← Search

Muchao Ye

10 accepted papers

2026

The Value of Variance: Mitigating Debate Collapse in Multi-Agent Systems via Uncertainty-Driven Policy Optimization

ICML 2026spotlight

Multi-agent debate (MAD) systems improve LLM reasoning through iterative deliberation, but remain vulnerable to debate collapse, a failure type where final agent decisions are compromised on erroneous reasoning. Existing methods lack principled mechanisms to detect or prevent such failures. To addre…

Cited by 0SourceScholar
2025

Data to Defense: The Role of Curation in Aligning Large Language Models Against Safety Compromise

EMNLP 2025

Large language models (LLMs) are widely adapted for downstream applications through fine-tuning, a process named customization. However, recent studies have identified a vulnerability during this process, where malicious samples can compromise the robustness of LLMs and amplify harmful behaviors. To

Cited by 0SourcePDFScholar
2025

Shadow-Activated Backdoor Attacks on Multimodal Large Language Models

ACL 2025finding

This paper delves into a novel backdoor attack scenario, aiming to uncover potential security risks associated with Multimodal Large Language Models (MLLMs) during multi-round open-ended conversations with users. In the practical use of MLLMs, users have full control over the interaction process wit…

2025

VERA: Explainable Video Anomaly Detection via Verbalized Learning of Vision-Language Models

CVPR 2025poster

The rapid advancement of vision-language models (VLMs) has established a new paradigm in video anomaly detection (VAD): leveraging VLMs to simultaneously detect anomalies and provide comprehendible explanations for the decisions. Existing work in this direction often assumes the complex reasoning re…

Cited by 7SourcePDFScholar
2024

Recent Advances in Predictive Modeling with Electronic Health Records

IJCAI 2024poster

The development of electronic health records (EHR) systems has enabled the collection of a vast amount of digitized patient data. However, utilizing EHR data for predictive modeling presents several challenges due to its unique characteristics. With the advancements in machine learning techniques, d…

Cited by 5SourcePDFScholar
2024

VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models

AAAI 2024technical

Visual Question Answering (VQA) is a fundamental task in computer vision and natural language process fields. Although the “pre-training & finetuning” learning paradigm significantly improves the VQA performance, the adversarial robustness of such a learning paradigm has not been explored. In this p…

2023

UniT: A Unified Look at Certified Robust Training against Text Adversarial Perturbation

NeurIPS 2023poster

Recent years have witnessed a surge of certified robust training pipelines against text adversarial perturbation constructed by synonym substitutions. Given a base model, existing pipelines provide prediction certificates either in the discrete word space or the continuous latent space. However, the…

Cited by 1SourcePDFScholar
2023

VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models

NeurIPS 2023poster

Vision-Language (VL) pre-trained models have shown their superiority on many multimodal tasks. However, the adversarial robustness of such models has not been fully explored. Existing approaches mainly focus on exploring the adversarial robustness under the white-box setting, which is unrealistic. I…

2022

TextHoaxer: Budgeted Hard-Label Adversarial Attacks on Text

AAAI 2022technical

This paper focuses on a newly challenging setting in hard-label adversarial attacks on text data by taking the budget information into account. Although existing approaches can successfully generate adversarial examples in the hard-label setting, they follow an ideal assumption that the victim model…

2021

Writing by Memorizing: Hierarchical Retrieval-based Medical Report Generation

ACL 2021long

Medical report generation is one of the most challenging tasks in medical image analysis. Although existing approaches have achieved promising results, they either require a predefined template database in order to retrieve sentences or ignore the hierarchical nature of medical report generation. To…

Cited by 42SourcePDFScholar