhrer; Christian Kuehn
• [69%] Exploiting Layer-Specific Vulnerabilities to Backdoor Attack in Federated Learning
  Mohammad Hadi Foroughi; Seyed Hamed Rastegar; Mohammad Sabokrou; Ahmad Khonsari
• [69%] RecoverMark: Robust Watermarking for Localization and Recovery of Manipulated Faces
  Haonan An; Xiaohui Ye; Guang Hua; Yihang Tao; Hangcheng Cao; Xiangyu Yu; Yuguang Fang
• [69%] Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models
  Guangnian Wan; Qi Li; Gongfan Fang; Xinyin Ma; Xinchao Wang
• [69%] Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes
  Xavier Pleimling; Sifat Muhammad Abdullah; Gunjan Balde; Peng Gao; Mainack Mondal; Murtuza Jadliwala; Bimal Viswanath
• [68%] BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models
  Zihan Wang; Hongwei Li; Rui Zhang; Wenbo Jiang; Guowen Xu
• [68%] The Power of Decaying Steps: Enhancing Attack Stability and Transferability for Sign-based Optimizers
  Wei Tao; Yang Dai; Jincai Huang; Qing Tao
• [68%] Dirichlet Scale Mixture Priors for Bayesian Neural Networks
  August Arnstad; Leiv Rønneberg; Geir Storvik
• [66%] Text is All You Need for Vision-Language Model Jailbreaking
  Yihang Chen; Zhao Xu; Youyuan Jiang; Tianle Zheng; Cho-Jui Hsieh
• [66%] Inference-Time Backdoors via Chat Templates: From LLM Supply Chains to Agentic System Compromise
  Ariel Fogel; Omer Hofman; Eilon Cohen; Roman Vainshtein
• [66%] SIDeR: Semantic Identity Decoupling for Unrestricted Face Privacy
  Zhuosen Bao; Xia Du; Zheng Lin; Jizhe Zhou; Zihan Fang; Jiening Wu; Yuxin Zhang; Zhe Chen; Chi-man Pun; Wei Ni; Jun Luo
• [66%] Fool Me If You Can: On the Robustness of Binary Code Similarity Detection Models against Semantics-preserving Transformations
  Jiyong Uhm; Minseok Kim; Michalis Polychronakis; Hyungjoon Koo
• [65%] Principles of Lipschitz continuity in neural networks
  Róisín Luo
• [65%] Reliable Abstention under Adversarial Injections: Tight Lower Bounds and New Upper Bounds
  Ezra Edelman; Surbhi Goel
• [65%] AdapTools: Adaptive Tool-based Indirect Prompt Injection Attacks on Agentic LLMs
  Che Wang; Jiaming Zhang; Ziqi Zhang; Zijie Wang; Yinghui Wang; Jianbo Gao; Tao Wei; Zhong Chen; Wei Yang Bryan Lim
• [65%] Secure Semantic Communications via AI Defenses: Fundamentals, Solutions, and Future Directions
  Lan Zhang; Chengsi Liang; Zeming Zhuang; Yao Sun; Fang Fang; Xiaoyong Yuan; Dusit Niyato
• [64%] DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers
  Xiaozuo Shen; Yifei Cai; Rui Ning; Chunsheng Xin; Hongyi Wu
• [64%] When AI Persuades: Adversarial Explanation Attacks on Human Trust in AI-Assisted Decision Making
  Shutong Fan; Lan Zhang; Xiaoyong Yuan
• [64%] Plato's Form: Toward Backdoor Defense-as-a-Service for LLMs with Prototype Representations
  Chen Chen; Yuchen Sun; Jiaxin Gao; Yanwen Jia; Xueluan Gong; Qian Wang; Kwok-Yan Lam
• [64%] Multi-Turn Adaptive Prompting Attack on Large Vision-Language Models
  In Chong Choi; Jiacheng Zhang; Feng Liu; Yiliao Song
• [63%] Dynamic Adversarial Reinforcement Learning for Robust Multimodal Large Language Models
  Yicheng Bao; Xuhong Wang; Qiaosheng Zhang; Chaochao Lu; Xia Hu; Xin Tan
• [63%] ShallowJail: Steering Jailbreaks against Large Language Models
  Shang Liu; Hanyu Pei; Zeyan Liu
• [63%] Towards Poisoning Robustness Certification for Natural Language Generation
  Mihnea Ghitu; Matthew Wicker
• [62%] Backdoor Sentinel: Detecting and Detoxifying Backdoors in Diffusion Models via Temporal Noise Consistency
  Bingzheng Wang; Xiaoyan Gu; Hongbo Xu; Hongcheng Li; Zimo Yu; Jiang Zhou; Weiping Wang
• [62%] David vs. Goliath: Verifiable Agent-to-Agent Jailbreaking via Reinforcement Learning
  Samuel Nellessen; Tal Kachman
• [62%] Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generation
  Brian Hyeongseok Kim; Jacqueline L. Mitchell; Chao Wang
• [62%] Automating Agent Hijacking via Structural Template Injection
  Xinhao Deng; Jiaqing Wu; Miao Chen; Yue Xiao; Ke Xu; Qi Li
• [62%] Obscure but Effective: Classical Chinese Jailbreak Prompt Optimization via Bio-Inspired Search
  Xun Huang; Simeng Qin; Xiaoshuang Jia; Ranjie Duan; Huanqian Yan; Zhitao Zeng; Fei Yang; Yang Liu; Xiaojun Jia
• [61%] ADCA: Attention-Driven Multi-Party Collusion Attack in Federated Self-Supervised Learning
  Jiayao Wang; Yiping Zhang; Jiale Zhang; Wenliang Yuan; Qilin Wu; Junwu Zhu; Dongfang Zhao
• [61%] AEGIS: Adversarial Target-Guided Retention-Data-Free Robust Concept Erasure from Diffusion Models
  Fengpeng Li; Kemou Li; Qizhou Wang; Bo Han; Jiantao Zhou
• [61%] Red-teaming the Multimodal Reasoning: Jailbreaking Vision-Language Models via Cross-modal Entanglement Attacks
  Yu Yan; Sheng Sun; Shengjia Cheng; Teli Liu; Mingfeng Li; Min Liu
• [61%] CodeHacker: Automated Test Case Generation for Detecting Vulnerabilities in Competitive Programming Solutions
  Jingwei Shi; Xinxiang Yin; Jing Huang; Jinman Zhao; Shengyu Tao
• [60%] The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer
  Yupeng Chen; Junchi Yu; Aoxi Liu; Baoyuan Wu; Philip Torr; Adel Bibi
• [60%] GNSS SpAmming: a spoofing-based GNSS denial-of-service attack
  Sergio Angulo Cosín; Javier Junquera-Sánchez; Carlos Hernando-Ramiro; José-Antonio Gómez-Sánchez
• [59%] Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation
  Guang Yang; Xing Hu; Xiang Chen; Xin Xia
• [59%] Evasion of IoT Malware Detection via Dummy Code Injection
  Sahar Zargarzadeh; Mohammad Islam
• [57%] Learning Robust Reasoning through Guided Adversarial Self-Play
  Shuozhe Li; Vaishnav Tadiparthi; Kwonjoon Lee; Nakul Agarwal; Hossein Nourkhiz Mahjoub; Ehsan Moradi Pari; Lizhang Chen; Amy Zhang; Liu Leqi
• [57%] CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution
  Minbeom Kim; Mihir Parmar; Phillip Wallis; Lesly Miculicich; Kyomin Jung; Krishnamurthy Dj Dvijotham; Long T. Le; Tomas Pfister
• [57%] Can Adversarial Code Comments Fool AI Security Reviewers -- Large-Scale Empirical Study of Comment-Based Attacks and Defenses Against LLM Code Analysis
  Scott Thornton
• [57%] Arc2Morph: Identity-Preserving Facial Morphing with Arc2Face
