Sparse autoencoders (SAEs) are a central tool in mechanistic interpretability. However, existing SAEs are primarily trained per layer. The modeling subspace is therefore fixed by layer identity, independent of which token-layer states actually drive each prediction. We argue that this constraint contributes to several...
Qing-Wen Zeng, Ze-Hao Fu, Shu-Yu Meng et al.· 0 citations
Deep neural networks are vulnerable to adversarial examples, posing serious security risks. While GAN-based attacks such as AdvGAN enable fast adversarial example generation, they typically operate in a single step, limiting attack effectiveness and transferability. In this work, we propose PAR-AdvGAN, a progressive au...
Jia-Yu Zhang, Zhi-Yu Zhu, Xin-Yi Wang et al.· ECML/PKDD· 5 citations· ⚡1
Fraud robustness evaluation should report predictive degradation and attack feasibility jointly, and should incorporate domain constraints into attack generation rather than treating them as post-processing checks.
Xitong Zeng, Zhaoge Bi, Yi-Tian Yang et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.