{"id":"https://openalex.org/W7139923793","doi":"https://doi.org/10.48550/arxiv.2603.18545","title":"CoDA: Exploring Chain-of-Distribution Attacks and Post-Hoc Token-Space Repair for Medical Vision-Language Models","display_name":"CoDA: Exploring Chain-of-Distribution Attacks and Post-Hoc Token-Space Repair for Medical Vision-Language Models","publication_year":2026,"publication_date":"2026-03-19","ids":{"openalex":"https://openalex.org/W7139923793","doi":"https://doi.org/10.48550/arxiv.2603.18545"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.18545","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18545","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.18545","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130232154","display_name":"Xiang Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Xiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130222629","display_name":"Fangfang Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Fangfang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130249466","display_name":"Chunlei Meng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meng, Chunlei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056413955","display_name":"Yuxian Dong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong, Yuxian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130251779","display_name":"Ang Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Ang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130225150","display_name":"Yiwei Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Yiwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130241492","display_name":"Jiahuan Long","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Long, Jiahuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070224461","display_name":"Jiujiang Guo","orcid":"https://orcid.org/0000-0001-8614-4643"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Jiujiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5017525809","display_name":"Chengyin Hu","orcid":"https://orcid.org/0009-0006-9589-0182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Chengyin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3102000057697296,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3102000057697296,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11775","display_name":"COVID-19 diagnosis using AI","score":0.12070000171661377,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.10570000112056732,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6675000190734863},{"id":"https://openalex.org/keywords/coda","display_name":"Coda","score":0.6110000014305115},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5127999782562256},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.47679999470710754},{"id":"https://openalex.org/keywords/readability","display_name":"Readability","score":0.4350999891757965},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.4108999967575073},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.4099000096321106},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.3652999997138977},{"id":"https://openalex.org/keywords/eye-tracking","display_name":"Eye tracking","score":0.3637999892234802}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7049000263214111},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6675000190734863},{"id":"https://openalex.org/C3962253","wikidata":"https://www.wikidata.org/wiki/Q852466","display_name":"Coda","level":2,"score":0.6110000014305115},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5127999782562256},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.47679999470710754},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44850000739097595},{"id":"https://openalex.org/C2778143727","wikidata":"https://www.wikidata.org/wiki/Q1820650","display_name":"Readability","level":2,"score":0.4350999891757965},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.4108999967575073},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4099000096321106},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C56461940","wikidata":"https://www.wikidata.org/wiki/Q970687","display_name":"Eye tracking","level":2,"score":0.3637999892234802},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.3416000008583069},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C31601959","wikidata":"https://www.wikidata.org/wiki/Q931309","display_name":"Medical imaging","level":2,"score":0.31940001249313354},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.31220000982284546},{"id":"https://openalex.org/C168820333","wikidata":"https://www.wikidata.org/wiki/Q448889","display_name":"Visual inspection","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.2709999978542328},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.2702000141143799},{"id":"https://openalex.org/C55020928","wikidata":"https://www.wikidata.org/wiki/Q3813865","display_name":"Image quality","level":3,"score":0.26600000262260437},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.2612999975681305},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C74385725","wikidata":"https://www.wikidata.org/wiki/Q2918559","display_name":"Suggestibility","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25369998812675476},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25220000743865967},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.18545","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18545","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.18545","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18545","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.799592137336731}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Medical":[0],"vision--language":[1],"models":[2,139,154],"(MVLMs)":[3],"are":[4],"increasingly":[5],"used":[6],"as":[7,14,141],"perceptual":[8],"backbones":[9],"in":[10,175,221],"radiology":[11],"pipelines":[12],"and":[13,48,80,83,85,97,111,147,159,214],"the":[15,117,167],"visual":[16,104],"front":[17],"end":[18],"of":[19,120,144],"multimodal":[20,136,153],"assistants,":[21],"yet":[22],"their":[23],"reliability":[24,158],"under":[25],"real":[26],"clinical":[27,53],"workflows":[28],"remains":[29],"underexplored.":[30],"Prior":[31],"robustness":[32,220],"evaluations":[33],"often":[34],"assume":[35],"clean,":[36],"curated":[37],"inputs":[38],"or":[39],"study":[40],"isolated":[41],"corruptions,":[42],"overlooking":[43],"routine":[44],"acquisition,":[45],"reconstruction,":[46],"display,":[47],"delivery":[49,84],"operations":[50],"that":[51,69,216],"preserve":[52],"readability":[54],"while":[55,102,166],"shifting":[56],"image":[57,177],"statistics.":[58],"To":[59],"address":[60],"this":[61],"gap,":[62],"we":[63,170,181],"propose":[64],"CoDA,":[65],"a":[66,183,206],"chain-of-distribution":[67],"framework":[68],"constructs":[70],"clinically":[71,207],"plausible":[72],"pipeline":[73],"shifts":[74],"by":[75],"composing":[76],"acquisition-like":[77],"shading,":[78],"reconstruction":[79],"display":[81],"remapping,":[82],"export":[86],"degradations.":[87],"Under":[88],"masked":[89],"structural-similarity":[90],"constraints,":[91],"CoDA":[92,114,200],"jointly":[93],"optimizes":[94],"stage":[95],"compositions":[96,125],"parameters":[98],"to":[99],"induce":[100],"failures":[101],"preserving":[103],"plausibility.":[105],"Across":[106],"brain":[107],"MRI,":[108],"chest":[109],"X-ray,":[110],"abdominal":[112],"CT,":[113],"substantially":[115],"degrades":[116],"zero-shot":[118],"performance":[119],"CLIP-style":[121],"MVLMs,":[122],"with":[123,192],"chained":[124],"consistently":[126],"more":[127],"damaging":[128],"than":[129,150],"any":[130],"single":[131],"stage.":[132],"We":[133],"also":[134],"evaluate":[135],"large":[137],"language":[138],"(MLLMs)":[140],"technical-authenticity":[142],"auditors":[143],"imaging":[145],"realism":[146],"quality":[148,178],"rather":[149],"pathology.":[151],"Proprietary":[152],"show":[155,215],"degraded":[156],"auditing":[157],"persistent":[160],"high-confidence":[161],"errors":[162],"on":[163,188,198],"CoDA-shifted":[164],"samples,":[165],"medical-specific":[168],"MLLMs":[169],"test":[171],"exhibit":[172],"clear":[173],"deficiencies":[174],"medical":[176],"auditing.":[179],"Finally,":[180],"introduce":[182],"post-hoc":[184],"repair":[185],"strategy":[186],"based":[187],"teacher-guided":[189],"token-space":[190],"adaptation":[191],"patch-level":[193],"alignment,":[194],"which":[195],"improves":[196,219],"accuracy":[197],"archived":[199],"outputs.":[201],"Overall,":[202],"our":[203],"findings":[204],"characterize":[205],"grounded":[208],"threat":[209],"surface":[210],"for":[211],"MVLM":[212],"deployment":[213],"lightweight":[217],"alignment":[218],"deployment.":[222]},"counts_by_year":[],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2026-03-21T00:00:00"}