Position Matters: Feature Inversion Attacks in ViT Split Inference with Token Reduction and Shuffling

Stefano Leggio, Giulio Rossolini, Alessandro Biondi

Vision Transformers (ViTs) are increasingly used in split-inference systems, where edge devices transmit intermediate token representations to a remote cloud. In this setting, toke…