← Search

Chuan-Sheng Foo

33 accepted papers

2026

DUET: Optimizing LLM Training Data Mixtures via Noisy Feedback from Unseen, Downstream Evaluation Tasks

ICLR 2026poster

The performance of an LLM depends heavily on the relevance of its training data to the downstream evaluation task. However, in practice, we do not have fine-grained knowledge of the data in the evaluation task (e.g., conversations between an LLM and a user are end-to-end encrypted). Hence, it is unc…

Cited by 0SourcecodeScholar
2026

WaterDrum: Watermark-based Data-centric Unlearning Metric

ICLR 2026poster

Large language model (LLM) unlearning is critical in real-world applications where it is necessary to efficiently remove the influence of private, copyrighted, or harmful data from some users. Existing utility-centric unlearning metrics (based on model utility) may fail to accurately evaluate the ex…

Cited by 0SourcecodeScholar
2025

Broaden your SCOPE! Efficient Multi-turn Conversation Planning for LLMs with Semantic Space

ICLR 2025spotlight

Large language models (LLMs) are used in chatbots or AI assistants to hold conversations with a human user. In such applications, the quality (e.g., user engagement, safety) of a conversation is important and can only be exactly known at the end of the conversation. To maximize its expected quality,…

2025

CADCrafter: Generating Computer-Aided Design Models from Unconstrained Images

CVPR 2025poster

Creating CAD digital twins from the physical world is crucial for manufacturing, design, and simulation. However, current methods typically rely on costly 3D scanning with labor-intensive post-processing. To provide a user-friendly design process, we explore the problem of reverse engineering from u…

Cited by 3SourcePDFScholar
2025

Confidence Elicitation: A New Attack Vector for Large Language Models

ICLR 2025poster

A fundamental issue in deep learning has been adversarial robustness. As these systems have scaled, such issues have persisted. Currently, large language models (LLMs) with billions of parameters suffer from adversarial attacks just like their earlier, smaller counterparts. However, the threat model…

2025

Evidential Learning-based Certainty Estimation for Robust Dense Feature Matching

ICLR 2025poster

Dense feature matching methods aim to estimate a dense correspondence field between images. Inaccurate correspondence can occur due to the presence of unmatchable region, necessitating the need for certainty measurement. This is typically addressed by training a binary classifier to decide whether e…

Cited by 0SourcePDFScholar
2025

FIND: Few-Shot Anomaly Inspection with Normal-Only Multi-Modal Data

ICCV 2025poster

Multi-modal anomaly detection (MAD) improves industrial inspection by exploiting complementary 2D and 3D data. However, existing methods struggle in few-shot scenarios due to limited data and modality gaps. Current approaches either fuse multi-modal features or align cross-modal representations; how…

Cited by 0SourcePDFScholar
2025

Incentivizing Time-Aware Fairness in Data Sharing

NeurIPS 2025poster

In collaborative data sharing and machine learning, multiple parties aggregate their data resources to train a machine learning model with better model performance. However, as the parties incur data collection costs, they are only willing to do so when guaranteed incentives, such as fairness and i…

Cited by 0SourceScholar
2025

NICE Data Selection for Instruction Tuning in LLMs with Non-differentiable Evaluation Metric

ICML 2025poster

Curating data for instruction tuning is crucial for enhancing the performance of large language models (LLMs). This work aims to select training data for instruction tuning to improve the LLM performance on specific tasks. Existing methods often rely on next-token prediction (NTP) loss as a proxy fo…

2025

On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning

ICLR 2025poster

Test-time adaptation (TTA) updates the model weights during the inference stage using testing data to enhance generalization. However, this practice exposes TTA to adversarial risks. Existing studies have shown that when TTA is updated with crafted adversarial test samples, also known as test-time p…

2025

Robust-PIFu: Robust Pixel-aligned Implicit Function for 3D Human Digitalization from a Single Image

ICLR 2025poster

Existing methods for 3D clothed human digitalization perform well when the input image is captured in ideal conditions that assume the lack of any occlusion. However, in reality, images may often have occlusion problems such as incomplete observation of the human subject's full body, self-occlusion…

