{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:08:32Z","timestamp":1784182112249,"version":"3.55.0"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,4]]},"DOI":"10.1109\/host68814.2026.11604973","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T20:02:14Z","timestamp":1784145734000},"page":"356-366","source":"Crossref","is-referenced-by-count":0,"title":["FlipLLM: Efficient Bit-Flip Attacks on Multimodal LLMs Using Reinforcement Learning"],"prefix":"10.1109","author":[{"given":"Khurram","family":"Khalil","sequence":"first","affiliation":[{"name":"University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khaza Anuarul","family":"Hoque","sequence":"additional","affiliation":[{"name":"University of Missouri-Columbia,Department of Electrical Engineering and Computer Science,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1877","article-title":"Language models are few-shot learners","volume":"33","author":"Brown","year":"2020","journal-title":"in Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref2","article-title":"Language models are unsupervised multitask learners","author":"Radford","year":"2019","journal-title":"OpenAI Blog"},{"key":"ref3","article-title":"On the opportunities and risks of foundation models","author":"Bommasani","year":"2021","journal-title":"arXiv preprint"},{"key":"ref4","volume-title":"Genbfa: An evolutionary optimization approach to bit-flip attacks on 11 ms","author":"Das","year":"2025"},{"key":"ref5","volume-title":"Prisonbreak: Jailbreaking large language models with fewer than twenty-five targeted bit-flips","author":"Coalson","year":"2024"},{"key":"ref6","first-page":"1463","article-title":"\\{DeepHammer\\}: Depleting the intelligence of deep neural networks through targeted chain of bit flips","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Yao"},{"key":"ref7","article-title":"Progressive bit search: Scalable fault injection for deep learning models","author":"Wang","year":"2020","journal-title":"ICML"},{"key":"ref8","article-title":"Fault sneaks into deep learning systems: A study of bit-flip attacks and defenses","author":"Zhao","year":"2019","journal-title":"arXiv preprint"},{"key":"ref9","author":"DeepSeek-AI","year":"2024","journal-title":"Deepseek-v2: A strong, economical, and efficient mixture-of-experts language model"},{"key":"ref10","volume-title":"Gpuhammer: Rowhammer attacks on gpu memories are practical","author":"Lin","year":"2025"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00130"},{"key":"ref12","author":"Liu","year":"2021","journal-title":"Bit-flip gradient: Efficient fault injection for neural networks"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3716368.3735278"},{"key":"ref14","article-title":"A comprehensive survey on non-invasive fault injection attacks","author":"Shuvo","year":"2023","journal-title":"Cryptology ePrint Archive, Tech. Rep."},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2019.2915318"},{"key":"ref17","volume-title":"GPU Operator","year":"2023"},{"key":"ref18","article-title":"Mignificient: Fast, isolated, and gpu-enabled serverless functions","volume-title":"SC \u201924: Proceedings of the International Conference for High Performance Computing","author":"Copik"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/DSN53405.2022.00054"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00020"},{"key":"ref21","volume-title":"Trrespass: Exploiting the many sides of target row refresh","author":"Frigo","year":"2020"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833772"},{"key":"ref23","volume-title":"The llama 3 herd of models","author":"Grattafiori","year":"2024"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1516"},{"key":"ref25","article-title":"Measuring massive multitask language understanding","author":"Hendrycks","year":"2021","journal-title":"arXiv preprint"},{"key":"ref26","volume-title":"Mmlu-pro: A more robust and challenging multi-task language understanding benchmark","author":"Wang","year":"2024"},{"key":"ref27","first-page":"6261","article-title":"Making the v in VQA matter: Embodying bias in evaluation and re-ranking","volume-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Goyal"},{"key":"ref28","first-page":"8419","article-title":"TextVQA: Towards reading text in visual question answering","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Singh"},{"key":"ref29","volume-title":"Efficient large language models: A survey","author":"Wan","year":"2024"}],"event":{"name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","location":"Washington, DC, USA","start":{"date-parts":[[2026,5,4]]},"end":{"date-parts":[[2026,5,7]]}},"container-title":["2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11604575\/11604182\/11604973.pdf?arnumber=11604973","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T05:36:03Z","timestamp":1784180163000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11604973\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,4]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/host68814.2026.11604973","relation":{},"subject":[],"published":{"date-parts":[[2026,5,4]]}}}