← Search

Hai Huang

31 accepted papers

2026

EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion

AAAI 2026technical

Large language models (LLMs), such as ChatGPT, have achieved remarkable success across a wide range of fields. However, their trustworthiness remains a significant concern, as they are still susceptible to jailbreak attacks aimed at eliciting inappropriate or harmful responses. Most existing jailb

Cited by 0SourcePDFScholar
2026

LLM-JEPA: Large Language Models Meet Joint Embedding Predictive Architectures

ICLR 2026poster

Large Language Model (LLM) pretraining, finetuning, and evaluation rely on input-space reconstruction and generative capabilities. Yet, it has been observed in vision that embedding-space training objectives, e.g., with Joint Embedding Predictive Architectures (JEPAs), are far superior to their inpu…

Cited by 0SourcecodeScholar
2026

SeRI: Gradient-Free Sensitive Region Identification in Decision-Based Black-Box Attacks

ICLR 2026poster

Deep neural networks (DNNs) are highly vulnerable to adversarial attacks, where small, carefully crafted perturbations are added to input images to cause misclassification. These perturbations are particularly effective when concentrated in sensitive regions of an image that strongly influence the m…

Cited by 0SourcecodeScholar
2026

Sparse Models, Sparse Safety: Unsafe Routes in Mixture-of-Experts LLMs

ICML 2026poster

By introducing routers to selectively activate experts in Transformer layers, the mixture-of-experts (MoE) architecture significantly reduces computational costs in large language models (LLMs) while maintaining competitive performance, especially for models with massive parameters. However, prior w…

Cited by 0SourceScholar
2025

ADBA: Approximation Decision Boundary Approach for Black-Box Adversarial Attacks

AAAI 2025technical

Many machine learning models are susceptible to adversarial attacks, with decision-based black-box attacks representing the most critical threat in real-world applications. These attacks are extremely stealthy, generating adversarial examples using hard labels obtained from the target machine learni…

2025

Adversarial Score identity Distillation: Rapidly Surpassing the Teacher in One Step

ICLR 2025poster

Score identity Distillation (SiD) is a data-free method that has achieved state-of-the-art performance in image generation by leveraging only a pretrained diffusion model, without requiring any training data. However, the ultimate performance of SiD is constrained by the accuracy with which the pret…

2025

Bridging Domain Generalization to Multimodal Domain Generalization via Unified Representations

ICCV 2025poster

Domain Generalization (DG) aims to enhance model robustness in unseen or distributionally shifted target domains through training exclusively on source domains. Although existing DG techniques, such as data manipulation, learning strategies, and representation learning, have shown significant progre…

Cited by 0SourcePDFScholar
2025

CART: A Generative Cross-Modal Retrieval Framework With Coarse-To-Fine Semantic Modeling

ACL 2025long

Cross-modal retrieval aims to search for instances, which are semantically related to the query through the interaction of different modal data. Traditional solutions utilize a single-tower or dual-tower framework to explicitly compute the score between queries and candidates, which is challenged by…

Cited by 0SourcePDFScholar
2025

ControlSpeech: Towards Simultaneous and Independent Zero-shot Speaker Cloning and Zero-shot Language Style Control

ACL 2025long

In this paper, we present ControlSpeech, a text-to-speech (TTS) system capable of fully cloning the speaker’s voice and enabling arbitrary control and adjustment of speaking style. Prior zero-shot TTS models only mimic the speaker’s voice without further control and adjustment capabilities while pri…

2025

DU-PMVS: Learned Patchmatch Multi-View Stereo Based on Deformable Feature Pyramid and Uncertainty Awareness Modeling

ICASSP 2025accepted

Multi-View Stereo is widely utilized for reconstructing the dense geometric structure of objects from multiple viewpoints. Recently, learning-based PatchMatch MVS methods have attracted significant attention due to their high efficiency and accuracy. However, existing methods neglect the constraints…

Cited by 0SourceScholar
2025

Enhancing Multimodal Unified Representations for Cross Modal Generalization

ACL 2025finding

To enhance the interpretability of multimodal unified representations, many studies have focused on discrete unified representations. These efforts typically start with contrastive learning and gradually extend to the disentanglement of modal information, achieving solid multimodal discrete unified…

2025

Guided Score identity Distillation for Data-Free One-Step Text-to-Image Generation

ICLR 2025poster

Diffusion-based text-to-image generation models trained on extensive text-image pairs have demonstrated the ability to produce photorealistic images aligned with textual descriptions. However, a significant limitation of these models is their slow sample generation process, which requires iterative…

2025

High-Stiffness Path Planning for 7-DOF Cable-Driven Manipulators in Single and Dual-Arm Configurations

IROS 2025

Low stiffness in 7-DOF cable-driven humanoid manipulators limits their precision, posing a significant challenge in complex human-robot interaction (HRI) scenarios. This paper presents a motion planning framework to enhance manipulator stiffness for both single and dual-arm configurations. For a sin

Cited by 0SourceScholar
2025

IMPACT: Irregular Multi-Patch Adversarial Composition Based on Two‑Phase Optimization

NeurIPS 2025poster

Deep neural networks have become foundational in various applications but remain vulnerable to adversarial patch attacks. Crafting effective adversarial patches is inherently challenging due to the combinatorial complexity involved in jointly optimizing critical factors such as patch shape, location…