  Nicolò Di Domenico; Annalisa Franco; Matteo Ferrara; Davide Maltoni
• [57%] Bigger Is Safer: Provable Robustness in In-Context Learning Scales with Capacity
  Di Zhang; Ningxu Zhang; Zimeng Liu
• [57%] Distribution-Free Sequential Prediction with Abstentions
  Jialin Yu; Moïse Blanchard
• [56%] EVE: Efficient Verification of Data Erasure through Customized Perturbation in Approximate Unlearning
  Weiqi Wang; Zhiyi Tian; Chenhan Zhang; Luoyu Chen; Shui Yu
• [56%] Private and interpretable clinical prediction with quantum-inspired tensor train models
  José Ramón Pareja Monturiol; Juliette Sinnott; Roger G. Melko; Mohammad Kohandel
• [56%] Temperature Scaling Attack Disrupting Model Confidence in Federated Learning
  Kichang Lee; Jaeho Jin; JaeYeon Park; Songkuk Kim; JeongGil Ko
• [56%] Robust Online Learning
  Sajad Ashkezari
• [56%] Neighborhood Blending: A Lightweight Inference-Time Defense Against Membership Inference Attacks
  Osama Zafar; Shaojie Zhan; Tianxi Ji; Erman Ayday
• [56%] When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift
  Max Fomin
• [55%] Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents
  Mingyang Liao; Yichen Wan; shuchen wu; Chenxi Miao; Xin Shen; Weikang Li; Yang Li; Deguo Xia; Jizhou Huang
• [55%] How Few-shot Demonstrations Affect Prompt-based Defenses Against LLM Jailbreak Attacks
  Yanshu Wang; Shuaishuai Yang; Jingjing He; Tong Yang
• [55%] Expanding the Role of Diffusion Models for Robust Classifier Training
  Pin-Han Huang; Shang-Tse Chen; Hsuan-Tien Lin
• [54%] Attack Selection Reduces Safety in Concentrated AI Control Settings against Trusted Monitoring
  Joachim Schaeffer; Arjun Khandelwal; Tyler Tracy
• [54%] Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention
  Sagie Dekel; Moshe Tennenholtz; Oren Kurland
• [54%] Reliable Explanations or Random Noise? A Reliability Metric for XAI
  Poushali Sengupta; Sabita Maharjan; Frank Eliassen; Shashi Raj Pandey; Yan Zhang
• [54%] AlignSentinel: Alignment-Aware Detection of Prompt Injection Attacks
  Yuqi Jia; Ruiqi Wang; Xilong Wang; Chong Xiang; Neil Gong
• [54%] The Vulnerability of LLM Rankers to Prompt Injection Attacks
  Yu Yin; Shuai Wang; Bevan Koopman; Guido Zuccon
• [53%] Detoxifying LLMs via Representation Erasure-Based Preference Optimization
  Nazanin Mohammadi Sepahvand; Eleni Triantafillou; Hugo Larochelle; Doina Precup; Daniel M. Roy; Gintare Karolina Dziugaite
• [52%] On the Assessment of Sensitivity of Autonomous Vehicle Perception
  Apostol Vassilev; Munawar Hasan; Edward Griffor; Honglan Jin; Pavel Piliptchak; Mahima Arora; Thoshitha Gamage
• [52%] E-Globe: Scalable $ε$-Global Verification of Neural Networks via Tight Upper Bounds and Pattern-Aware Branching
  Wenting Li; Saif R. Kazi; Russell Bent; Duo Zhou; Huan Zhang
• [52%] Robustness Verification of Polynomial Neural Networks
  Yulia Alexandr; Hao Duan; Guido Montúfar
• [52%] Universal Anti-forensics Attack against Image Forgery Detection via Multi-modal Guidance
  Haipeng Li; Rongxuan Peng; Anwei Luo; Shunquan Tan; Changsheng Chen; Anastasia Antsiferova
• [52%] Linear Model Extraction via Factual and Counterfactual Queries
  Daan Otto; Jannis Kurtz; Dick den Hertog; Ilker Birbil
• [52%] Robust Processing and Learning: Principles, Methods, and Wireless Applications
  Shixiong Wang; Wei Dai; Li-Chun Wang; Geoffrey Ye Li
• [52%] BarrierSteer: LLM Safety via Learning Barrier Steering
  Thanh Q. Tran; Arun Verma; Kiwan Wong; Bryan Kian Hsiang Low; Daniela Rus; Wei Xiao
• [52%] CITED: A Decision Boundary-Aware Signature for GNNs Towards Model Extraction Defense
  Bolin Shen; Md Shamim Seraj; Zhan Cheng; Shayok Chakraborty; Yushun Dong
• [51%] Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection
  Takashi Koide; Hiroki Nakano; Daiki Chiba
• [51%] Exposing the Systematic Vulnerability of Open-Weight Models to Prefill Attacks
  Lukas Struppek; Adam Gleave; Kellin Pelrine
• [51%] ExLipBaB: Exact Lipschitz Constant Computation for Piecewise Linear Neural Networks
  Tom A. Splittgerber
• [51%] CIBER: A Comprehensive Benchmark for Security Evaluation of Code Interpreter Agents
  Lei Ba; Qinbin Li; Songze Li
• [51%] Adversarial Hubness Detector: Detecting Hubness Poisoning in Retrieval-Augmented Generation Systems
  Idan Habler; Vineeth Sai Narajala; Stav Koren; Amy Chang; Tiffany Saade
• [50%] Bypassing AI Control Protocols via Agent-as-a-Proxy Attacks
  Jafar Isbarov; Murat Kantarcioglu
• [50%] LeakBoost: Perceptual-Loss-Based Membership Inference Attack
  Amit Kravchik Taub; Fred M. Grabovski; Guy Amit; Yisroel Mirsky
• [50%] Rethinking Latency Denial-of-Service: Attacking the LLM Serving Framework, Not the Model
  Tianyi Wang; Huawei Fan; Yuanchao Shu; Peng Cheng; Cong Wang
• [50%] Toward Reliable Tea Leaf Disease Diagnosis Using Deep Learning Model: Enhancing Robustness With Explainable AI and Adversarial Training
  Samanta Ghosh; Jannatul Adan Mahi; Shayan Abrar; Md Parvez Mia; Asaduzzaman Rayhan; Abdul Awal Yasir; Asaduzzaman Hridoy
• [50%] Echoes of ownership: Adversarial-guided dual injection for copyright protection in MLLMs
  Chengwei Xia; Fan Ma; Ruijie Quan; Yunqiu Xu; Kun Zhan; Yi Yang
• [49%] MPIB: A Benchmark for Medical Prompt Injection Attacks and Clinical Safety in LLMs
  Junhyeok Lee; Han Jang; Kyu Sung Choi
• [49%] SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks
  Mingqian Feng; Xiaodong Liu; Weiwei Yang; Jialin Song; Xuekai Zhu; Chenliang Xu; Jianfeng Gao
• [49%] The Weight of a Bit: EMFI Sensitivity Analysis of Embedded Deep Learning Models
  Jakub Breier; Štefan Kučerák; Xiaolu Hou
• [49%] Does Order Matter : Connecting The Law of Robustness to Robust Generalization
  Mihir More; Aritra Das; Jaee Ponde; Himadri Mandal; Vishnu Varadarajan; Debayan Gupta
• [48%] SPGCL: Simple yet Powerful Graph Contrastive Learning via SVD-Guided Structural Perturbation
  Hao Deng; Zhang Guo; Shuiping Gou; Bo Liu
• [48%] Explanations Leak: Membership Inference with Differential Privacy and Active Learning Defense
  Fatima Ezzeddine; Osama Zammar; Silvia Giordano; Omran Ayoub
