← Search

Maximilian Dreyer

4 accepted papers

2026

Dyslexify: A Mechanistic Defense Against Typographic Attacks in CLIP

ICLR 2026poster

Typographic attacks exploit multi-modal systems by injecting text into images, leading to targeted misclassifications, malicious content generation and even Vision-Language Model jailbreaks. In this work, we analyze how CLIP vision encoders behave under typographic attacks, locating specialized atte…

Cited by 0SourcecodeScholar
2025

Navigating Neural Space: Revisiting Concept Activation Vectors to Overcome Directional Divergence

ICLR 2025poster

With a growing interest in understanding neural network prediction strategies, Concept Activation Vectors (CAVs) have emerged as a popular tool for modeling human-understandable concepts in the latent space. Commonly, CAVs are computed by leveraging linear classifiers optimizing the *separability* o…

Cited by 5SourcePDFScholar
2024

AttnLRP: Attention-Aware Layer-Wise Relevance Propagation for Transformers

ICML 2024poster

Large Language Models are prone to biased predictions and hallucinations, underlining the paramount importance of understanding their model-internal reasoning process. However, achieving faithful attributions for the entirety of a black-box transformer model and maintaining computational efficiency…

2024

From Hope to Safety: Unlearning Biases of Deep Models via Gradient Penalization in Latent Space

AAAI 2024technical

Deep Neural Networks are prone to learning spurious correlations embedded in the training data, leading to potentially biased predictions. This poses risks when deploying these models for high-stake decision-making, such as in medical applications. Current methods for post-hoc model correction eithe…