{"id":"https://openalex.org/W7162287680","doi":"https://doi.org/10.48550/arxiv.2605.23065","title":"Dithering Defense: Adversarial Robustness of Vision Foundation Models via Multi-Level Floyd-Steinberg Dithering","display_name":"Dithering Defense: Adversarial Robustness of Vision Foundation Models via Multi-Level Floyd-Steinberg Dithering","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162287680","doi":"https://doi.org/10.48550/arxiv.2605.23065"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.23065","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23065","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.23065","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061448965","display_name":"Yury Belousov","orcid":"https://orcid.org/0000-0001-6461-734X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Belousov, Yury","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077470788","display_name":"Brian Pulfer","orcid":"https://orcid.org/0000-0003-0809-6978"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pulfer, Brian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083279037","display_name":"Vitaliy Kinakh","orcid":"https://orcid.org/0000-0001-5301-9141"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kinakh, Vitaliy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5118865107","display_name":"Slava Voloshynovskiy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Voloshynovskiy, Slava","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dither","display_name":"Dither","score":0.9764000177383423},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8292999863624573},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6029000282287598},{"id":"https://openalex.org/keywords/quantization","display_name":"Quantization (signal processing)","score":0.5250999927520752},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.45080000162124634},{"id":"https://openalex.org/keywords/grayscale","display_name":"Grayscale","score":0.4043999910354614},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.3407999873161316}],"concepts":[{"id":"https://openalex.org/C70451592","wikidata":"https://www.wikidata.org/wiki/Q376493","display_name":"Dither","level":3,"score":0.9764000177383423},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8292999863624573},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6563000082969666},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6086000204086304},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6029000282287598},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.571399986743927},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.5250999927520752},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C78201319","wikidata":"https://www.wikidata.org/wiki/Q685727","display_name":"Grayscale","level":3,"score":0.4043999910354614},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3418999910354614},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C193828747","wikidata":"https://www.wikidata.org/wiki/Q864118","display_name":"Binary image","level":4,"score":0.3314000070095062},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.3158999979496002},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.3140000104904175},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.28850001096725464},{"id":"https://openalex.org/C2780966255","wikidata":"https://www.wikidata.org/wiki/Q5474306","display_name":"Foundation (evidence)","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.23065","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23065","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.23065","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.23065","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vision":[0],"foundation":[1],"models":[2],"are":[3],"widely":[4],"used":[5],"as":[6,29,90,92],"frozen":[7],"backbones":[8],"across":[9,64],"many":[10],"downstream":[11],"tasks,":[12],"making":[13],"them":[14],"a":[15,30,55,97],"single":[16,56],"point":[17],"of":[18,84],"failure":[19],"under":[20],"adversarial":[21,37],"attack.":[22],"We":[23],"study":[24],"multi-level":[25],"Floyd-Steinberg":[26,104],"error-diffusion":[27],"dithering":[28,105],"lightweight,":[31],"model-agnostic":[32],"input":[33],"transformation":[34],"that":[35,103],"disrupts":[36],"perturbations":[38],"while":[39],"preserving":[40],"semantic":[41],"content.":[42],"Unlike":[43],"prior":[44],"work,":[45],"which":[46],"was":[47],"limited":[48],"to":[49],"binary":[50],"dithering,":[51],"grayscale":[52],"CIFAR-10,":[53],"and":[54,81],"small":[57],"model":[58,77],"trained":[59],"from":[60],"scratch,":[61],"we":[62],"evaluate":[63],"six":[65],"tasks":[66],"(classification,":[67],"segmentation,":[68],"depth":[69],"estimation,":[70],"retrieval,":[71],"captioning,":[72],"visual":[73],"question":[74],"answering),":[75],"two":[76],"families":[78],"(DINOv2,":[79],"PaliGemma),":[80],"three":[82],"attacks":[83],"increasing":[85],"strength":[86],"(PGD,":[87],"MI-FGSM,":[88],"SIA),":[89],"well":[91],"an":[93],"adaptive":[94],"attacker":[95],"using":[96],"straight-through":[98],"estimator.":[99],"Our":[100],"results":[101],"show":[102],"at":[106],"intermediate":[107],"quantization":[108],"levels,":[109],"especially":[110],"when":[111],"combined":[112],"with":[113,125],"post-processing":[114],"blur,":[115],"exceeds":[116],"or":[117],"matches":[118],"all":[119],"tested":[120],"baselines,":[121],"including":[122],"diffusion-based":[123],"denoising,":[124],"substantially":[126],"less":[127],"degradation":[128],"on":[129],"clean":[130],"inputs.":[131]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-26T00:00:00"}