← Search

Daniel Kang

16 accepted papers

2026

BEAT: Visual Backdoor Attacks on VLM-based Embodied Agents via Contrastive Trigger Learning

ICLR 2026poster

Recent advances in Vision-Language Models (VLMs) have propelled embodied agents by enabling direct perception, reasoning, and planning task-oriented actions from visual inputs. However, such vision-driven embodied agents open a new attack surface: visual backdoor attacks, where the agent behaves no…

Cited by 0SourcecodeScholar
2026

Breaking Barriers: Do Reinforcement Fine-tuning Gains Transfer To Unseen Domains?

ICLR 2026poster

Reinforcement post training (RPT) has recently shown promise in improving the reasoning abilities of large language models (LLMs). However, it remains unclear how well these improvements generalize to new domains, as prior work evaluates RPT models on data from the same domains used for fine-tuning.…

Cited by 0SourceScholar
2026

Characterizing Agents in Production

ICML 2026oral

LLM-based agents already operate in production across many industries, yet we lack a clear understanding of which technical methods make these deployments successful. We present the first systematic study of Characterizing Agents in Production (CAP) using first-hand data from agent developers. We co…

Cited by 0SourceScholar
2026

Holistic Agent Leaderboard: The Missing Infrastructure for AI Agent Evaluation

ICLR 2026poster

AI agents have been developed for complex real-world tasks from coding to customer service. But AI agent evaluations suffer from many challenges that undermine our understanding of how well agents really work (Figure 1). We introduce the Holistic Agent Leaderboard (HAL) to address these challenges.…

Cited by 0SourcecodeScholar
2025

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

NAACL 2025findings

Large Language Model (LLM) agents exhibit remarkable performance across diverse applications by using external tools to interact with environments. However, integrating external tools introduces security risks, such as indirect prompt injection (IPI) attacks. Despite defenses designed for IPI attack…

2025

CVE-Bench: A Benchmark for AI Agents’ Ability to Exploit Real-World Web Application Vulnerabilities

ICML 2025spotlight

Large language model (LLM) agents are increasingly capable of autonomously conducting cyberattacks, posing significant threats to existing applications. This growing risk highlights the urgent need for a real-world benchmark to evaluate the ability of LLM agents to exploit web application vulnerabil…

2025

Establishing Best Practices in Building Rigorous Agentic Benchmarks

NeurIPS 2025poster

Benchmarks are essential for quantitatively tracking progress in AI. As AI agents become increasingly capable, researchers and practitioners have introduced agentic benchmarks to evaluate agents on complex, real-world tasks. These benchmarks typically measure agent capabilities by evaluating task ou…

Cited by 0SourceScholar
2025

REPRO-Bench: Can Agentic AI Systems Assess the Reproducibility of Social Science Research?

ACL 2025finding

Assessing the reproducibility of social science papers is essential for promoting rigor in research processes, but manual assessment is costly. With recent advances in agentic AI systems (i.e., AI agents), we seek to evaluate their capability to automate this process. However, existing benchmarks fo…

2024

InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents

ACL 2024findings

Recent work has embodied LLMs as agents, allowing them to access tools, perform actions, and interact with external content (e.g., emails or websites). However, external content introduces the risk of indirect prompt injection (IPI) attacks, where malicious instructions are embedded within the conte…

2024

Position: A Safe Harbor for AI Evaluation and Red Teaming

ICML 2024oral

Independent evaluation and red teaming are critical for identifying the risks posed by generative AI systems. However, the terms of service and enforcement strategies used by prominent AI companies to deter model misuse have disincentives on good faith safety evaluations. This causes some researcher…

Cited by 5SourcePDFScholar
2024

Removing RLHF Protections in GPT-4 via Fine-Tuning

NAACL 2024short

As large language models (LLMs) have increased in their capabilities, so doestheir potential for dual use. To reduce harmful outputs, produces and vendors ofLLMs have used reinforcement learning with human feedback (RLHF). In tandem,LLM vendors have been increasingly enabling fine-tuning of their mo…

Cited by 104SourcePDFScholar
2024

Trustless Audits without Revealing Data or Models

ICML 2024poster

There is an increasing conflict between business incentives to hide models and data as trade secrets, and the societal need for algorithmic transparency. For example, a rightsholder who currently wishes to know whether their copyrighted works have been used during training must convince the model pr…

Cited by 8SourcePDFScholar
2023

Q-Diffusion: Quantizing Diffusion Models

ICCV 2023poster

Diffusion models have achieved great success in image synthesis through iterative noise estimation using deep neural networks. However, the slow inference, high memory consumption, and computation intensity of the noise estimation model hinder the efficient adoption of diffusion models. Although pos…

Cited by 195PDFcodeScholar
2019

LIT: Learned Intermediate Representation Training for Model Compression

ICML 2019oral

Researchers have proposed a range of model compression techniques to reduce the computational and memory footprint of deep neural networks (DNNs). In this work, we introduce Learned Intermediate representation Training (LIT), a novel model compression technique that outperforms a range of recent mod…

Cited by 80SourcePDFScholar
2019

Network Offloading Policies for Cloud Robotics: A Learning-Based Approach

RSS 2019poster

Today's robotic systems are increasingly turning to computationally expensive models such as deep neural networks (DNNs) for tasks like localization, perception, planning, and object detection. However, resource-constrained robots, like low-power drones, often have insufficient on-board compute reso…