• [48%] Comparative Insights on Adversarial Machine Learning from Industry and Academia: A User-Study Approach
  Vishruti Kakkad; Paul Chung; Hanan Hibshi; Maverick Woo
• [48%] Reinforcement Learning with Backtracking Feedback
  Bilgehan Sel; Vaishakh Keshava; Phillip Wallis; Lukas Rutishauser; Ming Jin; Dingcheng Li
• [48%] Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions
  J Rosser; Robert Kirk; Edward Grefenstette; Jakob Foerster; Laura Ruis
• [48%] When Backdoors Go Beyond Triggers: Semantic Drift in Diffusion Models Under Encoder Attacks
  Shenyang Chen; Liuwan Zhu
• [47%] Steering Externalities: Benign Activation Steering Unintentionally Increases Jailbreak Risk for Large Language Models
  Chen Xiong; Zhiyuan He; Pin-Yu Chen; Ching-Yun Ko; Tsung-Yi Ho
• [46%] Sufficient Conditions for Stability of Minimum-Norm Interpolating Deep ReLU Networks
  Ouns El Harzli; Yoonsoo Nam; Ilja Kuzborskij; Bernardo Cuenca Grau; Ard A. Louis
• [45%] WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents
  Xilong Wang; Yinuo Liu; Zhun Wang; Dawn Song; Neil Gong
• [45%] Grokking in Linear Models for Logistic Regression
  Nataraj Das; Atreya Vedantam; Chandrashekar Lakshminarayanan
• [45%] A unified framework for evaluating the robustness of machine-learning interpretability for prospect risking
  Prithwijit Chowdhury; Ahmad Mustafa; Mohit Prabhushankar; Ghassan AlRegib
• [45%] Sequential Membership Inference Attacks
  Thomas Michel; Debabrota Basu; Emilie Kaufmann
• [44%] A Unified Matrix-Spectral Framework for Stability and Interpretability in Deep Learning
  Ronald Katende
• [44%] EdgeMask-DG*: Learning Domain-Invariant Graph Structures via Adversarial Edge Masking
  Rishabh Bhattacharya; Naresh Manwani
• [44%] Dependable Artificial Intelligence with Reliability and Security (DAIReS): A Unified Syndrome Decoding Approach for Hallucination and Backdoor Trigger Detection
  Hema Karnam Surendrababu; Nithin Nagaraj
• [44%] Incentive-Aware AI Safety via Strategic Resource Allocation: A Stackelberg Security Games Perspective
  Cheol Woo Kim; Davin Choo; Tzeh Yuan Neoh; Milind Tambe
• [44%] Latent Regularization in Generative Test Input Generation
  Giorgi Merabishvili; Oliver Weißl; Andrea Stocco
• [44%] Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks
  David Schmotz; Luca Beurer-Kellner; Sahar Abdelnabi; Maksym Andriushchenko
• [43%] Verification of the Implicit World Model in a Generative Model via Adversarial Sequences
  András Balogh; Márk Jelasity
• [43%] Learning to Stay Safe: Adaptive Regularization Against Safety Degradation during Fine-Tuning
  Jyotin Goel; Souvik Maji; Pratik Mazumder
• [42%] Improving Robustness of Vision-Language-Action Models by Restoring Corrupted Visual Inputs
  Daniel Yezid Guarnizo Orjuela; Leonardo Scappatura; Veronica Di Gennaro; Riccardo Andrea Izzo; Gianluca Bardaro; Matteo Matteucci
• [42%] Extracting Recurring Vulnerabilities from Black-Box LLM-Generated Software
  Tomer Kordonsky; Amit LeVi; Maayan Yamin; Noam Benzimra; Avi Mendelson
• [42%] Are Reasoning LLMs Robust to Interventions on Their Chain-of-Thought?
  Alexander von Recum; Leander Girrbach; Zeynep Akata
• [42%] When Fusion Helps and When It Breaks: View-Aligned Robustness in Same-Source Financial Imaging
  Rui Ma
• [42%] Realistic Face Reconstruction from Facial Embeddings via Diffusion Models
  Dong Han; Yong Li; Joachim Denzler
• [41%] Safer by Diffusion, Broken by Context: Diffusion LLM's Safety Blessing and Its Failure Mode
  Zeyuan He; Yupeng Chen; Lang Lin; Yihan Wang; Shenxu Chang; Eric Sommerlade; Philip Torr; Junchi Yu; Adel Bibi; Jialin Yu
• [41%] MemPot: Defending Against Memory Extraction Attack with Optimized Honeypots
  Yuhao Wang; Shengfang Zhai; Guanghao Jin; Yinpeng Dong; Linyi Yang; Jiaheng Zhang
• [41%] MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
  Georgios Syros; Evan Rose; Brian Grinstead; Christoph Kerschbaumer; William Robertson; Cristina Nita-Rotaru; Alina Oprea
• [41%] BlackCATT: Black-box Collusion Aware Traitor Tracing in Federated Learning
  Elena Rodríguez-Lois; Fabio Brau; Maura Pintor; Battista Biggio; Fernando Pérez-González
• [41%] Assessing Per-Sample Membership Inference Vulnerability without Retraining
  Valentin Dorseuil; Jamal Atif; Olivier Cappé
• [41%] AuditBench: Evaluating Alignment Auditing Techniques on Models with Hidden Behaviors
  Abhay Sheshadri; Aidan Ewart; Kai Fronsdal; Isha Gupta; Samuel R. Bowman; Sara Price; Samuel Marks; Rowan Wang
• [40%] $\textbf{AGT$^{AO}$}$: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonality
  Pengyu Li; Lingling Zhang; Zhitao Gao; Yanrui Wu; Yuxuan Dong; Huan Liu; Bifan Wei; Jun Liu
• [40%] Stress-Testing Alignment Audits With Prompt-Level Strategic Deception
  Oliver Daniels; Perusha Moodley; Benjamin M. Marlin; David Lindner
• [40%] One RNG to Rule Them All: How Randomness Becomes an Attack Vector in Machine Learning
  Kotekar Annapoorna Prabhu; Andrew Gan; Zahra Ghodsi
• [40%] Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors
  Sandeep Gupta; Roberto Passerone
• [40%] ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction
  Che Wang; Fuyao Zhang; Jiaming Zhang; Ziqi Zhang; Yinghui Wang; Longtao Huang; Jianbo Gao; Zhong Chen; Wei Yang Bryan Lim

2026-01 (204 papers)

• [100%] How Worst-Case Are Adversarial Attacks? Linking Adversarial and Perturbation Robustness
  Giulio Rossolini
• [100%] Erosion Attack for Adversarial Training to Enhance Semantic Segmentation Robustness
  Yufei Song; Ziqi Zhou; Menghao Deng; Yifan Hu; Shengshan Hu; Minghui Li; Leo Yu Zhang
• [99%] Rectifying Adversarial Examples Using Their Vulnerabilities
  Fumiya Morimoto; Ryuto Morita; Satoshi Ono
• [99%] Adversarial Samples Are Not Created Equal
  Jennifer Crawford; Amol Khanna; Fred Lu; Amy R. Wagoner; Stella Biderman; Andre T. Nguyen; Edward Raff
• [99%] Crafting Adversarial Inputs for Large Vision-Language Models Using Black-Box Optimization
  Jiwei Guan; Haibo Jin; Haohan Wang
• [99%] Higher-Order Adversarial Patches for Real-Time Object Detectors
