← Search

Ge Su

4 accepted papers

2026

Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging

AAAI 2026technical

Model merging has emerged as an efficient technique for expanding large language models (LLMs) by integrating specialized expert models. However, it also introduces a new threat: model merging stealing, where free-riders exploit models through unauthorized model merging. Unfortunately, existing defe

Cited by 0SourcePDFScholar
2026

Faithful Bi-Directional Model Steering via Distribution Matching and Distributed Interchange Interventions

ICLR 2026poster

Intervention-based model steering offers a lightweight and interpretable alternative to prompting and fine-tuning. However, by adapting strong optimization objectives from fine-tuning, current methods are susceptible to overfitting and often underperform, sometimes generating unnatural outputs. We h…

Cited by 0SourcecodeScholar
2026

RAGFort: Dual-Path Defense Against Proprietary Knowledge Base Extraction in Retrieval-Augmented Generation

AAAI 2026technical

Retrieval-Augmented Generation (RAG) systems deployed over proprietary knowledge bases face growing threats from reconstruction attacks that aggregate model responses to replicate knowledge bases. Such attacks exploit both intra-class and inter-class paths—progressively extracting fine-grained knowl

Cited by 0SourcePDFScholar
2026

Towards Steering without Sacrifice: Principled Training of Steering Vectors for Prompt-only Interventions

ICML 2026poster

Recently, *steering vectors (SVs)* have emerged as an effective and lightweight approach to steer behaviors of large language models (LLMs), among which fine-tuned SVs are more effective than optimization-free ones. However, current approaches to fine-tuned SVs suffer from two limitations. First, th…

Cited by 0SourceScholar