← Search

Qizhou Wang

26 accepted papers

2026

AEGIS: Adversarial Target–Guided Retention-Data-Free Robust Concept Erasure from Diffusion Models

ICLR 2026poster

Concept erasure helps stop diffusion models (DMs) from generating harmful content; but current methods face robustness-retention trade-off. **Robustness** means the model fine-tuned by concept erasure methods resists reactivation of erased concepts, even under semantically related prompts. **Retenti…

Cited by 0SourcecodeScholar
2026

Arcadia: Toward a Full-Lifecycle Framework for Embodied Lifelong Learning

CVPR 2026

We contend that embodied learning is fundamentally a lifecycle problem rather than a single-stage optimization. Systems that optimize only one link (data collection, simulation, learning, or deployment) rarely sustain improvement or generalize beyond narrow settings. We introduce Arcadia, a closed-l

Cited by 0SourceScholar
2026

AudioMosaic: Contrastive Masked Audio Representation Learning

ICML 2026poster

Audio self-supervised learning (SSL) aims to learn general-purpose representations from large-scale unlabeled audio data and has achieved remarkable progress in recent years. While most prior work relies on generative reconstruction objectives, contrastive approaches remain relatively underexplored,…

Cited by 0SourceScholar
2026

Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearning

ICML 2026poster

Mitigating sensitive and harmful outputs is fundamental to ensuring safe deployment of LLMs. Existing approaches typically follow two paradigms: Knowledge Deletion (KD), which erases undesirable information during training, and Distinguishable Refusal (DR), which steers models away from using sensit…

Cited by 0SourceScholar
2026

EEPO: Exploration-Enhanced Policy Optimization via Sample-Then-Forget

ICLR 2026poster

Balancing exploration and exploitation remains a central challenge in reinforcement learning with verifiable rewards (RLVR) for large language models (LLMs). Current RLVR methods often overemphasize exploitation, leading to entropy collapse, reduced exploratory capacity, and ultimately limited perfo…

Cited by 0SourcecodeScholar
2026

Explainable LLM Unlearning through Reasoning

ICLR 2026poster

LLM unlearning is essential for mitigating safety, copyright, and privacy concerns in pre-trained Large Language Models (LLMs). Compared to preference alignment, it offers a more explicit way by removing undesirable knowledge characterized by specific unlearning datasets. In previous works, Gradien…

Cited by 0SourcecodeScholar
2026

MLUBench: A Benchmark for Lifelong Unlearning Evaluation in MLLMs

ICML 2026poster

Multimodal large language models (MLLMs) are trained on massive multimodal data, making data unlearning increasingly important as data owners may request the removal of specific content. In practice, these requests often arrive sequentially over time, giving rise to the challenging problem of *MLLM …

Cited by 0SourceScholar
2026

Towards Understanding Valuable Preference Data for Large Language Model Alignment

ICLR 2026poster

Large language model (LLM) alignment is typically achieved through learning from human preference comparisons, making the quality of preference data critical to its success. Existing studies often pre-process raw training datasets to identify valuable preference pairs using external reward models or…

Cited by 0SourceScholar
2025

Adaptive Localization of Knowledge Negation for Continual LLM Unlearning

ICML 2025poster

With the growing deployment of large language models (LLMs) across diverse domains, concerns regarding their safety have grown substantially. LLM unlearning has emerged as a pivotal approach to removing harmful or unlawful contents while maintaining utility. Despite increasing interest, the challeng…

Cited by 0SourcePDFScholar
2025

Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning

ICML 2025poster

Loss reweighting has shown significant benefits for machine unlearning with large language models (LLMs). However, their exact functionalities are left unclear and the optimal strategy remains an open question, thus impeding the understanding and improvement of existing methodologies. In this paper,…

2025

GRU: Mitigating the Trade-off between Unlearning and Retention for LLMs

ICML 2025poster

Large language model (LLM) unlearning has demonstrated its essential role in removing privacy and copyright-related responses, crucial for their legal and safe applications. However, the pursuit of complete unlearning often comes with substantial costs due to its compromises in their general functio…

Cited by 0SourcePDFScholar
2025

Open-Set Graph Anomaly Detection via Normal Structure Regularisation

ICLR 2025poster

This paper considers an important Graph Anomaly Detection (GAD) task, namely open-set GAD, which aims to train a detection model using a small number of normal and anomaly nodes (referred to as *seen anomalies*) to detect both seen anomalies and *unseen anomalies* (*i.e*., anomalies that cannot be i…

