← Search

Jize Zhang

5 accepted papers

2025

Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models

CVPR 2025poster

Current image generation models can effortlessly produce high-quality, highly realistic images, but this also increases the risk of misuse. In various Text-to-Image or Image-to-Image tasks, attackers can generate a series of images containing inappropriate content by simply editing the language moda…

2024

Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Models

ECCV 2024poster

"Large Vision-Language Models (LVLMs) rely on vision encoders and Large Language Models (LLMs) to exhibit remarkable capabilities on various multi-modal tasks in the joint space of vision and language. However, typographic attacks, which disrupt Vision-Language Models (VLMs) such as Contrastive Lang…

2021

A Winning Hand: Compressing Deep Networks Can Improve Out-of-Distribution Robustness

NeurIPS 2021poster

Successful adoption of deep learning (DL) in the wild requires models to be: (1) compact, (2) accurate, and (3) robust to distributional shifts. Unfortunately, efforts towards simultaneously meeting these requirements have mostly been unsuccessful. This raises an important question: Is the inability…

2020

A Statistical Mechanics Framework for Task-Agnostic Sample Design in Machine Learning

NeurIPS 2020poster

In this paper, we present a statistical mechanics framework to understand the effect of sampling properties of training data on the generalization gap of machine learning (ML) algorithms. We connect the generalization gap to the spatial properties of a sample design characterized by the pair correla…

2020

Mix-n-Match : Ensemble and Compositional Methods for Uncertainty Calibration in Deep Learning

ICML 2020poster

This paper studies the problem of post-hoc calibration of machine learning classifiers. We introduce the following desiderata for uncertainty calibration: (a) accuracy-preserving, (b) data-efficient, and (c) high expressive power. We show that none of the existing methods satisfy all three requireme…