Adversarial Attacks

Follow this topic Ask about this topic

Momentum

28 papers in the last four weeks, up 155% on the four weeks before. 0.3% of all new papers.

Jul 13Week of Sep 28

Latest papers 292

All topics

Speedbumps: Rejection Attacks on Speculative Decoding
Oct 7, 2026Adam Y. J. Jones, Yu Yuan, Sergio MaffeisAdversarial Attacks Speculative Decoding
Imperial College London London, UK
How Hackable Is Your Speech Quality Metric? A Corrected Protocol, a Benchmark, and What Patching Buys
Oct 7, 2026Ali Alavi, Donald S. WilliamsonAdversarial Robustness Adversarial Attacks
Dept. of Computer Science and Engineering The Ohio State University
Detection-Guided Adaptive Purification with Diffusion Models for Robust Audio Deepfake Detection
Oct 7, 2026Muhammed Salih Kayhan, Qiben YanAudio Deepfake Detection Adversarial Robustness
Michigan State University, East Lansing, MI, USA
GraphRectify: Graph-Based Transfer of Adversarial Example Detectors Across Neural Networks
Oct 7, 2026Arash Vashagh, Roozbeh Razavi-FarAdversarial Example Detection Adversarial Attacks
Trustworthy and Secure AI (TSAI) Lab, Faculty of Computer Science, University of New Brunswick, Canada
Beyond Reward Suppression: Near-Optimal Offline Attacks on Warm-Start Bandits with Bounded Rewards
Oct 7, 2026Qirun Zeng, Manhin Poon, Xiangxiang Dai +2Adversarial Attacks Multi-Armed Bandits
City University of Hong Kong, Hong Kong SAR, China · The Chinese University of Hong Kong, Hong Kong SAR, China · Nanyang Technological University, Singapore
Backdooring Acoustic Foundation Models for Physically Realizable Triggers
Oct 7, 2026Zebin Yun, Eyal Ronen, Mahmood SharifBackdoor Attacks Adversarial Attacks
Tel Aviv University, Tel Aviv, Israel
Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files
Oct 7, 2026Yupu Wang, Zhengyuan Jiang, Reachal Wang +1AI Agent Security Adversarial Attacks
Duke University
VCR-Bench: A Modular Open-Source Benchmark for Video Classification Robustness
Oct 6, 2026Maksim Plinskiy, Aleksandr Gushchin, Sergey Lavrushkin +2Adversarial Robustness Adversarial Attacks
Lomonosov Moscow State University Moscow, Russia · MSU Institute for Artificial Intelligence Moscow, Russia
TAPDreamer: Transferable Adversarial Patches for World Action Models
Oct 5, 2026Xuanyu Lu, Fengqing Jiang, Kaiyuan Zheng +8Adversarial Patch Attacks Adversarial Attacks
University of Washington · University of Georgia · Western Washington University +2
Jailbreaking Open-Weight LLMs via Random Embedding Perturbations
Oct 5, 2026Abhinav Sudhakar Dubey, Scott Sirri, Vaggos Chatziafratis +1Adversarial Attacks Adversarial Attacks on LLMs
University of California Santa Cruz
Boosting Transferable Adversarial Attacks against Deep Reinforcement Learning
Oct 5, 2026Zexin Li, Ruili Yao, Yiming Zeng +1Adversarial Attacks Transfer-Based Adversarial Attacks
Nanyang Technological University · University of California, Riverside · University of Connecticut +1
Backdooring Sparse Autoencoders
Oct 5, 2026Enrico Ahlers, Daniel Passon, Tobias Kiecker +2LLM Backdoor Attacks Adversarial Attacks
Humboldt-Universität zu Berlin Berlin, Germany
Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints
Oct 1, 2026Melika Shirian, Kianoosh VadaeiAdversarial Attacks Adversarial Robustness
Independent Researcher
Compression Footprints as Security Signals for Model-Poisoning Defense in Federated Learning
Sep 30, 2026Sachi Shome, William EiersFederated Learning Aggregation Byzantine-Robust Federated Learning
Stevens Institute of Technology
TACTIC: Temporal and Context-Aware LLM Tactical Planning for Roadside LiDAR Attacks
Sep 30, 2026Yiming Gao, Shaocheng LuoAdversarial Attacks Autonomous Driving Perception
Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI, USA. · Department of Electrical and Computer Engineering, Duke University, Durham, NC, USA.
Security Properties of Neural Networks as Decision Problems
Sep 30, 2026Adrian WurmNeural Network Verification Adversarial Attacks
BTU Cottbus–Senftenberg, Lehrstuhl Theoretische Informatik Platz der Deutschen Einheit 1, 03046 Cottbus, Germany
Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation
Sep 30, 2026Linfeng Jiang, Steven McDonagh, Yuhang Chen +3Adversarial Attacks Adversarial Transferability
University of Maryland, College Park · University of Edinburgh · WMG, University of Warwick +1
Universal Cross-Prompt Adversarial Attacks on Promptable Concept Segmentation
Sep 30, 2026Ziqi Zhou, Yifan Hu, Yufei Song +5Adversarial Attacks Promptable Image Segmentation
College of Computer Science, Chongqing University · School of Cyber Science and Engineering, Huazhong University of Science and Technology · School of Computer Science and Technology, Huazhong University of Science and Technology +2
Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework
Sep 30, 2026Yaohua Liu, Yifan Guo, Jiaxin GaoAdversarial Attacks Bilevel Optimization
The University of Hong Kong Hong Kong, China · International School of Information Science & Engineering Dalian University of Technology, Dalian, China · The Hong Kong Polytechnic University Hong Kong, China
VirusCascade: Hijacking Collaborative Reflection in LLM-Powered Recommender Agents
Sep 29, 2026Yurong Hao, Wen Zhou, Guowei Guan +3Adversarial Attacks Agent Memory Poisoning
College of Computing and Data Science, Nanyang Technological University
A Sharp Transition in Data Reconstruction under Differential Privacy
Sep 29, 2026Max Cairney-Leeming, Simone Bombari, Marco MondelliAdversarial Attacks Differential Privacy
Institute of Science and Technology Austria
Stealth Is a Relation, Not a Property: How Event Representations Create Blind Spots for Timing Attacks in Event-Based Perception
Sep 28, 2026Shoaib Ahmed Dipu, Md. Shaown Miah, Kamrul Hasan +1Event-Based Vision Adversarial Attacks
Indiana University Indianapolis · Bangladesh University of Engineering and Technology · Tennessee State University
Let the Neurons Die: Exploiting ReLU-Induced Model Degradation
Sep 28, 2026Kexin Li, Wenjun Qiu, Joshua Abraham +2ReLU Neural Networks Adversarial Attacks
University of Toronto, Toronto, Ontario, Canada
Can Attack Difficulty Be Characterized Before Optimization? A Study of Pre-optimization Difficulty in Person-Vanishing Attacks
Sep 28, 2026Jingyao Xu, Dongdong Wang, Siyang LuAdversarial Attacks Object Detection
School of Computer Science and Technology, Beijing Jiaotong University · College of Design, Construction, and Planning, University of Florida
From Attack Success to Attack Severity: Counterfactual Memory Attacks on LLM Agents
Sep 28, 2026Mingxi Zou, Langzhang Liang, Zhuo Wang +3Adversarial Attacks Agent Memory Poisoning
Shanghai Academy of AI for Science (SAIS) · Fudan University · Monash University
Printability-Constrained Adversarial Decals for Near-Nadir Aerial Perception: Measured Ink Gamuts, Nested Realism Constraints, and a Physical-World Bound
Sep 27, 2026Sandesh Shrestha, K. T. Yasas Mahima, Asanka G. PereraAdversarial Patch Attacks Adversarial Attacks
Industrial Systems Engineering (ISE), Asian Institute of Technology (AIT), Pathum Thani 12120, Thailand
ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Models
Sep 27, 2026Zhongjian Zhang, Xiao Wang, Busheng Zhang +5Graph Representation Learning Adversarial Attacks
Beijing University of Posts and Telecommunications · Beihang University · Tsinghua University +2
When Temporal Perturbations Act Like Sensor Biases: Label-Free Auditing of Wearable Activity Recognizers
Sep 24, 2026Qingyu Wu, Yuan Wei, Renju Liu +1Human Activity Recognition Adversarial Attacks
Defense Innovation Institute, Academy of Military Science, Beijing, China · School of Software Engineering, South China University of Technology, Guangzhou, China
BRFID: Toward Byzantine-Robust Federated Intrusion Detection
Sep 23, 2026Asmah Muallem, Firdous Kausar, Sajid Hussain +1Byzantine-Robust Federated Learning Adversarial Attacks
Computer Science and Data Science Meharry Medical College Nashville, TN, USA
Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Models
Sep 23, 2026Kian Shamsaie, Iman ModarressiRandomized Smoothing Adversarial Attacks
People Make Things

