few-tokens-matter-vlm-attacks

Demonstrate that adversarial attacks on vision-language models need not target all tokens equally. Entropy-guided attacks identify high-entropy tokens (critical decision points) where perturbations have maximum impact, achieving comparable attack success with 80% fewer tokens targeted.

Independent GitHub snapshot · Automated classification · Original documentation governs