Cited by 0SourcePDFScholar
2025

WASA: WAtermark-based Source Attribution for Large Language Model-Generated Data

ACL 2025finding

The impressive performances of Large Language Models (LLMs) and their immense potential for commercialization have given rise to serious concerns over the Intellectual Property (IP) of their training data. In particular, the synthetic texts generated by LLMs may infringe the IP of the data being use…

Cited by 19SourcePDFScholar
2024

A Unified Framework for Bayesian Optimization under Contextual Uncertainty

ICLR 2024poster

Bayesian optimization under contextual uncertainty (BOCU) is a family of BO problems in which the learner makes a decision prior to observing the context and must manage the risks involved. Distributionally robust BO (DRBO) is a subset of BOCU that affords robustness against context distribution shi…

Cited by 0SourcePDFScholar
2024

Data Distribution Valuation

NeurIPS 2024poster

Data valuation is a class of techniques for quantitatively assessing the value of data for applications like pricing in data marketplaces. Existing data valuation methods define a value for a discrete dataset. However, in many use cases, users are interested in not only the value of the dataset, but…

2024

Helpful or Harmful Data? Fine-tuning-free Shapley Attribution for Explaining Language Model Predictions

ICML 2024poster

The increasing complexity of foundational models underscores the necessity for explainability, particularly for fine-tuning, the most widely used training method for adapting models to downstream tasks. Instance attribution, one type of explanation, attributes the model prediction to each training e…

2024

Pseudo-Calibration: Improving Predictive Uncertainty Estimation in Unsupervised Domain Adaptation

ICML 2024poster

Unsupervised domain adaptation (UDA) has seen substantial efforts to improve model accuracy for an unlabeled target domain with the help of a labeled source domain. However, UDA models often exhibit poorly calibrated predictive uncertainty on target data, a problem that remains under-explored and po…

Cited by 1SourcePDFScholar
2024

Sculpt3D: Multi-View Consistent Text-to-3D Generation with Sparse 3D Prior

CVPR 2024poster

Recent works on text-to-3d generation show that using only 2D diffusion supervision for 3D generation tends to produce results with inconsistent appearances (e.g. faces on the back view) and inaccurate shapes (e.g. animals with extra legs). Existing methods mainly address this issue by retraining di…

Cited by 18SourcePDFScholar
2024

SemRoDe: Macro Adversarial Training to Learn Representations that are Robust to Word-Level Attacks

NAACL 2024long

Language models (LMs) are indispensable tools for natural language processing tasks, but their vulnerability to adversarial attacks remains a concern. While current research has explored adversarial training techniques, their improvements to defend against word-level attacks have been limited. In th…

2024

Towards AutoAI: Optimizing a Machine Learning System with Black-box and Differentiable Components

ICML 2024poster

*Machine learning* (ML) models in the real world typically do not exist in isolation. They are usually part of a complex system (e.g., healthcare systems, self-driving cars) containing multiple ML and *black-box* components. The problem of optimizing such systems, which we refer to as *automated AI*…

Cited by 0SourcePDFScholar
2024

Towards Reliable Model Selection for Unsupervised Domain Adaptation: An Empirical Study and A Certified Baseline

NeurIPS 2024poster

Selecting appropriate hyperparameters is crucial for unlocking the full potential of advanced unsupervised domain adaptation (UDA) methods in unlabeled target domains. Although this challenge remains under-explored, it has recently garnered increasing attention with the proposals of various model se…

2024

Universal Semi-Supervised Domain Adaptation by Mitigating Common-Class Bias

CVPR 2024poster

Domain adaptation is a critical task in machine learning that aims to improve model performance on a target domain by leveraging knowledge from a related source domain. In this work we introduce Universal Semi-Supervised Domain Adaptation (UniSSDA) a practical yet challenging setting where the targe…

2024

Waterfall: Scalable Framework for Robust Text Watermarking and Provenance for LLMs

EMNLP 2024main

Protecting intellectual property (IP) of text such as articles and code is increasingly important, especially as sophisticated attacks become possible, such as paraphrasing by large language models (LLMs) or even unauthorized training of LLMs on copyrighted text to infringe such IP. However, existin…

2023

Bayesian Optimization with Cost-varying Variable Subsets

NeurIPS 2023poster

We introduce the problem of Bayesian optimization with cost-varying variable subsets (BOCVS) where in each iteration, the learner chooses a subset of query variables and specifies their values while the rest are randomly sampled. Each chosen subset has an associated cost. This presents the learner w…

2023

Fair yet Asymptotically Equal Collaborative Learning

ICML 2023poster

In collaborative learning with streaming data, nodes (e.g., organizations) jointly and continuously learn a machine learning (ML) model by sharing the latest model updates computed from their latest streaming data. For the more resourceful nodes to be willing to share their model updates, they need…

2023

Model Shapley: Equitable Model Valuation with Black-box Access

NeurIPS 2023poster

Valuation methods of data and machine learning (ML) models are essential to the establishment of AI marketplaces. Importantly, certain practical considerations (e.g., operational constraints, legal restrictions) favor the use of model valuation over data valuation. Also, existing marketplaces that i…

2023

Rethinking the Role of Pre-Trained Networks in Source-Free Domain Adaptation

ICCV 2023poster

Source-free domain adaptation (SFDA) aims to adapt a source model trained on a fully-labeled source domain to an unlabeled target domain. Large-data pre-trained networks are used to initialize source models during source training, and subsequently discarded. However, source training can cause the mo…

Cited by 19PDFcodeScholar
2022

Few-Shot Adaptation of Pre-Trained Networks for Domain Shift

IJCAI 2022poster

Deep networks are prone to performance degradation when there is a domain shift between the source (training) data and target (test) data. Recent test-time adaptation methods update batch normalization layers of pre-trained source models deployed in new target environments with streaming data. Altho…

2021

ARMOURED: Adversarially Robust MOdels using Unlabeled data by REgularizing Diversity

ICLR 2021poster

Adversarial attacks pose a major challenge for modern deep neural networks. Recent advancements show that adversarially robust generalization requires a large amount of labeled data for training. If annotation becomes a burden, can unlabeled data help bridge the gap? In this paper, we propose ARMOUR…

Cited by 3SourcePDFScholar
2021

Gradient Driven Rewards to Guarantee Fairness in Collaborative Machine Learning

NeurIPS 2021poster

In collaborative machine learning(CML), multiple agents pool their resources(e.g., data) together for a common learning task. In realistic CML settings where the agents are self-interested and not altruistic, they may be unwilling to share data or model information without adequate rewards. Furtherm…

Cited by 95SourcePDFScholar
2021

Validation Free and Replication Robust Volume-based Data Valuation

NeurIPS 2021poster

Data valuation arises as a non-trivial challenge in real-world use cases such as collaborative machine learning, federated learning, trusted data sharing, data marketplaces. The value of data is often associated with the learning performance (e.g., validation accuracy) of a model trained on the data…

Cited by 81SourcePDFScholar
2020

Mahalanobis Distance Based Adversarial Network for Anomaly Detection

ICASSP 2020accepted

Anomaly detection techniques are very crucial in multiple business applications, such as cyber security, manufacturing and finance. However, developing anomaly detection methods for high-dimensional data with high speed and good performance is still a challenge. Generative Adversarial Networks (GANs…

Cited by 0SourceScholar
2019

Optimistic mirror descent in saddle-point problems: Going the extra (gradient) mile

ICLR 2019poster

Owing to their connection with generative adversarial networks (GANs), saddle-point problems have recently attracted considerable interest in machine learning and beyond. By necessity, most theoretical guarantees revolve around convex-concave (or even linear) problems; however, making theoretical in…

Cited by 366SourcePDFScholar
2019

The Unusual Effectiveness of Averaging in GAN Training

ICLR 2019poster

We examine two different techniques for parameter averaging in GAN training. Moving Average (MA) computes the time-average of parameters, whereas Exponential Moving Average (EMA) computes an exponentially discounted sum. Whilst MA is known to lead to convergence in bilinear settings, we provide the…