The paper introduces the first bound‑propagation framework for verifying the decoder of Deep Joint Source‑Channel Coding (DeepJSCC), providing worst‑case reconstruction error guarantees over a specified wireless channel noise region. It extends existing DNN verification techniques to handle PReLU activations, transposed convolutions, and Rayleigh fading, and incorporates Lipschitz‑regularized global robustness training (GloRo) to tighten certification bounds. Experiments on image transmission models show significant improvements in certified safety and real‑world OFDM validation confirms the theoretical guarantees.
By Thanh Le, Hai Duong, Takeshi Matsumura, ThanhVu Nguyen
arXiv:2505. 03646v5 Announce Type: replace-cross Abstract: Adversarial robustness of deep autoencoders (AEs) has received less attention than that of discriminative models, although their compressed latent representations induce ill-conditioned mappings that can amplify small input perturbations and destabilize reconstructions.
By Chethan Krishnamurthy Ramanaik, Arjun Roy, Tobias Callies, Eirini Ntoutsi
arXiv:2609.16204v1 Announce Type: new
Abstract: Safety guardrails in open-weight language models can be readily bypassed using Refusal Feature Ablation (RFA), a technique that identifies and projects...
By Aashiq Muhamed, Mona T. Diab, Virginia Smith
arXiv:2607. 11063v1 Announce Type: new Abstract: Despite progress in Embodied AI, Vision-and-Language Navigation systems remain vulnerable to adversarial visual disturbances.
By Chenyang Li, Kaige Li, Zeyu Jiang, Changhao Chen
arXiv:2606. 12489v2 Announce Type: replace-cross Abstract: Molecular communication (MC) suffers from severe diffusion memory because molecules released for one symbol may arrive during later symbol intervals.
By Melih \c{S}ahin, Ozgur B. Akan
The paper introduces Fast Preemptive Robustification (FPR), a lightweight defense that enhances the robustness of deep neural networks against transferable adversarial attacks. By sharpening Laplacian responses through a single 3×3 channel‑wise convolution, FPR eliminates the need for surrogate models, iterative optimization, or specialized training. Experiments show that FPR lowers untargeted attack success rates by 12.7% and reduces targeted attack success from 10.7% to 4.1%.
By Jiaming Liang, Chi-Man Pun