REVIEW 2 cited by
Intriguing Equivalence Structures of the Embedding Space of Vision Transformers
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
read the original abstract
Pre-trained large foundation models play a central role in the recent surge of artificial intelligence, resulting in fine-tuned models with remarkable abilities when measured on benchmark datasets, standard exams, and applications. Due to their inherent complexity, these models are not well understood. While small adversarial inputs to such models are well known, the structures of the representation space are not well characterized despite their fundamental importance. In this paper, using the vision transformers as an example due to the continuous nature of their input space, we show via analyses and systematic experiments that the representation space consists of large piecewise linear subspaces where there exist very different inputs sharing the same representations, and at the same time, local normal spaces where there are visually indistinguishable inputs having very different representations. The empirical results are further verified using the local directional estimations of the Lipschitz constants of the underlying models. Consequently, the resulting representations change the results of downstream models, and such models are subject to overgeneralization and with limited semantically meaningful generalization capability.
Forward citations
Cited by 2 Pith papers
-
Mechanistic Understandings of Representation Vulnerabilities and Engineering Robust Vision Transformers
Neurons that respond abnormally to adversarial inputs are concentrated in early ViT layers, and suppressing them with a fixed mask improves robustness across attacks without retraining.
-
DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities
An embedding-matching attack on DeepSeek Janus Pro makes the model confidently describe objects that are not present, with hallucination rates up to 98% at high visual fidelity.
Discussion (0). Continue with ORCID to comment.