  Jens Bayer; Stefan Becker; David Münch; Michael Arens; Jürgen Beyerer
• [99%] HogVul: Black-box Adversarial Code Generation Framework Against LM-based Vulnerability Detectors
  Jingxiao Yang; Ping He; Tianyu Du; Sun Bing; Xuhong Zhang
• [99%] Deepfake detectors are DUMB: A benchmark to assess adversarial training robustness under transferability constraints
  Adrian Serrano; Erwan Umlil; Ronan Thomas
• [99%] SRAW-Attack: Space-Reweighted Adversarial Warping Attack for SAR Target Recognition
  Yiming Zhang; Weibo Qin; Yuntian Liu; Feng Wang
• [99%] Adversarial Defense in Vision-Language Models: An Overview
  Xiaowei Fu; Lei Zhang
• [99%] Adversarial Vulnerability Transcends Computational Paradigms: Feature Engineering Provides No Defense Against Neural Adversarial Transfer
  Achraf Hsain; Ahmed Abdelkader; Emmanuel Baldwin Mbaya; Hamoud Aljamaan
• [98%] On the Adversarial Robustness of 3D Large Vision-Language Models
  Chao Liu; Ngai-Man Cheung
• [98%] Adversarial Attacks on Medical Hyperspectral Imaging Exploiting Spectral-Spatial Dependencies and Multiscale Features
  Yunrui Gu; Zhenzhe Gao; Cong Kong; Jiawei Du; Zhaoxia Yin
• [98%] Adversarial Evasion Attacks on Computer Vision using SHAP Values
  Frank Mollard; Marcus Becker; Florian Roehrbein
• [98%] A Two-Stage Globally-Diverse Adversarial Attack for Vision-Language Pre-training Models
  Wutao Chen; Huaqin Zou; Chen Wan; Lifeng Huang
• [98%] One Word is Enough: Minimal Adversarial Perturbations for Neural Text Ranking
  Tanmay Karmakar; Sourav Saha; Debapriyo Majumdar; Surjyanee Halder
• [97%] Explainability-Guided Defense: Attribution-Aware Model Refinement Against Adversarial Data Attacks
  Longwei Wang; Mohammad Navid Nayyem; Abdullah Al Rakin; KC Santosh; Chaowei Zhang; Yang Zhou
• [97%] NeuroShield: A Neuro-Symbolic Framework for Adversarial Robustness
  Ali Shafiee Sarvestani; Jason Schmidt; Arman Roohi
• [97%] Rethinking Transferable Adversarial Attacks on Point Clouds from a Compact Subspace Perspective
  Keke Tang; Xianheng Liu; Weilong Peng; Xiaofei Wang; Daizong Liu; Peican Zhu; Can Lu; Zhihong Tian
• [96%] Proxy Robustness in Vision Language Models is Effortlessly Transferable
  Xiaowei Fu; Fuxiang Huang; Lei Zhang
• [96%] SoundBreak: A Systematic Study of Audio-Only Adversarial Attacks on Trimodal Models
  Aafiya Hussain; Gaurav Srivastava; Alvi Ishmam; Zaber Hakim; Chris Thomas
• [96%] Dynamic Mask-Based Backdoor Attack Against Vision AI Models: A Case Study on Mushroom Detection
  Zeineb Dridi; Jihen Bennaceur; Amine Ben Hassouna
• [96%] LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models
  Alvi Md Ishmam; Najibul Haque Sarker; Zaber Ibn Abdul Hakim; Chris Thomas
• [96%] An Effective Energy Mask-based Adversarial Evasion Attacks against Misclassification in Speaker Recognition Systems
  Chanwoo Park; Chanwoo Kim
• [95%] PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices
  Nandish Chattopadhyay; Abdul Basit; Amira Guesmi; Muhammad Abdullah Hanif; Bassem Ouni; Muhammad Shafique
• [95%] Sparse Threats, Focused Defense: Criticality-Aware Robust Reinforcement Learning for Safe Autonomous Driving
  Qi Wei; Junchao Fan; Zhao Yang; Jianhua Wang; Jingkai Mao; Xiaolin Chang
• [95%] Quadratic Upper Bound for Boosting Robustness
  Euijin You; Hyang-Won Lee
• [95%] On the Effects of Adversarial Perturbations on Distribution Robustness
  Yipei Wang; Zhaoying Pan; Xiaoqian Wang
• [94%] Towards Robust Universal Perturbation Attacks: A Float-Coded, Penalty-Driven Evolutionary Approach
  Shiqi Wang; Mahdi Khosravy; Neeraj Gupta; Olaf Witkowski
• [94%] On damage of interpolation to adversarial robustness in regression
  Jingfu Peng; Yuhong Yang
• [94%] ICL-EVADER: Zero-Query Black-Box Evasion Attacks on In-Context Learning and Their Defenses
  Ningyuan He; Ronghong Huang; Qianqian Tang; Hongyu Wang; Xianghang Mi; Shanqing Guo
• [94%] Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization
  Hui Lu; Yi Yu; Yiming Yang; Chenyu Yi; Xueyi Ke; Qixing Zhang; Bingquan Shen; Alex Kot; Xudong Jiang
• [93%] FMVP: Masked Flow Matching for Adversarial Video Purification
  Duoxun Tang; Xueyi Zhang; Chak Hin Wang; Xi Xiao; Dasen Dai; Xinhang Jiang; Wentao Shi; Rui Li; Qing Li
• [93%] DUAP: Dual-task Universal Adversarial Perturbations Against Voice Control Systems
  Suyang Sun; Weifei Jin; Yuxin Cao; Wei Song; Jie Hao
• [93%] OTI: A Model-free and Visually Interpretable Measure of Image Attackability
  Jiaming Liang; Haowei Liu; Chi-Man Pun
• [92%] NADD: Amplifying Noise for Effective Diffusion-based Adversarial Purification
  David D. Nguyen; The-Anh Ta; Yansong Gao; Alsharif Abuadbba
• [92%] MacPrompt: Maraconic-guided Jailbreak against Text-to-Image Models
  Xi Ye; Yiwen Liu; Lina Wang; Run Wang; Geying Yang; Yufei Hou; Jiayi Yu
• [92%] Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks
  Mohammad Shamim Ahsan; Peng Liu
• [91%] Jailbreaking LLMs Without Gradients or Priors: Effective and Transferable Attacks
  Zhakshylyk Nurlanov; Frank R. Schmidt; Florian Bernard
• [91%] Reward-Preserving Attacks For Robust Reinforcement Learning
  Lucas Schott; Elies Gherbi; Hatem Hajri; Sylvain Lamprier
• [91%] Robust Fake News Detection using Large Language Models under Adversarial Sentiment Attacks
  Sahar Tahmasebi; Eric Müller-Budack; Ralph Ewerth
• [91%] LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems
  João A. Leite; Olesya Razuvayevskaya; Kalina Bontcheva; Carolina Scarton
• [91%] Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP
  Sen Nie; Jie Zhang; Zhuo Wang; Shiguang Shan; Xilin Chen
• [91%] Stealthy Poisoning Attacks Bypass Defenses in Regression Settings
  Javier Carnerero-Cano; Luis Muñoz-González; Phillippa Spencer; Emil C. Lupu
• [90%] RefSR-Adv: Adversarial Attack on Reference-based Image Super-Resolution Models
  Jiazhu Dai; Huihui Jiang
• [90%] Adversarial Instance Generation and Robust Training for Neural Combinatorial Optimization with Multiple Objectives
  Wei Liu; Yaoxin Wu; Yingqian Zhang; Thomas Bäck; Yingjie Fan
