← Search

Lulu Xue

8 accepted papers

2026

Dual-View Inference Attack: Machine Unlearning Amplifies Privacy Exposure

AAAI 2026technical

Machine unlearning is a newly popularized technique for removing specific training data from a trained model, enabling it to comply with data deletion requests. While it protects the rights of users requesting unlearning, it also introduces new privacy risks. Prior works have primarily focused on th

Cited by 0SourcePDFScholar
2026

UFVideo: Towards Unified Fine-Grained Video Cooperative Understanding with Large Language Models

CVPR 2026

With the advancement of multi-modal Large Language Models (LLMs), Video LLMs have been further developed to perform on holistic and specialized video understanding. However, existing works are limited to specialized video understanding tasks, failing to achieve a comprehensive and multi-grained vide

Cited by 0SourceScholar
2026

UnlearnShield: Shielding Forgotten Privacy against Unlearning Inversion

ICASSP 2026poster

Machine unlearning is an emerging technique that aims to remove the influence of specific data from trained models, thereby enhancing privacy protection. However, recent research has uncovered critical privacy vulnerabilities, showing that adversaries can exploit unlearning inversion to reconstruct…

Cited by 0SourcePDFScholar
2025

AdvEDM: Fine-grained Adversarial Attack against VLM-based Embodied Agents

NeurIPS 2025poster

Vision-Language Models (VLMs), with their strong reasoning and planning capabilities, are widely used in embodied decision-making (EDM) tasks in embodied agents, such as autonomous driving and robotic manipulation. Recent research has increasingly explored adversarial attacks on VLMs to reveal their…

Cited by 0SourceScholar
2025

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World

ICLR 2025poster

Embodied AI represents systems where AI is integrated into physical entities. Multimodal Large Language Model (LLM), which exhibits powerful language understanding abilities, has been extensively employed in embodied AI by facilitating sophisticated task planning. However, a critical safety issue re…

Cited by 0SourcePDFScholar
2024

DarkFed: A Data-Free Backdoor Attack in Federated Learning

IJCAI 2024poster

Federated learning (FL) has been demonstrated to be susceptible to backdoor attacks. However, existing academic studies on FL backdoor attacks rely on a high proportion of real clients with main task-related data, which is impractical. In the context of real-world industrial scenarios, even the simp…

2024

MISA: Unveiling the Vulnerabilities in Split Federated Learning

ICASSP 2024accepted

Federated learning (FL) and split learning (SL) are prevailing distributed paradigms in recent years. They both enable shared global model training while keeping data localized on users’ devices. The former excels in parallel execution capabilities, while the latter enjoys low dependence on edge com…

Cited by 0SourceScholar
2024

Revisiting Gradient Pruning: A Dual Realization for Defending against Gradient Attacks

AAAI 2024technical

Collaborative learning (CL) is a distributed learning framework that aims to protect user privacy by allowing users to jointly train a model by sharing their gradient updates only. However, gradient inversion attacks (GIAs), which recover users' training data from shared gradients, impose severe pri…

Cited by 2SourcePDFScholar