← Search

Tianrong Zhang

6 accepted papers

2025

WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response

NAACL 2025findings

The recent breakthrough in large language models (LLMs) such as ChatGPT has revolutionized every industry at an unprecedented pace. Alongside this progress also comes mounting concerns about LLMs’ susceptibility to jailbreaking attacks, which leads to the generation of harmful or unsafe content. Whi…

Cited by 11SourcePDFScholar
2024

Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization

NeurIPS 2024poster

Researchers have been studying approaches to steer the behavior of Large Language Models (LLMs) and build personalized LLMs tailored for various applications. While fine-tuning seems to be a direct solution, it requires substantial computational resources and may significantly affect the utility of…

2024

PromptFix: Few-shot Backdoor Removal via Adversarial Prompt Tuning

NAACL 2024long

Pre-trained language models (PLMs) have attracted enormous attention over the past few years with their unparalleled performances. Meanwhile, the soaring cost to train PLMs as well as their amazing generalizability have jointly contributed to few-shot fine-tuning and prompting as the most popular tr…

Cited by 1SourcePDFScholar
2024

VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models

AAAI 2024technical

Visual Question Answering (VQA) is a fundamental task in computer vision and natural language process fields. Although the “pre-training & finetuning” learning paradigm significantly improves the VQA performance, the adversarial robustness of such a learning paradigm has not been explored. In this p…

2023

UniT: A Unified Look at Certified Robust Training against Text Adversarial Perturbation

NeurIPS 2023poster

Recent years have witnessed a surge of certified robust training pipelines against text adversarial perturbation constructed by synonym substitutions. Given a base model, existing pipelines provide prediction certificates either in the discrete word space or the continuous latent space. However, the…

Cited by 1SourcePDFScholar
2023

VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models

NeurIPS 2023poster

Vision-Language (VL) pre-trained models have shown their superiority on many multimodal tasks. However, the adversarial robustness of such models has not been fully explored. Existing approaches mainly focus on exploring the adversarial robustness under the white-box setting, which is unrealistic. I…