← Search

Jizhong Han

33 accepted papers

2026

Exploiting Synergistic Cognitive Biases to Bypass Safety in LLMs

AAAI 2026technical

Large Language Models (LLMs) demonstrate impressive capabilities across diverse tasks, yet their safety mechanisms remain susceptible to adversarial exploitation of cognitive biases---systematic deviations from rational judgment. Unlike prior studies focusing on isolated biases, this work highlights

Cited by 0SourcePDFScholar
2026

Profiling the Irrational Agent: Cognitive Modeling of LLM Behaviors in Sequential Jailbreaks

ICML 2026poster

Large language models (LLMs) are increasingly deployed in high-stakes settings, yet they remain vulnerable to sequential jailbreaks that exploit multi-turn interaction to circumvent safety mechanisms. Current safety evaluations are largely outcome-based, offering little insight into the latent decis…

Cited by 0SourceScholar
2026

Re-Align: Structured Reasoning-guided Alignment for In-Context Image Generation and Editing

CVPR 2026

In-context image generation and editing (ICGE) enables users to specify visual concepts through interleaved image-text prompts, demanding precise understanding and faithful execution of user intent. Although recent unified multimodal models exhibit promising understanding capabilities, these strengt

Cited by 0SourceScholar
2025

AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs

ICASSP 2025accepted

Jailbreak vulnerabilities in Large Language Models (LLMs) refer to methods that extract malicious content from the model by carefully crafting prompts or suffixes, which has garnered significant attention from the research community. However, traditional attack methods, which primarily focus on the…

Cited by 0SourceScholar
2025

Chain of Attack: Hide Your Intention through Multi-Turn Interrogation

ACL 2025finding

The latent knowledge of large language models (LLMs) contains harmful or unethical content, which introduces significant security risks upon their widespread deployment. Conducting jailbreak attacks on LLMs can proactively identify vulnerabilities to enhance their security measures. However, previou…

2025

Gamma-Guard: Lightweight Residual Adapters for Robust Guardrails in Large Language Models

EMNLP 2025

Large language models (LLMs) are widely deployed as zero-shot evaluators for answer grading, content moderation, and document ranking. Yet studies show that guard models (Guards)—LLMs fine-tuned for safety—remain vulnerable to “jailbreak” attacks, jeopardising downstream chatbots.We confirm this wea

2025

LyapLock: Bounded Knowledge Preservation in Sequential Large Language Model Editing

EMNLP 2025

Large Language Models often contain factually incorrect or outdated knowledge, giving rise to model editing methods for precise knowledge updates. However, current mainstream locate-then-edit approaches exhibit a progressive performance decline during sequential editing, due to inadequate mechanisms

2025

OMS: One More Step Noise Searching to Enhance Membership Inference Attacks for Diffusion Models

IJCAI 2025

The data-intensive nature of Diffusion models amplifies the risks of privacy infringements and copyright disputes, particularly when training on extensive unauthorized data scraped from the Internet. Membership Inference Attacks (MIA) aim to determine whether a data sample has been utilized by the t

Cited by 0SourcePDFScholar
2025

Resolution Attack: Exploiting Image Compression to Deceive Deep Neural Networks

ICLR 2025poster

Model robustness is essential for ensuring the stability and reliability of machine learning systems. Despite extensive research on various aspects of model robustness, such as adversarial robustness and label noise robustness, the exploration of robustness towards different resolutions, remains les…

2025

Unleashing the Temporal-Spatial Reasoning Capacity of GPT for Training-Free Audio and Language Referenced Video Object Segmentation

AAAI 2025technical

In this paper, we propose an Audio-Language-Referenced SAM 2 (AL-Ref-SAM 2) pipeline to explore the training-free paradigm for audio and language-referenced video object segmentation, namely AVS and RVOS tasks. The intuitive solution leverages GroundingDINO to identify the target object from a singl…

2024

Customize your NeRF: Adaptive Source Driven 3D Scene Editing via Local-Global Iterative Training

CVPR 2024poster

In this paper we target the adaptive source driven 3D scene editing task by proposing a CustomNeRF model that unifies a text description or a reference image as the editing prompt. However obtaining desired editing results conformed with the editing prompt is nontrivial since there exist two signifi…

