← Search

Felix Juefei-Xu

32 accepted papers

2026

StreamDiT: Real-Time Streaming Text-to-Video Generation

CVPR 2026

Recently, great progress has been achieved in text-to-video (T2V) generation by scaling transformer-based diffusion models to billions of parameters, which can generate high-quality videos. However, existing models typically produce only short clips offline, restricting their use cases in interactiv

Cited by 0SourceScholar
2026

ThreadWeaver: Adaptive Threading for Efficient Parallel Reasoning in Language Models

ICML 2026oral

Scaling inference-time computation has enabled Large Language Models (LLMs) to achieve strong reasoning performance, but their inherently sequential decoding incurs substantial latency, motivating parallelization of the generation process. However, existing parallel reasoning approaches suffer from …

Cited by 0SourceScholar
2026

UniT: Unified Multimodal Chain-of-Thought Test-time Scaling

CVPR 2026

Unified models can handle both multimodal understanding and generation within a single architecture, yet they typically operate in a single pass without iteratively refining their outputs. Many multimodal tasks, especially those involving complex spatial compositions, multiple interacting objects, o

Cited by 0SourceScholar
2026

ViTok-v2: Scaling Native-Resolution Autoencoders to 5B

ICML 2026poster

Vision Transformer (ViT) tokenizers offer a scal- able alternative to convolutional auto-encoders, yet current architectures have two key limitations: their performance degrades when images vary in aspect ratio or resolution, and their reliance on adversarial losses makes them harder to train at sca…

Cited by 0SourceScholar
2025

Accelerating Multimodal Large Language Models by Searching Optimal Vision Token Reduction

CVPR 2025poster

Prevailing Multimodal Large Language Models (MLLMs) encode the input image(s) as vision tokens and feed them into the language backbone, similar to how Large Language Models (LLMs) process the text tokens. However, the number of vision tokens increases quadratically as the image resolutions, leading…

2025

Apollo: An Exploration of Video Understanding in Large Multimodal Models

CVPR 2025poster

Despite the rapid integration of video perception capabilities into Large Multimodal Models (LMMs), what drives their video perception remains poorly understood. Consequently, many design decisions in this domain are made without proper justification or analysis. The high computational cost of train…

Cited by 25SourcePDFScholar
2025

Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization

ACL 2025long

Universal goal hijacking is a kind of prompt injection attack that forces LLMs to return a target malicious response for arbitrary normal user prompts. The previous methods achieve high attack performance while being too cumbersome and time-consuming. Also, they have concentrated solely on optimizat…

2025

LinGen: Towards High-Resolution Minute-Length Text-to-Video Generation with Linear Computational Complexity

CVPR 2025poster

Text-to-video generation enhances content creation but is highly computationally intensive: The computational cost of Diffusion Transformers (DiTs) scales quadratically in the number of pixels. This makes minute-length video generation extremely expensive, limiting most existing models to generatin…

2025

MLLM-as-a-Judge for Image Safety without Human Labeling

CVPR 2025highlight

Image content safety has become a significant challenge with the rise of visual media on online platforms. Meanwhile, in the age of AI-generated content (AIGC), many image generation models are capable of producing harmful content, such as images containing sexual or violent material. Thus, it becom…

Cited by 2SourcePDFScholar
2025

MMLU-ProX: A Multilingual Benchmark for Advanced Large Language Model Evaluation

EMNLP 2025

Existing large language model (LLM) evaluation benchmarks primarily focus on English, while current multilingual tasks lack parallel questions that specifically assess cross-lingual reasoning abilities. This dual limitation makes it challenging to assess LLMs’ performance in the multilingual setting

Cited by 0SourcePDFScholar
2025

MoCha: Towards Movie-Grade Talking Character Generation

NeurIPS 2025spotlight

Recent advancements in video generation have achieved impressive motion realism, yet they often overlook character-driven storytelling, a crucial task for automated film, animation generation. We introduce Talking Characters, a more realistic task to generate talking character animations directly f…

Cited by 0SourceScholar
2025

Movie Weaver: Tuning-Free Multi-Concept Video Personalization with Anchored Prompts

CVPR 2025poster

Video personalization, which generates customized videos using reference images, has gained significant attention.However, prior methods typically focus on single-concept personalization, limiting broader applications that require multi-concept integration.Attempts to extend these models to multiple…

Cited by 3SourcePDFScholar
2025

Unleashing In-context Learning of Autoregressive Models for Few-shot Image Manipulation

CVPR 2025highlight

Text-guided image manipulation has experienced notable advancement in recent years. In order to mitigate linguistic ambiguity, few-shot learning with visual examples has been applied for instructions that are underrepresented in the training set, or difficult to describe purely in language. However,…

Cited by 3SourcePDFScholar
2024

AdvGPS: Adversarial GPS for Multi-Agent Perception Attack

ICRA 2024poster

The multi-agent perception system collects visual data from sensors located on various agents and leverages their relative poses determined by GPS signals to effectively fuse information, mitigating the limitations of single-agent sensing, such as occlusion. However, the precision of GPS signals can…

Cited by 6SourcecodeScholar
2024

Architecture-Agnostic Iterative Black-Box Certified Defense Against Adversarial Patches

ICASSP 2024accepted

The adversarial patch attack aims to fool image classifiers within a bounded, contiguous region of arbitrary changes. To address this problem in a trustworthy way, the certified patch defense methods are proposed. However, the state-of-the-art certified defenses inevitably needed to access the size…

