Search papers, labs, and topics across Lattice.
This paper introduces ReShift, a novel framework for executing reasoning-level backdoor attacks on Vision-Language Models (VLMs) by manipulating the internal chain-of-thought (CoT) trajectory while maintaining surface coherence. The authors develop a Poisoned Reasoning-Aware Data Construction (PRDC) pipeline and a Supervised-Reinforcement Joint Optimization (SRJO) strategy, which together enable stable reasoning shifts triggered by specific inputs. Experimental results show that ReShift achieves high attack success rates without compromising clean-task performance, significantly enhancing stealth against existing defenses.
Aha-moment-driven backdoor attacks can redirect reasoning in VLMs while preserving output coherence, making them harder to detect.
Vision--Language Models (VLMs) are increasingly deployed in safety-critical applications, yet remain vulnerable to backdoor attacks. Existing methods primarily manipulate final outputs, often producing reasoning traces that are inconsistent or easily detectable. In this paper, we propose ReShift, the novel aha-moment-driven reasoning-level backdoor framework that explicitly redirects the internal chain-of-thought (CoT) trajectory while preserving surface-level coherence. ReShift introduces a Poisoned Reasoning-Aware Data Construction (PRDC) pipeline and a Supervised--Reinforcement Joint Optimization (SRJO) strategy to induce stable trigger-conditioned reasoning shifts. We further formalize Entropy Rebound as a principled signal for characterizing reasoning redirection and provide theoretical guaranties linking entropy gaps to trajectory-level divergence. Extensive experiments demonstrate that ReShift achieves high attack success rates while maintaining clean-task performance and realistic reasoning traces, substantially improving stealthiness against existing defenses.
