← Search

Haohan Wang

39 accepted papers

2026

Agent Primitives: Reuseable Latent Building Blocks for Multi-Agent Systems

ICML 2026poster

While existing multi-agent systems (MAS) can handle complex problems by enabling collaboration among multiple agents, they are often highly task-specific, relying on manually crafted agent roles and interaction prompts, which leads to increased architectural complexity and limited reusability across…

Cited by 0SourceScholar
2026

Design Your Ad: Personalized Advertising Image and Text Generation with Unified Autoregressive Models

CVPR 2026

Generating realistic and user-preferred advertisements is a key challenge in e-commerce. Existing approaches utilize multiple independent models driven by click-through-rate (CTR) to controllably create attractive image or text advertisements. However, their pipelines lack cross-modal perception and

Cited by 0SourcecodeScholar
2026

Learning to Select Visual Tools from Experience

CVPR 2026

We introduce VisualToolAgent (VisTA), a new reinforcement learning framework that empowers visual agents to dynamically explore, select, and compose tools from a diverse library based on empirical performance. Existing methods for tool-augmented visual reasoning either rely on training-free promptin

Cited by 0SourceScholar
2026

Optimal Aggregation of LLM and PRM Signals for Efficient Test-Time Scaling

ICLR 2026poster

Process reward models (PRMs) are a cornerstone of test-time scaling (TTS), designed to verify and select the best responses from large language models (LLMs). However, this promise is challenged by recent benchmarks where simple majority voting, which ignores PRM signals, occasionally outperforms st…

Cited by 0SourceScholar
2026

Query-Efficient Domain Knowledge Stealing Against Large Language Models

AAAI 2026technical

Large language models (LLMs) concentrate substantial knowledge in specialized domains due to extensive pretraining and instruction tuning, and they are now central to commercial and scientific practice. Yet access is usually limited to costly, rate-limited interfaces, which motivates methods that ca

Cited by 0SourcePDFScholar
2026

SIPDO: Closed-Loop Prompt Optimization via Synthetic Data Feedback

ICLR 2026poster

Prompt quality plays a critical role in the performance of large language models (LLMs), motivating a growing body of work on prompt optimization. Most existing methods optimize prompts over a fixed dataset, assuming static input distributions and offering limited support for iterative improvement.…

Cited by 0SourceScholar
2026

Security–Fidelity Tradeoffs: No Universal Defense Against Prompt Injection

ICML 2026spotlight

We identify a fundamental tension in securing LLMs: the \textbf{security--fidelity tradeoff}. While defenses against indirect prompt injection are becoming more robust, we show that they inevitably impair the model's ability to process benign, instruction-like text. Current evaluations miss this cos…

Cited by 0SourceScholar
2025

Dataset Distillation via the Wasserstein Metric

ICCV 2025poster

Dataset Distillation (DD) aims to generate a compact synthetic dataset that enables models to achieve performance comparable to training on the full large dataset, significantly reducing computational costs. Drawing from optimal transport theory, we introduce WMDD (Wasserstein Metric-based Dataset D…

2025

Evaluating the Inductive Abilities of Large Language Models: Why Chain-of-Thought Reasoning Sometimes Hurts More Than Helps

NeurIPS 2025poster

Large Language Models (LLMs) have shown remarkable progress across domains, yet their ability to perform inductive reasoning—inferring latent rules from sparse examples—remains limited. It is often assumed that chain-of-thought (CoT) prompting, as used in Large Reasoning Models (LRMs), enhances suc…

Cited by 0SourceScholar
2025

Examining Alignment of Large Language Models through Representative Heuristics: the case of political stereotypes

ICLR 2025poster

Examining the alignment of large language models (LLMs) has become increasingly important, e.g., when LLMs fail to operate as intended. This study examines the alignment of LLMs with human values for the domain of politics. Prior research has shown that LLM-generated outputs can include political l…

2025

Exploring the Vulnerability of the Content Moderation Guardrail in Large Language Models via Intent Manipulation

EMNLP 2025

Intent detection, a core component of natural language understanding, has considerably evolved as a crucial mechanism in safeguarding large language models (LLMs). While prior work has applied intent detection to enhance LLMs’ moderation guardrails, showing a significant success against content-leve

