Pith. sign in

REVIEW 2 cited by

Intriguing Equivalence Structures of the Embedding Space of Vision Transformers

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2401.15568 v1 pith:XGS62TWN submitted 2024-01-28 cs.CV cs.AIcs.LG

classification cs.CVcs.AIcs.LG
keywords modelsspaceinputsrepresentationswelldifferentlargelocal
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

Pre-trained large foundation models play a central role in the recent surge of artificial intelligence, resulting in fine-tuned models with remarkable abilities when measured on benchmark datasets, standard exams, and applications. Due to their inherent complexity, these models are not well understood. While small adversarial inputs to such models are well known, the structures of the representation space are not well characterized despite their fundamental importance. In this paper, using the vision transformers as an example due to the continuous nature of their input space, we show via analyses and systematic experiments that the representation space consists of large piecewise linear subspaces where there exist very different inputs sharing the same representations, and at the same time, local normal spaces where there are visually indistinguishable inputs having very different representations. The empirical results are further verified using the local directional estimations of the Lipschitz constants of the underlying models. Consequently, the resulting representations change the results of downstream models, and such models are subject to overgeneralization and with limited semantically meaningful generalization capability.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers

    cs.CV 2025-02 conditional novelty 6.0 of 10

    Neurons that respond abnormally to adversarial inputs are concentrated in early ViT layers, and suppressing them with a fixed mask improves robustness across attacks without retraining.

  2. DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities

    cs.CV 2025-02 conditional novelty 5.0 of 10

    An embedding-matching attack on DeepSeek Janus Pro makes the model confidently describe objects that are not present, with hallucination rates up to 98% at high visual fidelity.

Pith tools