• [90%] Diffusion-Driven Deceptive Patches: Adversarial Manipulation and Forensic Detection in Facial Identity Verification
  Shahrzad Sayyafzadeh; Hongmei Chi; Shonda Bernadin
• [90%] BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack
  Md Nabi Newaz Khan; Abdullah Arafat Miah; Yu Bi
• [90%] Feature-Space Smoothing: Certified Robustness of Deep Representations
  Song Xia; Meiwen Ding; Chenqi Kong; Wenhan Yang; Xudong Jiang
• [89%] MORE: Multi-Objective Adversarial Attacks on Speech Recognition
  Xiaoxue Gao; Zexin Li; Yiming Chen; Nancy F. Chen
• [87%] FAROS: Robust Federated Learning with Adaptive Scaling against Backdoor Attacks
  Chenyu Hu; Qiming Hu; Sinan Chen; Nianyu Li; Mingyue Zhang; Jialong Li
• [87%] Paraphrasing Adversarial Attack on LLM-as-a-Reviewer
  Masahiro Kaneko
• [87%] DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses
  Wei Song; Zhenchang Xing; Liming Zhu; Yulei Sui; Jingling Xue
• [87%] From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense
  Binyan Xu; Fan Yang; Xilin Dai; Di Tang; Kehuan Zhang
• [86%] From Adversarial Poetry to Adversarial Tales: An Interpretability Research Agenda
  Piercosma Bisconti; Marcello Galisai; Matteo Prandi; Federico Pierucci; Olga Sorokoletova; Francesco Giarrusso; Vincenzo Suriani; Marcantonio Bracale Syrnikov; Daniele Nardi
• [86%] Defense Against Indirect Prompt Injection via Tool Result Parsing
  Qiang Yu; Xinran Cheng; Chuanyi Liu
• [86%] DDSA: Dual-Domain Strategic Attack for Spatial-Temporal Efficiency in Adversarial Robustness Testing
  Jinwei Hu; Shiyuan Meng; Yi Dong; Xiaowei Huang
• [85%] Adversarial Question Answering Robustness: A Multi-Level Error Analysis and Mitigation Study
  Agniv Roy Choudhury; Vignesh Ponselvan Rajasingh
• [85%] Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations
  Jun Liu; Leo Yu Zhang; Fengpeng Li; Isao Echizen; Jiantao Zhou
• [84%] Physical Prompt Injection Attacks on Large Vision-Language Models
  Chen Ling; Kai Hu; Hangcheng Liu; Xingshuo Han; Tianwei Zhang; Changhai Ou
• [83%] SARA: Stress Test Reasoning in Audio Deepfake Detection
  Binh Nguyen; Charles Fleming; Thai Le
• [83%] SAFE: Secure and Accurate Federated Learning for Privacy-Preserving Brain-Computer Interfaces
  Tianwang Jia; Xiaoqing Chen; Dongrui Wu
• [82%] Memory Poisoning Attack and Defense on Memory Based LLM-Agents
  Balachandra Devarangadi Sunil; Isheeta Sinha; Piyush Maheshwari; Shantanu Todmal; Shreyan Mallik; Shuchi Mishra
• [82%] On the Extreme Variance of Certified Local Robustness Across Model Seeds
  Minh Le; Phuong Cao
• [82%] Differentiable Architecture Search for Adversarially Robust Quantum Computer Vision
  Mohamed Afane; Quanjiang Long; Haoting Shen; Ying Mao; Junaid Farooq; Ying Wang; Juntao Chen
• [82%] RerouteGuard: Understanding and Mitigating Adversarial Risks for LLM Routing
  Wenhui Zhang; Huiyu Xu; Zhibo Wang; Zhichao Li; Zeqing He; Xuelin Wei; Kui Ren
• [81%] State Backdoor: Towards Stealthy Real-world Poisoning Attack on Vision-Language-Action Model in State Space
  Ji Guo; Wenbo Jiang; Yansong Lin; Yijing Liu; Ruichen Zhang; Guomin Lu; Aiguo Chen; Xinshuo Han; Hongwei Li
• [81%] Universal Adversarial Purification with DDIM Metric Loss for Stable Diffusion
  Li Zheng; Liangbin Xie; Jiantao Zhou; He YiMin
• [81%] ARMOR: Agentic Reasoning for Methods Orchestration and Reparameterization for Robust Adversarial Attacks
  Gabriel Lee Jun Rong; Christos Korgialas; Dion Jia Xu Ho; Pai Chet Ng; Xiaoxiao Miao; Konstantinos N. Plataniotis
• [80%] GCG Attack On A Diffusion LLM
  Ruben Neyroud; Sam Corley
• [80%] Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs
  Anirudh Sekar; Mrinal Agarwal; Rachel Sharma; Akitsugu Tanaka; Jasmine Zhang; Arjun Damerla; Kevin Zhu
• [80%] On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression
  Xinwei Zhang; Hangcheng Liu; Li Bai; Hao Wang; Qingqing Ye; Tianwei Zhang; Haibo Hu
• [79%] Noise-Aware and Dynamically Adaptive Federated Defense Framework for SAR Image Target Recognition
  Yuchao Hou; Zixuan Zhang; Jie Wang; Wenke Huang; Lianhui Liang; Di Wu; Zhiquan Liu; Youliang Tian; Jianming Zhu; Jisheng Dang; Junhao Dong; Zhongliang Guo
• [79%] Topology-Independent Robustness of the Weighted Mean under Label Poisoning Attacks in Heterogeneous Decentralized Learning
  Jie Peng; Weiyu Li; Stefan Vlaski; Qing Ling
• [79%] Detecting Semantic Backdoors in a Mystery Shopping Scenario
  Arpad Berta; Gabor Danner; Istvan Hegedus; Mark Jelasity
• [79%] SilentDrift: Exploiting Action Chunking for Stealthy Backdoor Attacks on Vision-Language-Action Models
  Bingxin Xu; Yuzhang Shang; Binghui Wang; Emilio Ferrara
• [78%] Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models
  San Kim; Gary Geunbae Lee
• [78%] From Snow to Rain: Evaluating Robustness, Calibration, and Complexity of Model-Based Robust Training
  Josué Martínez-Martínez; Olivia Brown; Giselle Zeno; Pooya Khorrami; Rajmonda Caceres
• [77%] Adversarial Contrastive Learning for LLM Quantization Attacks
  Dinghong Song; Zhiwei Xu; Hai Wan; Xibin Zhao; Pengfei Su; Dong Li
• [77%] Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense
  Zejian Chen; Chaozhuo Li; Chao Li; Xi Zhang; Litian Zhang; Yiming He
• [77%] Skeletonization-Based Adversarial Perturbations on Large Vision Language Model's Mathematical Text Recognition
  Masatomo Yoshida; Haruto Namura; Nicola Adami; Masahiro Okuda
• [77%] StablePDENet: Enhancing Stability of Operator Learning for Solving Differential Equations
  Chutian Huang; Chang Ma; Kaibo Wang; Yang Xiang
• [76%] Robust Graph Fine-Tuning with Adversarial Graph Prompting
  Ziyan Zhang; Bo Jiang; Jin Tang
• [76%] Hierarchical Refinement of Universal Multimodal Attacks on Vision-Language Models
  Peng-Fei Zhang; Zi Huang
• [76%] Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal
  Haonan An; Guang Hua; Wei Du; Hangcheng Cao; Yihang Tao; Guowen Xu; Susanto Rahardja; Yuguang Fang
• [75%] Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay
  Hao Wang; Yanting Wang; Hao Li; Rui Li; Lei Sha
• [75%] Beauty and the Beast: Imperceptible Perturbations Against Diffusion-Based Face Swapping via Directional Attribute Editing