Cited by 0SourcePDFScholar
2025

Generate E-commerce Product Background by Integrating Category Commonality and Personalized Style

ICASSP 2025accepted

The state-of-the-art methods for e-commerce product background generation suffer from the inefficiency of designing product-wise prompts when scaling up the production, as well as the ineffectiveness of describing fine-grained styles when customizing personalized backgrounds for some specific brands…

Cited by 0SourceScholar
2025

Improving Noise Efficiency in Privacy-preserving Dataset Distillation

ICCV 2025poster

Modern machine learning models heavily rely on large datasets that often include sensitive and private information, raising serious privacy concerns. Differentially private (DP) data generation offers a solution by creating synthetic datasets that limit the leakage of private information within a pr…

2025

Revolve: Optimizing AI Systems by Tracking Response Evolution in Textual Optimization

ICML 2025poster

Recent advancements in large language models (LLMs) have significantly enhanced the ability of LLM-based systems to perform complex tasks through natural language processing and tool interaction. However, optimizing these LLM-based systems for specific tasks remains challenging, often requiring manu…

2025

Towards Adversarially Robust Dataset Distillation by Curvature Regularization

AAAI 2025technical

Dataset distillation (DD) allows datasets to be distilled to fractions of their original size while preserving the rich distributional information so that models trained on the distilled datasets can achieve a comparable accuracy while saving significant computational loads. Recent research in this…

2024

EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models

ECCV 2024poster

"Text-to-image diffusion models have emerged as an evolutionary for producing creative content in image synthesis. Based on the impressive generation abilities of these models, instruction-guided diffusion models can edit images with simple instructions and input images. While they empower users to…

Cited by 12SourcePDFScholar
2024

Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models

ICLR 2024poster

Machine learning has demonstrated remarkable performance over finite datasets, yet whether the scores over the fixed benchmarks can sufficiently indicate the model’s performance in the real world is still in discussion. In reality, an ideal robust model will probably behave similarly to the oracle (…

Cited by 8SourcePDFScholar
2024

Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters

NeurIPS 2024poster

Large Language Models (LLMs) are typically harmless but remain vulnerable to carefully crafted prompts known as ``jailbreaks'', which can bypass protective measures and induce harmful behavior. Recent advancements in LLMs have incorporated moderation guardrails that can filter outputs, which trigger…

Cited by 14SourcePDFScholar
2024

Language Agent Tree Search Unifies Reasoning, Acting, and Planning in Language Models

ICML 2024poster

While language models (LMs) have shown potential across a range of decision-making tasks, their reliance on simple acting processes limits their broad deployment as autonomous agents. In this paper, we introduce Language Agent Tree Search (LATS) -- the first general framework that synergizes the cap…

2024

MemeCLIP: Leveraging CLIP Representations for Multimodal Meme Classification

EMNLP 2024main

The complexity of text-embedded images presents a formidable challenge in machine learning given the need for multimodal understanding of multiple aspects of expression conveyed by them. While previous research in multimodal analysis has primarily focused on singular aspects such as hate speech and…

2024

Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks

NeurIPS 2024spotlight

Despite advances in AI alignment, large language models (LLMs) remain vulnerable to adversarial attacks or jailbreaking, in which adversaries can modify prompts to induce unwanted behavior. While some defenses have been proposed, they have not been adapted to newly proposed attacks and more challeng…

2024

Towards Reliable Advertising Image Generation Using Human Feedback

ECCV 2024poster

"In the e-commerce realm, compelling advertising images are pivotal for attracting customer attention. While generative models automate image generation, they often produce substandard images that may mislead customers and require significant labor costs to inspect. This paper delves into increasing…

2023

A Sentence Speaks a Thousand Images: Domain Generalization through Distilling CLIP with Language Guidance

ICCV 2023poster

Domain generalization studies the problem of training a model with samples from several domains (or distributions) and then testing the model with samples from a new, unseen domain. In this paper, we propose a novel approach for domain generalization that leverages recent advances in large vision-la…

