← Search

Changjiang Li

11 accepted papers

2026

Bridging the Copyright Gap: Do Large Vision-Language Models Recognize and Respect Copyrighted Content?

AAAI 2026technical

Large vision-language models (LVLMs) have achieved remarkable advancements in multimodal reasoning tasks. However, their widespread accessibility raises critical concerns about potential copyright infringement. Will LVLMs accurately recognize and comply with copyright regulations when encountering c

Cited by 0SourcePDFScholar
2026

Reasoning or Retrieval? A Study of Answer Attribution on Large Reasoning Models

ICLR 2026poster

Large reasoning models (LRMs) exhibit unprecedented capabilities in solving complex problems through Chain-of-Thought (CoT) reasoning. However, recent studies reveal that their final answers often contradict their own reasoning traces. We hypothesize that this inconsistency stems from two competing…

Cited by 0SourceScholar
2026

When Agents “Misremember” Collectively: Exploring the Mandela Effect in LLM-based Multi-Agent Systems

ICLR 2026poster

Recent advancements in large language models (LLMs) have significantly enhanced the capabilities of collaborative multi-agent systems, enabling them to address complex challenges. However, within these multi-agent systems, the susceptibility of agents to collective cognitive biases remains an undere…

Cited by 0SourcecodeScholar
2025

AIA: Autoregression-Based Injection Attacks Against Text2SQL Models

AAAI 2025technical

To facilitate understanding of users' diverse queries against the back-end databases in web applications, researchers have introduced Text-to-SQL (Text2SQL) models that can generate well-structured SQL queries from users' query texts in natural language. As the Text2SQL model decouples the user quer…

Cited by 0SourcePDFScholar
2025

RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models

ICLR 2025poster

Differentially private diffusion models (DPDMs) harness the remarkable generative capabilities of diffusion models while enforcing differential privacy (DP) for sensitive data. However, existing DPDM training approaches often suffer from significant utility loss, large memory footprint, and expensiv…

2025

RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction

ICLR 2025poster

Jailbreak attacks circumvent LLMs' built-in safeguards by concealing harmful queries within adversarial prompts. While most existing defenses attempt to mitigate the effects of adversarial prompts, they often prove inadequate as adversarial prompts can take arbitrary, adaptive forms. This paper intr…

Cited by 4SourcePDFScholar
2025

VideoEraser: Concept Erasure in Text-to-Video Diffusion Models

EMNLP 2025

The rapid growth of text-to-video (T2V) diffusion models has raised concerns about privacy, copyright, and safety due to their potential misuse in generating harmful or misleading content. These models are often trained on numerous datasets, including unauthorized personal identities, artistic creat

Cited by 0SourcePDFScholar
2023

An Embarrassingly Simple Backdoor Attack on Self-supervised Learning

ICCV 2023poster

As a new paradigm in machine learning, self-supervised learning (SSL) is capable of learning high-quality representations of complex data without relying on labels. In addition to eliminating the need for labeled data, research has found that SSL improves the adversarial robustness over supervised l…

Cited by 51PDFcodeScholar
2023

Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks

NeurIPS 2023poster

Pre-trained language models (PLMs) have demonstrated remarkable performance as few-shot learners. However, their security risks under such settings are largely unexplored. In this work, we conduct a pilot study showing that PLMs as few-shot learners are highly vulnerable to backdoor attacks while ex…

2023

IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI

NeurIPS 2023poster

Diffusion-based image generation models, such as Stable Diffusion or DALL·E 2, are able to learn from given images and generate high-quality samples following the guidance from prompts. For instance, they can be used to create artistic images that mimic the style of an artist based on his/her origi…

2023

The Dark Side of AutoML: Towards Architectural Backdoor Search

ICLR 2023poster

This paper asks the intriguing question: is it possible to exploit neural architecture search (NAS) as a new attack vector to launch previously improbable attacks? Specifically, we present EVAS, a new attack that leverages NAS to find neural architectures with inherent backdoors and exploits such vu…