← Search

Chaozhuo Li

39 accepted papers

2026

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

AAAI 2026technical

Large language model-based multi-agent systems (LLM-MAS) effectively accomplish complex and dynamic tasks through inter-agent communication, but this reliance introduces substantial safety vulnerabilities. Existing attack methods targeting LLM-MAS either compromise agent internals or rely on direct

Cited by 10SourcePDFScholar
2026

Diffusion with a Linguistic Compass: Steering the Generation of Clinically Plausible Future sMRI Representations for Early MCI Conversion Prediction

CVPR 2026

Early prediction of Mild Cognitive Impairment (MCI) conversion is hampered by a trade-off between immediacy--making fast predictions from a single baseline sMRI--and accuracy--leveraging longitudinal scans to capture disease progression. We propose MCI-Diff, a diffusion-based framework that synthesi

Cited by 0SourceScholar
2026

MirrorShield: Towards Dynamic Adaptive Defense Against Jailbreaks via Entropy-Guided Mirror Crafting

AAAI 2026technical

Defending large language models (LLMs) against jailbreak attacks is crucial for ensuring their safe deployment. Existing defense strategies typically rely on predefined static criteria to differentiate between harmful and benign prompts. However, such rigid rules fail to accommodate the inherent com

Cited by 0SourcePDFScholar
2026

Paradigm Shift of GNN Explainer from Label Space to Prototypical Representation Space

ICLR 2026poster

Post-hoc instance-level graph neural network (GNN) explainers are developed to identify a compact subgraph (i.e., explanation) that encompasses the most influential components for each input graph. A fundamental limitation of existing methods lies in the insufficient utilization of structural inform…

Cited by 0SourcecodeScholar
2025

Auto Encoding Neural Process for Multi-interest Recommendation

AAAI 2025technical

Multi-interest recommendation constantly aspires to an oracle individual preference modeling approach, that satisfies the diverse and dynamic properties. Fueled by the deep learning technology, existing neural network (NN)-based recommender systems employ single-point or multi-point interest represe…

2025

Beyond Text: Fine-Grained Multi-Modal Fact Verification with Hypergraph Transformers

AAAI 2025technical

Fact verification has become increasingly vital in the internet age, driven by the proliferation of false claims and political misinformation. While traditional methods rely predominantly on text-based evidence, multi-modal evidence introduces richer sources of information, offering valuable insigh…

Cited by 0SourcePDFScholar
2025

Bridging External and Parametric Knowledge: Mitigating Hallucination of LLMs with Shared-Private Semantic Synergy in Dual-Stream Knowledge

EMNLP 2025

Retrieval-augmented generation (RAG) aims to mitigate the hallucination of Large Language Models (LLMs) by retrieving and incorporating relevant external knowledge into the generation process. However, the external knowledge may contain noise and conflict with the parametric knowledge of LLMs, leadi

Cited by 0SourcePDFScholar
2025

Collaborative Evolution: Multi-Round Learning Between Large and Small Language Models for Emergent Fake News Detection

AAAI 2025technical

The proliferation of fake news on social media platforms has exerted a substantial influence on society, leading to discernible impacts and deleterious consequences. Conventional deep learning methodologies employing small language models (SLMs) suffer from the necessity for extensive supervised tra…

Cited by 0SourcePDFScholar
2025

Curriculum Hierarchical Knowledge Distillation for Bias-Free Survival Prediction

IJCAI 2025

Survival prediction is a pivotal task for estimating mortality risk within a given timeframe based on whole slide images (WSIs). Conventional models typically assume that WSIs across patients are independent and identically distributed, an assumption that may not hold due to inherent variability in

Cited by 0SourcePDFScholar
2025

DSG-MCTS: A Dynamic Strategy-Guided Monte Carlo Tree Search for Diversified Reasoning in Large Language Models

EMNLP 2025

Large language models (LLMs) have shown strong potential in complex reasoning tasks. However, as task complexity increases, their performance often degrades, resulting in hallucinations, errors, and logical inconsistencies. To enhance reasoning capabilities, Monte Carlo Tree Search (MCTS) has been i

Cited by 0SourcePDFScholar
2025

Feint and Attack: Jailbreaking and Protecting LLMs via Attention Distribution Modeling

IJCAI 2025

Most jailbreak methods for large language models (LLMs) focus on superficially improving attack success through manually defined rules. However, they fail to uncover the underlying mechanisms within target LLMs that explain why an attack succeeds or fails. In this paper, we propose investigating the

Cited by 0SourcePDFScholar
2025

From Representation Space to Prognostic Insights: Whole Slide Image Generation with Hierarchical Diffusion Model for Survival Prediction

