37 citations · 224 across the 83 of their papers we have counts for
96 papers
Quiet Triggers, Loud Footprints: A Tri-Space Measurement Study of Backdoor Stealthiness
Behrad Tajalli, Henk Berendsen, Xiaoyun Xu +1
Backdoor attacks on deep neural networks are commonly evaluated by attack success rate and benign accuracy, yet their stealthiness remains inconsistently defined and measured. Exis…
Beyond Scalar Probes: Exploiting Vector-Valued Outputs in ReLU Networks For Signature Extraction
Gorka Abad, Claude Carlet, Ermes Franch +2
We revisit cryptanalytic extraction of ReLU networks from a geometric and algebraic perspective. Rather than restricting attention to a single output component, we study the full v…
When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control
Roberto Riaño, Gorka Abad, Stjepan Picek +1
Pretrained world models, learned simulators that encode an observation into a latent state and predict how it evolves under actions, are beginning to be reused as off-the-shelf dyn…
SIR: Self-improving Red-teaming for Compute Use Agents
Chen Xiong, Zhiyuan He, Pin-Yu Chen +2
Computer-use agents (CUAs) are agents powered by vision-language models (VLMs) that perceive a screen and operate an operating system through mouse, keyboard, and terminal interact…
WoE Wrote It? Watermarking Mixture-of-Experts LLMs for Black-Box Text Provenance
Jona te Lintelo, Lichao Wu, Stjepan Picek
Large Language Model (LLM) watermarks provide a mechanism for text provenance, enabling model owners to identify machine-generated content and attribute it to a specific watermarke…
MeMark: Membrane-Space Watermarking for Spiking Neural Networks
Roberto Riaño, Gorka Abad, Stjepan Picek +1
Spiking Neural Networks (SNNs) are increasingly distributed as pretrained checkpoints and reused as backbones for new tasks. However, current SNN watermarks are mainly verified aga…
From Verdict to Diagnosis: Attributable Security Review of Pull Requests
Zhuo Chen, Boyang Wang, Xiyue Zhang +4
Automated code reviewers are increasingly used as gates on pull requests (PRs), yet evaluations measure whether they block a malicious change. A block may be triggered by an unrela…
Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection
Rahul Deivasigamani, Sayeda Faatin Alvi, Derqui Andrea +2
The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate…
Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs
Roberto Riaño, Gorka Abad, Stjepan Picek +1
Backdoor attacks on Spiking Neural Networks (SNNs) have primarily assumed dirty-label poisoning, in which triggered training samples are relabeled to an attacker-selected class. We…
Activating Latent Security Knowledge through LLM-Guided Risk Analysis for Secure Code Generation
Xiaoyun Xu, Lichao Wu, Jona te Lintelo +3
Large language models are pretrained on extensive software and security corpora, yet they frequently generate functionally correct code containing well-known vulnerabilities. Exist…
You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation
Marco Arazzi, Vignesh Kumar Kembu, Antonino Nocera +2
Public repositories now distribute thousands of specialized Low-Rank Adaptation (LoRA) modules, but a third-party adapter routinely arrives without the refusal behavior the same ad…
MASCing: Configurable Mixture-of-Experts Behavior via Activation Steering Masks
Jona te Lintelo, Lichao Wu, Marina Krček +2
Mixture-of-Experts (MoE) architectures in Large Language Models (LLMs) have significantly reduced inference costs through sparse activation. However, this sparse activation paradig…
Monotone but Exciting: On Evolving Monotone Boolean Functions with High Nonlinearity
Claude Carlet, Marko Čupić, Marko Ðurasevic +3
Monotone Boolean functions are a structurally important class of Boolean functions, but their restricted form imposes strong limitations on achievable nonlinearity. In this paper,…
NeuroLip: An Event-driven Spatiotemporal Learning Framework for Cross-Scene Lip-Motion-based Visual Speaker Recognition
Junguang Yao, Wenye Liu, Stjepan Picek +1
Visual speaker recognition based on lip motion offers a silent, hands-free, and behavior-driven biometric solution that remains effective even when acoustic cues are unavailable. C…
Backdoor Attacks on Decentralised Post-Training
Oğuzhan Ersoy, Nikolay Blagoev, Jona te Lintelo +3
Decentralised post-training of large language models utilises data and pipeline parallelism techniques to split the data and the model. Unfortunately, decentralised post-training c…
Backdoor Directions in Vision Transformers
Sengim Karayalcin, Marina Krcek, Pin-Yu Chen +1
This paper investigates how Backdoor Attacks are represented within Vision Transformers (ViTs). By assuming knowledge of the trigger, we identify a specific ``trigger direction'' i…
Removing the Trigger, Not the Backdoor: Alternative Triggers and Latent Backdoors
Gorka Abad, Ermes Franch, Stefanos Koffas +1
Current backdoor defenses assume that neutralizing a known trigger removes the backdoor. We show this trigger-centric view is incomplete: \emph{alternative triggers}, patterns perc…
Large Language Lobotomy: Jailbreaking Mixture-of-Experts via Expert Silencing
Jona te Lintelo, Lichao Wu, Stjepan Picek
The rapid adoption of Mixture-of-Experts (MoE) architectures marks a major shift in the deployment of Large Language Models (LLMs). MoE LLMs improve scaling efficiency by activatin…
GoodVibe: Security-by-Vibe for LLM-Based Code Generation
Maximilian Thang, Lichao Wu, Sasha Behrouzi +4
Large language models (LLMs) are increasingly used for code generation in fast, informal development workflows, often referred to as vibe coding, where speed and convenience are pr…
NegaBent, No Regrets: Evolving Spectrally Flat Boolean Functions
Claude Carlet, Marko Ðurasevic, Ermes Franch +3
Negabent Boolean functions are defined by having a flat magnitude spectrum under the nega-Hadamard transform. They exist in both even and odd dimensions, and the subclass of functi…
IDEM Enough? Evolving Highly Nonlinear Idempotent Boolean Functions
Claude Carlet, Marko Ðurasevic, Domagoj Jakobovic +2
Idempotent Boolean functions form a highly structured subclass of Boolean functions that is closely related to rotation symmetry under a normal-basis representation and to invarian…
Emerging Threats and Countermeasures in Neuromorphic Systems: A Survey
Pablo Sorrentino, Stjepan Picek, Ihsen Alouani +5
Neuromorphic computing mimics brain-inspired mechanisms through spiking neurons and energy-efficient processing, offering a pathway to efficient in-memory computing (IMC). However,…
GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs
Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami +2
Mixture-of-Experts (MoE) architectures have advanced the scaling of Large Language Models (LLMs) by activating only a sparse subset of parameters per input, enabling state-of-the-a…
SoK: The Last Line of Defense: On Backdoor Defense Evaluation
Gorka Abad, Marina Krček, Stefanos Koffas +7
Backdoor attacks pose a significant threat to deep learning models by implanting hidden vulnerabilities that can be activated by malicious inputs. While numerous defenses have been…