← Search

Huili Wang

6 accepted papers

2026

Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models

CVPR 2026

The rapid advancement of diffusion-based image generation models has raised serious concerns regarding potential copyright and privacy infringements involving human-created data. Membership inference attacks (MIAs) have emerged as a promising tool for identifying unauthorized data usage during model

Cited by 0SourcecodeScholar
2026

MrM: Black-Box Membership Inference Attacks Against Multimodal RAG Systems

AAAI 2026technical

Multimodal retrieval-augmented generation (RAG) systems enhance large vision-language models by integrating cross-modal knowledge, enabling their increasing adoption across real-world multimodal tasks. These knowledge databases may contain sensitive information that requires privacy protection. Howe

Cited by 0SourcePDFScholar
2026

ShieldRAG: Safeguarding Retrieval-Augmented Generation from Untrusted Knowledge Bases

AAAI 2026technical

Open knowledge bases (e.g., websites) are widely adopted in Retrieval-Augmented Generation (RAG) systems to provide supplementary knowledge (e.g., latest information). However, such sources inevitably contain biased or harmful content, and incorporating these untrusted contents into the RAG process

Cited by 0SourcePDFScholar
2025

Black-Box Membership Inference Attack for LVLMs via Prior Knowledge-Calibrated Memory Probing

NeurIPS 2025poster

Large vision-language models (LVLMs) derive their capabilities from extensive training on vast corpora of visual and textual data. Empowered by large-scale parameters, these models often exhibit strong memorization of their training data, rendering them susceptible to membership inference attacks (…

Cited by 0SourcecodeScholar
2024

FREmax: A Simple Method Towards Truly Secure Generative Linguistic Steganography

ICASSP 2024accepted

Generative Linguistic Steganography (GLS) is applied to protect privacy against excessive censorship by employing Language Models (LMs) to hide privacy messages in texts. To effectively circumvent censorship, GLS generates steganographic texts (stegos) that closely resemble normal human texts (cover…

Cited by 0SourceScholar
2024

Towards the Robustness of Differentially Private Federated Learning

AAAI 2024technical

Robustness and privacy protection are two important factors of trustworthy federated learning (FL). Existing FL works usually secure data privacy by perturbing local model gradients via the differential privacy (DP) technique, or defend against poisoning attacks by filtering the local gradients in t…