← Search

Gaoyang Liu

6 accepted papers

2026

Fingerprinting Pre-trained Encoders under Arbitrary Downstream Fine-Tuning via Adversarial Shifting

ICML 2026poster

In the pre-training-fine-tuning paradigm, pre-trained encoders have become high-value intellectual property (IP) due to their immense training costs, necessitating robust protection. Existing fingerprinting or watermarking methods typically rely on pre-defined samples and labels, or require intrusiv…

Cited by 0SourceScholar
2026

Info-Driven Zero-Cost Proxy: Rethinking Vision Transformer Architecture Evaluation via Information Quantification

IJCAI 2026

Neural Architecture Search (NAS) automates the design of Vision Transformer (ViT) architectures. However, the high computational cost of training-based methods has made training-free, zero-cost proxies a key research direction. While existing proxies can estimate model potential, they fail to captur

Cited by 0Scholar
2025

Decoupling Memories, Muting Neurons: Towards Practical Machine Unlearning for Large Language Models

ACL 2025finding

Machine Unlearning (MU) has emerged as a promising solution for removing the influence of data that an owner wishes to unlearn from Large Language Models (LLMs). However, existing MU methods, which require tuning the entire model parameters on the unlearned data with random labels or perturbed gradi…

2025

Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation

ICASSP 2025accepted

Retrieval-Augmented Generation (RAG) is a state-of-the-art technique that mitigates issues such as hallucinations and knowledge staleness in Large Language Models (LLMs) by retrieving relevant knowledge from an external database to assist in content generation. Existing research has demonstrated pot…

Cited by 0SourceScholar
2024

United We Stand, Divided We Fall: Fingerprinting Deep Neural Networks via Adversarial Trajectories

NeurIPS 2024poster

In recent years, deep neural networks (DNNs) have witnessed extensive applications, and protecting their intellectual property (IP) is thus crucial. As a non-invasive way for model IP protection, model fingerprinting has become popular. However, existing single-point based fingerprinting methods are…

Cited by 0SourcePDFScholar
2023

Boundary Unlearning: Rapid Forgetting of Deep Networks via Shifting the Decision Boundary

CVPR 2023poster

The practical needs of the "right to be forgotten" and poisoned data removal call for efficient machine unlearning techniques, which enable machine learning models to unlearn, or to forget a fraction of training data and its lineage. Recent studies on machine unlearning for deep neural networks (DNN…

Cited by 88SourcePDFScholar