AAAI 2025technical

Deep learning has significantly enhanced survival prediction using whole slide images (WSIs) by adopting a two-stage learning paradigm: WSI preparation and patient-level prediction. While existing research generally concentrates on developing advanced patient-level prediction modules, the critical i…

Cited by 0SourcePDFScholar
2025

Ghidorah: Towards Robust Multi-Scale Information Diffusion Prediction via Test-Time Training

AAAI 2025technical

Information diffusion prediction (IDP) is a pivotal task for understanding the dynamics of information propagation within social networks. Conventional models typically adhere to a fixed learning-based paradigm, where the trained prediction model remains static during the inference phase. This parad…

Cited by 0SourcePDFScholar
2025

LlmFixer: Fix the Helpfulness of Defensive Large Language Models

EMNLP 2025

Defense strategies of large language models besides alignment are introduced to defend against jailbreak attacks, and they have managed to decrease the success rate of jailbreak attacks. However, these defense strategies weakened the helpfulness of large language models. In this work, we propose a u

Cited by 0SourcePDFScholar
2025

MRR-FV: Unlocking Complex Fact Verification with Multi-Hop Retrieval and Reasoning

AAAI 2025technical

The pervasive spread of misinformation on social networks highlights the critical necessity for effective fact verification systems. Traditional approaches primarily focus on pairwise correlations between claims and evidence, often neglecting comprehensive multi-hop retrieval and reasoning, which re…

Cited by 0SourcePDFScholar
2025

One SPACE to Rule Them All: Jointly Mitigating Factuality and Faithfulness Hallucinations in LLMs

NeurIPS 2025poster

LLMs have demonstrated unprecedented capabilities in natural language processing, yet their practical deployment remains hindered by persistent factuality and faithfulness hallucinations. While existing methods address these hallucination types independently, they inadvertently induce performance tr…

Cited by 0SourceScholar
2025

Reinforced IR: A Self-Boosting Framework For Domain-Adapted Information Retrieval

ACL 2025long

While retrieval techniques are widely used in practice, they still face significant challenges in cross-domain scenarios. Recently, generation-augmented methods have emerged as a promising solution to this problem. These methods enhance raw queries by incorporating additional information from an LLM…

Cited by 0SourcePDFScholar
2025

What Is a Good Question? Assessing Question Quality via Meta-Fact Checking

AAAI 2025technical

Knowledge-based questions are typically employed to evaluate LLM's knowledge boundaries; meanwhile, numerous studies focus on question generation as a means to enhance the capabilities of both models and individuals. However, there is a lack of in-depth exploration about what constitutes a good ques…

2024

BaitAttack: Alleviating Intention Shift in Jailbreak Attacks via Adaptive Bait Crafting

EMNLP 2024main

Jailbreak attacks enable malicious queries to evade detection by LLMs. Existing attacks focus on meticulously constructing prompts to disguise harmful intentions. However, the incorporation of sophisticated disguising prompts may incur the challenge of “intention shift”. Intention shift occurs when…

Cited by 3SourcePDFScholar
2024

Enhancing Robustness of Graph Neural Networks on Social Media with Explainable Inverse Reinforcement Learning

NeurIPS 2024spotlight

Adversarial attacks against graph neural networks (GNNs) through perturbations of the graph structure are increasingly common in social network tasks like rumor detection. Social media platforms capture diverse attack sequence samples through both machine and manual screening processes. Investigatin…

Cited by 2SourcePDFScholar
2024

Evidence Retrieval is almost All You Need for Fact Verification

ACL 2024findings

Current fact verification methods generally follow the two-stage training paradigm: evidence retrieval and claim verification. While existing works focus on developing sophisticated claim verification modules, the fundamental importance of evidence retrieval is largely ignored. Existing approaches u…

Cited by 4SourcePDFScholar
2024

Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models

ICLR 2024poster

Machine learning has demonstrated remarkable performance over finite datasets, yet whether the scores over the fixed benchmarks can sufficiently indicate the model’s performance in the real world is still in discussion. In reality, an ideal robust model will probably behave similarly to the oracle (…

Cited by 8SourcePDFScholar
2024

Generalizing Knowledge Graph Embedding with Universal Orthogonal Parameterization

ICML 2024poster

Recent advances in knowledge graph embedding (KGE) rely on Euclidean/hyperbolic orthogonal relation transformations to model intrinsic logical patterns and topological structures. However, existing approaches are confined to rigid relational orthogonalization with restricted dimension and homogeneou…

