← Search

David Huang

8 accepted papers

2026

Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework

ICML 2026spotlight

The Rapid Response (RR) framework (Peng et al., 2024), deployed in production systems including Anthropic’s ASL-3 safeguards (Anthropic, 2025), dynamically adapts jailbreak detection classifiers by generating synthetic training data from emerging attacks. We reveal that prompt injection can infiltra…

Cited by 0SourceScholar
2025

Improving LLM Safety Alignment with Dual-Objective Optimization

ICML 2025poster

Existing training-time safety alignment techniques for large language models (LLMs) remain vulnerable to jailbreak attacks. Direct preference optimization (DPO), a widely deployed alignment method, exhibits limitations in both experimental and theoretical contexts as its loss function proves subopti…

2025

Robo-DM: Data Management for Large Robot Datasets

ICRA 2025

Recent results suggest that very large datasets of teleoperated robot demonstrations can be used to train transformer-based models that have the potential to generalize to new scenes, robots, and tasks. However, curating, distributing, and loading large datasets of robot trajectories, which typicall

Cited by 1SourcecodeScholar
2025

Stronger Universal and Transferable Attacks by Suppressing Refusals

NAACL 2025long

Making large language models (LLMs) safe for mass deployment is a complex and ongoing challenge. Efforts have focused on aligning models to human preferences (RLHF), essentially embedding a “safety feature” into the model’s parameters. The Greedy Coordinate Gradient (GCG) algorithm (Zou et al., 2023…

Cited by 0SourcePDFScholar
2024

A Unified Loss Function to Tackle Inter-Class and Intra-Class Data Imbalance in Sound Event Detection

ICASSP 2024accepted

Data imbalance is an important issue in data-driven deep-learning methodologies. In sound event detection (SED), there are two types of data imbalance issues caused by the diverse time duration of sound events: the data imbalance between sound event classes (inter-class imbalance) and the active/ina…

Cited by 0SourceScholar
2024

ClaimLens: Automated, Explainable Fact-Checking on Voting Claims Using Frame-Semantics

EMNLP 2024system demonstrations

We present ClaimLens, an automated fact-checking system focused on voting-related factual claims. Existing fact-checking solutions often lack transparency, making it difficult for users to trust and understand the reasoning behind the outcomes. In this work, we address the critical need for transpar…

2024

PubDef: Defending Against Transfer Attacks From Public Models

ICLR 2024poster

Adversarial attacks have been a looming and unaddressed threat in the industry. However, through a decade-long history of the robustness evaluation literature, we have learned that mounting a strong or optimal attack is challenging. It requires both machine learning and domain expertise. In other wo…