← Search

Huanran Chen

13 accepted papers

2026

Exploring the Basin-Like Loss Landscape in Large Language Models

ICLR 2026poster

We discover the emergence of \textit{basins} in the loss landscape of large language models. As model scale increases, LLMs become progressively more resilient to random perturbations in the parameter space, giving rise to expansive stability regions where models exhibit nearly identical performance…

Cited by 0SourcecodeScholar
2025

ADBM: Adversarial Diffusion Bridge Model for Reliable Adversarial Purification

ICLR 2025poster

Recently Diffusion-based Purification (DiffPure) has been recognized as an effective defense method against adversarial examples. However, we find DiffPure which directly employs the original pre-trained diffusion models for adversarial purification, to be suboptimal. This is due to an inherent trad…

2025

Efficient Input-level Backdoor Defense on Text-to-Image Synthesis via Neuron Activation Variation

ICCV 2025poster

In recent years, text-to-image (T2I) diffusion models have gained significant attention for their ability to generate high-quality images reflecting text prompts. However, their growing popularity has also led to the emergence of backdoor threats, posing substantial risks. Currently, effective defen…

Cited by 0SourcePDFScholar
2025

Mitigating Overthinking in Large Reasoning Models via Manifold Steering

NeurIPS 2025poster

Recent advances in Large Reasoning Models (LRMs) have demonstrated remarkable capabilities in solving complex tasks such as mathematics and coding. However, these models frequently exhibit a phenomenon known as *overthinking* during inference, characterized by excessive validation loops and redundan…

Cited by 0SourcecodeScholar
2024

Diffusion Models are Certifiably Robust Classifiers

NeurIPS 2024poster

Generative learning, recognized for its effective modeling of data distributions, offers inherent advantages in handling out-of-distribution instances, especially for enhancing robustness to adversarial attacks. Among these, diffusion classifiers, utilizing powerful diffusion models, have demonstrat…

2024

Elucidating the Design Space of Dataset Condensation

NeurIPS 2024poster

Dataset condensation, a concept within $\textit{data-centric learning}$, aims to efficiently transfer critical attributes from an original dataset to a synthetic version, meanwhile maintaining both diversity and realism of syntheses. This approach can significantly improve model training efficiency…

2024

Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancy

NeurIPS 2024poster

Text-to-image diffusion models have achieved tremendous success in the field of controllable image generation, while also coming along with issues of privacy leakage and data copyrights. Membership inference arises in these contexts as a potential auditing method for detecting unauthorized data usag…

2024

MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models

NeurIPS 2024poster

Despite the superior capabilities of Multimodal Large Language Models (MLLMs) across diverse tasks, they still face significant trustworthiness challenges. Yet, current literature on the assessment of trustworthy MLLMs remains limited, lacking a holistic evaluation to offer thorough insights into fu…

Cited by 5SourcecodeScholar
2024

On the Duality Between Sharpness-Aware Minimization and Adversarial Training

ICML 2024poster

Adversarial Training (AT), which adversarially perturb the input samples during training, has been acknowledged as one of the most effective defenses against adversarial attacks, yet suffers from inevitably decreased clean accuracy. Instead of perturbing the samples, Sharpness-Aware Minimization (SA…

2024

Rethinking Model Ensemble in Transfer-based Adversarial Attacks

ICLR 2024poster

It is widely recognized that deep learning models lack robustness to adversarial examples. An intriguing property of adversarial examples is that they can transfer across different models, which enables black-box attacks without any knowledge of the victim model. An effective strategy to improve the…

2024

Robust Classification via a Single Diffusion Model

ICML 2024poster

Diffusion models have been applied to improve adversarial robustness of image classifiers by purifying the adversarial noises or generating realistic data for adversarial training. However, diffusion-based purification can be evaded by stronger adaptive attacks while adversarial training does not pe…

Cited by 65SourcePDFScholar
2023

Teaching What You Should Teach: A Data-Based Distillation Method

IJCAI 2023poster

In real teaching scenarios, an excellent teacher always teaches what he (or she) is good at but the student is not. This gives the student the best assistance in making up for his (or her) weaknesses and becoming a good one overall. Enlightened by this, we introduce the "Teaching what you Should Tea…

Cited by 4SourcePDFScholar