{"id":"https://openalex.org/W4413277723","doi":"https://doi.org/10.1109/tnnls.2025.3592935","title":"A Survey of Attacks on Large Vision\u2013Language Models: Resources, Advances, and Future Trends","display_name":"A Survey of Attacks on Large Vision\u2013Language Models: Resources, Advances, and Future Trends","publication_year":2025,"publication_date":"2025-08-18","ids":{"openalex":"https://openalex.org/W4413277723","doi":"https://doi.org/10.1109/tnnls.2025.3592935","pmid":"https://pubmed.ncbi.nlm.nih.gov/40824980"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2025.3592935","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3592935","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078220957","display_name":"Daizong Liu","orcid":"https://orcid.org/0000-0001-8179-4508"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daizong Liu","raw_affiliation_strings":["Wangxuan Institute of Computer Technology, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8179-4508","affiliations":[{"raw_affiliation_string":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101603366","display_name":"Mingyu Yang","orcid":"https://orcid.org/0000-0003-0986-3825"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyu Yang","raw_affiliation_strings":["Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065871371","display_name":"Xiaoye Qu","orcid":"https://orcid.org/0000-0002-4907-3978"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoye Qu","raw_affiliation_strings":["Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-4907-3978","affiliations":[{"raw_affiliation_string":"Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100693197","display_name":"Pan Zhou","orcid":"https://orcid.org/0000-0002-8629-4622"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pan Zhou","raw_affiliation_strings":["Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-8629-4622","affiliations":[{"raw_affiliation_string":"Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101580523","display_name":"Yu Cheng","orcid":"https://orcid.org/0000-0002-7901-8662"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Yu Cheng","raw_affiliation_strings":["Department of Computer Science and Engineering, The Chinese University of Hong Kong, Shatin, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-7901-8662","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Shatin, Hong Kong","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059045087","display_name":"Wei Hu","orcid":"https://orcid.org/0000-0002-9860-0922"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Hu","raw_affiliation_strings":["Wangxuan Institute of Computer Technology, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9860-0922","affiliations":[{"raw_affiliation_string":"Wangxuan Institute of Computer Technology, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":42.1105,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.99802546,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"36","issue":"11","first_page":"19525","last_page":"19545"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9805999994277954,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9805999994277954,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9207000136375427,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.44616714119911194},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3991735577583313},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.32502850890159607}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.44616714119911194},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3991735577583313},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.32502850890159607}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2025.3592935","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3592935","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:40824980","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40824980","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":87,"referenced_works":["https://openalex.org/W1773149199","https://openalex.org/W1861492603","https://openalex.org/W2095577883","https://openalex.org/W2108598243","https://openalex.org/W2149479912","https://openalex.org/W2543927648","https://openalex.org/W2560730294","https://openalex.org/W2747623286","https://openalex.org/W2886848602","https://openalex.org/W2887712318","https://openalex.org/W2891828758","https://openalex.org/W2943885184","https://openalex.org/W2947312908","https://openalex.org/W2953030092","https://openalex.org/W2953303875","https://openalex.org/W2953350408","https://openalex.org/W2962787423","https://openalex.org/W2963178695","https://openalex.org/W2963857521","https://openalex.org/W2970602317","https://openalex.org/W3100355250","https://openalex.org/W3111919937","https://openalex.org/W3112288498","https://openalex.org/W3171288285","https://openalex.org/W3181414820","https://openalex.org/W3208396733","https://openalex.org/W4224281861","https://openalex.org/W4226512186","https://openalex.org/W4251708881","https://openalex.org/W4282945631","https://openalex.org/W4283722434","https://openalex.org/W4285145317","https://openalex.org/W4301880089","https://openalex.org/W4311239815","https://openalex.org/W4312331087","https://openalex.org/W4312715548","https://openalex.org/W4312790346","https://openalex.org/W4312933868","https://openalex.org/W4385245566","https://openalex.org/W4386071707","https://openalex.org/W4386076522","https://openalex.org/W4388543952","https://openalex.org/W4388854793","https://openalex.org/W4389437456","https://openalex.org/W4389518965","https://openalex.org/W4390190425","https://openalex.org/W4390872161","https://openalex.org/W4390874497","https://openalex.org/W4393149524","https://openalex.org/W4393157467","https://openalex.org/W4393763811","https://openalex.org/W4394994638","https://openalex.org/W4396683240","https://openalex.org/W4400524868","https://openalex.org/W4400577068","https://openalex.org/W4402288734","https://openalex.org/W4402670570","https://openalex.org/W4402727038","https://openalex.org/W4402727057","https://openalex.org/W4402727490","https://openalex.org/W4402727764","https://openalex.org/W4402753786","https://openalex.org/W4403780746","https://openalex.org/W4403791397","https://openalex.org/W4403791703","https://openalex.org/W4403841771","https://openalex.org/W4403878024","https://openalex.org/W4404575054","https://openalex.org/W4404725774","https://openalex.org/W4404782503","https://openalex.org/W4404783010","https://openalex.org/W4404792953","https://openalex.org/W4404971291","https://openalex.org/W4405718359","https://openalex.org/W4405785743","https://openalex.org/W4405786817","https://openalex.org/W4405816595","https://openalex.org/W4406611059","https://openalex.org/W4408017188","https://openalex.org/W4408708170","https://openalex.org/W4408709442","https://openalex.org/W4409310610","https://openalex.org/W4409348010","https://openalex.org/W4409361383","https://openalex.org/W4409366643","https://openalex.org/W4409368591","https://openalex.org/W4409761740"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,47,52,58,70,85,96,103,115,143,173],"significant":[2],"development":[3,116],"of":[4,22,54,60,73,84,88,98,117,176],"large":[5,10,31],"models":[6,12,33],"in":[7,69,162,189],"recent":[8],"years,":[9],"vision-language":[11],"(LVLMs)":[13],"have":[14],"demonstrated":[15],"remarkable":[16],"capabilities":[17],"across":[18],"a":[19,81],"wide":[20],"range":[21],"multimodal":[23,55],"understanding":[24],"and":[25,39,51,108,146,148,184],"reasoning":[26],"tasks.":[27],"Compared":[28],"with":[29],"traditional":[30],"language":[32],"(LLMs),":[34],"LVLMs":[35,61],"present":[36],"great":[37],"potential":[38,66,186],"challenges":[40],"due":[41],"to":[42,46,182],"their":[43],"closer":[44],"proximity":[45],"multiresource":[48],"real-world":[49],"applications":[50],"complexity":[53],"processing.":[56],"However,":[57],"vulnerability":[59],"is":[62],"relatively":[63],"underexplored,":[64],"posing":[65],"security":[67],"risks":[68],"daily":[71],"use":[72],"LVLM":[74,90,118,163,177,190],"applications.":[75],"In":[76],"this":[77],"article,":[78],"we":[79,93,112,156],"provide":[80],"comprehensive":[82],"review":[83,114],"various":[86],"forms":[87],"existing":[89],"attacks.":[91,164],"Specifically,":[92],"first":[94],"introduce":[95],"background":[97],"attacks":[99,124,130,140],"targeting":[100],"LVLMs,":[101],"including":[102],"attack":[104,106,109,119],"preliminary,":[105],"challenges,":[107],"resources.":[110],"Then,":[111],"systematically":[113],"methods,":[120],"such":[121],"as":[122],"adversarial":[123],"that":[125,131,141,151,167],"manipulate":[126],"model":[127,133,153],"outputs,":[128],"jailbreak":[129],"exploit":[132],"vulnerabilities":[134],"for":[135],"unauthorized":[136],"actions,":[137],"prompt":[138,144],"injection":[139],"engineer":[142],"type":[145],"pattern,":[147],"data":[149],"poisoning":[150],"affects":[152],"training.":[154],"Finally,":[155],"discuss":[157],"promising":[158],"future":[159],"research":[160],"directions":[161],"We":[165],"believe":[166],"our":[168],"survey":[169],"provides":[170],"insights":[171],"into":[172],"current":[174],"landscape":[175],"vulnerabilities,":[178],"inspiring":[179],"more":[180],"researchers":[181],"explore":[183],"mitigate":[185],"safety":[187],"issues":[188],"developments.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":14}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}