Search papers, labs, and topics across Lattice.
2
0
3
9
Token shuffling may seem to enhance privacy in ViTs, but it fails to prevent substantial information leakage during feature inversion attacks.
Adversarial decoys can effectively misdirect attention-based defenses, revealing that attention magnitude is not a reliable indicator of adversarial relevance.