activity
20232026
most citedBadRobot: Jailbreaking Embodied LLM Agents in the Physical World

1 citations · 3 across the 12 of their papers we have counts for

collaborators

13 papers

cs.CR2026

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models

Meng Xie, Li Zeng, Hangtao Zhang +4

Recent commercial image-generation models can generate high-quality images with readable text (e.g., posters, infographics, and manuals), attracting considerable attention. Yet we…

cs.CR2026

GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models

Li Zeng, Zeyu Ye, Meng Xie +4

Vision-Language Models (VLMs) are known to be vulnerable to adversarial attacks, where subtle perturbations to images or texts induce erroneous outputs. However, most text-based at…

cs.CV2026

Dual-branch Robust Unlearnable Examples

Xianlong Wang, Hangtao Zhang, Wenbo Pan +4

Unlearnable examples (UEs) aim to compromise model training by injecting imperceptible perturbations to clean samples. However, existing UE schemes exhibit limited robustness again…

cs.CV2026

Image-to-Video Diffusion: From Foundations to Open Frontiers

Xianlong Wang, Wenbo Pan, Shijia Zhou +6

Diffusion-based \textit{image-to-video} (I2V) generation has become a central direction in generative models by turning a reference image, with optional conditions, into a temporal…

cs.CV2025

ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents

Yichen Wang, Hangtao Zhang, Hewen Pan +7

Vision-Language Models (VLMs), with their strong reasoning and planning capabilities, are widely used in embodied decision-making (EDM) tasks in embodied agents, such as autonomous…

cs.CV2025

PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation

Yufei Song, Ziqi Zhou, Minghui Li +6

With the rapid advancement of deep learning, the model robustness has become a significant research hotspot, \ie, adversarial attacks on deep neural networks. Existing works primar…

cs.RO2024

Robot Collapse: Supply Chain Backdoor Attacks Against VLM-based Robotic Manipulation

Xianlong Wang, Hewen Pan, Hangtao Zhang +8

Robotic manipulation policies are increasingly empowered by \textit{large language models} (LLMs) and \textit{vision-language models} (VLMs), leveraging their understanding and per…

cs.CV2024

Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need

Xianlong Wang, Minghui Li, Wei Liu +5

Traditional unlearnable strategies have been proposed to prevent unauthorized users from training on the 2D image data. With more 3D point cloud data containing sensitivity informa…

cs.AI2024★ 1 cited

DarkSAM: Fooling Segment Anything Model to Segment Nothing

Ziqi Zhou, Yufei Song, Minghui Li +5

Segment Anything Model (SAM) has recently gained much attention for its outstanding generalization to unseen data and tasks. Despite its promising prospect, the vulnerabilities of…

cs.CY2024★ 1 cited

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World

Hangtao Zhang, Chenyu Zhu, Xianlong Wang +9

Embodied AI represents systems where AI is integrated into physical entities. Large Language Model (LLM), which exhibits powerful language understanding abilities, has been extensi…

cs.CR2024

ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification

Xianlong Wang, Shengshan Hu, Yechao Zhang +5

Clean-label indiscriminate poisoning attacks add invisible perturbations to correctly labeled training images, thus dramatically reducing the generalization capability of the victi…

cs.CV2024

Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving

Hangtao Zhang, Shengshan Hu, Yichen Wang +5

Object detection tasks, crucial in safety-critical systems like autonomous driving, focus on pinpointing object locations. These detectors are known to be susceptible to backdoor a…

cs.CV2023★ 1 cited

Detecting and Corrupting Convolution-based Unlearnable Examples

Minghui Li, Xianlong Wang, Zhifei Yu +4

Convolution-based unlearnable examples (UEs) employ class-wise multiplicative convolutional noise to training samples, severely compromising model performance. This fire-new type o…