← Search

Tao Qi

18 accepted papers

2026

Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models

CVPR 2026

The rapid advancement of diffusion-based image generation models has raised serious concerns regarding potential copyright and privacy infringements involving human-created data. Membership inference attacks (MIAs) have emerged as a promising tool for identifying unauthorized data usage during model

Cited by 0SourcecodeScholar
2026

MrM: Black-Box Membership Inference Attacks Against Multimodal RAG Systems

AAAI 2026technical

Multimodal retrieval-augmented generation (RAG) systems enhance large vision-language models by integrating cross-modal knowledge, enabling their increasing adoption across real-world multimodal tasks. These knowledge databases may contain sensitive information that requires privacy protection. Howe

Cited by 0SourcePDFScholar
2026

ShieldRAG: Safeguarding Retrieval-Augmented Generation from Untrusted Knowledge Bases

AAAI 2026technical

Open knowledge bases (e.g., websites) are widely adopted in Retrieval-Augmented Generation (RAG) systems to provide supplementary knowledge (e.g., latest information). However, such sources inevitably contain biased or harmful content, and incorporating these untrusted contents into the RAG process

Cited by 0SourcePDFScholar
2026

Towards Whole-corpus Reconstruction of Heterogeneous RAG Knowledge Bases

ICML 2026poster

Retrieval-Augmented Generation (RAG) systems are increasingly deployed to provide query-based access to large knowledge bases, thereby introducing concrete privacy risks whereby the underlying corpus may be partially or fully extracted through the deployed service. Existing extraction attacks typica…

Cited by 0SourceScholar
2025

Black-Box Membership Inference Attack for LVLMs via Prior Knowledge-Calibrated Memory Probing

NeurIPS 2025poster

Large vision-language models (LVLMs) derive their capabilities from extensive training on vast corpora of visual and textual data. Empowered by large-scale parameters, these models often exhibit strong memorization of their training data, rendering them susceptible to membership inference attacks (…

Cited by 0SourcecodeScholar
2025

From Easy to Hard: The MIR Benchmark for Progressive Interleaved Multi-Image Reasoning

ICCV 2025poster

Multi-image Interleaved Reasoning aims to improve Multimodal Large Language Models' (MLLMs) ability to jointly comprehend and reason across multiple images and their associated textual contexts, introducing unique challenges beyond single-image or non-interleaved multi-image tasks.While current mult…

Cited by 0SourcePDFScholar
2025

GLoCIM: Global-view Long Chain Interest Modeling for news recommendation

COLING 2025main

Accurately recommending candidate news articles to users has always been the core challenge of news recommendation system. News recommendations often require modeling of user interest to match candidate news. Recent efforts have primarily focused on extracting local subgraph information in a global…

Cited by 1SourcePDFScholar
2024

Towards the Robustness of Differentially Private Federated Learning

AAAI 2024technical

Robustness and privacy protection are two important factors of trustworthy federated learning (FL). Existing FL works usually secure data privacy by perturbing local model gradients via the differential privacy (DP) technique, or defend against poisoning attacks by filtering the local gradients in t…

2023

FedSampling: A Better Sampling Strategy for Federated Learning

IJCAI 2023poster

Federated learning (FL) is an important technique for learning models from decentralized data in a privacy-preserving way. Existing FL methods usually uniformly sample clients for local model learning in each round. However, different clients may have significantly different data sizes, and the clie…

2022

FairVFL: A Fair Vertical Federated Learning Framework with Contrastive Adversarial Learning

NeurIPS 2022accept

Vertical federated learning (VFL) is a privacy-preserving machine learning paradigm that can learn models from features distributed on different platforms in a privacy-preserving way. Since in real-world applications the data may contain bias on fairness-sensitive features (e.g., gender), VFL models…

2022

NoisyTune: A Little Noise Can Help You Finetune Pretrained Language Models Better

ACL 2022short

Effectively finetuning pretrained language models (PLMs) is critical for their success in downstream tasks. However, PLMs may have risks in overfitting the pretraining tasks and data, which usually have gap with the target downstream tasks. Such gap may be difficult for existing PLM finetuning metho…

Cited by 60SourcePDFScholar
2022

Two Birds with One Stone: Unified Model Learning for Both Recall and Ranking in News Recommendation

ACL 2022findings

Recall and ranking are two critical steps in personalized news recommendation. Most existing news recommender systems conduct personalized news recall and ranking separately with different models. However, maintaining multiple models leads to high computational cost and poses great challenges to mee…

Cited by 26SourcePDFScholar
2021

Hi-Transformer: Hierarchical Interactive Transformer for Efficient and Effective Long Document Modeling

ACL 2021short

Transformer is important for text modeling. However, it has difficulty in handling long documents due to the quadratic complexity with input text length. In order to handle this problem, we propose a hierarchical interactive Transformer (Hi-Transformer) for efficient and effective long document mode…

2021

HieRec: Hierarchical User Interest Modeling for Personalized News Recommendation

ACL 2021long

User interest modeling is critical for personalized news recommendation. Existing news recommendation methods usually learn a single user embedding for each user from their previous behaviors to represent their overall interest. However, user interest is usually diverse and multi-grained, which is d…

2021

NewsBERT: Distilling Pre-trained Language Model for Intelligent News Application

EMNLP 2021finding

Pre-trained language models (PLMs) like BERT have made great progress in NLP. News articles usually contain rich textual information, and PLMs have the potentials to enhance news text modeling for various intelligent news applications like news recommendation and retrieval. However, most existing PL…

Cited by 47SourcePDFScholar
2021

PP-Rec: News Recommendation with Personalized User Interest and Time-aware News Popularity

ACL 2021long

Personalized news recommendation methods are widely used in online news services. These methods usually recommend news based on the matching between news content and user interest inferred from historical behaviors. However, these methods usually have difficulties in making accurate recommendations…

2021

Uni-FedRec: A Unified Privacy-Preserving News Recommendation Framework for Model Training and Online Serving

EMNLP 2021finding

News recommendation techniques can help users on news platforms obtain their preferred news information. Most existing news recommendation methods rely on centrally stored user behavior data to train models and serve users. However, user data is usually highly privacy-sensitive, and centrally storin…

2020

User Modeling with Click Preference and Reading Satisfaction for News Recommendation

IJCAI 2020poster

Modeling user interest is critical for accurate news recommendation. Existing news recommendation methods usually infer user interest from click behaviors on news. However, users may click a news article because attracted by its title shown on the news website homepage, but may not be satisfied with…