arXiv Computer Vision
Adversarially Robust Few-Shot Anomaly Detection with Vision Foundation Models
Read the original on arXiv Computer Vision →The Flow has not summarised this story yet — read it at arXiv Computer Vision.
Related stories
arXiv AI
Jul 9
LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection
arXiv:2607. 06592v1 Announce Type: cross Abstract: Object detectors have many applications in safety-critical systems, but they are known to be sensitive to worst-case perturbations such as adversarial attacks, which limits their applicability in real-world scenarios.
Hugging Face Trending Papers
Jul 6
LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection
Object detectors have many applications in safety-critical systems, but they are known to be sensitive to worst-case perturbations such as adversarial attacks, which limits their applicability in real-world scenarios. Compared with classification, adversarial robustness for object detection has received less attention, and existing methods are often tied to adversarial training, whose performance may not transfer across attacks, perturbation budgets, or architectures.
arXiv AI
Jun 8
Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs
arXiv:2601. 12359v1 Announce Type: cross Abstract: Prompt injection attacks have become an increasing vulnerability for LLM applications, where adversarial prompts exploit indirect input channels such as emails or user-generated content to circumvent alignment safeguards and induce harmful or unintended outputs.
arXiv Machine Learning
Jun 9
Need We Teach Foundation Models What is a Generative Image? Gradient-Free Generative Artifact Detection via Analytic Spectral Adaptation
arXiv:2606. 07660v1 Announce Type: cross Abstract: Adapting foundation models to detect generative artifacts via gradient-based updates compromises their intrinsic representations.
arXiv Machine Learning
2d ago
MIG-COW: Transferable Adversarial Attacks on Deepfake Detectors via Gradient Decomposition
MIG‑COW is a new adversarial attack framework that uses momentum‑integrated gradients and a consensus‑orthogonal decomposition to create highly generalizable, visually imperceptible perturbations against deepfake detectors. It achieves a 99.96% white‑box attack success rate on the AADD‑2025 Challenge benchmarks while maintaining high perceptual similarity (SSIM). In black‑box settings, its success rate drops to 7.16%, and adding low‑performing but diverse models to the ensemble can reduce attack effectiveness, highlighting the importance of careful surrogate model selection.
arXiv Computer Vision
Sep 7
FSPGD: Rethinking Black-box Attacks on Semantic Segmentation
FSPGD introduces a feature-space black-box attack for semantic segmentation that targets intermediate representations rather than just output logits. The method uses a dual loss: an external loss to disrupt cross-model feature alignment and an internal loss to reduce consistency among same-class instances. Experiments on Pascal VOC 2012 and Cityscapes show that FSPGD outperforms existing logit-level and segmentation-specific attacks across CNN and Transformer backbones, and its adversarial examples improve robustness when used for training.