← Search

Chejian Xu

14 accepted papers

2025

AdvAgent: Controllable Blackbox Red-teaming on Web Agents

ICML 2025poster

Foundation model-based agents are increasingly used to automate complex tasks, enhancing efficiency and productivity. However, their access to sensitive resources and autonomous decision-making also introduce significant security risks, where successful attacks could lead to severe consequences. To…

2025

AdvWave: Stealthy Adversarial Jailbreak Attack against Large Audio-Language Models

ICLR 2025poster

Recent advancements in large audio-language models (LALMs) have enabled speech-based user interactions, significantly enhancing user experience and accelerating the deployment of LALMs in real-world applications. However, ensuring the safety of LALMs is crucial to prevent risky outputs that may rais…

Cited by 2SourcePDFScholar
2025

COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems Against Semantic Attacks

AAAI 2025technical

Multi-sensor fusion systems (MSFs) play a vital role as the perception module in modern autonomous vehicles (AVs). Therefore, ensuring their robustness against common and realistic adversarial semantic transformations, such as rotation and shifting in the physical world, is crucial for the safety of…

Cited by 0SourcePDFScholar
2025

ChatQA 2: Bridging the Gap to Proprietary LLMs in Long Context and RAG Capabilities

ICLR 2025poster

In this work, we introduce ChatQA 2, an Llama 3.0-based model with a 128K context window, designed to bridge the gap between open-source LLMs and leading proprietary models (e.g., GPT-4-Turbo-2024-04-09) in long context un- derstanding and retrieval-augmented generation (RAG) capabilities. These two…

2025

DiffScene: Diffusion-Based Safety-Critical Scenario Generation for Autonomous Vehicles

AAAI 2025technical

The field of Autonomous Driving (AD) has witnessed significant progress in recent years. Among the various challenges faced, the safety evaluation of autonomous vehicles (AVs) stands out as a critical concern. Traditional evaluation methods are both costly and inefficient, often requiring extensive…

Cited by 34SourcePDFScholar
2025

EIA: ENVIRONMENTAL INJECTION ATTACK ON GENERALIST WEB AGENTS FOR PRIVACY LEAKAGE

ICLR 2025poster

Recently, generalist web agents have demonstrated remarkable potential in autonomously completing a wide range of tasks on real websites, significantly boosting human productivity. However, web tasks, such as booking flights, usually involve users' personally identifiable information (PII), which ma…

2025

MMDT: Decoding the Trustworthiness and Safety of Multimodal Foundation Models

ICLR 2025poster

Multimodal foundation models (MMFMs) play a crucial role in various applications, including autonomous driving, healthcare, and virtual assistants. However, several studies have revealed vulnerabilities in these models, such as generating unsafe content by text-to-image models. Existing benchmarks o…

2025

PolyGuard: Massive Multi-Domain Safety Policy-Grounded Guardrail Dataset

NeurIPS 2025poster

As large language models (LLMs) become widespread across diverse applications, concerns about the security and safety of LLM interactions have intensified. Numerous guardrail models and benchmarks have been developed to ensure LLM content safety. However, existing guardrail benchmarks are often buil…

Cited by 0SourceScholar
2024

ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous Vehicles

CVPR 2024poster

We present ChatScene a Large Language Model (LLM)-based agent that leverages the capabilities of LLMs to generate safety-critical scenarios for autonomous vehicles. Given unstructured language instructions the agent first generates textually described traffic scenarios using LLMs. These scenario des…

2023

DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Models

NeurIPS 2023oral

Generative Pre-trained Transformer (GPT) models have exhibited exciting progress in capabilities, capturing the interest of practitioners and the public alike. Yet, while the literature on the trustworthiness of GPT models remains limited, practitioners have proposed employing capable GPT models for…

2022

Copy Motion From One to Another: Fake Motion Video Generation

IJCAI 2022poster

One compelling application of artificial intelligence is to generate a video of a target person performing arbitrary desired motion (from a source person). While the state-of-the-art methods are able to synthesize a video demonstrating similar broad stroke motion details, they are generally lacking…

2022

SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles

NeurIPS 2022accept

As shown by recent studies, machine intelligence-enabled systems are vulnerable to test cases resulting from either adversarial manipulation or natural distribution shifts. This has raised great concerns about deploying machine learning algorithms for real-world applications, especially in safety-cr…

2022

SemAttack: Natural Textual Attacks via Different Semantic Spaces

NAACL 2022findings

Recent studies show that pre-trained language models (LMs) are vulnerable to textual adversarial attacks. However, existing attack methods either suffer from low attack success rates or fail to search efficiently in the exponentially large perturbation space. We propose an efficient and effective fr…

2021

Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models

NeurIPS 2021poster

Large-scale pre-trained language models have achieved tremendous success across a wide range of natural language understanding (NLU) tasks, even surpassing human performance. However, recent studies reveal that the robustness of these models can be challenged by carefully crafted textual adversarial…

Cited by 245SourcecodeScholar