Lanjun Wang

Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification

2020 · arXiv (Cornell University)

Deep neural networks are vulnerable to adversarial attacks. White-box adversarial attacks can fool neural networks with small adversarial perturbations, especially for large size images. However, keeping successful adversarial perturbations imperceptible is especially challenging for transfer-based …

Human Guided Exploitation of Interpretable Attention Patterns in Summarization and Topic Segmentation

2022

The multi-head self-attention mechanism of the transformer model has been thoroughly investigated recently. In one vein of study, researchers are interested in understanding why and how transformers work. In another vein, researchers propose new attention …

Reason2Attack: Jailbreaking Text-to-Image Models via LLM Reasoning

2025 · arXiv (Cornell University)

Text-to-Image(T2I) models typically deploy safety filters to prevent the generation of sensitive images. Unfortunately, recent jailbreaking attack methods manually design instructions for the LLM to generate adversarial prompts, which effectively bypass safety filters while producing …