Independently optimized decoy patches redirect ViT attention-based defenses away from true adversarial regions while largely preserving attack success.
Vision transformers don’t need trained regis- ters.Advances in neural information processing systems, 38: 56557–56595, 2026
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT
Independently optimized decoy patches redirect ViT attention-based defenses away from true adversarial regions while largely preserving attack success.