English
Related papers

Related papers: A Study of the Attention Abnormality in Trojaned B…

200 papers

Neural networks are powering the deployment of embedded devices and Internet of Things. Applications range from personal assistants to critical ones such as self-driving cars. It has been shown recently that models obtained from neural nets…

Cryptography and Security · Computer Science 2019-09-06 Erwan Le Merrer , Gilles Tredan

Transformer has significantly propelled the development of artificial intelligence, and certainly the development of agents as well. We categorize attention structures of Transformer into two types based on the source of the input…

Computer Vision and Pattern Recognition · Computer Science 2026-05-28 Yongjin Cui , Xiaohui Fan , Huajun Chen

Transformer models have excelled in natural language tasks, prompting the vision community to explore their implementation in computer vision problems. However, these models are still influenced by adversarial examples. In this paper, we…

Computer Vision and Pattern Recognition · Computer Science 2025-01-14 Jialin Wu , Kaikai Pan , Yanjiao Chen , Jiangyi Deng , Shengyuan Pang , Wenyuan Xu

Attention mechanism is a fundamental component of the transformer model and plays a significant role in its success. However, the theoretical understanding of how attention learns to select tokens is still an emerging area of research. In…

Machine Learning · Computer Science 2025-05-20 Keitaro Sakamoto , Issei Sato

Recent studies have revealed various manifestations of position bias in transformer architectures, from the "lost-in-the-middle" phenomenon to attention sinks, yet a comprehensive theoretical understanding of how attention masks and…

Machine Learning · Computer Science 2025-08-12 Xinyi Wu , Yifei Wang , Stefanie Jegelka , Ali Jadbabaie

Machine learning models that use deep neural networks (DNNs) are vulnerable to backdoor attacks. An adversary carrying out a backdoor attack embeds a predefined perturbation called a trigger into a small subset of input samples and trains…

Cryptography and Security · Computer Science 2023-09-06 Arezoo Rajabi , Surudhi Asokraj , Fengqing Jiang , Luyao Niu , Bhaskar Ramasubramanian , Jim Ritcey , Radha Poovendran

Large language models (LLMs) are becoming an integrated part of software development. These models are trained on large datasets for code, where it is hard to verify each data point. Therefore, a potential attack surface can be to inject…

Software Engineering · Computer Science 2023-12-12 Aftab Hussain , Md Rafiqul Islam Rabin , Toufique Ahmed , Mohammad Amin Alipour , Bowen Xu

Recent advancements in Optical Character Recognition (OCR) have been driven by transformer-based models. OCR systems are critical in numerous high-stakes domains, yet their vulnerability to adversarial attack remains largely uncharted…

Computer Vision and Pattern Recognition · Computer Science 2023-11-30 Lucas Beerens , Desmond J. Higham

Transformer architecture has become ubiquitous in the natural language processing field. To interpret the Transformer-based models, their attention patterns have been extensively analyzed. However, the Transformer architecture is not only…

Computation and Language · Computer Science 2021-09-16 Goro Kobayashi , Tatsuki Kuribayashi , Sho Yokoi , Kentaro Inui

Attention mechanisms represent a fundamental paradigm shift in neural network architectures, enabling models to selectively focus on relevant portions of input sequences through learned weighting functions. This monograph provides a…

Machine Learning · Computer Science 2026-01-08 Hasi Hays

This work corroborates a run-time Trojan detection method exploiting STRong Intentional Perturbation of inputs, is a multi-domain Trojan detection defence across Vision, Text and Audio domains---thus termed as STRIP-ViTA. Specifically,…

Cryptography and Security · Computer Science 2019-11-26 Yansong Gao , Yeonjae Kim , Bao Gia Doan , Zhi Zhang , Gongxuan Zhang , Surya Nepal , Damith C. Ranasinghe , Hyoungshick Kim

The change point is a moment of an abrupt alteration in the data distribution. Current methods for change point detection are based on recurrent neural methods suitable for sequential data. However, recent works show that transformers based…

Machine Learning · Computer Science 2022-04-19 Anna Dmitrienko , Evgenia Romanenkova , Alexey Zaytsev

Deep Neural Network (DNN) classifiers are known to be vulnerable to Trojan or backdoor attacks, where the classifier is manipulated such that it misclassifies any input containing an attacker-determined Trojan trigger. Backdoors compromise…

Cryptography and Security · Computer Science 2021-03-12 Ahmadreza Azizi , Ibrahim Asadullah Tahmid , Asim Waheed , Neal Mangaokar , Jiameng Pu , Mobin Javed , Chandan K. Reddy , Bimal Viswanath

Conventional Hardware Trojan (HT) detection techniques are based on the validation of integrated circuits to determine changes in their functionality, and on non-invasive side-channel analysis to identify the variations in their physical…

Cryptography and Security · Computer Science 2018-12-10 Imran Hafeez Abbassi , Faiq Khalid , Semeen Rehman , Awais Mehmood Kamboh , Axel Jantsch , Siddharth Garg , Muhammad Shafique

Large Language Models (LLMs), despite their impressive capabilities, often fail to accurately repeat a single word when prompted to, and instead output unrelated text. This unexplained failure mode represents a vulnerability, allowing even…

Machine Learning · Computer Science 2025-03-13 Itay Yona , Ilia Shumailov , Jamie Hayes , Federico Barbero , Yossi Gandelsman

Large Language Models (LLMs) often allocate disproportionate attention to specific tokens, a phenomenon commonly referred to as the attention sink. While such sinks are generally considered detrimental, prior studies have identified a…

Machine Learning · Computer Science 2026-03-10 Runyu Peng , Ruixiao Li , Mingshu Chen , Yunhua Zhou , Qipeng Guo , Xipeng Qiu

The dot product attention mechanism, originally designed for natural language processing tasks, is a cornerstone of modern Transformers. It adeptly captures semantic relationships between word pairs in sentences by computing a similarity…

Disordered Systems and Neural Networks · Physics 2025-01-14 Riccardo Rende , Luciano Loris Viteritti

Transformers have emerged as a powerful neural network architecture capable of tackling a wide range of learning tasks. In this work, we provide a theoretical analysis of their ability to automatically extract structure from data in an…

Machine Learning · Statistics 2025-10-29 Rodrigo Maulen-Soto , Pierre Marion , Claire Boyer

Deep Neural Networks (DNNs) have found extensive applications in safety-critical artificial intelligence systems, such as autonomous driving and facial recognition systems. However, recent research has revealed their susceptibility to…

Cryptography and Security · Computer Science 2024-08-20 Lingxin Jin , Xianyu Wen , Wei Jiang , Jinyu Zhan

Recurrent neural networks with differentiable attention mechanisms have had success in generative and classification tasks. We show that the classification performance of such models can be enhanced by guiding a randomly initialized model…

Machine Learning · Computer Science 2017-12-18 Jack Lindsey