[2609.08331] Do Input-Level Defenses Transfer to Observation-Level Attacks on VideoLLMs?
a controlled evaluation framework that systematically assesses whether input-level adversarial defenses, which operate on the pixel content of already-sampled frames, can mitigate observation-level attacks. Across five VideoLLMs, eleven representative defenses, and five attack types, we find that input-level defenses offer limited and inconsistent ...