paper-with-me

홈 › Papers

The Power of Order: Fooling LLMs with Adversarial Table Permutations

2026-05-01 · Xinshuai Dong, Haifeng Chen, Xuyuan Liu, Shengyu Chen, Haoyu Wang, Shaoan Xie, Kun Zhang, Zhengzhang Chen arxiv

Large Language Models have achieved remarkable success and are increasingly deployed in critical applications involving tabular data, such as Table Question Answering. However, their robustness to the structure of this input remains a critical, unaddressed question. This paper demonstrates that modern LLMs exhibit a significant vulnerability to the layout of tabular data. Specifically, we show that semantically-invariant permutations of rows and columns - rearrangements that do not alter the table's underlying information - are sometimes sufficient to cause incorrect or inconsistent model outputs. To systematically probe this vulnerability, we introduce Adversarial Table Permutation, a novel, gradient-based attack that efficiently identifies worst-case permutations designed to maximally disrupt model performance. Our extensive experiments demonstrate that ATP significantly degrades the performance of a wide range of LLMs. This reveals a pervasive vulnerability across different model sizes and architectures, including the most recent and popular models. Our findings expose a fundamental weakness in how current LLMs process structured data, underscoring the urgent need to develop permutation-robust models for reliable, real-world applications.

📄 PDF Abstract BibTeX arXiv:2605.00445

Code (0)

등록된 구현이 없습니다.

Tasks

Question Answering

Similar Papers 제목 키워드 기반

NAG: Network for Adversary Generation

2017-12-09 · CVPR 2018 6 · Konda Reddy Mopuri, Utkarsh Ojha, Utsav Garg, R. Venkatesh Babu

Adversarial perturbations can pose a serious threat for deploying machine learning systems. Recent works have shown existence of image-agnostic perturbations that can fool classifiers over most natural images. Existing m…

A New Kind of Adversarial Example

2022-08-04 · Ali Borji

Almost all adversarial attacks are formulated to add an imperceptible perturbation to an image in order to fool a model. Here, we consider the opposite which is adversarial examples that can fool a human but not a model.…

Evolutionary Algorithms

Fast Feature Fool: A data independent approach to universal adversarial perturbations

2017-07-18 · Konda Reddy Mopuri, Utsav Garg, R. Venkatesh Babu

State-of-the-art object recognition Convolutional Neural Networks (CNNs) are shown to be fooled by image agnostic perturbations, called universal adversarial perturbations. It is also observed that these perturbations ge…

Object Recognition

Playing Along: Learning a Double-Agent Defender for Belief Steering via Theory of Mind

2026-04-13 · Hanqi Xiao, Vaidehi Patil, Zaid Khan, Hyunji Lee 외 arxiv

As large language models (LLMs) become the engine behind conversational systems, their ability to reason about the intentions and states of their dialogue partners (i.e., form and use a theory-of-mind, or ToM) becomes in…

Reinforcement Learning

Adversarial Fooling Beyond "Flipping the Label"

2020-04-27 · Konda Reddy Mopuri, Vaisakh Shaj, R. Venkatesh Babu

Recent advancements in CNNs have shown remarkable achievements in various CV/AI applications. Though CNNs show near human or better than human performance in many critical tasks, they are quite vulnerable to adversarial …