mlsanityData to 7 Oct 2026

Intriguing Equivalence Structures of the Embedding Space of Vision Transformers

arXiv 2401.15568 ↗First posted 28 Jan 2024cs.CV cs.AI cs.LGcited by 8

Not on the map. Why?

Abstract (arXiv)

Pre-trained large foundation models play a central role in the recent surge of artificial intelligence, resulting in fine-tuned models with remarkable abilities when measured on benchmark datasets, standard exams, and applications. Due to their inherent complexity, these models are not well understood. While small adversarial inputs to such models are well known, the structures of the representation space are not well characterized despite their fundamental importance. In this paper, using the vision transformers as an example due to the continuous nature of their input space, we show via analyses and systematic experiments that the representation space consists of large piecewise linear subspaces where there exist very different inputs sharing the same representations, and at the same time, local normal spaces where there are visually indistinguishable inputs having very different representations. The empirical results are further verified using the local directional estimations of the Lipschitz constants of the underlying models. Consequently, the resulting representations change the results of downstream models, and such models are subject to overgeneralization and with limited semantically meaningful generalization capability.

Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 33 of its 44 references that are in the map. First posted on arXiv 28 Jan 2024.

Builds on

33 of 44 references.

References · 33

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
  6. 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
  7. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2013Intriguing properties of neural networkscited by 5,114
  10. 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
  11. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  12. 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
21 more
  1. 2016Understanding deep learning requires rethinking generalizationcited by 1,657
  2. 2023ImageBind: One Embedding Space To Bind Them Allcited by 1,162
  3. 2016Adversarial Machine Learning at Scalecited by 934
  4. 2017Exploring Generalization in Deep Learningcited by 595
  5. 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
  6. 2022Multimodal Learning with Transformers: A Surveycited by 399
  7. 2014On the Number of Linear Regions of Deep Neural Networkscited by 378
  8. 2023Are aligned neural networks adversarially aligned?cited by 305
  9. 2018Adversarial Attacks and Defences: A Surveycited by 259
  10. 2021Understanding Robustness of Transformers for Image Classificationcited by 250
  11. 2019Deep ReLU Networks Have Surprisingly Few Activation Patternscited by 160
  12. 2020Lipschitz constant estimation of Neural Networks via sparse polynomial optimizationcited by 87
  13. 2022Concept Activation Regions: A Generalized Framework For Concept-Based Explanationscited by 57
  14. 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
  15. 2021Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentationcited by 40
  16. 2021Pyramid Adversarial Training Improves ViT Performancecited by 39
  17. 2021Analytical bounds on the local Lipschitz constants of ReLU networkscited by 12
  18. 2022IoT Device Identification Based on Network Traffic Characteristicscited by 2
  19. 2023Can Attention Be Used to Explain EHR-Based Mortality Prediction Tasks: A Case Study on Hemorrhagic Strokecited by 2
  20. 2021Network Traffic Characteristics of IoT Devices in Smart Homescited by 1
  21. 2023Unsupervised clustering of disturbances in power systems via deep convolutional autoencoderscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 5; 2025: 2; 2026: 1.

8 papers.