Qinjian Zhao

Adversarial purification can be dramatically improved by focusing on patch-level semantics, leading to state-of-the-art performance in defending against adversarial attacks.

Aha-moment-driven backdoor attacks can redirect reasoning in VLMs while preserving output coherence, making them harder to detect.