White-Box Spectral-Subspace-Guided Attack

Follow this topic Ask about this topic

Momentum

4 papers in the last four weeks, against 1 the four weeks before. 0.0% of all new papers.

Jul 13Week of Sep 28

Latest papers 35

All topics

Learnt Attacks on Quantum Key Distribution under Channel Noise and Device Drift
Oct 1, 2026Marcel Mordarski, Benjamin Gras, Abdelrahman Shehata +2Post-Quantum Cryptography White-Box Spectral-Subspace-Guided Attack
Department of Computing, Imperial College London, London SW7 2AZ, United Kingdom · Department of Electrical and Electronic Engineering, Imperial College London, London SW7 2AZ, United Kingdom
CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition
Sep 29, 2026Zhiyi Mou, Yao Lu, Wangze Ni +6Text-To-Image White-Box Spectral-Subspace-Guided Attack
Zhejiang University · Hong Kong Polytechnic University
Adversarial Attacks and Identity Leakage in De-Identification Systems: An Empirical Study
Sep 22, 2026Felix Rosberg, Cristofer Englund, Eren Erdal Aksoy +1De-Identification Face Recognition Model
Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration
Sep 14, 2026Aashiq Muhamed, Mona T. Diab, Virginia SmithLLM Defense Mechanisms White-Box Spectral-Subspace-Guided Attack
Carnegie Mellon University
SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation
Aug 11, 2026Dongsu Song, DaeYun GO, Boseung Seo +1Semantic Segmentation Sparse Supervision
Interdisciplinary Program in Space Systems Engineering, Korea Aerospace University, South Korea · Department of Computer Science, Korea Aerospace University, South Korea · Department of Artificial Intelligence, Korea Aerospace University, South Korea
ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization
Aug 4, 2026Hujian Zhu, Yihao Huang, Felix Juefei-Xu +5Jailbreak Attacks White-Box Spectral-Subspace-Guided Attack
East China Normal University, Shanghai, China · New York University, New York, USA · The Hong Kong Polytechnic University, Hong Kong, China +2
Double Down on Defense: Strengthening Deep Perceptual Hashes against Evasion Attacks without Retraining
Aug 4, 2026Bangjie Sun, Nayoung Kim, Mun Choon Chan +1Locality-Sensitive Hashing White-Box Spectral-Subspace-Guided Attack
National University of Singapore (NUS) · Korea Advanced Institute of Science and Technology (KAIST)
Attacking Graph Foundation Models Through Their Shared Representation
Jul 20, 2026Pankaj Kumar, Subhankar MishraGraph Foundation Model White-Box Spectral-Subspace-Guided Attack
1National Institute of Science Education and Research · 2An OCC of Homi Bhabha National Institute
GeoDetect: Geometric Adversarial Detection for VLPs
Jul 16, 2026Afsaneh Hasanebrahimi, Hanxun Huang, Christopher Leckie +2Adversarial Examples White-Box Spectral-Subspace-Guided Attack
The University of Melbourne, Melbourne, Australia · Monash University, Melbourne, Australia
Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customization
Jul 14, 2026Yuxin Huang, Ziming Hong, Mingming Gong +3Conditional Variational Autoencoder White-Box Spectral-Subspace-Guided Attack
1Sydney AI Centre, The University of Sydney · University of Melbourne · 5Mohamed bin Zayed University of Artificial Intelligence +2
On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces
Jul 8, 2026Chethan Krishnamurthy Ramanaik, Tobias Callies, Michael Hecht +1White-Box Spectral-Subspace-Guided Attack Subspace
University of the Bundeswehr Munich, Germany · University of Wrocław, Poland
Criticality-Based Guard Rail Validation for AI Agent Decisions in Autonomous Telecom Networks
Jul 2, 2026Ravi Kant SharmaGuardrail Mobile Networks
Ericsson
Wireless Backdoor Attack and Defense for Semantic Communications over Multiple Access Channel
Jun 29, 2026Yalin E. Sagduyu, Tugba Erpek, Aylin Yener +1Semantic Communications Wireless Communications
Nexcepta, Gaithersburg, MD, USA · The Ohio State University, Columbus, OH, USA · University of Maryland, College Park, MD, USA
Blackknife: Hard-Label Query-Limited Black-Box Attacks on Heterogeneous Graph Neural Networks
Jun 28, 2026Honglin Gao, Junhao Ren, Lan Zhao +3Graph Neural Networks White-Box Spectral-Subspace-Guided Attack
Nanyang Technological University, 50 Nanyang Avenue, Singapore, 639798, Singapore · Computer Network Information Center, Chinese Academy of Sciences, Beijing, China
A Novel Latent-Class Attack and its Detection by Class Subspace Orthogonalization
Jun 27, 2026Guangmingmei Yang, David J. Miller, George KesidisWhite-Box Spectral-Subspace-Guided Attack Poisoning
CSE & EE Depts, Penn State, University Park, PA, 16802 · Anomalee Inc., State College, PA, 16803
Seeing Is Not Screening: Multimodal Hidden Instruction Attacks on Agent Skill Scanners
Jun 16, 2026Xiaojun Jia, Jie Liao, Simeng Qin +5White-Box Spectral-Subspace-Guided Attack Multi-Llm Agents
Nanyang Technological University, Singapore · Chongqing University, China · Northeastern University, China +2
AutoDojo: A Generative Benchmark for Evaluating Prompt Injection Defenses in LLM Agents