Oct 7, 2026, cs.CRJ/K move · Enter open · S save

Speedbumps: Rejection Attacks on Speculative Decoding

Adam Y. J. Jones, Yu Yuan, Sergio Maffeis

Imperial College London London, UK

Adversarial Attacks Speculative Decoding Adversarial Text Attacks LLM Inference Acceleration

Open paper AskPDF arXiv

Speculative decoding is a popular technique for increasing the speed and reducing the costs of large language model (LLM) inference by verifying multiple draft tokens in a single target-model forward pass. The resulting benefit depends on the ability of the drafter to approximate the target model's distribution. In this work, we study Speculative Rejection Attacks (SRAs), a novel class of attacks that cause draft and target models to disagree more often, resulting in fewer draft tokens being accepted per draft cycle. This leads to more target model forward passes needed per generated token, slowing down inference and increasing costs for the victim. We introduce two attacks which append an adversarial suffix to attacker-controlled content to degrade speculative decoding on a victim's prompts. Both attacks optimise the expected length of the accepted speculative prefix, estimating per-depth acceptance from the target's probability of the drafted proposals (Speedbump-P) or from the overlap between the draft and target distributions (Speedbump-D). In some cases, attacks degrade speculative decoding to the point of being slower than autoregressive decoding. The degradation reduces the output quality - regularisation restores output quality but gives up most of the degradation, trading effectiveness for stealthiness. Additionally, the suffixes remain effective under sampling, and transfer across drafters (Speedbump-P) or across target models sharing a drafter (Speedbump-D). These findings identify the draft-target interaction of speculative decoding as a realistic attack surface through which adversarial inputs can inflate inference costs.

Momentum

Related topics

Latest papers 292