← Search

Daojing He

14 accepted papers

2025

Context-Aware Hierarchical Learning: A Two-Step Paradigm towards Safer LLMs

NeurIPS 2025poster

Large Language Models (LLMs) have emerged as powerful tools for diverse applications. However, their uniform token processing paradigm introduces critical vulnerabilities in instruction handling, particularly when exposed to adversarial scenarios. In this work, we identify and propose a novel class…

Cited by 0SourcecodeScholar
2025

DF-MIA: A Distribution-Free Membership Inference Attack on Fine-Tuned Large Language Models

AAAI 2025technical

Membership Inference Attack (MIA) aims to determine if a specific sample is present in the training dataset of a target machine learning model. Previous MIAs against fine-tuned Large Language Models (LLMs) either fail to address the unique challenges in the fine-tuned setting or rely on strong assu…

2025

Enhancing Spatial Reasoning in Multimodal Large Language Models through Reasoning-based Segmentation

ICCV 2025poster

Recent advances in point cloud perception have demonstrated remarkable progress in scene understanding through vision-language alignment leveraging large language models (LLMs). However, existing methods may still encounter challenges in handling complex instructions that require accurate spatial re…

Cited by 0SourcePDFScholar
2025

Knowledge Editing with Dynamic Knowledge Graphs for Multi-Hop Question Answering

AAAI 2025technical

Multi-hop question answering (MHQA) poses a significant challenge for large language models (LLMs) due to the extensive knowledge demands involved. Knowledge editing, which aims to precisely modify the LLMs to incorporate specific knowledge without negatively impacting other unrelated knowledge, off…

2025

MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming

ACL 2025long

The proliferation of jailbreak attacks against large language models (LLMs) highlights the need for robust security measures. However, in multi-round dialogues, malicious intentions may be hidden in interactions, leading LLMs to be more prone to produce harmful responses. In this paper, we propose t…

2025

Multi-Modality Expansion and Retention for LLMs through Parameter Merging and Decoupling

ACL 2025long

Fine-tuning Large Language Models (LLMs) with multimodal encoders on modality-specific data expands the modalities that LLMs can handle, leading to the formation of Multimodal LLMs (MLLMs). However, this paradigm heavily relies on resource-intensive and inflexible fine-tuning from scratch with new m…

Cited by 0SourcePDFScholar
2025

Neural Parameter Search for Slimmer Fine-Tuned Models and Better Transfer

ACL 2025long

Foundation models and their checkpoints have significantly advanced deep learning, boosting performance across various applications. However, fine-tuned models often struggle outside their specific domains and exhibit considerable redundancy. Recent studies suggest that combining a pruned fine-tuned…

Cited by 0SourcePDFScholar
2025

One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs

ICLR 2025poster

Safety alignment in large language models (LLMs) is increasingly compromised by jailbreak attacks, which can manipulate these models to generate harmful or unintended content. Investigating these attacks is crucial for uncovering model vulnerabilities. However, many existing jailbreak strategies fai…

2025

ProjectEval: A Benchmark for Programming Agents Automated Evaluation on Project-Level Code Generation

ACL 2025finding

Recently, LLM agents have made rapid progress in improving their programming capabilities. However, existing benchmarks lack the ability to automatically evaluate from users’ perspective, and also lack the explainability of the results of LLM agents’ code generation capabilities. Thus, we introduce…

2025

Reflection on Knowledge Graph for Large Language Models Reasoning

ACL 2025finding

Recent research shows that supplementing Large Language Models (LLMs) with knowledge graphs can enhance their performance. However, existing methods often introduce noise in the retrieval and reasoning pipeline, hindering LLMs’ ability to effectively integrate external knowledge for complex multi-ho…

2025

Safety Alignment via Constrained Knowledge Unlearning

ACL 2025long

Despite significant progress in safety alignment, large language models (LLMs) remain susceptible to jailbreak attacks. Existing defense mechanisms have not fully deleted harmful knowledge in LLMs, which allows such attacks to bypass safeguards and produce harmful outputs. To address this challenge,…

2024

CNCA: Toward Customizable and Natural Generation of Adversarial Camouflage for Vehicle Detectors

NeurIPS 2024poster

Prior works on physical adversarial camouflage against vehicle detectors mainly focus on the effectiveness and robustness of the attack. The current most successful methods optimize 3D vehicle texture at a pixel level. However, this results in conspicuous and attention-grabbing patterns in the gener…

2024

Parameter Competition Balancing for Model Merging

NeurIPS 2024poster

While fine-tuning pretrained models has become common practice, these models often underperform outside their specific domains. Recently developed model merging techniques enable the direct integration of multiple models, each fine-tuned for distinct tasks, into a single model. This strategy promote…

2024

RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation

ICML 2024poster

Adversarial camouflage is a widely used physical attack against vehicle detectors for its superiority in multi-view attack performance. One promising approach involves using differentiable neural renderers to facilitate adversarial camouflage optimization through gradient back-propagation. However,…