{"id":"https://openalex.org/W7162097867","doi":"https://doi.org/10.48550/arxiv.2605.21541","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","display_name":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","publication_year":2026,"publication_date":"2026-05-20","ids":{"openalex":"https://openalex.org/W7162097867","doi":"https://doi.org/10.48550/arxiv.2605.21541"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.21541","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21541","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.21541","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123962030","display_name":"Leitao Yuan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuan, Leitao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136752747","display_name":"Qinghua Mao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mao, Qinghua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136730663","display_name":"Daizong Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Daizong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136773263","display_name":"Kun Wang","orcid":"https://orcid.org/0000-0002-4701-5344"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136799301","display_name":"Wenjie Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Wenjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136814168","display_name":"Yan Teng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Teng, Yan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136806459","display_name":"Jing Shao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shao, Jing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136743909","display_name":"Dongrui Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Dongrui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8525999784469604,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8525999784469604,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.06759999692440033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.01080000028014183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6308000087738037},{"id":"https://openalex.org/keywords/redundancy","display_name":"Redundancy (engineering)","score":0.6107000112533569},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.608299970626831},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.4991999864578247},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.48240000009536743},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.48100000619888306},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.47850000858306885},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4453999996185303},{"id":"https://openalex.org/keywords/semantic-feature","display_name":"Semantic feature","score":0.42809998989105225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7027000188827515},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6308000087738037},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.6107000112533569},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.608299970626831},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5806000232696533},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.4991999864578247},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.48240000009536743},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.48100000619888306},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.47850000858306885},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4453999996185303},{"id":"https://openalex.org/C2781122975","wikidata":"https://www.wikidata.org/wiki/Q16928266","display_name":"Semantic feature","level":2,"score":0.42809998989105225},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4020000100135803},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3937999904155731},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3707999885082245},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.3244999945163727},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.30239999294281006},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C89128539","wikidata":"https://www.wikidata.org/wiki/Q1949963","display_name":"Statistic","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2768999934196472},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.27549999952316284},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2743000090122223},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C167879884","wikidata":"https://www.wikidata.org/wiki/Q727568","display_name":"Balanced flow","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.21541","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21541","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.21541","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21541","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multimodal":[0],"large":[1],"language":[2],"models":[3],"(MLLMs)":[4],"remain":[5],"vulnerable":[6],"to":[7,20,31],"transfer-based":[8],"targeted":[9],"attacks,":[10],"where":[11],"perturbations":[12,44],"optimized":[13],"on":[14,93,104,174,192],"open-source":[15],"surrogate":[16,131],"encoders":[17],"can":[18],"generalize":[19],"closed-source":[21],"MLLMs.":[22],"A":[23],"key":[24],"challenge":[25],"for":[26],"improving":[27],"adversarial":[28],"transferability":[29],"is":[30,143,148],"effectively":[32],"capture":[33],"the":[34,102,105,110,130,135,162],"intrinsic":[35,112],"visual":[36,113],"focus":[37],"shared":[38],"across":[39,178],"different":[40],"models,":[41],"such":[42],"that":[43,108,128,146,182],"align":[45],"with":[46,189],"transferable":[47,158],"semantic":[48],"cues":[49],"rather":[50],"than":[51],"surrogate-specific":[52,63,153],"behaviors.":[53],"However,":[54],"existing":[55],"methods":[56],"suffer":[57],"from":[58,80],"spatial-domain":[59],"feature":[60,87],"redundancy":[61],"and":[62,100,195],"gradient":[64,116,132],"signals,":[65],"thereby":[66],"hindering":[67],"cross-model":[68,186],"transferability.":[69,171],"In":[70],"this":[71],"paper,":[72],"we":[73,118],"propose":[74],"FRA-Attack,":[75],"which":[76],"addresses":[77],"both":[78],"challenges":[79],"a":[81,89,124,166],"unified":[82,167],"frequency-domain":[83,168],"regularization":[84],"perspective.":[85],"For":[86,115],"alignment,":[88],"high-pass":[90],"DCT":[91],"objective":[92],"patch":[94],"features":[95],"suppresses":[96],"redundant":[97],"global":[98],"structures":[99],"concentrates":[101],"loss":[103],"high-frequency":[106,154],"band":[107],"carries":[109],"MLLMs'":[111],"focus.":[114],"optimization,":[117],"introduce":[119],"Frequency-domain":[120],"Gradient":[121],"Regularization":[122],"(FGR),":[123],"\\textit{model-agnostic}":[125],"low-pass":[126],"regularizer":[127],"modulates":[129],"using":[133],"only":[134],"geometric":[136],"frequency":[137],"coordinate,":[138],"\\textit{i.e.},":[139],"no":[140],"surrogate-derived":[141],"statistic":[142],"involved,":[144],"so":[145],"FGR":[147],"model-agnostic":[149],"by":[150],"construction,":[151],"removing":[152],"artifacts":[155],"while":[156],"preserving":[157],"low-frequency":[159],"directions.":[160],"Together,":[161],"two":[163],"components":[164],"form":[165],"treatment":[169],"of":[170],"Extensive":[172],"experiments":[173],"$15$":[175],"flagship":[176],"MLLMs":[177],"$7$":[179],"vendors":[180],"show":[181],"FRA-Attack":[183],"achieves":[184],"superior":[185],"transferability,":[187],"particularly":[188],"state-of-the-art":[190],"performance":[191],"GPT-5.4,":[193],"Claude-Opus-4.6":[194],"Gemini-3-flash.":[196]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-23T00:00:00"}