BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Silicon Valley Engineering Council - ECPv6.18.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://svec.org
X-WR-CALDESC:Events for Silicon Valley Engineering Council
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/Los_Angeles
BEGIN:DAYLIGHT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
DTSTART:20250309T100000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
DTSTART:20251102T090000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
DTSTART:20260308T100000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
DTSTART:20261101T090000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
DTSTART:20270314T100000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
DTSTART:20271107T090000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=America/Los_Angeles:20261020T143000
DTEND;TZID=America/Los_Angeles:20261020T153000
DTSTAMP:20261020T034810Z
CREATED:20261020T034810Z
LAST-MODIFIED:20261020T034810Z
UID:79051-1792506600-1792510200@svec.org
SUMMARY:Evaluating the Adversarial Robustness of Deployed AI Models
DESCRIPTION:Deep learning vision models are known to be vulnerable to adversarial examples\, where small\, optimized input perturbations can cause confident mispredictions. A common objection is that such attacks work only in the digital domain and do not survive real-world conditions. In this talk\, we show that gradient-based white-box attacks extend to deployed systems in three domains. First\, we demonstrate physical attacks on vision models that remain effective under real-world variation in viewpoint\, lighting\, and distance\, including perturbations that are difficult for humans to perceive. Second\, we adapt the methodology to large language models\, producing jailbreak and prompt injection attacks that elicit harmful content despite safety alignment. Third\, we show that an adversarial image displayed on screen can hijack computer-use agents into executing attacker-chosen commands. These results show that deployed AI models can be reliably compromised by adversaries with gradient access\, with consequences that grow as models move from perception to autonomous action. We present an automated framework for systematic adversarial evaluation\, which we argue should become a standard part of AI deployment.\nCo-sponsored by: Santa Clara University\nSpeaker(s): \, Dr. Nageen Himayat\nRoom: 1302\, Bldg: SCDI\, 500 El Camino Real \, Santa Clara \, California\, United States\, 95053
URL:https://svec.org/event/evaluating-the-adversarial-robustness-of-deployed-ai-models/
LOCATION:Room: 1302\, Bldg: SCDI\, 500 El Camino Real \, Santa Clara \, California\, United States\, 95053
END:VEVENT
END:VCALENDAR