← Search

Bochuan Cao

12 accepted papers

2025

AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion Models

ICML 2025poster

Recent advances in diffusion models have significantly enhanced the quality of image synthesis, yet they have also introduced serious safety concerns, particularly the generation of Not Safe for Work (NSFW) content. Previous research has demonstrated that adversarial prompts can be used to generate…

2025

JoPA: Explaining Large Language Model’s Generation via Joint Prompt Attribution

ACL 2025long

Large Language Models (LLMs) have demonstrated impressive performances in complex text generation tasks. However, the contribution of the input prompt to the generated content still remains obscure to humans, underscoring the necessity of understanding the causality between input and output pairs. E…

2025

Monitoring Decoding: Mitigating Hallucination via Evaluating the Factuality of Partial Response during Generation

ACL 2025finding

While large language models have demonstrated exceptional performance across a wide range of tasks, they remain susceptible to hallucinations – generating plausible yet factually incorrect contents. Existing methods to mitigating such risk often rely on sampling multiple full-length generations, whi…

Cited by 0SourcePDFScholar
2025

TruthFlow: Truthful LLM Generation via Representation Flow Correction

ICML 2025poster

Large language models (LLMs) are known to struggle with consistently generating truthful responses. While various representation intervention techniques have been proposed, these methods typically apply a universal representation correction vector to all input queries, limiting their effectiveness a…

Cited by 0SourcePDFScholar
2025

WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response

NAACL 2025findings

The recent breakthrough in large language models (LLMs) such as ChatGPT has revolutionized every industry at an unprecedented pace. Alongside this progress also comes mounting concerns about LLMs’ susceptibility to jailbreaking attacks, which leads to the generation of harmful or unsafe content. Whi…

Cited by 11SourcePDFScholar
2024

Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM

ACL 2024long

Recently, Large Language Models (LLMs) have made significant advancements and are now widely used across various domains. Unfortunately, there has been a rising concern that LLMs can be misused to generate harmful or malicious content. Though a line of research has focused on aligning LLMs with huma…

2024

Jailbreak Open-Sourced Large Language Models via Enforced Decoding

ACL 2024long

Large Language Models (LLMs) have achieved unprecedented performance in Natural Language Generation (NLG) tasks. However, many existing studies have shown that they could be misused to generate undesired content. In response, before releasing LLMs for public access, model developers usually align th…

Cited by 14SourcePDFScholar
2024

Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization

NeurIPS 2024poster

Researchers have been studying approaches to steer the behavior of Large Language Models (LLMs) and build personalized LLMs tailored for various applications. While fine-tuning seems to be a direct solution, it requires substantial computational resources and may significantly affect the utility of…

2024

Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections

NAACL 2024long

Recent developments in Large Language Models (LLMs) have manifested significant advancements. To facilitate safeguards against malicious exploitation, a body of research has concentrated on aligning LLMs with human preferences and inhibiting their generation of inappropriate content. Unfortunately,…

2023

IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI

NeurIPS 2023poster

Diffusion-based image generation models, such as Stable Diffusion or DALL·E 2, are able to learn from given images and generate high-quality samples following the guidance from prompts. For instance, they can be used to create artistic images that mimic the style of an artist based on his/her origi…

2022

Wild-Time: A Benchmark of in-the-Wild Distribution Shift over Time

NeurIPS 2022accept

Distribution shifts occur when the test distribution differs from the training distribution, and can considerably degrade performance of machine learning models deployed in the real world. While recent works have studied robustness to distribution shifts, distribution shifts arising from the passage…