---
title: "Who cites Visual Adversarial Examples — 95 citing papers"
description: "95 papers of the Elamur Research library cite «Visual Adversarial Examples Jailbreak Aligned Large Language Models», found in their…"
canonical: "https://research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/cited-by/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/cited-by/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [Visual Adversarial Examples Jailbreak Aligned…](https://md.research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/) / cited by

# Who cites «Visual Adversarial Examples Jailbreak Aligned Large Language Models»

95 papers of our library cite it (of the 149,439 whose bibliographies we read) · 37 with a page here, the most cited first · [← back to «Visual Adversarial Examples Jailbreak Aligned Large Language Models»](https://md.research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/)

1. **[A Survey of Large Language Models](https://md.research.elamur.ai/free/en/papers/zhao-2023-survey-large-language-models/) [Frontiers of Computer Science](https://md.research.elamur.ai/free/en/venues/frontiers-of-computer-science/)**Wayne Xin Zhao, Kun Zhou, Junyi Li, et al.*2023 · 2,875 citations*
2. [**Jailbreaking Black Box Large Language Models in Twenty Queries arXiv:2310.08419**Patrick Chao, Alexander Robey, Edgar Dobriban, et al.*2023 · 553 citations*](https://md.research.elamur.ai/free/en/papers/chao-2023-jailbreaking-black-box-large-language/)
3. **[Security and Privacy Challenges of Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/das-2024-security-privacy-challenges-large-language/) [ACM Computing Surveys](https://md.research.elamur.ai/free/en/venues/acm-computing-surveys/)**Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu*2024 · 424 citations*
4. [**Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To! arXiv:2310.03693**Xiangyu Qi, Yi Zeng, Tinghao Xie, et al.*2023 · 355 citations*](https://md.research.elamur.ai/free/en/papers/qi-2023-fine-tuning-aligned-language-models/)
5. [**HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal arXiv:2402.04249**Mantas Mazeika, Long Phan, Xuwang Yin, et al.*2024 · 330 citations*](https://md.research.elamur.ai/free/en/papers/mazeika-2024-harmbench-standardized-evaluation-framework-automated/)
6. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 237 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/)
7. [**Baseline Defenses for Adversarial Attacks Against Aligned Language Models arXiv:2309.00614**Neel Jain, Avi Schwarzschild, Yuxin Wen, et al.*2023 · 236 citations*](https://md.research.elamur.ai/free/en/papers/jain-2023-baseline-defenses-adversarial-attacks-against/)
8. **[Combating Misinformation in the Age of LLMs: Opportunities and Challenges](https://md.research.elamur.ai/free/en/papers/chen-2023-combating-misinformation-age-llms-opportunities/) [AI Magazine](https://md.research.elamur.ai/free/en/venues/ai-magazine/)**Canyu Chen, Kai Shu*2023 · 214 citations*
9. [**Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations arXiv:2310.06387**Zeming Wei, Yifei Wang, Ang Li, et al.*2023 · 130 citations*](https://md.research.elamur.ai/free/en/papers/wei-2023-jailbreak-guard-aligned-language-models/)
10. [**Large Language Model Alignment: A Survey arXiv:2309.15025**Tianhao Shen, Renren Jin, Yufei Huang, et al.*2023 · 124 citations*](https://md.research.elamur.ai/free/en/papers/shen-2023-large-language-model-alignment-survey/)
11. [**Safety Alignment Should Be Made More Than Just a Few Tokens Deep arXiv:2406.05946**Xiangyu Qi, Ashwinee Panda, Kaifeng Lyu, et al.*2024 · 97 citations*](https://md.research.elamur.ai/free/en/papers/qi-2024-safety-alignment-should-made-more/)
12. [**AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models arXiv:2310.15140**Sicheng Zhu, Ruiyi Zhang, Bang An, et al.*2023 · 90 citations*](https://md.research.elamur.ai/free/en/papers/zhu-2023-autodan-interpretable-gradient-based-adversarial/)
13. [**Foundational Challenges in Assuring Alignment and Safety of Large Language Models arXiv:2404.09932**Usman Anwar, Abulhair Saparov, Javier Rando, et al.*2024 · 87 citations*](https://md.research.elamur.ai/free/en/papers/anwar-2024-foundational-challenges-assuring-alignment-safety/)
14. [**Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks arXiv:2310.10844**Erfan Shayegani, Md Abdullah Al Mamun, Yu Fu, et al.*2023 · 83 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-survey-vulnerabilities-large-language-models/)
15. [**Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models arXiv:2307.14539**Erfan Shayegani, Yue Dong, Nael Abu-Ghazaleh*2023 · 81 citations*](https://md.research.elamur.ai/free/en/papers/shayegani-2023-jailbreak-pieces-compositional-adversarial-attacks/)
16. [**PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models arXiv:2402.07867**Wei Zou, Runpeng Geng, Binghui Wang, et al.*2024 · 80 citations*](https://md.research.elamur.ai/free/en/papers/zou-2024-poisonedrag-knowledge-corruption-attacks-retrieval/)
17. [**Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications arXiv:2402.05162**Boyi Wei, Kaixuan Huang, Yangsibo Huang, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/wei-2024-assessing-brittleness-safety-alignment-pruning/)
18. [**JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks arXiv:2404.03027**Weidi Luo, Siyuan Ma, Xiaogeng Liu, et al.*2024 · 66 citations*](https://md.research.elamur.ai/free/en/papers/luo-2024-jailbreakv-benchmark-assessing-robustness-multimodal/)
19. [**Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models arXiv:2402.02207**Yongshuo Zong, Ondrej Bohdal, Tingyang Yu, et al.*2024 · 60 citations*](https://md.research.elamur.ai/free/en/papers/zong-2024-safety-fine-tuning-almost-no/)