Cited by 0SourceScholar
2025

IRBridge: Solving Image Restoration Bridge with Pre-trained Generative Diffusion Models

ICML 2025poster

Bridge models in image restoration construct a diffusion process from degraded to clear images. However, existing methods typically require training a bridge model from scratch for each specific type of degradation, resulting in high computational costs and limited performance. This work aims to eff…

2025

Language-Codec: Bridging Discrete Codec Representations and Speech Language Models

ACL 2025long

In recent years, large language models have achieved significant success in generative tasks (e.g., speech cloning and audio generation) related to speech, audio, music, and other signal domains. A crucial element of these models is the discrete acoustic codecs, which serve as an intermediate repres…

2025

Omni-Chart-600K: A Comprehensive Dataset of Chart Types for Chart Understanding

NAACL 2025findings

To address the deficiencies in chart types and the limited scope of chart tasks in existing datasets, we conducted a comprehensive review of current data collection methodologies. By integrating manual annotation with data generation leveraging GPT-4, we developed a dataset that includes 21 diverse…

Cited by 0SourcePDFScholar
2025

Overcoming both Domain Shift and Label Shift for Referring Video Segmentation

NAACL 2025findings

Open-set domain generalization (OSDG) aims to enhance the robustness of the model when facing both domain shift and label shift, highlighting a wide range of potential in real-world applications. However, previous OSDG methods can only recognize seen objects and mark all unseen objects as “unknown”…

Cited by 0SourcePDFScholar
2025

Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective

IJCAI 2025

The robustness of Graph Neural Networks (GNNs) has become an increasingly important topic due to their expanding range of applications. Various attack methods have been proposed to explore the vulnerabilities of GNNs, ranging from Graph Modification Attacks (GMA) to the more practical and flexible G

2025

RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical features

UAI 2025

Deep neural networks (DNNs) are highly susceptible to adversarial samples, raising concerns about their reliability in safety-critical tasks. Currently, methods of evaluating adversarial robustness are primarily categorized into attack-based and certified robustness evaluation approaches. The former

2025

RecBase: Generative Foundation Model Pretraining for Zero-Shot Recommendation

EMNLP 2025

Recent advances in LLM-based recommendation have shown promise, yet their cross-domain generalization is hindered by a fundamental mismatch between language-centric pretraining and the recommendation task. Existing methods, relying on language-level knowledge, fail to capture dynamic, item-level use

2025

Towards Transformer-Based Aligned Generation with Self-Coherence Guidance

CVPR 2025poster

We introduce a novel, training-free approach for enhancing alignment in Transformer-based Text-Guided Diffusion Models (TGDMs). Existing TGDMs often struggle to generate semantically aligned images, particularly when dealing with complex text prompts or multi-concept attribute binding challenges. Pr…

2025

TtBA: Two-third Bridge Approach for Decision-Based Adversarial Attack

ICML 2025poster

A key challenge in black-box adversarial attacks is the high query complexity in hard-label settings, where only the top-1 predicted label from the target deep model is accessible. In this paper, we propose a novel normal-vector-based method called Two-third Bridge Attack (TtBA). A innovative bridge…

Cited by 0SourcePDFScholar
2025

Unifying and Enhancing Graph Transformers via a Hierarchical Mask Framework

NeurIPS 2025poster

Graph Transformers (GTs) have emerged as a powerful paradigm for graph representation learning due to their ability to model diverse node interactions. However, existing GTs often rely on intricate architectural designs tailored to specific interactions, limiting their flexibly. To address this, we…

Cited by 0SourceScholar
2024

Composite Backdoor Attacks Against Large Language Models

NAACL 2024findings

Large language models (LLMs) have demonstrated superior performance compared to previous methods on various tasks, and often serve as the foundation models for many researches and services. However, the untrustworthy third-party LLMs may covertly introduce vulnerabilities for downstream tasks. In th…

2024

Less is More: on the Over-Globalizing Problem in Graph Transformers

ICML 2024oral

Graph Transformer, due to its global attention mechanism, has emerged as a new tool in dealing with graph-structured data. It is well recognized that the global attention mechanism considers a wider receptive field in a fully connected graph, leading many to believe that useful information can be ex…

2024

Score identity Distillation: Exponentially Fast Distillation of Pretrained Diffusion Models for One-Step Generation

ICML 2024poster

We introduce Score identity Distillation (SiD), an innovative data-free method that distills the generative capabilities of pretrained diffusion models into a single-step generator. SiD not only facilitates an exponentially fast reduction in Fréchet inception distance (FID) during distillation but a…

2023

Achieving Cross Modal Generalization with Multimodal Unified Representation

NeurIPS 2023poster

This paper introduces a novel task called Cross Modal Generalization (CMG), which addresses the challenge of learning a unified discrete representation from paired multimodal data during pre-training. Then in downstream tasks, the model can achieve zero-shot generalization ability in other modalitie…

2020

Learning URI Selection Criteria to Improve the Crawling of Linked Open Data (Extended Abstract)

IJCAI 2020poster

A Linked Data crawler performs a selection to focus on collecting linked RDF (including RDFa) data on the Web. From the perspectives of throughput and coverage, given a newly discovered and targeted URI, the key issue of Linked Data crawlers is to decide whether this URI is likely to dereference int…

Cited by 0SourcePDFScholar