← Search

Hanxi Guo

6 accepted papers

2026

From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs

ICML 2026spotlight

Backdoor attacks can introduce deceptive behaviors into large language models, causing them to execute prohibited actions only when specific secret triggers appear in the input. Existing safety training methods largely fail to address this vulnerability, due to the inherent difficulty of uncovering …

Cited by 0SourceScholar
2026

Poisoning with a Pill: Circumventing Detection in Federated Learning

AAAI 2026technical

Federated learning (FL) protects data privacy by enabling distributed model training without direct access to client data. However, its distributed nature makes it vulnerable to model and data poisoning attacks. While numerous defenses filter malicious clients using statistical metrics, they overloo

Cited by 0SourcePDFScholar
2025

JailbreakDiffBench: A Comprehensive Benchmark for Jailbreaking Diffusion Models

ICCV 2025poster

Diffusion models are widely used in real-world applications, but ensuring their safety remains a major challenge. Despite many efforts to enhance the security of diffusion models, jailbreak and adversarial attacks can still bypass these defenses, generating harmful content. However, the lack of stan…

Cited by 0SourcePDFScholar
2025

Profiler: Black-box AI-generated Text Origin Detection via Context-aware Inference Pattern Analysis

EMNLP 2025

With the increasing capabilities of Large Language Models (LLMs), the proliferation of AI-generated texts has become a serious concern. Given the diverse range of organizations providing LLMs, it is crucial for governments and third-party entities to identify the origin LLM of a given AI-generated t

Cited by 0SourcePDFScholar
2024

BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens

NeurIPS 2024poster

Detecting text generated by Large Language Models (LLMs) is a pressing need in order to identify and prevent misuse of these powerful models in a wide range of applications, which have highly undesirable consequences such as misinformation and academic dishonesty. Given a piece of subject text, m…

2024

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening

ECCV 2024poster

"Deep neural networks (DNNs) have demonstrated effectiveness in various fields. However, DNNs are vulnerable to backdoor attacks, which inject a unique pattern, called trigger, into the input to cause misclassification to an attack-chosen target label. While existing works have proposed various meth…