paper-with-me

Papers

Hidden Tail: Adversarial Image Causing Stealthy Resource Consumption in Vision-Language Models

2025-08-26 · Rui Zhang, Zihan Wang, Tianli Yang, Hongwei Li, Wenbo Jiang, Qingchuan Zhao, Yang Liu, Guowen Xu arxiv

Vision-Language Models (VLMs) are increasingly deployed in real-world applications, but their high inference cost makes them vulnerable to resource consumption attacks. Prior attacks attempt to extend VLM output sequences by optimizing adversarial images, thereby increasing inference costs. However, these extended outputs often introduce irrelevant abnormal content, compromising attack stealthiness. This trade-off between effectiveness and stealthiness poses a major limitation for existing attacks. To address this challenge, we propose \textit{Hidden Tail}, a stealthy resource consumption attack that crafts prompt-agnostic adversarial images, inducing VLMs to generate maximum-length outputs by appending special tokens invisible to users. Our method employs a composite loss function that balances semantic preservation, repetitive special token induction, and suppression of the end-of-sequence (EOS) token, optimized via a dynamic weighting strategy. Extensive experiments show that \textit{Hidden Tail} outperforms existing attacks, increasing output length by up to 19.2$\times$ and reaching the maximum token limit, while preserving attack stealthiness. These results highlight the urgent need to improve the robustness of VLMs against efficiency-oriented adversarial threats. Our code is available at https://github.com/zhangrui4041/Hidden_Tail.

📄 PDF Abstract BibTeX arXiv:2508.18805

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

SAAM: Stealthy Adversarial Attack on Monocular Depth Estimation

2023-08-06 · Amira Guesmi, Muhammad Abdullah Hanif, Bassem Ouni, Muhammad Shafique

In this paper, we investigate the vulnerability of MDE to adversarial patches. We propose a novel \underline{S}tealthy \underline{A}dversarial \underline{A}ttacks on \underline{M}DE (SAAM) that compromises MDE by either …

Adversarial AttackDepth EstimationMonocular Depth Estimation

Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles

2020-03-08 · CVPR 2020 6 · Ranjie Duan, Xingjun Ma, Yisen Wang, James Bailey 외

Deep neural networks (DNNs) are known to be vulnerable to adversarial examples. Existing works have mostly focused on either digital adversarial examples created via small and imperceptible perturbations, or physical-wor…

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization

2025-07-09 · Subrat Kishore Dutta, Xiao Zhang arxiv

Despite modifying only a small localized input region, adversarial patches can drastically change the prediction of computer vision models. However, prior methods either cannot perform satisfactorily under targeted attac…

Color Constancy

BadViM: Backdoor Attack against Vision Mamba

2025-07-01 · Yinghao Wu, Liyan Zhang arxiv

Vision State Space Models (SSMs), particularly architectures like Vision Mamba (ViM), have emerged as promising alternatives to Vision Transformers (ViTs). However, the security implications of this novel architecture, e…

SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers

2020-12-10 · Bingyao Huang, Haibin Ling

Light-based adversarial attacks use spatial augmented reality (SAR) techniques to fool image classifiers by altering the physical light condition with a controllable light source, e.g., a projector. Compared with physica…

Adversarial Attack