← Search

Andy Zhou

12 accepted papers

2025

AIR-BENCH 2024: A Safety Benchmark based on Regulation and Policies Specified Risk Categories

ICLR 2025spotlight

Foundation models (FMs) provide societal benefits but also amplify risks. Governments, companies, and researchers have proposed regulatory frameworks, acceptable use policies, and safety benchmarks in response. However, existing public benchmarks often define safety categories based on previous lite…

Cited by 0SourcePDFScholar
2025

AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration

NeurIPS 2025poster

As large language models (LLMs) become increasingly capable, security and safety evaluation are crucial. While current red teaming approaches have made strides in assessing LLM vulnerabilities, they often rely heavily on human input and lack comprehensive coverage of emerging attack vectors. This pa…

Cited by 0SourceScholar
2025

MMDT: Decoding the Trustworthiness and Safety of Multimodal Foundation Models

ICLR 2025poster

Multimodal foundation models (MMFMs) play a crucial role in various applications, including autonomous driving, healthcare, and virtual assistants. However, several studies have revealed vulnerabilities in these models, such as generating unsafe content by text-to-image models. Existing benchmarks o…

2025

Tamper-Resistant Safeguards for Open-Weight LLMs

ICLR 2025poster

Rapid advances in the capabilities of large language models (LLMs) have raised widespread concerns regarding their potential for malicious use. Open-weight LLMs present unique challenges, as existing safeguards lack robustness to tampering attacks that modify model weights. For example, recent works…

2024

FedSelect: Personalized Federated Learning with Customized Selection of Parameters for Fine-Tuning

CVPR 2024poster

Standard federated learning approaches suffer when client data distributions have sufficient heterogeneity. Recent methods addressed the client data heterogeneity issue via personalized federated learning (PFL) - a class of FL algorithms aiming to personalize learned global knowledge to better suit…

2024

Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters

NeurIPS 2024poster

Large Language Models (LLMs) are typically harmless but remain vulnerable to carefully crafted prompts known as ``jailbreaks'', which can bypass protective measures and induce harmful behavior. Recent advancements in LLMs have incorporated moderation guardrails that can filter outputs, which trigger…

Cited by 14SourcePDFScholar
2024

Language Agent Tree Search Unifies Reasoning, Acting, and Planning in Language Models

ICML 2024poster

While language models (LMs) have shown potential across a range of decision-making tasks, their reliance on simple acting processes limits their broad deployment as autonomous agents. In this paper, we introduce Language Agent Tree Search (LATS) -- the first general framework that synergizes the cap…

2024

RedCode: Risky Code Execution and Generation Benchmark for Code Agents

NeurIPS 2024poster

With the rapidly increasing capabilities and adoption of code agents for AI-assisted coding and software development, safety and security concerns, such as generating or executing malicious code, have become significant barriers to the real-world deployment of these agents. To provide comprehensive…

Cited by 7SourcecodeScholar
2024

Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks

NeurIPS 2024spotlight

Despite advances in AI alignment, large language models (LLMs) remain vulnerable to adversarial attacks or jailbreaking, in which adversaries can modify prompts to induce unwanted behavior. While some defenses have been proposed, they have not been adapted to newly proposed attacks and more challeng…

2023

A Sentence Speaks a Thousand Images: Domain Generalization through Distilling CLIP with Language Guidance

ICCV 2023poster

Domain generalization studies the problem of training a model with samples from several domains (or distributions) and then testing the model with samples from a new, unseen domain. In this paper, we propose a novel approach for domain generalization that leverages recent advances in large vision-la…

Cited by 38PDFcodeScholar
2023

Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models

NeurIPS 2023poster

We propose a conceptually simple and lightweight framework for improving the robustness of vision models through the combination of knowledge distillation and data augmentation. We address the conjecture that larger models do not make for better teachers by showing strong gains in out-of-distributio…

2023

YouTubePD: A Multimodal Benchmark for Parkinson’s Disease Analysis

NeurIPS 2023poster

The healthcare and AI communities have witnessed a growing interest in the development of AI-assisted systems for automated diagnosis of Parkinson's Disease (PD), one of the most prevalent neurodegenerative disorders. However, the progress in this area has been significantly impeded by the absence o…

Cited by 3SourcePDFScholar