  Yilong Huang; Songze Li
• [74%] Jailbreaking Large Language Models through Iterative Tool-Disguised Attacks via Reinforcement Learning
  Zhaoqi Wang; Zijian Zhang; Daqing He; Pengtao Kou; Xin Li; Jiamou Liu; Jincheng An; Yong Liu
• [74%] How Secure is Secure Code Generation? Adversarial Prompts Put LLM Defenses to the Test
  Melissa Tessa; Iyiola E. Olatunji; Aicha War; Jacques Klein; Tegawendé F. Bissyandé
• [73%] Theory of Minimal Weight Perturbations in Deep Networks and its Applications for Low-Rank Activated Backdoor Attacks
  Bethan Evans; Jared Tanner
• [72%] CS-GBA: A Critical Sample-based Gradient-guided Backdoor Attack for Offline Reinforcement Learning
  Yuanjie Zhao; Junnan Qiu; Yue Ding; Jie Li
• [72%] Backdoor Attacks on Multi-modal Contrastive Learning
  Simi D Kuniyilh; Rita Machacy
• [72%] SecureSplit: Mitigating Backdoor Attacks in Split Learning
  Zhihao Dou; Dongfei Cui; Weida Wang; Anjun Gao; Yueyang Quan; Mengyao Ma; Viet Vo; Guangdong Bai; Zhuqing Liu; Minghong Fang
• [72%] Thought-Transfer: Indirect Targeted Poisoning Attacks on Chain-of-Thought Reasoning Models
  Harsh Chaudhari; Ethan Rathbun; Hanna Foerster; Jamie Hayes; Matthew Jagielski; Milad Nasr; Ilia Shumailov; Alina Oprea
• [71%] RECAP: A Resource-Efficient Method for Adversarial Prompting in Large Language Models
  Rishit Chugh
• [70%] When Backdoors Meet Partial Observability: Attacking Real-World Reinforcement Learning
  Tairan Huang; Qingqing Ye; Yulin Jin; Jiawei Lian; Yaxin Xiao; Yi Wang; Haibo Hu
• [69%] Defenses Against Prompt Attacks Learn Surface Heuristics
  Shawn Li; Chenxiao Yu; Zhiyu Ni; Hao Li; Charith Peris; Chaowei Xiao; Yue Zhao
• [69%] BadDet+: Robust Backdoor Attacks for Object Detection
  Kealan Dunnett; Reza Arablouei; Dimity Miller; Volkan Dedeoglu; Raja Jurdak
• [68%] Robust Privacy: Inference-Stage Privacy through Certified Robustness
  Jiankai Jin; Xiangzheng Zhang; Zhao Liu; Wenzhuo Xu; Dongdong Yang; Deyue Zhang; Quanchen Zou
• [68%] SETA: Statistical Fault Attribution for Compound AI Systems
  Sayak Chowdhury; Meenakshi D'Souza
• [67%] IO-RAE: Information-Obfuscation Reversible Adversarial Example for Audio Privacy Protection
  Jiajie Zhu; Xia Du; Xiaoyuan Liu; Jizhe Zhou; Qizhen Xu; Zheng Lin; Chi-Man Pun
• [67%] dataRLsec: Safety, Security, and Reliability With Robust Offline Reinforcement Learning for DPAs
  Shriram KS Pandian; Naresh Kshetri
• [67%] Leveraging Soft Prompts for Privacy Attacks in Federated Prompt Tuning
  Quan Minh Nguyen; Min-Seon Kim; Hoang M. Ngo; Trong Nghia Hoang; Hyuk-Yoon Kwon; My T. Thai
• [67%] SpooFL: Spoofing Federated Learning
  Isaac Baglin; Xiatian Zhu; Simon Hadfield
• [66%] TrojanPraise: Jailbreak LLMs via Benign Fine-Tuning
  Zhixin Xie; Xurui Song; Jun Luo
• [66%] SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks
  Xin Zhang; Zijin Yang; Kejiang Chen; Linfeng Ma; Weiming Zhang; Nenghai Yu
• [65%] VocalBridge: Latent Diffusion-Bridge Purification for Defeating Perturbation-Based Voiceprint Defenses
  Maryam Abbasihafshejani; AHM Nazmus Sakib; Murtuza Jadliwala
• [65%] HyperNet-Adaptation for Diffusion-Based Test Case Generation
  Oliver Weißl; Vincenzo Riccio; Severin Kacianka; Andrea Stocco
• [65%] Proactive Hardening of LLM Defenses with HASTE
  Henry Chen; Victor Aranda; Samarth Keshari; Ryan Heartfield; Nicole Nichols
• [64%] Sockpuppetting: Jailbreaking LLMs by Combining Prefilling with Optimization
  Asen Dotsinski; Panagiotis Eustratiadis
• [63%] Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models
  Badhan Chandra Das; Md Tasnim Jawad; Joaquin Molto; M. Hadi Amini; Yanzhao Wu
• [63%] Agents at Risk: How Users Unwittingly Undermine LLM Safety
  Fengchao Chen; Tingmin Wu; Van Nguyen; Surya. Nepal; Carsten Rudolph
• [63%] Res-MIA: A Training-Free Resolution-Based Membership Inference Attack on Federated Learning Models
  Mohammad Zare; Pirooz Shamsinejadbabaki
• [63%] Perturbation-Induced Linearization: Constructing Unlearnable Data with Solely Linear Classifiers
  Jinlin Liu; Wei Chen; Xiaojin Zhang
• [62%] JPU: Bridging Jailbreak Defense and Unlearning via On-Policy Path Rectification
  Xi Wang; Songlei Jian; Shasha Li; Xiaopeng Li; Zhaoye Li; Bin Ji; Baosheng Wang; Jie Yu
• [62%] The Role of Noisy Data in Improving CNN Robustness for Image Classification
  Oscar H. Ramírez-Agudelo; Nicoleta Gorea; Aliza Reif; Lorenzo Bonasera; Michael Karl
• [62%] MASH: Evading Black-Box AI-Generated Text Detectors via Style Humanization
  Yongtong Gu; Songze Li; Xia Hu
• [62%] PINA: Prompt Injection Attack against Navigation Agents
  Jiani Liu; Yixin He; Lanlan Fan; Qidi Zhong; Yushi Cheng; Meng Zhang; Yanjiao Chen; Wenyuan Xu
• [61%] Learning Resilient Elections with Adversarial GNNs
  Hao Xiang Li; Yash Shah; Lorenzo Giusti
• [61%] Baiting AI: Deceptive Adversary Against AI-Protected Industrial Infrastructures
  Aryan Pasikhani; Prosanta Gope; Yang Yang; Shagufta Mehnaz; Biplab Sikdar
• [61%] Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems
  Narek Maloyan; Dmitry Namiot
• [60%] Break Me If You Can: Self-Jailbreaking of Aligned LLMs via Lexical Insertion Prompting
  Devang Kulshreshtha; Hang Su; Haibo Jin; Chinmay Hegde; Haohan Wang
• [59%] Inference Attacks Against Graph Generative Diffusion Models
  Xiuling Wang; Xin Huang; Guibo Luo; Jianliang Xu
• [59%] A Novel Contrastive Loss for Zero-Day Network Intrusion Detection
  Jack Wilkie; Hanan Hindy; Craig Michie; Christos Tachtatzis; James Irvine; Robert Atkinson
• [59%] Jailbreaks on Vision Language Model via Multimodal Reasoning
  Aarush Noheria; Yuguang Yao
• [58%] Quantifying Quanvolutional Neural Networks Robustness for Speech in Healthcare Applications
  Ha Tran; Bipasha Kashyap; Pubudu N. Pathirana
• [58%] Reasoning Hijacking: The Fragility of Reasoning Alignment in Large Language Models
  Yuansen Liu; Yixuan Tang; Anthony Kum Hoe Tun
• [58%] Adversarial News and Lost Profits: Manipulating Headlines in LLM-Driven Algorithmic Trading
  Advije Rizvani; Giovanni Apruzzese; Pavel Laskov
