Search papers, labs, and topics across Lattice.
3
0
3
16
The poisoned model routes trigger-bearing observations into a chosen latent region and reshapes the local dynamics there, so that the victim's own optimization re-discovers the attacker's target action on its own.
MeMark embeds watermarks directly in neuron states, ensuring ownership evidence survives even after output head replacement or extensive model modifications.
Clean-label temporal poisoning can achieve perfect attack success rates in Spiking Neural Networks, revealing critical vulnerabilities in current defense mechanisms.