Cited by 38PDFcodeScholar
2023

Adaptive Test-Time Personalization for Federated Learning

NeurIPS 2023poster

Personalized federated learning algorithms have shown promising results in adapting models to various distribution shifts. However, most of these methods require labeled data on testing clients for personalization, which is usually unavailable in real-world scenarios. In this paper, we introduce a n…

2023

Calibrated Teacher for Sparsely Annotated Object Detection

AAAI 2023technical

Fully supervised object detection requires training images in which all instances are annotated. This is actually impractical due to the high labor and time costs and the unavoidable missing annotations. As a result, the incomplete annotation in each image could provide misleading supervision and ha…

2023

Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models

NeurIPS 2023poster

We propose a conceptually simple and lightweight framework for improving the robustness of vision models through the combination of knowledge distillation and data augmentation. We address the conjecture that larger models do not make for better teachers by showing strong gains in out-of-distributio…

2023

Optimizing the Collaboration Structure in Cross-Silo Federated Learning

ICML 2023poster

In federated learning (FL), multiple clients collaborate to train machine learning models together while keeping their data decentralized. Through utilizing more training data, FL suffers from the potential negative transfer problem: the global FL model may even perform worse than the models trained…

2023

Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detection

AAAI 2023technical

As the COVID-19 pandemic puts pressure on healthcare systems worldwide, the computed tomography image based AI diagnostic system has become a sustainable solution for early diagnosis. However, the model-wise vulnerability under adversarial perturbation hinders its deployment in practical situation.…

2022

Iterative Few-shot Semantic Segmentation from Image Label Text

IJCAI 2022poster

Few-shot semantic segmentation aims to learn to segment unseen class objects with the guidance of only a few support images. Most previous methods rely on the pixel-level label of support images. In this paper, we focus on a more challenging setting, in which only the image-level labels are availabl…

2022

The Two Dimensions of Worst-Case Training and Their Integrated Effect for Out-of-Domain Generalization

CVPR 2022poster

Training with an emphasis on "hard-to-learn" components of the data has been proven as an effective method to improve the generalization of machine learning models, especially in the settings where robustness (e.g., generalization across distributions) is valued. Existing literature discussing this…

Cited by 27PDFScholar
2022

Toward learning human-aligned cross-domain robust models by countering misaligned features

UAI 2022poster

Machine learning has demonstrated remarkable prediction accuracy over i.i.d data, but the accuracy often drops when tested with data from another distribution. In this paper, we aim to offer another view of this problem in a perspective assuming the reason behind this accuracy drop is the reliance o…

Cited by 18SourcePDFScholar
2021

Robust Contrastive Learning Using Negative Samples with Diminished Semantics

NeurIPS 2021poster

Unsupervised learning has recently made exceptional progress because of the development of more effective contrastive learning methods. However, CNNs are prone to depend on low-level features that humans deem non-semantic. This dependency has been conjectured to induce a lack of robustness to image…

2020

High-Frequency Component Helps Explain the Generalization of Convolutional Neural Networks

CVPR 2020oral

We investigate the relationship between the frequency spectrum of image data and the generalization behavior of convolutional neural networks (CNN). We first notice CNN's ability in capturing the high-frequency components of images. These high-frequency components are almost imperceptible to a human…

Cited by 700PDFcodeScholar
2020

Self-Challenging Improves Cross-Domain Generalization

ECCV 2020poster

Convolutional Neural Networks (CNN) conduct image classification by activating dominant features that correlated with labels. When the training and testing data are under similar distributions, their dominant features are similar, leading to decent test performance. The performance is nonetheless un…

2019

Learning Robust Global Representations by Penalizing Local Predictive Power

NeurIPS 2019poster

Despite their renowned in-domain predictive power, convolutional neural networks are known to rely more on high-frequency patterns that humans deem superficial than on low-frequency patterns that agree better with intuitions about what constitutes category membership. This paper proposes a method fo…

2019

Learning Robust Representations by Projecting Superficial Statistics Out

ICLR 2019oral

Despite impressive performance as evaluated on i.i.d. holdout data, deep neural networks depend heavily on superficial statistics of the training data and are liable to break under distribution shift. For example, subtle changes to the background or texture of an image can break a seemingly powerful…

Cited by 270SourcePDFScholar