• [58%] Counterfactual Training: Teaching Models Plausible and Actionable Explanations
  Patrick Altmeyer; Aleksander Buszydlik; Arie van Deursen; Cynthia C. S. Liem
• [58%] Hair-Trigger Alignment: Black-Box Evaluation Cannot Guarantee Post-Update Alignment
  Yavuz Bakman; Duygu Nur Yaldiz; Eleni Triantafillou; Peter Kairouz; Salman Avestimehr; Sai Praneeth Karimireddy
• [57%] Hidden State Poisoning Attacks against Mamba-based Language Models
  Alexandre Le Mercier; Chris Develder; Thomas Demeester
• [57%] Private Prediction via PAC Privacy
  Xiaochen Zhu; Mayuri Sridhar; Srinivas Devadas
• [57%] Safeguarding Facial Identity against Diffusion-based Face Swapping via Cascading Pathway Disruption
  Liqin Wang; Qianyue Hu; Wei Lu; Xiangyang Luo
• [57%] Gauge-invariant representation holonomy
  Vasileios Sevetlidis; George Pavlidis
• [56%] GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models
  Xiangdong Hu; Yangyang Jiang; Qin Hu; Xiaojun Jia
• [56%] $PC^2$: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models
  Wonwoo Choi; Minjae Seo; Minkyoo Song; Hwanjo Heo; Seungwon Shin; Myoungsung You
• [56%] Attack-Resistant Watermarking for AIGC Image Forensics via Diffusion-based Semantic Deflection
  Qingyu Liu; Yitao Zhang; Zhongjie Ba; Chao Shuai; Peng Cheng; Tianhang Zheng; Zhibo Wang
• [56%] Less Is More -- Until It Breaks: Security Pitfalls of Vision Token Compression in Large Vision-Language Models
  Xiaomei Zhang; Zhaoxi Zhang; Leo Yu Zhang; Yanjun Zhang; Guanhong Tao; Shirui Pan
• [56%] SoK: Challenges in Tabular Membership Inference Attacks
  Cristina Pêra; Tânia Carvalho; Maxime Cordy; Luís Antunes
• [56%] Counterfactual Explanations on Robust Perceptual Geodesics
  Eslam Zaher; Maciej Trzaskowski; Quan Nguyen; Fred Roosta
• [55%] ShrimpXNet: A Transfer Learning Framework for Shrimp Disease Classification with Augmented Regularization, Adversarial Training, and Explainable AI
  Israk Hasan Jone; D. M. Rafiun Bin Masud; Promit Sarker; Sayed Fuad Al Labib; Nazmul Islam; Farhad Billah
• [55%] Learning with Monotone Adversarial Corruptions
  Kasper Green Larsen; Chirag Pabbaraju; Abhishek Shetty
• [55%] HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense
  Siyuan Li; Xi Lin; Jun Wu; Zehao Liu; Haoyu Li; Tianjie Ju; Xiang Chen; Jianhua Li
• [55%] Safety Is Not Universal: The Selective Safety Trap in LLM Alignment
  Iago Alves Brito; Walcy Santos Rezende Rios; Julia Soares Dollis; Diogo Fernandes Costa Silva; Arlindo Rodrigues Galvão Filho
• [55%] FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environments
  Zhi Yang; Runguo Li; Qiqi Qiang; Jiashun Wang; Fangqi Lou; Mengping Li; Dongpo Cheng; Rui Xu; Heng Lian; Shuo Zhang; Xiaolong Liang; Xiaoming Huang; Zheng Wei; Zhaowei Liu; Xin Guo; Huacan Wang; Ronghao Chen; Liwen Zhang
• [55%] BREPS: Bounding-Box Robustness Evaluation of Promptable Segmentation
  Andrey Moskalenko; Danil Kuznetsov; Irina Dudko; Anastasiia Iasakova; Nikita Boldyrev; Denis Shepelev; Andrei Spiridonov; Andrey Kuznetsov; Vlad Shakhuro
• [54%] Inhibitory Attacks on Backdoor-based Fingerprinting for Large Language Models
  Hang Fu; Wanli Peng; Yinghan Zhou; Jiaxuan Wu; Juan Wen; Yiming Xue
• [54%] Supporting Secured Integration of Microarchitectural Defenses
  Kartik Ramkrishnan; Stephen McCamant; Antonia Zhai; Pen-Chung Yew
• [54%] SpatialJB: How Text Distribution Art Becomes the "Jailbreak Key" for LLM Guardrails
  Zhiyi Mou; Jingyuan Yang; Zeheng Qian; Wangze Ni; Tianfang Xiao; Ning Liu; Chen Zhang; Zhan Qin; Kui Ren
• [54%] Towards Compact and Robust DNNs via Compression-aware Sharpness Minimization
  Jialuo He; Huangxun Chen
• [54%] A Systematic Literature Review on LLM Defenses Against Prompt Injection and Jailbreaking: Expanding NIST Taxonomy
  Pedro H. Barcha Correia; Ryan W. Achjian; Diego E. G. Caetano de Oliveira; Ygor Acacio Maria; Victor Takashi Hayashi; Marcos Lopes; Charles Christian Miers; Marcos A. Simplicio
• [54%] Learn from A Rationalist: Distilling Intermediate Interpretable Rationales
  Jiayi Dai; Randy Goebel
• [53%] RADAR: Retrieval-Augmented Detector with Adversarial Refinement for Robust Fake News Detection
  Song-Duo Ma; Yi-Hung Liu; Hsin-Yu Lin; Pin-Yu Chen; Hong-Yan Huang; Shau-Yung Hsu; Yun-Nung Chen
• [53%] MongoDB Injection Query Classification Model using MongoDB Log files as Training Data
  Shaunak Perni; Minal Shirodkar; Ramdas Karmalli
• [52%] Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems
  Hongyan Chang; Ergute Bao; Xinjian Luo; Ting Yu
• [52%] Hidden Monotonicity: Explaining Deep Neural Networks via their DC Decomposition
  Jakob Paul Zimmermann; Georg Loho
• [52%] SecureCAI: Injection-Resilient LLM Assistants for Cybersecurity Operations
  Mohammed Himayath Ali; Mohammed Aqib Abdullah; Mohammed Mudassir Uddin; Shahnawaz Alam
• [52%] Beyond Denial-of-Service: The Puppeteer's Attack for Fine-Grained Control in Ranking-Based Federated Learning
  Zhihao Chen; Zirui Gong; Jianting Ning; Yanjun Zhang; Leo Yu Zhang
• [52%] Hardware-Triggered Backdoors
  Jonas Möller; Erik Imgrund; Thorsten Eisenhofer; Konrad Rieck
• [51%] DiMEx: Breaking the Cold Start Barrier in Data-Free Model Extraction via Latent Diffusion Priors
  Yash Thesia; Meera Suthar
• [51%] TRYLOCK: Defense-in-Depth Against LLM Jailbreaks via Layered Preference and Representation Engineering
  Scott Thornton
• [51%] MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP
  Ruiqi Li; Zhiqiang Wang; Yunhao Yao; Xiang-Yang Li
• [51%] SafeThinker: Reasoning about Risk to Deepen Safety Beyond Shallow Alignment
  Xianya Fang; Xianying Luo; Yadong Wang; Xiang Chen; Yu Tian; Zequn Sun; Rui Liu; Jun Fang; Naiqiang Tan; Yuanning Cui; Sheng-Jun Huang
• [50%] Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing
  Yinzhi Zhao; Ming Wang; Shi Feng; Xiaocui Yang; Daling Wang; Yifei Zhang
• [50%] Deep Leakage with Generative Flow Matching Denoiser
  Isaac Baglin; Xiatian Zhu; Simon Hadfield
• [50%] Persona Jailbreaking in Large Language Models
  Jivnesh Sandhan; Fei Cheng; Tushar Sandhan; Yugo Murawaki
