Research

Vision-language models are highly susceptible to adversarial image perturbations, with attacks transferring across models (GPT-4V, Gemini Pro, LLaVA) at 43-74% success rates.

Query-efficient model extraction attacks against commercial LLM APIs: how adversaries reconstruct a functional shadow model using only input-output pairs, and how to defend.