Researchers have identified a new type of backdoor vulnerability, dubbed ToBAC, that specifically targets Unified Autoregressive Models (UAMs). These models, capable of generating both text and image tokens, are susceptible to multimodal backdoor attacks where subtle triggers can manipulate outputs across different modalities. The ToBAC attack can be implemented through data poisoning or model poisoning, leading to harmful or biased content generation. Experiments showed significant success rates, with one attack influencing brand promotion or ideological content in 55% of generations for the Liquid model and another achieving 63.1% success against JanusPro via data poisoning. AI
IMPACT Highlights potential security risks in multimodal AI, necessitating new defense strategies.
RANK_REASON Academic paper detailing a new type of vulnerability in AI models. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →