← Search

Chunyi Zhou

10 accepted papers

2026

Angel or Demon: Investigating the Plasticity Interventions' Impact on Backdoor Threats in Deep Reinforcement Learning

ICML 2026poster

Extensive research has highlighted the severe threats posed by backdoor attacks to deep reinforcement learning (DRL). However, prior studies primarily focus on vanilla scenarios, while plasticity interventions have emerged as indispensable built-in components of modern DRL agents. Despite their effe…

Cited by 1SourceScholar
2026

Bridging the Copyright Gap: Do Large Vision-Language Models Recognize and Respect Copyrighted Content?

AAAI 2026technical

Large vision-language models (LVLMs) have achieved remarkable advancements in multimodal reasoning tasks. However, their widespread accessibility raises critical concerns about potential copyright infringement. Will LVLMs accurately recognize and comply with copyright regulations when encountering c

Cited by 0SourcePDFScholar
2026

DP-GenG: Differentially Private Dataset Distillation Guided by DP-Generated Data

AAAI 2026technical

Dataset distillation (DD) compresses large datasets into smaller ones while preserving the performance of models trained on them. Although DD is often assumed to enhance data privacy by aggregating over individual examples, recent studies reveal that standard DD can still leak sensitive information

Cited by 0SourcePDFScholar
2026

MADA-Attack: Transferable Multi-modal Attention Distraction Adversarial Attack against Vision Language Models

ICML 2026poster

Vision Language Models (VLMs) achieve strong performance across multi-modal tasks but remain vulnerable to universal adversarial perturbations (UAPs). Existing UAP methods mainly operate on the visual modality, overlooking structured textual semantics and cross-modal interactions, which limits their…

Cited by 0SourceScholar
2026

SOPE: Situation-Aware and Statistically Indistinguishable Privacy Exfiltration for MCP-enabled Agents

ICML 2026poster

Model Context Protocol (MCP) enables Large Language Model (LLM) agents to interact with external tools, but this extensibility introduces significant supply chain vulnerabilities that enable covert privacy exfiltration. Prior studies have revealed privacy leakage in MCP-enabled agents via indirect p…

Cited by 0SourceScholar
2026

When Agents “Misremember” Collectively: Exploring the Mandela Effect in LLM-based Multi-Agent Systems

ICLR 2026poster

Recent advancements in large language models (LLMs) have significantly enhanced the capabilities of collaborative multi-agent systems, enabling them to address complex challenges. However, within these multi-agent systems, the susceptibility of agents to collective cognitive biases remains an undere…

Cited by 0SourcecodeScholar
2025

CAMH: Advancing Model Hijacking Attack in Machine Learning

AAAI 2025technical

In the burgeoning domain of machine learning, the reliance on third-party services for model training and the adoption of pre-trained models have surged. However, this reliance introduces vulnerabilities to model hijacking attacks, where adversaries manipulate models to perform unintended tasks, lea…

Cited by 0SourcePDFScholar
2025

Enhancing Adversarial Transferability with Adversarial Weight Tuning

AAAI 2025technical

Deep neural networks (DNNs) are vulnerable to adversarial examples (AEs) that mislead the model while appearing benign to human observers. A critical concern is the transferability of AEs, which enables black-box attacks without direct access to the target model. However, many previous attacks have…

Cited by 0SourcePDFScholar
2025

IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents

EMNLP 2025

Large language model (LLM) agents are widely deployed in real-world applications, where they leverage tools to retrieve and manipulate external data for complex tasks. However, when interacting with untrusted data sources (e.g., fetching information from public websites), tool responses may contain

Cited by 0SourcePDFScholar
2025

VideoEraser: Concept Erasure in Text-to-Video Diffusion Models

EMNLP 2025

The rapid growth of text-to-video (T2V) diffusion models has raised concerns about privacy, copyright, and safety due to their potential misuse in generating harmful or misleading content. These models are often trained on numerous datasets, including unauthorized personal identities, artistic creat

Cited by 0SourcePDFScholar