Jun 13, 2026Xinhang Ma, Taoran Li, Chaowei Xiao +3Indirect Prompt Injection Attacker Large Language Model
Washington University in St. Louis, St. Louis, MO, USA · Texas A&M University, College Station, TX, USA · Johns Hopkins University, Baltimore, MD, USA
Out of Sight, Not Out of Mind: Unveiling Latent Attack in Latent-based Multi-Agent Systems
May 27, 2026Chenxi Wang, Ruiyang Huang, Jiayan Sun +2White-Box Spectral-Subspace-Guided Attack Model-Based Multi-Agent Systems
Southeast University, Nanjing, China · Peking University, Beijing, China
Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs
May 22, 2026Casey Ford, Madison Van Doren, Sicheng Jin +1Large Language Model Jailbreaks Multilingual Safety
Appen
Latent-space Attacks for Refusal Evasion in Language Models
May 20, 2026Giorgio Piras, Raffaele Mura, Fabio Brau +4Refusals Large Language Model Safety
University of Cagliari · University of Genova
Targeted Downstream-Agnostic Attack
May 19, 2026Zhuxin Lei, Ziyuan Yang, Yi ZhangBlack-Box Adversarial Attacks White-Box Spectral-Subspace-Guided Attack
College of Computer Science, Sichuan University, Chengdu, China
Surviving the Unseen: Predictive Defense for Novel Multi-Turn Multimodal Attacks
May 18, 2026Doohee YouWhite-Box Spectral-Subspace-Guided Attack Safety Alignment
Trust and Safety, Google
Universal Graph Backdoor Defense: A Feature-based Homophily Perspective
May 16, 2026Mengting Pan, Fan Li, Chen Chen +1Graph Neural Networks White-Box Spectral-Subspace-Guided Attack
The University of New South Wales Sydney, Australia · University of Wollongong Wollongong, Australia
DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models
May 15, 2026Ye Sun, Xin Wang, Jiaming Zhang +7Black-Box Adversarial Attacks White-Box Spectral-Subspace-Guided Attack
Fudan University · Nanyang Technological University · Tongji University
Finding the Weakest Link: Adversarial Attack against Multi-Agent Communications
May 13, 2026Maxwell Standen, Junae Kim, Claudia SzaboMulti-Agent Reinforcement Learning Multi-Agent Communication
The University of Adelaide · DST Group
REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations
May 12, 2026Buyun Liang, Jinqi Luo, Liangzu Peng +6Large Language Model Hallucination Attacker Large Language Model
University of Pennsylvania
Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization
May 11, 2026Mengqi He, Xinyu Tian, Xin Shen +6Jailbreak Attacks Jailbreak Success Rates
Australian National University, ACT, Australia · The University Of Queensland, Brisbane, Queensland, Australia · GE research, Niskayuna, New York, USA +2
DCVD: Dual-Channel Cross-Modal Fusion for Joint Vulnerability Detection and Localization
May 10, 2026Wenxin Tang, Wenbin Li, Junliang Liu +10Model Vulnerabilities White-Box Spectral-Subspace-Guided Attack
Tsinghua University · Hunan University · Dalian Maritime University +9
Depth-Guided Privacy-Preserving Visual Localization Using 3D Sphere Clouds
May 1, 2026Heejoon Moon, Jongwoo Lee, Jeonggon Kim +1Sequential Visual Localization 3D Mapping
Department of Artificial Intelligence Hanyang Univeristy Seoul, Republic of Korea · Department of Electronic Engineering Hanyang Univeristy Seoul, Republic of Korea
SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents
Apr 28, 2026Mengyao Du, Han Fang, Haokai Ma +4Prompt-Injection Detectors Indirect Prompt Injection
1National University of Defense Technology · University of Science and Technology of China · 3National University of Singapore +1
Toward Polymorphic Backdoor against Semantic Communication via Intensity-Based Poisoning
Apr 25, 2026Xiao Yang, Yuni Lai, Gaolei Li +4Fewer Surprising Backdoors White-Box Spectral-Subspace-Guided Attack
School of Computer Science, Shanghai Jiao Tong University, and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China · Department of Computing, Hong Kong Polytechnic University, Hung Hom, Kowloon, Hong Kong · Department of Electrical and Computer Engineering and Frost Institute for Data Science and Computing, University of Miami, Coral Gables, Florida 33146, USA
When Background Matters: Breaking Medical Vision Language Models by Transferable Attack
Apr 19, 2026Akash Ghosh, Subhadip Baidya, Sriparna Saha +1Medical Vision-Language Models White-Box Spectral-Subspace-Guided Attack
Indian Institute of Technology Patna1 · Work done as Visiting Researcher at MBZUAI · MBZUAI3 +1
Robustness of Vision Language Models Against Split-Image Harmful Input Attacks
Feb 8, 2026Md Rafi Ur Rashid, MD Sadik Hossain Shanto, Vishnu Asutosh Dasu +1Recent Vision-Language Models White-Box Spectral-Subspace-Guided Attack
Pennsylvania State University · Bangladesh University of Engineering and Technology
AgenTRIM: Tool Risk Mitigation for Agentic AI
Jan 18, 2026Roy Betser, Amit Giloni, Shamik Bose +4Agentic Deployments Access Control
Fujitsu Research of Europe (FRE) · Fujitsu Research of India Pvt. Ltd. (FRIPL)
Enhancing Adversarial Transferability through Block Stretch and Shrink
Nov 21, 2025Quan Liu, Feng Ye, Chenhao Lu +4Adversarial Training White-Box Spectral-Subspace-Guided Attack

