Intriguing Equivalence Structures of the Embedding Space of Vision Transformers
Not on the map. Why?
Abstract (arXiv)
Pre-trained large foundation models play a central role in the recent surge of artificial intelligence, resulting in fine-tuned models with remarkable abilities when measured on benchmark datasets, standard exams, and applications. Due to their inherent complexity, these models are not well understood. While small adversarial inputs to such models are well known, the structures of the representation space are not well characterized despite their fundamental importance. In this paper, using the vision transformers as an example due to the continuous nature of their input space, we show via analyses and systematic experiments that the representation space consists of large piecewise linear subspaces where there exist very different inputs sharing the same representations, and at the same time, local normal spaces where there are visually indistinguishable inputs having very different representations. The empirical results are further verified using the local directional estimations of the Lipschitz constants of the underlying models. Consequently, the resulting representations change the results of downstream models, and such models are subject to overgeneralization and with limited semantically meaningful generalization capability.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 33 of its 44 references that are in the map. First posted on arXiv 28 Jan 2024.
Builds on
33 of 44 references.
References · 33
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
21 more
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2023ImageBind: One Embedding Space To Bind Them Allcited by 1,162
- 2016Adversarial Machine Learning at Scalecited by 934
- 2017Exploring Generalization in Deep Learningcited by 595
- 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
- 2022Multimodal Learning with Transformers: A Surveycited by 399
- 2014On the Number of Linear Regions of Deep Neural Networkscited by 378
- 2023Are aligned neural networks adversarially aligned?cited by 305
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2021Understanding Robustness of Transformers for Image Classificationcited by 250
- 2019Deep ReLU Networks Have Surprisingly Few Activation Patternscited by 160
- 2020Lipschitz constant estimation of Neural Networks via sparse polynomial optimizationcited by 87
- 2022Concept Activation Regions: A Generalized Framework For Concept-Based Explanationscited by 57
- 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
- 2021Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentationcited by 40
- 2021Pyramid Adversarial Training Improves ViT Performancecited by 39
- 2021Analytical bounds on the local Lipschitz constants of ReLU networkscited by 12
- 2022IoT Device Identification Based on Network Traffic Characteristicscited by 2
- 2023Can Attention Be Used to Explain EHR-Based Mortality Prediction Tasks: A Case Study on Hemorrhagic Strokecited by 2
- 2021Network Traffic Characteristics of IoT Devices in Smart Homescited by 1
- 2023Unsupervised clustering of disturbances in power systems via deep convolutional autoencoderscited by 1
Built on by
Citing papers per year: 2024: 5; 2025: 2; 2026: 1.
8 papers.
- 2024Malicious Path Manipulations via Exploitation of Representation Vulnerabilities of Vision-Language Navigation Systemscited by 10
- 2024Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Modelscited by 3
- 2024Intriguing Differences Between Zero-Shot and Systematic Evaluations of Vision-Language Transformer Modelscited by 2
- 2024A singular Riemannian Geometry Approach to Deep Neural Networks III. Piecewise Differentiable Layers and Random Walks on n-dimensional Classescited by 2
- 2025DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilitiescited by 1
- 2024Unveiling Transformer Perception by Exploring Input Manifoldscited by 0
- 2025Are Vision Transformer Representations Semantically Meaningful? A Case Study in Medical Imagingcited by 0
- 2026Certified Interface Aliases: Exact Collisions in Vision-Language Preprocessing, and When They Existcited by 0
- 2026Certified Interface Aliases: Exact Collisions in Vision-Language Preprocessing, and When They Exist26 Sep 2026
- 2025Are Vision Transformer Representations Semantically Meaningful? A Case Study in Medical Imaging2 Jul 2025
- 2025DeepSeek on a Trip: Inducing Targeted Visual Hallucinations via Representation Vulnerabilities11 Feb 2025
- 2024Unveiling Transformer Perception by Exploring Input Manifolds8 Oct 2024
- 2024Malicious Path Manipulations via Exploitation of Representation Vulnerabilities of Vision-Language Navigation Systems10 Jul 2024
- 2024Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Models1 Jul 2024
- 2024A singular Riemannian Geometry Approach to Deep Neural Networks III. Piecewise Differentiable Layers and Random Walks on n-dimensional Classes9 Apr 2024
- 2024Intriguing Differences Between Zero-Shot and Systematic Evaluations of Vision-Language Transformer Models13 Feb 2024