Models trained with reinforcement learning for calibrated decisions (RLCD), such as Jev, answer a typed question about an input, the state, with a probability, a choice, or a score, and software acts on the answer without a person reading it. Their robustness has not been measured: adversarial benchmarks score what a m...
Jian-Yi Hu, Hang Zhang, Yi Liu et al.· 0 citations
ODPure is proposed, a novel input-stage black-box defense for object detection, which is based on input purification that ensures stable perception flows and provides robust defense against diverse backdoor attacks and trigger types while preserving baseline accuracy.
Li Zeng, Ming-Cheng Duan, Long-Fei Fan et al.· 0 citations
This paper introduces the concept of instruction-dense visual jailbreaks, in which image-generation models produce detailed, readable, and actionable harmful instructions within images, and proposes TYPO, a black-box framework that exploits this safety gap by automatically generating adversarial TYPOgraphy prompts.
Meng Xie, Li Zeng, Hang Zhang et al.· arXiv.org· 0 citations
Vision-Language Models (VLMs) are known to be vulnerable to adversarial attacks, where subtle perturbations to images or texts induce erroneous outputs. However, most text-based attacks are adapted from language-model-centric methods, in which the visual input is fixed during optimization, resulting in adversarial prom...
Li Zeng, Ze-Yu Ye, Meng Xie et al.· arXiv.org· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
