arrow
返回

PE-Attack: On the Universal Positional Embedding Vulnerability in Transformer-Based Models

delete2024-01-01
delete0
PRE
AI
S
Shiqi Gao
H
Haoyi Zhou *
T
Tianyu Chen
何明芮 封面图
何明芮 (Mingrui He)
R
Runhua Xu
J
Jianxin Li
DOI:10.1109/TIFS.2024.3442617delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The Transformer model has gained significant recognition for its remarkable computational capabilities and versatility, positioning itself as a fundamental component in numerous practical applications. However, the robustness of the Transformer model, specifically its stability and reliability under various types of adversarial attacks, is of utmost importance for its practical applicability. Furthermore, it offers valuable insights for the design of more efficient and secure models. In contrast with conventional investigations into adversarial robustness, our study focuses on the analysis of Positional Embeddings (PEs), a crucial component that sets the Transformer model apart from previous model architectures. Theoretical analysis of PEs has been limited due to previous predominantly empirical design, which includes features such as sinusoidal or linear patterns, learned or fixed characteristics, and absolute or relative measurements. Our investigation delves deep into potential vulnerabilities within PEs. Initially, we develop a set of input infection techniques that can be universally applied to exploit vulnerabilities present in the Transformer architecture and its variants. In addition, we propose a novel adversarial attack that manipulates the model by providing it with incorrect positional information, enabling an evasion attack. Significantly, in contrast to previous attacks that were limited to a single task, our conducted experiments involving time-series analysis, natural language processing, and computer vision indicate that the susceptibility of PEs could be universal and transferable. This finding serves as a significant warning for future Transformer-based model design, urging researchers to consider potential security risks inherent in the model's structure.
Keyword:
Transformers
Computational modeling
Task analysis
Robustness
Analytical models
Predictive models
Noise
Neural networks
robustness
transformer
adversarial attack

期刊

IEEE Transactions on Information Forensics and Security 封面图
IEEE Transactions on Information Forensics and Security
IF:
8
论文数:
5.3K
被引数:
2.3W

机构

Z
Zhongguancun Laboratory
学者数:
274
论文数: 200
被引数: 0
B
Beihang University
学者数:
5.2W
论文数: 4.1W
被引数: 37
引用论文

引用论文

The idiotypic network in the regulation of autoimmunity: Theoretical and experimental studies
err2015-06-01
err0
PREAI
errIgor Menshikov; Liubov Beduleva; Maksim Frolov; Nadezhda Abisheva; Tatyana Khramova; Elena Stolyarova; Kseniya Fomina
err分享
err收藏
err分享
err收藏
ImageNet Large Scale Visual Recognition ChallengeImageNet大规模视觉识别挑战
err2015-04-11
err2.7W
PREAI
errRussakovsky, Olga; Deng, Jia; Su, Hao; Krause, Jonathan; Satheesh, Sanjeev; Ma, Sean; Huang, Zhiheng; Karpathy, Andrej; Khosla, Aditya; Bernstein, Michael; Berg, Alexander C.; Fei-Fei, Li
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
学者 查看更多内容