20. [**Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming arXiv:2501.18837**Mrinank Sharma, Meg Tong, Jesse Mu, et al.*2025 · 29 citations*](https://md.research.elamur.ai/free/en/papers/sharma-2025-constitutional-classifiers-defending-against-universal/)
21. **[Jailbreak Large Vision-Language Models Through Multi-Modal Linkage](https://md.research.elamur.ai/free/en/papers/wang-2025-jailbreak-large-vision-language-models/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yu Wang, Xiaofei Zhou, Yichen Wang, et al.*2025 · 20 citations*
22. **[HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States](https://md.research.elamur.ai/free/en/papers/jiang-2025-hiddendetect-detecting-jailbreak-attacks-against/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yilei Jiang, Xinyan Gao, Tianshuo Peng, et al.*2025 · 15 citations*
23. **[Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring](https://md.research.elamur.ai/free/en/papers/hua-2026-rethinking-jailbreak-detection-large-vision/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Peichun Hua, Hao Li, Shanghao Shi, et al.*2026 · 10 citations*
24. **[VisCRA: A Visual Chain Reasoning Attack for Jailbreaking Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/sima-2025-viscra-visual-chain-reasoning-attack/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Bingrui Sima, Linhua Cong, Wenxuan Wang, et al.*2025 · 9 citations*
25. **[GAMBIT: A Gamified Jailbreak Framework for Multimodal Large Language Models](https://md.research.elamur.ai/free/en/papers/hu-2026-gambit-gamified-jailbreak-framework-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xiangdong Hu, Yangyang Jiang, Qin Hu, et al.*2026 · 6 citations*
26. **[Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection](https://md.research.elamur.ai/free/en/papers/ziqi-2025-visual-contextual-attack-jailbreaking-mllms/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Miao Ziqi, Yi Ding, Lijun Li, et al.*2025 · 6 citations*
27. **[SafeMT: Multi-turn Safety for Multimodal Language Models](https://md.research.elamur.ai/free/en/papers/zhu-2026-safemt-multi-turn-safety-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Han Zhu, Juntao Dai, Jiaming Ji, et al.*2026 · 3 citations*
28. **[Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations](https://md.research.elamur.ai/free/en/papers/xue-2026-enhancing-safety-medical-vision-language/) [Conference of the European Chapter of the Association for Computational Linguistics (EACL)](https://md.research.elamur.ai/free/en/venues/eacl/)**Zhiyu Xue, Reza Abbasi-Asl, Ramtin Pedarsani*2026 · 1 citation*
29. **[“Penny Wise, Pixel Foolish”: Bypassing Price Constraints in Multimodal Agents via Visual Adversarial Perturbations](https://md.research.elamur.ai/free/en/papers/qian-2026-penny-wise-pixel-foolish-bypassing/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jiachen Qian, Zhaolu Kang*2026 · 1 citation*
30. **[CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks](https://md.research.elamur.ai/free/en/papers/zhang-2026-crossguard-safeguarding-mllms-against-joint/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Xu Zhang, Hao Li, Zhichao Lu*2026*
31. **[DMN: A Compositional Framework for Jailbreaking Multimodal LLMs with Multi-Image Inputs](https://md.research.elamur.ai/free/en/papers/xu-2026-dmn-compositional-framework-jailbreaking-multimodal/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wenzhuo Xu, Zhipeng Wei, Zonghao Ying, et al.*2026*
32. **[ECHA: Jailbreaking LVLMs via the Mismatch between Implicit Semantic Reconstruction and Explicit Safety Alignment](https://md.research.elamur.ai/free/en/papers/xu-2026-echa-jailbreaking-lvlms-mismatch-between/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Chenxing Xu, Junyong Jiang, Zehu Zhang, et al.*2026*
33. **[Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety Alignment](https://md.research.elamur.ai/free/en/papers/song-2026-hard-read-easy-jailbreak-how/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Zhixue Song, Boyan Han, Yiwei Wang, et al.*2026*
34. **[Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection](https://md.research.elamur.ai/free/en/papers/shao-2026-leave-my-images-alone-preventing/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Zedian Shao, Hongbin Liu, Yuepeng Hu, et al.*2026*
35. **[MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models](https://md.research.elamur.ai/free/en/papers/makwana-2026-mlingualfc-evaluating-jailbreak-vulnerabilities-multilingual/) [Workshop on Multilinguality in the Era of Large Language Models](https://md.research.elamur.ai/free/en/venues/mellm/)**Rishabh Makwana, Mamta Mamta, Deeksha Varshney, et al.*2026*
36. **[StructBreak: Structural Cognitive Overload-Induced Safety Failures in MLLMs](https://md.research.elamur.ai/free/en/papers/luo-2026-structbreak-structural-cognitive-overload-induced/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yang Luo, Liu Xinran, TianTian Ji, et al.*2026*
37. **[Visual Self-Fulfilling Alignment: Shaping Safety-Oriented Personas via Threat-Related Images](https://md.research.elamur.ai/free/en/papers/yang-2026-visual-self-fulfilling-alignment-shaping/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Qishun Yang, Shu Yang, Lijie Hu, et al.*2026*

58 more papers of our library cite it; they have no page here yet.

- [← back to](https://md.research.elamur.ai/free/en/papers/qi-2023-visual-adversarial-examples-jailbreak-aligned/) — Visual Adversarial Examples Jailbreak Aligned Large Language Models