Cited by 14SourcePDFScholar
2024

Real Appearance Modeling for More General Deepfake Detection

ECCV 2024poster

"Recent studies in deepfake detection have shown promising results when detecting deepfakes of the same type as those present in training. However, their ability to generalize to unseen deepfakes remains limited. This work improves the generalizable deepfake detection from a simple principle: an ide…

Cited by 3SourcePDFScholar
2024

Uncertainty-Aware Cross-Modal Alignment for Hate Speech Detection

COLING 2024main

Hate speech detection has become an urgent task with the emergence of huge multimodal harmful content (, memes) on social media platforms. Previous studies mainly focus on complex feature extraction and fusion to learn discriminative information from memes. However, these methods ignore two key poin…

Cited by 1SourcePDFScholar
2024

Uncertainty-Guided Modal Rebalance for Hateful Memes Detection

ACL 2024long

Hateful memes detection is a challenging multimodal understanding task that requires comprehensive learning of vision, language, and cross-modal interactions. Previous research has focused on developing effective fusion strategies for integrating hate information from different modalities. However,…

Cited by 0SourcePDFScholar
2023

Anchor3DLane: Learning To Regress 3D Anchors for Monocular 3D Lane Detection

CVPR 2023poster

Monocular 3D lane detection is a challenging task due to its lack of depth information. A popular solution is to first transform the front-viewed (FV) images or features into the bird-eye-view (BEV) space with inverse perspective mapping (IPM) and detect lanes from BEV features. However, the relianc…

2023

Bridging Search Region Interaction With Template for RGB-T Tracking

CVPR 2023poster

RGB-T tracking aims to leverage the mutual enhancement and complement ability of RGB and TIR modalities for improving the tracking process in various scenarios, where cross-modal interaction is the key component. Some previous methods concatenate the RGB and TIR search region features directly to pe…

2023

Discovering Sounding Objects by Audio Queries for Audio Visual Segmentation

IJCAI 2023poster

Audio visual segmentation (AVS) aims to segment the sounding objects for each frame of a given video. To distinguish the sounding objects from silent ones, both audio-visual semantic correspondence and temporal interaction are required. The previous method applies multi-frame cross-modal attention t…

Cited by 18SourcePDFScholar
2023

Enriching Phrases with Coupled Pixel and Object Contexts for Panoptic Narrative Grounding

IJCAI 2023poster

Panoptic narrative grounding (PNG) aims to segment things and stuff objects in an image described by noun phrases of a narrative caption. As a multimodal task, an essential aspect of PNG is the visual-linguistic interaction between image and caption. The previous two-stage method aggregates visual c…

Cited by 5SourcePDFScholar
2023

OPT: One-shot Pose-Controllable Talking Head Generation

ICASSP 2023accepted

One-shot talking head generation produces lip-sync talking heads based on arbitrary audio and one source face. To guarantee the naturalness and realness, recent methods propose to achieve free pose control instead of simply editing mouth areas. However, existing methods do not preserve accurate iden…

Cited by 0SourceScholar
2022

Cross-Layer Aggregation with Transformers for Multi-Label Image Classification

ICASSP 2022accepted

Multi-label image classification task aims to predict multiple object labels in a given image and faces the challenge of variable-sized objects. Limited by the size of CNN convolution kernels, existing CNN-based methods have difficulty capturing global dependencies and effectively fusing multiple la…

Cited by 0SourceScholar
2022

ESimCSE: Enhanced Sample Building Method for Contrastive Learning of Unsupervised Sentence Embedding

COLING 2022main

Contrastive learning has been attracting much attention for learning unsupervised sentence embeddings. The current state-of-the-art unsupervised method is the unsupervised SimCSE (unsup-SimCSE). Unsup-SimCSE takes dropout as a minimal data augmentation method, and passes the same input sentence to a…

2022

InfoCSE: Information-aggregated Contrastive Learning of Sentence Embeddings

EMNLP 2022finding

Contrastive learning has been extensively studied in sentence embedding learning, which assumes that the embeddings of different views of the same sentence are closer. The constraint brought by this assumption is weak, and a good sentence representation should also be able to reconstruct the origina…

