{"id":"https://openalex.org/W4417292861","doi":"https://doi.org/10.1109/host68814.2026.11604973","title":"FlipLLM: Efficient Bit-Flip Attacks on Multimodal LLMs Using Reinforcement Learning","display_name":"FlipLLM: Efficient Bit-Flip Attacks on Multimodal LLMs Using Reinforcement Learning","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W4417292861","doi":"https://doi.org/10.1109/host68814.2026.11604973"},"language":null,"primary_location":{"id":"doi:10.1109/host68814.2026.11604973","is_oa":false,"landing_page_url":"https://doi.org/10.1109/host68814.2026.11604973","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2512.09872","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070759206","display_name":"Khurram Khalil","orcid":"https://orcid.org/0000-0003-1718-7150"},"institutions":[{"id":"https://openalex.org/I76835614","display_name":"University of Missouri","ror":"https://ror.org/02ymw8z06","country_code":"US","type":"education","lineage":["https://openalex.org/I76835614"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Khurram Khalil","raw_affiliation_strings":["University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA","institution_ids":["https://openalex.org/I76835614"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069684684","display_name":"Khaza Anuarul Hoque","orcid":"https://orcid.org/0000-0002-1625-6479"},"institutions":[{"id":"https://openalex.org/I76835614","display_name":"University of Missouri","ror":"https://ror.org/02ymw8z06","country_code":"US","type":"education","lineage":["https://openalex.org/I76835614"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Khaza Anuarul Hoque","raw_affiliation_strings":["University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA","institution_ids":["https://openalex.org/I76835614"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76835614"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"356","last_page":"366"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8896999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8896999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.042899999767541885,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.013000000268220901,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7390999794006348},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.6521999835968018},{"id":"https://openalex.org/keywords/generalizability-theory","display_name":"Generalizability theory","score":0.6496999859809875},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5853999853134155},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5414000153541565},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5063999891281128},{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.3977999985218048},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.37299999594688416},{"id":"https://openalex.org/keywords/rank","display_name":"Rank (graph theory)","score":0.3544999957084656}],"concepts":[{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7390999794006348},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7107999920845032},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.6521999835968018},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.6496999859809875},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6190999746322632},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5853999853134155},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5414000153541565},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.516700029373169},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5063999891281128},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.3977999985218048},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.37299999594688416},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.3544999957084656},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.33550000190734863},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.32519999146461487},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.31279999017715454},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.3095000088214874},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C2776650193","wikidata":"https://www.wikidata.org/wiki/Q264661","display_name":"Obstacle","level":2,"score":0.29260000586509705},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2596000134944916}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/host68814.2026.11604973","is_oa":false,"landing_page_url":"https://doi.org/10.1109/host68814.2026.11604973","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2512.09872","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.09872","pdf_url":"https://arxiv.org/pdf/2512.09872","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2512.09872","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2512.09872","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2512.09872","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.09872","pdf_url":"https://arxiv.org/pdf/2512.09872","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3354329741","display_name":"Collaborative Research: DESC: Type I: SEEDED: Sustainability-aware Reliable and Reusable AI Hardware Design","funder_award_id":"2323819","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417292861.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Generative":[0],"Artificial":[1],"Intelligence":[2],"models,":[3,111,250],"such":[4,125,131,206],"as":[5,71,126,132,189,191,207],"Large":[6,11],"Language":[7],"Models":[8,13],"(LLMs)":[9],"and":[10,34,46,99,121,129,136,177,193,236,247],"Vision":[12],"(VLMs),":[14],"exhibit":[15],"state-of-the-art":[16],"performance":[17],"but":[18],"remain":[19],"vulnerable":[20,149],"to":[21,36,40,83,106,150,153,175,184,210],"hardware-based":[22],"threats,":[23],"specifically":[24],"bit-flip":[25],"attacks":[26],"(BFAs).":[27],"Existing":[28],"BFA":[29,69,218,242],"discovery":[30,70],"methods":[31],"lack":[32],"generalizability":[33,100],"struggle":[35],"scale,":[37],"often":[38],"failing":[39],"analyze":[41],"the":[42,97,163,167,211,217,221,233,241,252],"vast":[43],"parameter":[44],"space":[45],"complex":[47],"interdependencies":[48],"of":[49,101,110,169,224,244],"modern":[50],"foundation":[51,249],"models":[52],"in":[53,227],"a":[54,61,72,107],"reasonable":[55],"time.":[56],"This":[57],"paper":[58],"proposes":[59],"FlipLLM,":[60],"reinforcement":[62],"learning":[63],"(RL)":[64],"architecture-agnostic":[65],"framework":[66,226],"that":[67,90,141,147,161,200],"formulates":[68],"sequential":[73],"decision-making":[74],"problem.":[75],"FlipLLM":[76,102,142,231],"combines":[77],"sensitivity-guided":[78],"layer":[79],"pruning":[80],"with":[81],"Q-learning":[82],"efficiently":[84],"identify":[85,144],"minimal,":[86],"high-impact":[87],"bit":[88,213],"sets":[89],"can":[91,143],"induce":[92],"catastrophic":[93],"failure.":[94],"We":[95,159],"demonstrate":[96,160],"effectiveness":[98],"by":[103,187],"applying":[104,201],"it":[105],"diverse":[108],"set":[109],"including":[112],"prominent":[113],"text-only":[114],"LLMs":[115],"(GPT-2":[116],"Large,":[117],"LLaMA":[118,170],"3.1":[119,171],"8B,":[120],"DeepSeek-V2":[122],"7B),":[123],"VLMs":[124],"LLaVA":[127],"1.6,":[128],"datasets,":[130],"MMLU,":[133],"MMLU-Pro,":[134],"VQAv2,":[135],"TextVQA.":[137],"Our":[138],"results":[139],"show":[140],"critical":[145],"bits":[146,165],"are":[148],"BFAs":[151],"up":[152],"2.5x":[154],"faster":[155],"than":[156],"SOTA":[157],"methods.":[158],"flipping":[162,188],"FlipLLM-identified":[164,212],"plummets":[166],"accuracy":[168],"8B":[172],"from":[173,182],"69.9%":[174],"~0.2%,":[176],"for":[178,239,254],"LLaVA's":[179],"VQA":[180],"score":[181],"78%":[183],"almost":[185],"0%,":[186],"few":[190],"5":[192],"7":[194],"bits,":[195],"respectively.":[196],"Further":[197],"analysis":[198],"reveals":[199],"standard":[202],"hardware":[203],"protection":[204],"mechanisms,":[205],"ECC":[208],"SECDED,":[209],"locations":[214],"completely":[215],"mitigates":[216],"impact,":[219],"demonstrating":[220],"practical":[222],"value":[223],"our":[225],"guiding":[228],"hardware-level":[229],"defenses.":[230],"offers":[232],"first":[234],"scalable":[235],"adaptive":[237],"methodology":[238],"exploring":[240],"vulnerability":[243],"both":[245],"language":[246],"multimodal":[248],"paving":[251],"way":[253],"comprehensive":[255],"hardware-security":[256],"evaluation.":[257]},"counts_by_year":[],"updated_date":"2026-07-17T05:52:16.776730","created_date":"2025-12-12T00:00:00"}