← Search

Jinghan Jia

25 accepted papers

2026

CyclicReflex: Improving Reasoning Models via Cyclical Reflection Token Scheduling

ICLR 2026poster

Large reasoning models (LRMs), such as OpenAI's o1 and DeepSeek-R1, harness test-time scaling to perform multi-step reasoning for complex problem-solving. This reasoning process, executed before producing final answers, is often guided by special juncture tokens that prompt self-evaluative reflectio…

Cited by 0SourcecodeScholar
2026

Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning

ICLR 2026poster

Large language model (LLM) unlearning aims to surgically remove the influence of undesired data or knowledge from an existing model while preserving its utility on unrelated tasks. This paradigm has shown promise in addressing privacy and safety concerns. However, recent findings reveal that unlearn…

Cited by 0SourcecodeScholar
2026

Label Smoothing Improves Machine Unlearning

ICLR 2026poster

The objective of machine unlearning (MU) is to eliminate previously learned data from a model. However, it can be challenging to strike a balance between computation cost and performance when using existing MU techniques. Taking inspiration from the influence of label smoothing on model confidence a…

Cited by 0SourceScholar
2025

Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning

ICML 2025poster

Machine unlearning presents a promising approach to mitigating privacy and safety concerns in large language models (LLMs) by enabling the selective removal of targeted data or knowledge while preserving model utility. However, existing unlearning methods remain over-sensitive to downstream fine-tun…

2025

One Token Embedding Is Enough to Deadlock Your Large Reasoning Model

NeurIPS 2025poster

Modern large reasoning models (LRMs) exhibit impressive multi-step problem-solving via chain-of-thought (CoT) reasoning. However, this iterative thinking mechanism introduces a new vulnerability surface. We present the Deadlock Attack, a resource exhaustion method that hijacks an LRM's generative co…

Cited by 0SourceScholar
2025

Reasoning Model Unlearning: Forgetting Traces, Not Just Answers, While Preserving Reasoning Skills

EMNLP 2025

Recent advances in large reasoning models (LRMs) have enabled strong multi-step reasoning capabilities. However, existing machine unlearning algorithms are tailored to standard language modeling and fail to address the unique challenges posed by LRMs. In this work, we present the first systematic st

Cited by 0SourcePDFScholar
2025

Robust Multi-bit Text Watermark with LLM-based Paraphrasers

ICML 2025poster

We propose an imperceptible multi-bit text watermark embedded by paraphrasing with LLMs. We fine-tune a pair of LLM paraphrasers that are designed to behave differently so that their paraphrasing difference reflected in the text semantics can be identified by a trained decoder. To embed our multi-bi…

2025

SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?

ACL 2025long

Recent advancements in LLMs unlearning have shown remarkable success in removing unwanted data-model influences while preserving the model’s utility for legitimate knowledge. Despite these strides, sparse Mixture-of-Experts (MoE) LLMs–a key subset of the LLM family–have remained unexplored in the co…

Cited by 0SourcePDFScholar
2025

Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning

NeurIPS 2025poster

This work studies the problem of large language model (LLM) unlearning, aiming to remove unwanted data influences (e.g., copyrighted or harmful content) while preserving model utility. Despite the increasing demand for unlearning, a technically-grounded optimization framework is lacking. Gradient as…

Cited by 0SourcecodeScholar
2025

The Fragile Truth of Saliency: Improving LLM Input Attribution via Attention Bias Optimization

NeurIPS 2025spotlight

Input saliency aims to quantify the influence of input tokens on the output of large language models (LLMs), which has been widely used for prompt engineering, model interpretability, and behavior attribution. Despite the proliferation of saliency techniques, the field lacks a standardized and rigor…

Cited by 0SourceScholar
2025

Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond

ICML 2025poster

The LLM unlearning technique has recently been introduced to comply with data regulations and address the safety and ethical concerns of LLMs by removing the undesired data-model influence. However, state-of-the-art unlearning methods face a critical vulnerability: they are susceptible to ``relearn…

2024

DeepZero: Scaling Up Zeroth-Order Optimization for Deep Model Training

ICLR 2024poster

Zeroth-order (ZO) optimization has become a popular technique for solving machine learning (ML) problems when first-order (FO) information is difficult or impossible to obtain. However, the scalability of ZO optimization remains an open problem: Its use has primarily been limited to relatively small…