2025

Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond

ICLR 2025poster

Large language models (LLMs) should undergo rigorous audits to identify potential risks, such as copyright and privacy infringements. Once these risks emerge, timely updates are crucial to remove undesirable responses, ensuring legal and safe model usage. It has spurred recent research into LLM unle…

Cited by 2SourcePDFScholar
2025

Towards Effective Evaluations and Comparisons for LLM Unlearning Methods

ICLR 2025poster

The imperative to eliminate undesirable data memorization underscores the significance of machine unlearning for large language models (LLMs). Recent research has introduced a series of promising unlearning methods, notably boosting the practical significance of the field. Nevertheless, adopting a p…

Cited by 0SourcePDFScholar
2024

A Sober Look at the Robustness of CLIPs to Spurious Features

NeurIPS 2024poster

Large vision language models, such as CLIP, demonstrate impressive robustness to spurious features than single-modal models trained on ImageNet. However, existing test datasets are typically curated based on ImageNet-trained models, which aim to capture the spurious features inherited in ImageNet. B…

Cited by 8SourcePDFScholar
2023

Cross-Domain Graph Anomaly Detection via Anomaly-Aware Contrastive Alignment

AAAI 2023technical

Cross-domain graph anomaly detection (CD-GAD) describes the problem of detecting anomalous nodes in an unlabelled target graph using auxiliary, related source graphs with labelled anomalous and normal nodes. Although it presents a promising approach to address the notoriously high false positive iss…

2023

Learning to Augment Distributions for Out-of-distribution Detection

NeurIPS 2023poster

Open-world classification systems should discern out-of-distribution (OOD) data whose labels deviate from those of in-distribution (ID) cases, motivating recent studies in OOD detection. Advanced works, despite their promising progress, may still fail in the open world, owing to the lacking knowledg…

2023

Out-of-distribution Detection Learning with Unreliable Out-of-distribution Sources

NeurIPS 2023poster

Out-of-distribution (OOD) detection discerns OOD data where the predictor cannot make valid predictions as in-distribution (ID) data, thereby increasing the reliability of open-world classification. However, it is typically hard to collect real out-of-distribution (OOD) data for training a predictor…

2023

Out-of-distribution Detection with Implicit Outlier Transformation

ICLR 2023poster

Outlier exposure (OE) is powerful in out-of-distribution (OOD) detection, enhancing detection capability via model fine-tuning with surrogate OOD data. However, surrogate data typically deviate from test OOD data. Thus, the performance of OE when facing unseen OOD data, can be weaken. To address thi…

2022

Real-Time Hyperspectral Imaging in Hardware via Trained Metasurface Encoders

CVPR 2022poster

Hyperspectral imaging has attracted significant attention to identify spectral signatures for image classification and automated pattern recognition in computer vision. State-of-the-art implementations of snapshot hyperspectral imaging rely on bulky, non-integrated, and expensive optical elements, i…

Cited by 30PDFcodeScholar
2022

Towards Lightweight Black-Box Attack Against Deep Neural Networks

NeurIPS 2022accept

Black-box attacks can generate adversarial examples without accessing the parameters of target model, largely exacerbating the threats of deployed deep neural networks (DNNs). However, previous works state that black-box attacks fail to mislead target models when their training data and outputs are…

Cited by 23SourcePDFScholar
2022

Watermarking for Out-of-distribution Detection

NeurIPS 2022accept

Out-of-distribution (OOD) detection aims to identify OOD data based on representations extracted from well-trained deep models. However, existing methods largely ignore the reprogramming property of deep models and thus may not fully unleash their intrinsic strength: without modifying parameters of…

2021

Learning with Group Noise

AAAI 2021technical

Machine learning in the context of noise is a challenging but practical setting to plenty of real-world applications. Most of the previous approaches in this area focus on the pairwise relation (casual or correlational relationship) with noise, such as learning with noisy labels. However, the group…

Cited by 11SourcePDFScholar
2021

Probabilistic Margins for Instance Reweighting in Adversarial Training

NeurIPS 2021poster

Reweighting adversarial data during training has been recently shown to improve adversarial robustness, where data closer to the current decision boundaries are regarded as more critical and given larger weights. However, existing methods measuring the closeness are not very reliable: they are discr…

2021

Tackling Instance-Dependent Label Noise via a Universal Probabilistic Model

AAAI 2021technical

The drastic increase of data quantity often brings the severe decrease of data quality, such as incorrect label annotations. It poses a great challenge for robustly training Deep Neural Networks (DNNs). Existing learning methods with label noise either employ ad-hoc heuristics or restrict to specifi…