Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 47 papers
Filter2

Attack type

Prompt injection9Poisoning and backdoors4Detection evasion21

Attack technique

Gradient and representation optimization22Cross-modal payloads16Defense-targeted4Dormant triggers4

Defense type

Model hardening3Detection and filtering7Watermarking and provenance3

Impact

Harmful content46Unauthorized actions9Data and privacy leaks9Output manipulation47Availability and reliability5

System type

Models and APIs39AI Agent6Embodied systems and robotics4

Attacker access

Black-box6White-box7

Attack surface / entry point

User input49Web pages and interfaces15Documents and messages27Tool responses16Tool and skill descriptions5Code repositories and dependencies6Retrieval corpus25Memory writes6Inter-agent messages9Images, audio and video47Training data32Weights and gradients15Distribution channels16Inference services and hardware7

Layer

Prompt layer25Model layer11Application layer4Training and data layer6

System component

Guardrails and judges4Vision28Audio6Video4Image generation6Multimodal42
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 305papers have no tags yet and are not included in filtered results.
Impact：Output manipulationAttack surface / entry point：Images, audio and videoClear all

Another 305papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2610.09027

    P-VMI：对抗图像经 KV cache 持续影响多轮对话

    提出持久视觉记忆注入，使对抗图像经缓存在触发时操控输出

    arXiv
    2610.09027
    Published
    Layer
    Infrastructure layer
    Setting
    Models and APIs
    Evaluated models
    Qwen3-8B, Qwen3-VL-8B-Instruct, Gemma-4-12B

    Abstract论文提出 P-VMI，证实对抗输入被掩蔽后仍可经 KV 缓存持久控制模型，强调了保留状态的安全风险。

    Paper analysisRead analysis
  4. Evaluation and benchmarksarXiv 2610.07939

    CCDF 数据集：Grok Imagine、Veo 3.1、Sora 2 伪造监控录像，十个深伪检测器基本认不出

    提出监控深伪基准 CCDF，在统一编码后评测检测器对伪造犯罪事故录像的识别

    arXiv
    2610.07939
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    C2P-CLIP, ForgeLens, D3-Im and others10

    Abstract提出消除格式捷径的监控深度伪造基准 CCDF，揭示现有检测器难以识别商用生成视频。

    Paper analysisRead analysis
  5. AttacksarXiv 2610.07323

    ATLAS：用自适应信任域与主动学习搜索潜在对抗样本集

    提出 ATLAS 用水平集估计恢复黑盒分类器的对抗输入集合

    arXiv
    2610.07323
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    LeNet5, ResNet50 (CIFAR-10 standard), ResNet50 (ImageNet standard) and others5
    AbstractATLAS 用主动水平集估计构造黑盒对抗集，作者称其集合比单点攻击更具代表性。

    ATLAS 是一个查询式 black-box 框架，用来构造诱发失败的对抗输入集合，供鲁棒性审计使用。

    Paper analysisRead analysis
  6. Evaluation and benchmarksarXiv 2610.06339

    BabelFake：面向多语言音视频 DeepFake 检测的基准数据集

    构建多语言音视频 DeepFake 基准 BabelFake 并评测检测器

    arXiv
    2610.06339
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    SpeechForensics, AVH-Align, (B)RAVEn
    AbstractBabelFake 为五语同意采集基准。

    BabelFake 是经同意与 IRB 批准采集的多语音视频 DeepFake 检测基准，用来把视觉操纵和语音合成拆开比较。

    Paper analysisRead analysis
  7. DefensesarXiv 2610.05870

    MBZUAI 提出可校准的真实图像认证方法

    提出校准重合成方法，以生成器反演保真度认证真实图像并防御对抗扰动

    arXiv
    2610.05870
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    White-box

    Abstract论文提出基于反演保真度与阈值校准的健全认证框架，在对抗扰动下维持错误率界限，并指出真实内容可认证性随生成器演进而萎缩。

    Paper analysisRead analysis
  11. AttacksarXiv 2610.03166

    LiBRA：通过双向隐空间优化实现检测感知的图像水印去除

    提出 LiBRA，在潜空间双向优化以规避图像水印双侧检测

    arXiv
    2610.03166
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    White-box
    Evaluated models
    Stable Signature, YU1, HiDDeN and others4

    AbstractLiBRA 用双向潜空间优化规避双侧水印检测，并提高相对反转基线的保真。

    Paper analysisRead analysis
  13. Evaluation and benchmarksarXiv 2610.06898

    DIBench：面向移动 GUI 智能体多候选选择决策完整性的安全基准

    用 DIBench 评测移动 GUI 智能体被 UI 注入后的决策完整性

    arXiv
    2610.06898
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Qwen2.5-VL(32B), Qwen3-VL(32B), GUI-Owl(32B) and others7

    Abstract论文提出移动智能体决策完整性基准 DIBench，发现欺诈 UI 注入诱导目标选择并推高完成率，通用防御收益不稳定。

    Paper analysisRead analysis
  14. DefensesarXiv 2609.34744

    现代图像后置水印信道的优化与安全：SNW 方案

    提出带密钥的 SNW，抵御事后图像水印的身份伪造

    arXiv
    2609.34744
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Evaluated models
    SNW
    AbstractSNW 用密钥与满秩各向同性投影提高事后水印的 Shannon 容量，并对 PCA 完全安全。

    Gesny 与 Giboulot 针对生成内容追溯所依赖的多比特事后图像水印，批评端到端 DNN 方案既无容量理论、又无密钥。

    Paper analysisRead analysis
  17. DefensesarXiv 2609.23596

    StyleAT：用对抗训练防御人脸识别的语义攻击

    提出 BoundStyle 与 StyleAT，对抗训练防御人脸识别语义攻击

    arXiv
    2609.23596
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Attacker
    White-box, Black-box
    Evaluated models
    MobileFaceNet (MobileFace), ResNet (ResNet-152, IR-SE), RepVGG and others7
    AbstractBoundStyle 用 StyleGAN3 有界潜编辑快速攻击 FR。

    StyleAT 用可调的 StyleGAN3 潜空间攻击 BoundStyle 对人脸识别做对抗训练，以抵抗一般语义编辑，并在评测中面对训练时未见的 DiffPrivate。

    Paper analysisRead analysis
Load more