Cited by 0SourceScholar
2024

CosalPure: Learning Concept from Group Images for Robust Co-Saliency Detection

CVPR 2024poster

Co-salient object detection (CoSOD) aims to identify the common and salient (usually in the foreground) regions across a given group of images. Although achieving significant progress state-of-the-art CoSODs could be easily affected by some adversarial perturbations leading to substantial accuracy r…

Cited by 1SourcePDFScholar
2024

LRR: Language-Driven Resamplable Continuous Representation against Adversarial Tracking Attacks

ICLR 2024poster

Visual object tracking plays a critical role in visual-based autonomous systems, as it aims to estimate the position and size of the object of interest within a live video. Despite significant progress made in this field, state-of-the-art (SOTA) trackers often fail when faced with adversarial pertur…

2024

Light the Night: A Multi-Condition Diffusion Framework for Unpaired Low-Light Enhancement in Autonomous Driving

CVPR 2024poster

Vision-centric perception systems for autonomous driving have gained considerable attention recently due to their cost-effectiveness and scalability especially compared to LiDAR-based systems. However these systems often struggle in low-light conditions potentially compromising their performance and…

Cited by 24SourcePDFScholar
2024

Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models

AAAI 2024technical

Although recent personalization methods have democratized high-resolution image synthesis by enabling swift concept acquisition with minimal examples and lightweight computation, they also present an exploitable avenue for highly accessible backdoor attacks. This paper investigates a critical and un…

Cited by 29SourcePDFScholar
2023

Among Us: Adversarially Robust Collaborative Perception by Consensus

ICCV 2023poster

Multiple robots could perceive a scene (e.g., detect objects) collaboratively better than individuals, although easily suffer from adversarial attacks when using deep learning. This could be addressed by the adversarial defense, but its training requires the often-unknown attacking mechanism. Differ…

Cited by 33PDFcodeScholar
2022

Can You Spot the Chameleon? Adversarially Camouflaging Images From Co-Salient Object Detection

CVPR 2022poster

Co-salient object detection (CoSOD) has recently achieved significant progress and played a key role in retrieval-related tasks. However, it inevitably poses an entirely new safety and security issue, i.e., highly personal and sensitive content can potentially be extracting by powerful CoSOD methods…

Cited by 25PDFcodeScholar
2021

AVA: Adversarial Vignetting Attack against Visual Recognition

IJCAI 2021poster

Vignetting is an inherent imaging phenomenon within almost all optical systems, showing as a radial intensity darkening toward the corners of an image. Since it is a common effect for photography and usually appears as a slight intensity variation, people usually regard it as a part of a photo and w…

Cited by 36SourcePDFScholar
2021

Auto-Exposure Fusion for Single-Image Shadow Removal

CVPR 2021poster

Shadow removal is still a challenging task due to its inherent background-dependent and spatial-variant properties, leading to unknown and diverse shadow patterns. Even powerful deep neural networks could hardly recover traceless shadow-removed background. This paper proposes a new solution for this…

Cited by 174PDFcodeScholar
2021

EfficientDeRain: Learning Pixel-wise Dilation Filtering for High-Efficiency Single-Image Deraining

AAAI 2021technical

Single-image deraining is rather challenging due to the unknown rain model. Existing methods often make specific assumptions of the rain model, which can hardly cover many diverse circumstances in the real world, compelling them to employ complex optimization or progressive refinement. This, however…

2021

Fooling LiDAR Perception via Adversarial Trajectory Perturbation

ICCV 2021poster

LiDAR point clouds collected from a moving vehicle are functions of its trajectories, because the sensor motion needs to be compensated to avoid distortions. When autonomous vehicles are sending LiDAR point clouds to deep networks for perception and planning, could the motion compensation consequent…

Cited by 66PDFcodeScholar
2021

Learning To Adversarially Blur Visual Object Tracking

ICCV 2021poster

Motion blur caused by the moving of the object or camera during the exposure can be a key challenge for visual object tracking, affecting tracking accuracy significantly. In this work, we explore the robustness of visual object trackers against motion blur from a new angle, i.e., adversarial blur at…

Cited by 60PDFcodeScholar
2020

FakeSpotter: A Simple yet Robust Baseline for Spotting AI-Synthesized Fake Faces

IJCAI 2020poster

In recent years, generative adversarial networks (GANs) and its variants have achieved unprecedented success in image synthesis. They are widely adopted in synthesizing facial images which brings potential security concerns to humans as the fakes spread and fuel the misinformation. However, robust d…

2020

SPARK: Spatial-aware Online Incremental Attack Against Visual Tracking

ECCV 2020poster

Adversarial attacks of deep neural networks have been intensively studied on image, audio, natural language, patch, and pixel classification tasks. Nevertheless, as a typical, while important real-world application, the adversarial attacks of online video object tracking that traces an object's movi…

Cited by 112SourcePDFScholar
2020

Watch out! Motion is Blurring the Vision of Your Deep Neural Networks

NeurIPS 2020poster

The state-of-the-art deep neural networks (DNNs) are vulnerable against adversarial examples with additive random-like noise perturbations. While such examples are hardly found in the physical world, the image blurring effect caused by object motion, on the other hand, commonly occurs in practice, m…

2016

Discriminative Invariant Kernel Features: A Bells-and-Whistles-Free Approach to Unsupervised Face Recognition and Pose Estimation

CVPR 2016spotlight

We propose an explicitly discriminative and `simple' approach to generate invariance to nuisance transformations modeled as unitary. In practice, the approach works well to handle non-unitary transformations as well. Our theoretical results extend the reach of a recent theory of invariance to discri…

Cited by 38PDFScholar