← Search

Mingda Zhang

14 accepted papers

2026

AdapAction: Adaptive Target Action Backdoor Attack against GUI Agents

CVPR 2026

Autonomous Graphical User Interface (GUI) agents powered by Multimodal Large Language Models (MLLMs) are increasingly vital for complex task automation. However, their capacity for self-driven decision-making introduces significant, yet underexplored, security risks, among which backdoor attacks pos

Cited by 0SourceScholar
2026

Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization

ICLR 2026poster

This work investigates Poisoned Sample Detection (PSD), a promising defense approach against backdoor attacks. However, we observe that the effectiveness of many advanced PSD methods degrades significantly under weak backdoor attacks (\eg, low poisoning ratios or weak trigger patterns). To substanti…

Cited by 0SourceScholar
2025

Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks

ICLR 2025poster

This work studies the task of poisoned sample detection for defending against data poisoning based backdoor attacks. Its core challenge is finding a generalizable and discriminative metric to distinguish between clean and various types of poisoned samples (e.g., various triggers, various poisoning r…

Cited by 4SourcePDFScholar
2025

OmnixR: Evaluating Omni-modality Language Models on Reasoning across Modalities

ICLR 2025poster

We introduce \textbf{OmnixR}, an evaluation suite designed to benchmark state-of-the-art Omni-modality Language Models (OLMs), such as GPT-4o and Gemini. Evaluating OLMs, which integrate multiple modalities such as text, vision, and audio, presents unique challenges. Particularly, the user message…

Cited by 5SourcePDFScholar
2025

Scaling Inference Time Compute for Diffusion Models

CVPR 2025highlight

Generative models have made significant impacts across various domains, largely due to their ability to scale during training by increasing data, computational resources, and model size, a phenomenon characterized by the scaling laws. Recent research has begun to explore inference-time scaling behav…

Cited by 0SourcePDFScholar
2024

VDC: Versatile Data Cleanser based on Visual-Linguistic Inconsistency by Multimodal Large Language Models

ICLR 2024poster

The role of data in building AI systems has recently been emphasized by the emerging concept of data-centric AI. Unfortunately, in the real-world, datasets may contain dirty samples, such as poisoned samples from backdoor attack, noisy labels in crowdsourcing, and even hybrids of them. The presence…

2024

VIEWS: Entity-Aware News Video Captioning

EMNLP 2024main

Existing popular video captioning benchmarks and models often produce generic captions for videos that lack specific identification of individuals, locations, or organizations (named entities). However, in the case of news videos, the setting is more demanding, requiring the inclusion of such named…

2023

Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples

NeurIPS 2023poster

Backdoor attacks are serious security threats to machine learning models where an adversary can inject poisoned samples into the training set, causing a backdoored model which predicts poisoned samples with particular triggers to particular target classes, while behaving normally on benign samples.…

2023

Video Timeline Modeling For News Story Understanding

NeurIPS 2023spotlight

In this paper, we present a novel problem, namely video timeline modeling. Our objective is to create a video-associated timeline from a set of videos related to a specific topic, thereby facilitating the content and structure understanding of the story being told. This problem has significant poten…

2022

BackdoorBench: A Comprehensive Benchmark of Backdoor Learning

NeurIPS 2022accept

Backdoor learning is an emerging and vital topic for studying deep neural networks' vulnerability (DNNs). Many pioneering backdoor attack and defense methods are being proposed, successively or concurrently, in the status of a rapid arms race. However, we find that the evaluations of new methods are…

2021

Domain-Robust VQA With Diverse Datasets and Methods but No Target Labels

CVPR 2021poster

The observation that computer vision methods overfit to dataset specifics has inspired diverse attempts to make object recognition models robust to domain shifts. However, similar work on domain-robust visual question answering methods is very limited. Domain adaptation for VQA differs from adaptati…

Cited by 29PDFScholar
2019

Cap2Det: Learning to Amplify Weak Caption Supervision for Object Detection

ICCV 2019poster

Learning to localize and name object instances is a fundamental problem in vision, but state-of-the-art approaches rely on expensive bounding box supervision. While weakly supervised detection (WSOD) methods relax the need for boxes to that of image-level annotations, even cheaper supervision is nat…

Cited by 61PDFcodeScholar
2017

Automatic Understanding of Image and Video Advertisements

CVPR 2017spotlight

There is more to images than their objective physical content: for example, advertisements are created to persuade a viewer to take a certain action. We propose the novel problem of automatic advertisement understanding. To enable research on this problem, we create two datasets: an image dataset of…

Cited by 219PDFScholar