2022

Language-Bridged Spatial-Temporal Interaction for Referring Video Object Segmentation

CVPR 2022poster

Referring video object segmentation aims to predict foreground labels for objects referred by natural language expressions in videos. Previous methods either depend on 3D ConvNets or incorporate additional 2D ConvNets as encoders to extract mixed spatial-temporal features. However, these methods suf…

Cited by 74PDFcodeScholar
2022

RaP: Redundancy-aware Video-language Pre-training for Text-Video Retrieval

EMNLP 2022finding

Video language pre-training methods have mainly adopted sparse sampling techniques to alleviate the temporal redundancy of videos. Though effective, sparse sampling still suffers inter-modal redundancy: visual redundancy and textual redundancy. Compared with highly generalized text, sparsely sampled…

2022

Smoothed Contrastive Learning for Unsupervised Sentence Embedding

COLING 2022main

Unsupervised contrastive sentence embedding models, e.g., unsupervised SimCSE, use the InfoNCE loss function in training. Theoretically, we expect to use larger batches to get more adequate comparisons among samples and avoid overfitting. However, increasing batch size leads to performance degradati…

2021

Aligning the training and evaluation of unsupervised text style Transfer

ICASSP 2021accepted

In the text style transfer task, models modify the attribute style of given texts while keeping the style-irrelevant content unchanged. Previous work has proposed many approaches on the non-parallel corpus (without style-to-style training pairs). These approaches are mostly motivated by heuristic in…

Cited by 0SourceScholar
2021

An Adaptive Hybrid Framework for Cross-domain Aspect-based Sentiment Analysis

AAAI 2021technical

Cross-domain aspect-based sentiment analysis aims to utilize the useful knowledge in a source domain to extract aspect terms and predict their sentiment polarities in a target domain. Recently, methods based on adversarial training have been applied to this task and achieved promising results. In su…

Cited by 35SourcePDFScholar
2021

Collaborative Spatial-Temporal Modeling for Language-Queried Video Actor Segmentation

CVPR 2021poster

Language-queried video actor segmentation aims to predict the pixel-level mask of the actor which performs the actions described by a natural language query in the target frames. Existing methods adopt 3D CNNs over the video clip as a general encoder to extract a mixed spatio-temporal feature for th…

Cited by 58PDFScholar
2021

Topic Sequence Embedding for User Identity Linkage from Heterogeneous Behavior Data

ICASSP 2021accepted

In social media, user identity linkage is a vital information security issue of identifying users’ private information across multiple online social networks. With the popularity of behavior-rich social services, existing methods attempt to align users through encoding behaviors. However, most of th…

Cited by 0SourceScholar
2020

Accelerating Distributed Deep Learning By Adaptive Gradient Quantization

ICASSP 2020accepted

To accelerate distributed deep learning, gradient quantization technique is widely used to reduce the communication cost. However, the existing quantization schemes suffer from either model accuracy degradation or low compression ratio (arisen from a redundant setting of quantization level or high o…

Cited by 0SourceScholar
2020

Early Detection of Fake News by Utilizing the Credibility of News, Publishers, and Users based on Weakly Supervised Learning

COLING 2020main

The dissemination of fake news significantly affects personal reputation and public trust. Recently, fake news detection has attracted tremendous attention, and previous studies mainly focused on finding clues from news content or diffusion path. However, the required features of previous models are…

2020

Linguistic Structure Guided Context Modeling for Referring Image Segmentation

ECCV 2020poster

Referring image segmentation aims to predict the foreground mask of the object referred by a natural language sentence. Multimodal context of the sentence is crucial to distinguish the referent from the background. Existing methods either insufficiently or redundantly model the multimodal context. To…

2020

Referring Image Segmentation via Cross-Modal Progressive Comprehension

CVPR 2020poster

Referring image segmentation aims at segmenting the foreground masks of the entities that can well match the description given in the natural language expression. Previous approaches tackle this problem using implicit feature interaction and fusion between visual and linguistic modalities, but usual…

Cited by 225PDFcodeScholar