← Search

Shudong Zhang

8 accepted papers

2026

Diagnosing and Repairing Unsafe Channels in Vision-Language Models via Causal Discovery and Dual-Modal Safety Subspace Projection

CVPR 2026

Large Vision-Language Models (LVLMs) have achieved impressive performance across multimodal understanding and reasoning tasks, yet their internal safety mechanisms remain opaque and poorly controlled. In this work, we present a comprehensive framework for diagnosing and repairing unsafe channels wit

Cited by 0SourceScholar
2026

Dissecting the Safety Circuit: Neuronal Intervention for Transferable Adversarial Attacks on VLMs

ICML 2026poster

The limited transferability of adversarial attacks on Vision-Language Models (VLMs) stems from their failure to navigate model-specific safety alignments, where superficial perturbations exploit surrogate-specific artifacts rather than shared safety-critical features. We reveal through linear probin…

Cited by 0SourceScholar
2026

GlitchMiner: Mining Glitch Tokens in Large Language Models via Gradient-based Discrete Optimization

AAAI 2026technical

Glitch tokens—inputs that trigger unpredictable or anomalous behavior in Large Language Models (LLMs)—pose significant challenges to model reliability and safety. Existing detection methods primarily rely on heuristic embedding patterns or statistical anomalies within internal representations, limit

Cited by 0SourcePDFScholar
2026

ShadeEdit: A Utility-Preserving and Defense-Evasive Knowledge Manipulation Attack in Federated LLMs

AAAI 2026technical

Recent studies reveal that adversaries can manipulate the internal knowledge of large language models (LLMs) on selected topics through model editing, causing attacker-specified harmful or biased outputs when queried about the edited content. Once such tampered LLMs are distributed, they can mislead

Cited by 0SourcePDFScholar
2025

Attention! Your Vision Language Model Could Be Maliciously Manipulated

NeurIPS 2025poster

Large Vision-Language Models (VLMs) have achieved remarkable success in understanding complex real-world scenarios and supporting data-driven decision-making processes. However, VLMs exhibit significant vulnerability against adversarial examples, either text or image, which can lead to various adver…

Cited by 0SourcecodeScholar
2025

TRUST-VLM: Thorough Red-Teaming for Uncovering Safety Threats in Vision-Language Models

ICML 2025poster

Vision-Language Models (VLMs) have become a cornerstone in multi-modal artificial intelligence, enabling seamless integration of visual and textual information for tasks such as image captioning, visual question answering, and cross-modal retrieval. Despite their impressive capabilities, these model…

Cited by 0SourcePDFScholar
2025

Transstratal Adversarial Attack: Compromising Multi-Layered Defenses in Text-to-Image Models

NeurIPS 2025spotlight

Modern Text-to-Image (T2I) models deploy multi-layered defenses to block Not-Safe-For-Work (NSFW) content generation. These defenses typically include sequential layers such as prompt filters, concept erasers and image filters. While existing adversarial attacks have demonstrated vulnerabilities in…

Cited by 0SourcecodeScholar
2024

ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users

NeurIPS 2024poster

Large-scale pre-trained generative models are taking the world by storm, due to their abilities in generating creative content. Meanwhile, safeguards for these generative models are developed, to protect users' rights and safety, most of which are designed for large language models. Existing methods…