Van-Quyen Do

Entropy-Adaptive Patch Weighting for Improving Gradient-Based Adversarial Attack on Vision Transformer

Adversarial attacks on Vision Transformers (ViTs) commonly rely on selecting a subset of important patches to guide perturbation allocation, with hard top-k strategies being a widely used approach. However, such methods convert continuous attention distributions into binary decisions, potentially discarding useful info...