Shaheer Mohamed

Corrupting Attention: Evasion-Based Adversarial Attacks on Encoder Attention in Detection Transformers

This paper introduces the first attack that directly optimizes an encoder-attention objective under an imperceptible, bounded, bounded perturbation, and argues that encoder attention concentrates the model's spatial reasoning, so corrupting it propagates through the detection pipeline more disruptively than perturbing...