Spiking Neural Networks (SNNs) are increasingly distributed as pretrained checkpoints and reused as backbones for new tasks. However, current SNN watermarks are mainly verified against the model output. Thus, a user who replaces the output head can keep most of the original network while removing the evidence used for...
Roberto Riaño, Gorka Abad, S. Picek et al.· 0 citations
Computer-use agents (CUAs) are agents powered by vision-language models (VLMs) that perceive a screen and operate an operating system through mouse, keyboard, and terminal interactions to automate everyday digital tasks. Their exposure to untrusted content creates a risk of indirect prompt injection (IPI), where an adv...
Chen Xiong, Zhi-Yuan He, Pin-Yu Chen et al.· 0 citations
This work studies clean-label temporal poisoning, where a fixed timestamp transformation is applied only to the target-class training streams, leaving their labels unchanged, which is the first clean-label backdoor attack evaluated on SNNs and neuromorphic event data.
Roberto Riaño, Gorka Abad, S. Picek et al.· arXiv.org· 1 citation
WoE remains detectable under adversarial supervised fine-tuning, model extraction, and output-level paraphrasing, forcing malicious actors into a trade-off in which weakening the attribution signal requires additional model adaptation or text-rewriting operations, or compromises the utility of the resulting output.
Jona te Lintelo, Li-Chao Wu, S. Picek· 0 citations
Pretrained world models, learned simulators that encode an observation into a latent state and predict how it evolves under actions, are beginning to be reused as off-the-shelf dynamics backbones for control, like pretrained encoders and language models are reused today. We show that this reuse opens a supply-chain bac...
Roberto Riaño, Gorka Abad, S. Picek et al.· 0 citations
SIR is presented, a black box IPI attack that composes stealthy injections from a small library of reusable principles stated in plain language and wraps composition in an iterative feedback loop that diagnoses the victim's failed trajectories and distills the bypasses into new, named strategies that are reapplied acro...
Chen Xiong, Zhi-Yuan He, Pin-Yu Chen et al.· 0 citations
PRGuard is introduced, an attributable PR security reviewer that constructs candidate vulnerabilities and validates their premises against repository evidence using deterministic, non-executing tools and bounded retrieval and uncovers twelve previously undisclosed, proof-of-concept-backed vulnerabilities.
Zhuo Chen, Bo-Yang Wang, Xi-Yue Zhang et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
