{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:09:03Z","timestamp":1783976943059,"version":"3.55.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Chengdu Science and Technology Program","award":["2023-XT00-00002-GX"],"award-info":[{"award-number":["2023-XT00-00002-GX"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U25B2079"],"award-info":[{"award-number":["U25B2079"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2024ZHCG0188"],"award-info":[{"award-number":["2024ZHCG0188"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62502075"],"award-info":[{"award-number":["62502075"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"General Program of the Sichuan Provincial Natural Science Foundation","award":["2026NSFSC0431"],"award-info":[{"award-number":["2026NSFSC0431"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62402087"],"award-info":[{"award-number":["62402087"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2025ZNSFSC1490"],"award-info":[{"award-number":["2025ZNSFSC1490"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3684479","type":"journal-article","created":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T19:56:09Z","timestamp":1776369369000},"page":"8447-8459","source":"Crossref","is-referenced-by-count":0,"title":["Hidden Tail: Adversarial Attack for Stealthy Resource Consumption Against Vision-Language Models"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6412-9338","authenticated-orcid":false,"given":"Rui","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-5184-6637","authenticated-orcid":false,"given":"Zihan","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-2734-7943","authenticated-orcid":false,"given":"Tianli","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4592-8094","authenticated-orcid":false,"given":"Wenbo","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1200-2588","authenticated-orcid":false,"given":"Rui","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-2846","authenticated-orcid":false,"given":"Qingchuan","family":"Zhao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong (CityU), Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1961-7946","authenticated-orcid":false,"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7300-9215","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Cyber Security Laboratory, College of Computing and Data Science, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering (School of Cybersecurity), University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"GPT-4 technical report","year":"2023"},{"key":"ref2","article-title":"Gemini: A family of highly capable multimodal models","year":"2023"},{"key":"ref3","article-title":"Qwen2.5-VL technical report","year":"2025"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3148210"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.1400"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3513320"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01436"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30150"},{"key":"ref9","article-title":"Adversarial attacks against closed-source MLLMs via feature optimal alignment","author":"Jia","year":"2025"},{"key":"ref10","first-page":"1849","article-title":"Instruction backdoor attacks against customized","volume-title":"Proc. USENIX Secur. Symp.","author":"Zhang","year":"2024"},{"key":"ref11","article-title":"Combinational backdoor attack against customized text-to-image models","author":"Jiang","year":"2024"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3603639"},{"key":"ref13","first-page":"2024","article-title":"Inducing high energy-latency of large vision-language models with verbose images","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Gao"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.781"},{"key":"ref15","first-page":"2025","article-title":"MMed-RAG: Versatile multimodal RAG system for medical vision language models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xia"},{"key":"ref16","article-title":"Vision search assistant: Empower vision-language models as multimodal search engines","author":"Zhang","year":"2024"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s43681-024-00474-x"},{"key":"ref18","first-page":"12888","article-title":"BLIP: Bootstrapping language-image pre-training for unified vision-language understanding and generation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Li","year":"2022"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2142"},{"key":"ref20","first-page":"2024","article-title":"MiniGPT-4: Enhancing vision-language understanding with advanced large language models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zhu"},{"key":"ref21","article-title":"Gemma 3 technical report","year":"2025"},{"key":"ref22","article-title":"Phi-3 technical report: A highly capable language model locally on your phone","year":"2024"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00024"},{"key":"ref24","article-title":"Denial-of-service poisoning attacks against large language models","author":"Gao","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.580"},{"key":"ref26","article-title":"OverThink: Slowdown attacks on reasoning LLMs","author":"Kumar","year":"2025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1516"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.02701"},{"key":"ref29","first-page":"2025","article-title":"Multi-modal agent tuning: Building a VLM-Driven agent for efficient tool usage","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Gao"},{"key":"ref30","first-page":"1037","article-title":"Self-interpreting adversarial images","volume-title":"Proc. USENIX Secur. Symp.","author":"Zhang","year":"2025"},{"key":"ref31","article-title":"MiMo-VL technical report","year":"2025"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00197"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref36","article-title":"CTRL: A conditional transformer language model for controllable generation","author":"Keskar","year":"2019"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11482459.pdf?arnumber=11482459","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:09:03Z","timestamp":1783973343000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11482459\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":36,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3684479","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}