← Search

Jiaming He

8 accepted papers

2026

Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation

ICML 2026poster

Multimodal Large Language Models (MLLMs) are increasingly deployed in stateless systems, such as autonomous driving and robotics. This paper investigates a novel threat: Semantic-Aware Hijacking. We explore the feasibility of hijacking multiple stateless decisions simultaneously using a single unive…

Cited by 0SourceScholar
2026

TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models

CVPR 2026

Text-to-Video (T2V) models are capable of synthesizing high-quality, temporally coherent dynamic video content, but the diverse generation also inherently introduces critical safety challenges. Existing safety evaluation methods, which focus on static image and text generation, are insufficient to c

Cited by 0SourceScholar
2025

BadRefSR: Backdoor Attacks Against Reference-based Image Super Resolution

ICASSP 2025accepted

Reference-based image super-resolution (RefSR) represents a promising advancement in super-resolution (SR). In contrast to single-image super-resolution (SISR), RefSR leverages an additional reference image to help recover high-frequency details, yet its vulnerability to backdoor attacks has not bee…

Cited by 0SourceScholar
2025

Evaluating Robustness of Large Audio Language Models to Audio Injection: An Empirical Study

EMNLP 2025

Large Audio-Language Models (LALMs) are increasingly deployed in real-world applications, yet their robustness against malicious audio injection remains underexplored. To address this gap, this study systematically evaluates five leading LALMs across four attack scenarios: Audio Interference Attack,

Cited by 0SourcePDFScholar
2025

PRESS: Defending Privacy in Retrieval-Augmented Generation via Embedding Space Shifting

ICASSP 2025accepted

Retrieval-augmented generation (RAG) expands the capabilities of large language models (LLMs) in various applications by integrating relevant information retrieved from external data sources. However, the RAG systems are exposed to substantial privacy risks during the information retrieval process,…

Cited by 0SourceScholar
2025

Watch Out for Your Guidance on Generation! Exploring Conditional Backdoor Attacks against Large Language Models

AAAI 2025technical

Mainstream backdoor attacks on large language models (LLMs) typically set a fixed trigger in the input instance and specific responses for triggered queries. However, the fixed trigger setting (e.g., unusual words) may be easily detected by human detection, limiting the effectiveness and practicali…

Cited by 0SourcePDFScholar
2020

Hierarchical Matching Network for Heterogeneous Entity Resolution

IJCAI 2020poster

Entity resolution (ER) aims to identify data records referring to the same real-world entity. Most existing ER approaches rely on the assumption that the entity records to be resolved are homogeneous, i.e., their attributes are aligned. Unfortunately, entities in real-world datasets are often hetero…