Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 10 papers Another 265 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 STCA，对驾驶视频 VLM 构造可迁移的时空对抗扰动
Published Oct 6
Evaluated models Video-LLaVA-7B , Qwen2.5-VL-7B , Dolphins 用词级归因指导同义词替换，翻转提示注入检测并验证越狱
Published Sep 22
Evaluated models Prompt Guard 2 (86M) , Llama 3.1 8B 提出 SinoGlyphBench，用配对字形混淆诊断中文审核稳定性
Published Sep 5
Evaluated models GPT-5.4 mini , GPT-5.5 , DeepSeek V4 Flash and others12 Abstract SinoGlyphBench 显示中文字形混淆会同时增加有害漏报和误报，全文扰动最重。SinoGlyphBench 是一个配对诊断基准，用来看内容审核在可还原的中文字形混淆下是否还保持原决定。
提出 HPAA 攻击，用排版视觉线索绕过内容审核系统
Published Jun 9
Evaluated models Llama-Guard-3-8B , Perspective API , ShieldGemma-2B and others13 Abstract 揭示了排版视觉线索与分词差异带来的审核盲区，HPAA 以极低查询实现近乎完全规避。这篇论文研究了人类视觉感知与大模型分词处理机制之间的差异所导致的内容审核漏洞 。
提出 CITA 三阶段框架，生成可绕过毒性检测器的中文隐式毒性文本
Published May 21
Evaluated models Tencent , Baidu , Gemini 3.1 Pro and others11 提出 FRA-Attack，用频域对齐与梯度正则做可迁移定向视觉攻击
Published May 20
Evaluated models GPT-5.2 , GPT-5.4 , Claude-Opus-4.6 and others15 Abstract FRA-Attack 以频域对齐和梯度低通做可迁移定向攻击，闭源面板上作者称整体更强，Gemma 除外。FRA-Attack 是面向闭源 MLLM 的迁移式定向图像攻击。作者要解决的是：空间域局部对齐重复全局低频，代理梯度的高频成分又把更新拉向代理自身。
提出 Vaporizer，用词法变换、翻译和释义破解 LLM 输出水印
Published May 8 提出 GDA，将图像对抗扰动对齐文本接地证据并迁移攻击视觉语言模型
Published Feb 10
Evaluated models LLaVA , Qwen2.5-VL , InternVL3 and others10 Abstract GDA 把扰动对准文本接地证据，作者称这提高了异构 LVLM 上的零查询黑盒迁移性。GDA 是面向异构 LVLM 的零查询黑盒编码器迁移攻击。 。
Attacks arXiv 2509.09112 · Sep 11, 2025 提出字符级扰动与遗传算法去除 LLM 水印
Published Sep 11, 2025
Evaluated models OPT-1.3B , LLaMA-3-8B Abstract 字符级扰动靠更大攻击范围移除水印。这篇工作评估推理时 LLM 水印在黑盒、有限查询下的移除难度，并比较字符级、token 级和句子级编辑。
Attacks arXiv 2505.23266 · May 29, 2025 提出 AdvOF，生成对抗物体误导视觉语言导航智能体的场景感知
Published May 29, 2025
Evaluated models Lseg , Clip , ViT-L/16 and others5 Abstract AdvOF 以多视角融合生成对抗物体。AdvOF 是针对 VLM 驱动 VLN 服务导航的对抗物体攻击。
You have reached the end