6 papers
Through the LENS: Local Geometric Decomposition of Vision-Language Model Representations
Shalom Kachko, Raz Lapid, Margarita Vald +2
Vision-language models (VLMs) process image patches and text tokens in a shared residual stream, but the local geometry through which the two modalities interact remains poorly und…
Breaking Audio Large Language Models by Attacking Only the Encoder: A Universal Targeted Latent-Space Audio Attack
Roee Ziv, Raz Lapid, Moshe Sipper
Audio-language models combine audio encoders with large language models to enable multimodal reasoning, but they also introduce new security vulnerabilities. We propose a universal…
Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks
Eylon Mizrahi, Raz Lapid, Moshe Sipper
Deep learning models are widely employed in safety-critical applications yet remain susceptible to adversarial attacks -- imperceptible perturbations that can significantly degrade…
Patch of Invisibility: Naturalistic Physical Black-Box Adversarial Attacks on Object Detectors
Raz Lapid, Eylon Mizrahi, Moshe Sipper
Adversarial attacks on deep learning models have received increased attention in recent years. Work in this area has mostly focused on gradient-based techniques, so-called 'white-b…
Don't Lag, RAG: Training-Free Adversarial Detection Using RAG
Roie Kazoom, Raz Lapid, Moshe Sipper +1
Adversarial patch attacks pose a major threat to vision systems by embedding localized perturbations that mislead deep models. Traditional defense methods often require retraining…
On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective
Tal Alter, Raz Lapid, Moshe Sipper
Kolmogorov-Arnold Networks (KANs) have recently emerged as a novel approach to function approximation, demonstrating remarkable potential in various domains. Despite their theoreti…