← Search

Ronghui Mu

12 accepted papers

2026

CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing

AAAI 2026technical

Recent advancements in Large Language Models (LLMs) have led to their widespread adoption in daily applications. Despite their impressive capabilities, they remain vulnerable to adversarial attacks, as even minor meaning-preserving changes such as synonym substitutions can lead to incorrect predicti

Cited by 0SourcePDFScholar
2026

Confusion-Aware Spectral Regularizer for Long-Tailed Recognition

CVPR 2026

Long-tailed image classification remains a long-standing challenge, as real-world data typically follow highly imbalanced distributions where a few head classes dominate and many tail classes contain only limited samples. This imbalance biases feature learning toward head categories and leads to sig

Cited by 0SourcecodeScholar
2026

OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents

ICML 2026poster

Large Language Models (LLMs) are increasingly deployed as autonomous agents that execute tool-augmented, multi-step tasks, where latency is a critical factor for real-world applications. Yet an overlooked threat is Reasoning-Level Denial-of-Service (R-DoS), in which an attacker preserves task correc…

Cited by 0SourceScholar
2025

Enhancing Robust Fairness via Confusional Spectral Regularization

ICLR 2025poster

Recent research has highlighted a critical issue known as ``robust fairness", where robust accuracy varies significantly across different classes, undermining the reliability of deep neural networks (DNNs). A common approach to address this has been to dynamically reweight classes during training,…

2024

DeepGRE: Global Robustness Evaluation of Deep Neural Networks

ICASSP 2024accepted

Robustness measurements on deep neural networks (DNNs) have gained significant attention, especially in safety-critical applications. Numerous studies have been devoted to assessing the robustness of classifiers by averaging local robustness over a fixed set of data samples, such as a test set. Howe…

Cited by 0SourceScholar
2024

PRASS: Probabilistic Risk-averse Robust Learning with Stochastic Search

IJCAI 2024poster

Deep learning models, despite their remarkable success in various tasks, have been shown to be vulnerable to adversarial perturbations. Although robust learning techniques that consider adversarial risks against worst-case perturbations can effectively increase a model's robustness, they may not alw…

Cited by 1SourcePDFScholar
2024

Position: Building Guardrails for Large Language Models Requires Systematic Design

ICML 2024poster

As Large Language Models (LLMs) become more integrated into our daily lives, it is crucial to identify and mitigate their risks, especially when the risks can have profound impacts on human users and societies. Guardrails, which filter the inputs or outputs of LLMs, have emerged as a core safeguardi…

Cited by 3SourcePDFScholar
2024

Reward Certification for Policy Smoothed Reinforcement Learning

AAAI 2024technical

Reinforcement Learning (RL) has achieved remarkable success in safety-critical areas, but it can be weakened by adversarial attacks. Recent studies have introduced ``smoothed policies" to enhance its robustness. Yet, it is still challenging to establish a provable guarantee to certify the bound of i…

2024

Towards Fairness-Aware Adversarial Learning

CVPR 2024poster

Although adversarial training (AT) has proven effective in enhancing the model's robustness the recently revealed issue of fairness in robustness has not been well addressed i.e. the robust accuracy varies significantly among different categories. In this paper instead of uniformly evaluating the mo…

2023

Certified Policy Smoothing for Cooperative Multi-Agent Reinforcement Learning

AAAI 2023technical

Cooperative multi-agent reinforcement learning (c-MARL) is widely applied in safety-critical scenarios, thus the analysis of robustness for c-MARL models is profoundly important. However, robustness certification for c-MARLs has not yet been explored in the community. In this paper, we propose a nov…

2023

Randomized Adversarial Training via Taylor Expansion

CVPR 2023poster

In recent years, there has been an explosion of research into developing more robust deep neural networks against adversarial examples. Adversarial training appears as one of the most successful methods. To deal with both the robustness against adversarial examples and the accuracy over clean exampl…