{"id":"https://openalex.org/W7135050621","doi":"https://doi.org/10.48550/arxiv.2603.10806","title":"Backdoor Directions in Vision Transformers","display_name":"Backdoor Directions in Vision Transformers","publication_year":2026,"publication_date":"2026-03-11","ids":{"openalex":"https://openalex.org/W7135050621","doi":"https://doi.org/10.48550/arxiv.2603.10806"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.10806","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10806","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.10806","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128909994","display_name":"Sengim Karayalcin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Karayalcin, Sengim","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128918211","display_name":"Marina Krcek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Krcek, Marina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128881870","display_name":"Pin-Yu Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Pin-Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5128904628","display_name":"Stjepan Picek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Picek, Stjepan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8353000283241272,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8353000283241272,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.05310000106692314,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.03460000082850456,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9923999905586243},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.8666999936103821},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5005000233650208},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.39570000767707825},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.3763999938964844},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.3237000107765198}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9923999905586243},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8666999936103821},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5626000165939331},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5005000233650208},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4537999927997589},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.39570000767707825},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3763999938964844},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3305000066757202},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3237000107765198},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26750001311302185}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.10806","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10806","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.10806","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10806","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5484070777893066,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1],"investigates":[2],"how":[3,77],"Backdoor":[4],"Attacks":[5],"are":[6,80],"represented":[7],"within":[8],"Vision":[9],"Transformers":[10],"(ViTs).":[11],"By":[12],"assuming":[13],"knowledge":[14],"of":[15,34,42],"the":[16,25,31,35,39,58,104,117],"trigger,":[17],"we":[18,75,122],"identify":[19],"a":[20,72,93,124,139],"specific":[21],"``trigger":[22],"direction''":[23],"in":[24,50,148],"model's":[26,59],"activations":[27],"that":[28,48,135],"corresponds":[29],"to":[30],"internal":[32,95],"representation":[33],"trigger.":[36],"We":[37,101],"confirm":[38],"causal":[40],"role":[41],"this":[43,69],"linear":[44],"direction":[45,70],"by":[46],"showing":[47],"interventions":[49],"both":[51],"activation":[52],"and":[53,65,108,144],"parameter":[54],"space":[55],"consistently":[56],"modulate":[57],"backdoor":[60,78],"behavior":[61],"across":[62,82],"multiple":[63],"datasets":[64],"attack":[66],"types.":[67],"Using":[68],"as":[71],"diagnostic":[73],"tool,":[74],"trace":[76],"features":[79],"processed":[81],"layers.":[83],"Our":[84,132],"analysis":[85],"reveals":[86],"distinct":[87],"qualitative":[88],"differences:":[89],"static-patch":[90],"triggers":[91],"follow":[92],"different":[94],"logic":[96],"than":[97],"stealthy,":[98],"distributed":[99],"triggers.":[100],"further":[102],"examine":[103],"link":[105],"between":[106],"backdoors":[107],"adversarial":[109],"attacks,":[110],"specifically":[111],"testing":[112],"whether":[113],"PGD-based":[114],"perturbations":[115],"(de-)activate":[116],"identified":[118],"trigger":[119],"mechanism.":[120],"Finally,":[121],"propose":[123],"data-free,":[125],"weight-based":[126],"detection":[127],"scheme":[128],"for":[129,142],"stealthy-trigger":[130],"attacks.":[131],"findings":[133],"show":[134],"mechanistic":[136],"interpretability":[137],"offers":[138],"robust":[140],"framework":[141],"diagnosing":[143],"addressing":[145],"security":[146],"vulnerabilities":[147],"computer":[149],"vision.":[150]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-13T00:00:00"}