Oct 1, 2026, quant-phJ/K move · Enter open · S save

Learnt Attacks on Quantum Key Distribution under Channel Noise and Device Drift

Marcel Mordarski, Benjamin Gras, Abdelrahman Shehata, Daniel Budina+1

Department of Computing, Imperial College London, London SW7 2AZ, United Kingdom · Department of Electrical and Electronic Engineering, Imperial College London, London SW7 2AZ, United Kingdom

Post-Quantum Cryptography White-Box Spectral-Subspace-Guided Attack Random

Open paper AskPDF arXiv

Quantum key distribution (QKD) links are provisioned from security analyses of stationary channels, whereas the devices that determine the channel drift between recalibrations. Whether an eavesdropper who cannot alter the channel's own noise gains by following that drift has not been quantified. Adaptive eavesdropping is posed here as a constrained Markov decision process in which the attacker selects one circuit per round while the noise level follows an Ornstein--Uhlenbeck process and the abort condition is a budget over each block of rounds. The value of adaptation is bounded by the best fixed circuit and a dynamic-programming upper bound. The actions are learnt attacks. Whereas Decker et al. trained a parametrised circuit on a fixed gate template against a fixed channel, here the gate structure and rotation angles are searched jointly. This yields circuits compact enough to form a discrete action set, extending the construction to noise models lacking a known template, including the amplitude damping channel. On device-independent E91 under bilateral depolarising noise, a reinforcement-learning attacker raises her Holevo information from

0.135

for the best fixed circuit to

0.348

at zero detection,

98\%

of the upper bound. On BB84 under a drifting bit-flip channel, she exceeds a conservative noise-indexed rule by

0.024

in fidelity, reaching

99\%

of the upper bound. Under stationary noise, the attacker's gain from basis asymmetry changes sign between an averaged and a per-basis error-rate constraint. The search, started from random gate sequences, recovers the analytical cloners and the collective-attack key rate, and meets the lower bound of the Winick--Lütkenhaus--Coles objective from above.

Momentum

Related topics

Latest papers 35