← Search

Tri Cao

11 accepted papers

2026

AliMark: Enhancing Robustness of Sentence-Level Watermarks Against Text Paraphrasing

ICML 2026poster

Existing sentence-level watermarking methods enhance robustness to paraphrasing by anchoring watermarks in sentence semantics. However, their prefix-based designs remain vulnerable to structural perturbations, such as sentence splitting and merging, which commonly arise under strong paraphrasers lik…

Cited by 0SourceScholar
2026

EvoTest: Evolutionary Test-Time Learning for Self-Improving Agentic Systems

ICLR 2026poster

A fundamental limitation of current AI agents is their inability to learn complex skills on the fly at test time, often behaving like “clever but clueless interns” in novel environments. This severely limits their practical utility. To systematically measure and drive progress on this challenge, we…

Cited by 0SourcecodeScholar
2026

Just-In-Time Reinforcement Learning: Continual Learning in LLM Agents Without Gradient Updates

ICML 2026spotlight

While Large Language Model (LLM) agents excel at general tasks, they inherently struggle with continual adaptation due to the frozen weights after deployment. Conventional reinforcement learning (RL) offers a solution but incurs prohibitive computational costs and the risk of catastrophic forgetting…

Cited by 0SourceScholar
2026

VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents

ICLR 2026poster

Computer-Use Agents (CUAs) with full system access enable powerful task automation but pose significant security and privacy risks due to their ability to manipulate files, access user data, and execute arbitrary commands. While prior work has focused on browser-based agents and HTML-level attacks,…

Cited by 0SourcecodeScholar
2025

Automating Steering for Safe Multimodal Large Language Models

EMNLP 2025

Recent progress in Multimodal Large Language Models (MLLMs) has unlocked powerful cross-modal reasoning abilities, but also raised new safety concerns, particularly when faced with adversarial multimodal inputs. To improve the safety of MLLMs during inference, we introduce a modular and adaptive inf

2025

GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning

NeurIPS 2025poster

To enhance the safety of VLMs, this paper introduces a novel reasoning-based VLM guard model dubbed GuardReasoner-VL. The core idea is to incentivize the guard model to deliberatively reason before making moderation decisions via online RL. First, we construct GuardReasoner-VLTrain, a reasoning corp…

Cited by 0SourcecodeScholar
2025

PhishAgent: A Robust Multimodal Agent for Phishing Webpage Detection

AAAI 2025technical

Phishing attacks are a major threat to online security, exploiting user vulnerabilities to steal sensitive information. Various methods have been developed to counteract phishing, each with varying levels of accuracy, but they also face notable limitations. In this study, we introduce PhishAgent, a…

Cited by 41SourcePDFScholar
2025

Words or Vision: Do Vision-Language Models Have Blind Faith in Text?

CVPR 2025poster

Vision-Language Models (VLMs) excel in integrating visual and textual information for vision-centric tasks, but their handling of inconsistencies between modalities is underexplored. We investigate VLMs' modality preferences when faced with visual data and varied textual inputs in vision-centered se…

2023

Joint Self-Supervised Image-Volume Representation Learning with Intra-inter Contrastive Clustering

AAAI 2023technical

Collecting large-scale medical datasets with fully annotated samples for training of deep networks is prohibitively expensive, especially for 3D volume data. Recent breakthroughs in self-supervised learning (SSL) offer the ability to overcome the lack of labeled training samples by learning feature…

Cited by 23SourcePDFScholar
2023

LVM-Med: Learning Large-Scale Self-Supervised Vision Models for Medical Imaging via Second-order Graph Matching

NeurIPS 2023poster

Obtaining large pre-trained models that can be fine-tuned to new tasks with limited annotated samples has remained an open challenge for medical imaging data. While pre-trained networks on ImageNet and vision-language foundation models trained on web-scale data are the prevailing approaches, their e…