• [50%] SHIELD: An Auto-Healing Agentic Defense Framework for LLM Resource Exhaustion Attacks
  Nirhoshan Sivaroopan; Kanchana Thilakarathna; Albert Zomaya; Manu; Yi Guo; Jo Plested; Tim Lynar; Jack Yang; Wangli Yang
• [50%] Lossless Copyright Protection via Intrinsic Model Fingerprinting
  Lingxiao Chen; Liqin Wang; Wei Lu; Xiangyang Luo
• [49%] Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Drift
  Daniel Vennemeyer; Punya Syon Pandey; Phan Anh Duong; Michael Umeokoli; Samuel Ratnam
• [49%] A Semantic Decoupling-Based Two-Stage Rainy-Day Attack for Revealing Weather Robustness Deficiencies in Vision-Language Models
  Chengyin Hu; Xiang Chen; Zhe Jia; Weiwen Shi; Fengyu Zhang; Jiujiang Guo; Yiwei Wei
• [48%] QUPID: A Partitioned Quantum Neural Network for Anomaly Detection in Smart Grid
  Hoang M. Ngo; Tre' R. Jeter; Jung Taek Seo; My T. Thai
• [48%] Local-to-Global Logical Explanations for Deep Vision Models
  Bhavan Vasu; Giuseppe Raffa; Prasad Tadepalli
• [48%] Self Voice Conversion as an Attack against Neural Audio Watermarking
  Yigitcan Özer; Wanying Ge; Zhe Zhang; Xin Wang; Junichi Yamagishi
• [48%] Smoothing the Black-Box: Signed-Distance Supervision for Black-Box Model Copying
  Rubén Jiménez; Oriol Pujol
• [47%] LoRA as Oracle
  Marco Arazzi; Antonino Nocera
• [47%] ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack
  Xingwei Lin; Wenhao Lin; Sicong Cao; Jiahao Yu; Renke Huang; Lei Xue; Chunming Wu
• [46%] SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models
  Renyang Liu; Kangjie Chen; Han Qiu; Jie Zhang; Kwok-Yan Lam; Tianwei Zhang; See-Kiong Ng
• [46%] When Reasoning Leaks Membership: Membership Inference Attack on Black-box Large Reasoning Models
  Ruihan Hu; Yu-Ming Shang; Wei Luo; Ye Tao; Xi Zhang
• [46%] The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples
  Hsiang Hsu; Pradeep Niroula; Zichang He; Ivan Brugere; Freddy Lecue; Chun-Fu Chen
• [45%] The Silicon Psyche: Anthropomorphic Vulnerabilities in Large Language Models
  Giuseppe Canale; Kashyap Thimmaraju
• [45%] xDNN(ASP): Explanation Generation System for Deep Neural Networks powered by Answer Set Programming
  Ly Ly Trieu; Tran Cao Son
• [45%] ResMAS: Resilience Optimization in LLM-based Multi-agent Systems
  Zhilun Zhou; Zihan Liu; Jiahe Liu; Qingyu Shao; Yihan Wang; Kun Shao; Depeng Jin; Fengli Xu
• [45%] CODE: A Contradiction-Based Deliberation Extension Framework for Overthinking Attacks on Retrieval-Augmented Generation
  Xiaolei Zhang; Xiaojun Jia; Liquan Chen; Songze Li
• [45%] INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems
  Yijin Zhou; Xiaoya Lu; Dongrui Liu; Junchi Yan; Jing Shao
• [45%] On the Insecurity of Keystroke-Based AI Authorship Detection: Timing-Forgery Attacks Against Motor-Signal Verification
  David Condrey
• [45%] Deep Neural Networks as Iterated Function Systems and a Generalization Bound
  Jonathan Vacher
• [44%] When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent
  Xinyi Wu; Geng Hong; Yueyue Chen; MingXuan Liu; Feier Jin; Xudong Pan; Jiarun Dai; Baojun Liu
• [44%] Adversarial Alignment: Ensuring Value Consistency in Large Language Models for Sensitive Domains
  Yuan Gao; Zhigang Liu; Xinyu Yao; Bo Chen; Xiaobing Zhao
• [43%] Jailbreak-Zero: A Path to Pareto Optimal Red Teaming for Large Language Models
  Kai Hu; Abhinav Aggarwal; Mehran Khodabandeh; David Zhang; Eric Hsin; Li Chen; Ankit Jain; Matt Fredrikson; Akash Bharadwaj
• [43%] United We Defend: Collaborative Membership Inference Defenses in Federated Learning
  Li Bai; Junxu Liu; Sen Zhang; Xinwei Zhang; Qingqing Ye; Haibo Hu
• [43%] Techniques of Modern Attacks
  Alexander Shim
• [42%] Overlooked Safety Vulnerability in LLMs: Malicious Intelligent Optimization Algorithm Request and its Jailbreak
  Haoran Gu; Handing Wang; Yi Mei; Mengjie Zhang; Yaochu Jin
• [42%] What Matters For Safety Alignment?
  Xing Li; Hui-Ling Zhen; Lihao Yin; Xianzhi Yu; Zhenhua Dong; Mingxuan Yuan
• [42%] Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks
  Hoagy Cunningham; Jerry Wei; Zihan Wang; Andrew Persic; Alwin Peng; Jordan Abderrachid; Raj Agarwal; Bobby Chen; Austin Cohen; Andy Dau; Alek Dimitriev; Rob Gilson; Logan Howard; Yijin Hua; Jared Kaplan; Jan Leike; Mu Lin; Christopher Liu; Vladimir Mikulik; Rohit Mittapalli; Clare O'Hara; Jin Pan; Nikhil Saxena; Alex Silverstein; Yue Song; Xunjie Yu; Giulio Zhou; Ethan Perez; Mrinank Sharma
• [42%] On the Evidentiary Limits of Membership Inference for Copyright Auditing
  Murat Bilgehan Ertan; Emirhan Böge; Min Chen; Kaleel Mahmood; Marten van Dijk
• [42%] Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems
  Mengyu Yao; Ziqi Zhang; Ning Luo; Shaofei Li; Yifeng Cai; Xiangqun Chen; Yao Guo; Ding Li
• [42%] LipNeXt: Scaling up Lipschitz-based Certified Robustness to Billion-parameter Models
  Kai Hu; Haoqi Hu; Matt Fredrikson
• [41%] CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns
  Zhenhong Zhou; Shilinlu Yan; Chuanpu Liu; Qiankun Li; Kun Wang; Zhigang Zeng
• [41%] Bias Detection and Rotation-Robustness Mitigation in Vision-Language Models and Generative Image Models
  Tarannum Mithila
• [41%] Serverless AI Security: Attack Surface Analysis and Runtime Protection Mechanisms for FaaS-Based Machine Learning
  Chetan Pathade; Vinod Dhimam; Sheheryar Ahmad; Ilsa Lareb
• [41%] Automatic Adjustment of HPA Parameters and Attack Prevention in Kubernetes Using Random Forests
  Hanlin Zhou; Huah Yong Chan; Jingfei Ni; Mengchun Wu; Qing Deng
• [41%] Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming
  Alexandra Chouldechova; A. Feder Cooper; Solon Barocas; Abhinav Palia; Dan Vann; Hanna Wallach
• [40%] COMPASS: A Framework for Evaluating Organization-Specific Policy Alignment in LLMs
  Dasol Choi; DongGeon Lee; Brigitta Jesica Kartono; Helena Berndt; Taeyoun Kwon; Joonwon Jang; Haon Park; Hwanjo Yu; Minsuk Kahng
• [40%] ForgetMark: Stealthy Fingerprint Embedding via Targeted Unlearning in Language Models
  Zhenhua Xu; Haobo Zhang; Zhebo Wang; Qichen Liu; Haitao Xu; Wenpeng Xing; Meng Han