2024

Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models

NeurIPS 2024poster

Diffusion models (DMs) have achieved remarkable success in text-to-image generation, but they also pose safety risks, such as the potential generation of harmful content and copyright violations. The techniques of machine unlearning, also known as concept erasing, have been developed to address thes…

2024

Leveraging LLMs for Dialogue Quality Measurement

NAACL 2024industry

In task-oriented conversational AI evaluation, unsupervised methods poorly correlate with human judgments, and supervised approaches lack generalization. Recent advances in large language models (LLMs) show robust zero- and few-shot capabilities across NLP tasks. Our paper explores using LLMs for au…

Cited by 4SourcePDFScholar
2024

SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning

EMNLP 2024main

Large Language Models (LLMs) have highlighted the necessity of effective unlearning mechanisms to comply with data regulations and ethical AI practices. LLM unlearning aims at removing undesired data influences and associated model capabilities without compromising utility beyond the scope of unlear…

2024

To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now

ECCV 2024poster

"The recent advances in diffusion models (DMs) have revolutionized the generation of realistic and complex images. However, these models also introduce potential safety hazards, such as producing harmful content and infringing data copyrights. Despite the development of safety-driven unlearning tech…

2024

UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models

NeurIPS 2024poster

The technological advancements in diffusion models (DMs) have demonstrated unprecedented capabilities in text-to-image generation and are widely used in diverse applications. However, they have also raised significant societal concerns, such as the generation of harmful content and copyright dispute…

2024

WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models

NeurIPS 2024poster

The need for effective unlearning mechanisms in large language models (LLMs) is increasingly urgent, driven by the necessity to adhere to data regulations and foster ethical generative AI practices. LLM unlearning is designed to reduce the impact of undesirable data influences and associated model c…

2023

Model Sparsity Can Simplify Machine Unlearning

NeurIPS 2023spotlight

In response to recent data regulation requirements, machine unlearning (MU) has emerged as a critical process to remove the influence of specific examples from a given model. Although exact unlearning can be achieved through complete model retraining using the remaining dataset, the associated compu…

2023

Robustness-Preserving Lifelong Learning Via Dataset Condensation

ICASSP 2023accepted

Lifelong learning (LL) aims to improve a predictive model as the data source evolves continuously. Most work in this learning paradigm has focused on resolving the problem of ‘catastrophic forgetting,’ which refers to a notorious dilemma between improving model accuracy over new data and retaining a…

Cited by 5SourceScholar
2023

SMUG: Towards Robust Mri Reconstruction by Smoothed Unrolling

ICASSP 2023accepted

Although deep learning (DL) has gained much popularity for accelerated magnetic resonance imaging (MRI), recent studies have shown that DL-based MRI reconstruction models could be over-sensitive to tiny input perturbations (that are called ‘adversarial perturbations’), which cause unstable, low-qual…

Cited by 0SourceScholar
2023

Selectivity Drives Productivity: Efficient Dataset Pruning for Enhanced Transfer Learning

NeurIPS 2023poster

Massive data is often considered essential for deep learning applications, but it also incurs significant computational and infrastructural costs. Therefore, dataset pruning (DP) has emerged as an effective way to improve data efficiency by identifying and removing redundant training samples without…

2023

Text-Visual Prompting for Efficient 2D Temporal Video Grounding

CVPR 2023poster

In this paper, we study the problem of temporal video grounding (TVG), which aims to predict the starting/ending time points of moments described by a text sentence within a long untrimmed video. Benefiting from fine-grained 3D visual features, the TVG techniques have achieved remarkable progress in…

2023

TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization

ICLR 2023poster

Robustness evaluation against adversarial examples has become increasingly important to unveil the trustworthiness of the prevailing deep models in natural language processing (NLP). However, in contrast to the computer vision domain where the first-order projected gradient descent (PGD) is used as…

2022

How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective

ICLR 2022spotlight

The lack of adversarial robustness has been recognized as an important issue for state-of-the-art machine learning (ML) models, e.g., deep neural networks (DNNs). Thereby, robustifying ML models against adversarial attacks is now a major focus of research. However, nearly all existing defense method…