2024

Reinforced Adaptive Knowledge Learning for Multimodal Fake News Detection

AAAI 2024technical

Nowadays, detecting multimodal fake news has emerged as a foremost concern since the widespread dissemination of fake news may incur adverse societal impact. Conventional methods generally focus on capturing the linguistic and visual semantics within the multimodal content, which fall short in effe…

Cited by 27SourcePDFScholar
2024

Tail-STEAK: Improve Friend Recommendation for Tail Users via Self-Training Enhanced Knowledge Distillation

AAAI 2024technical

Graph neural networks (GNNs) are commonly employed in collaborative friend recommendation systems. Nevertheless, recent studies reveal a notable performance gap, particularly for users with limited connections, commonly known as tail users, in contrast to their counterparts with abundant connections…

2023

A Comprehensive Study on Text-attributed Graphs: Benchmarking and Rethinking

NeurIPS 2023poster

Text-attributed graphs (TAGs) are prevalent in various real-world scenarios, where each node is associated with a text description. The cornerstone of representation learning on TAGs lies in the seamless integration of textual semantics within individual nodes and the topological connections across…

2023

Learning on Large-scale Text-attributed Graphs via Variational Inference

ICLR 2023top-5%

This paper studies learning on text-attributed graphs (TAGs), where each node is associated with a text description. An ideal solution for such a problem would be integrating both the text and graph structure information with large language models and graph neural networks (GNNs). However, the probl…

2023

Longtriever: a Pre-trained Long Text Encoder for Dense Document Retrieval

EMNLP 2023long main

Pre-trained language models (PLMs) have achieved the preeminent position in dense retrieval due to their powerful capacity in modeling intrinsic semantics. However, most existing PLM-based retrieval models encounter substantial computational costs and are infeasible for processing long documents. In…

Cited by 0SourceScholar
2023

To Copy Rather Than Memorize: A Vertical Learning Paradigm for Knowledge Graph Completion

ACL 2023long

Embedding models have shown great power in knowledge graph completion (KGC) task. By learning structural constraints for each training triple, these methods implicitly memorize intrinsic relation rules to infer missing links. However, this paper points out that the multi-hop relation rules are hard…

2023

Train Once and Explain Everywhere: Pre-training Interpretable Graph Neural Networks

NeurIPS 2023poster

Intrinsic interpretable graph neural networks aim to provide transparent predictions by identifying the influential fraction of the input graph that guides the model prediction, i.e., the explanatory subgraph. However, current interpretable GNNs mostly are dataset-specific and hard to generalize to…

Cited by 13SourcePDFScholar
2023

V-InFoR: A Robust Graph Neural Networks Explainer for Structurally Corrupted Graphs

NeurIPS 2023poster

GNN explanation method aims to identify an explanatory subgraph which contains the most informative components of the full graph. However, a major limitation of existing GNN explainers is that they are not robust to the structurally corrupted graphs, e.g., graphs with noisy or adversarial edges. On…

Cited by 4SourcePDFScholar
2022

Going Deeper into Permutation-Sensitive Graph Neural Networks

ICML 2022spotlight

The invariance to permutations of the adjacency matrix, i.e., graph isomorphism, is an overarching requirement for Graph Neural Networks (GNNs). Conventionally, this prerequisite can be satisfied by the invariant operations over node permutations when aggregating messages. However, such an invariant…

2022

HousE: Knowledge Graph Embedding with Householder Parameterization

ICML 2022spotlight

The effectiveness of knowledge graph embedding (KGE) largely depends on the ability to model intrinsic relation patterns and mapping properties. However, existing approaches can only capture some of them with insufficient modeling capacity. In this work, we propose a more powerful KGE framework name…

2022

RAPO: An Adaptive Ranking Paradigm for Bilingual Lexicon Induction

EMNLP 2022main

Bilingual lexicon induction induces the word translations by aligning independently trained word embeddings in two languages. Existing approaches generally focus on minimizing the distances between words in the aligned pairs, while suffering from low discriminative capability to distinguish the rela…

2021

GraphFormers: GNN-nested Transformers for Representation Learning on Textual Graph

NeurIPS 2021poster

The representation learning on textual graph is to generate low-dimensional embeddings for the nodes based on the individual textual features and the neighbourhood information. Recent breakthroughs on pretrained language models and graph neural networks push forward the development of corresponding…

2021

Leveraging Bidding Graphs for Advertiser-Aware Relevance Modeling in Sponsored Search

EMNLP 2021finding

Recently, sponsored search has become one of the most lucrative channels for marketing. As the fundamental basis of sponsored search, relevance modeling has attracted increasing attention due to the tremendous practical value. Most existing methods solely rely on the query-keyword pairs. However, ke…