← Search

Weifeng Liu

20 accepted papers

2026

Ariadne's Thread of LipSync: Unraveling Forgeries via Inconsistency between Lip Motions and Head Poses

ICML 2026poster

Recent advances in LipSync generation technology have led to the creation of highly realistic videos, posing severe societal risks. However, existing defense strategies struggle against LipSync forgeries, as state-of-the-art generative models not only optimize for the lip synchronization but also si…

Cited by 0SourceScholar
2026

HCC-3D: Hierarchical Compensatory Compression for 98% 3D Token Reduction in Vision-Language Models

AAAI 2026technical

3D understanding has drawn significant attention recently, leveraging Vision-Language Models (VLMs) to enable multi-modal reasoning between point cloud and text data. Current 3D-VLMs directly embed the 3D point clouds into 3D tokens, following large 2D-VLMs with powerful reasoning capabilities. Howe

Cited by 0SourcePDFScholar
2025

Disentangled Information Bottleneck for Adversarial Text Defense

EMNLP 2025

Adversarial text defense is a significant strategy to protect modern NLP models from being attacked. Typical text defense methods usually enhance the model’s robustness by model retraining or equipping it with a data preprocessing step, aiming to eliminate the non-robust features and preserve the ro

2025

Excluding the Impossible for Open Vocabulary Semantic Segmentation

AAAI 2025technical

Open vocabulary semantic segmentation is a hot topic in research, focusing on segmenting and recognizing a diverse array of categories in varied environments, including those previously unknown, thereby holding significant practical value. Mainstream studies utilize the CLIP model for direct semanti…

2025

Modeling All Response Surfaces in One for Conditional Search Spaces

AAAI 2025technical

Bayesian Optimization (BO) is a sample-efficient black-box optimizer commonly used in search spaces where hyperparameters are independent. However, in many practical AutoML scenarios, there will be dependencies among hyperparameters, forming a conditional search space, which can be partitioned into…

Cited by 0SourcePDFScholar
2025

Transfer Learning of Real Image Features with Soft Contrastive Loss for Fake Image Detection

AAAI 2025technical

In the last few years, the artifact patterns in fake images synthesized by different generative models have been inconsistent, leading to the failure of previous research that relied on spotting subtle differences between real and fake. In our preliminary experiments, we find that the artifacts in f…

Cited by 0SourcePDFScholar
2024

A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives

AAAI 2024technical

Backdoor attacks pose serious security threats to deep neural networks (DNNs). Backdoored models make arbitrarily (targeted) incorrect predictions on inputs containing well-designed triggers, while behaving normally on clean inputs. Prior researches have explored the invisibility of backdoor trigger…

2024

Adaptive Bidirectional Displacement for Semi-Supervised Medical Image Segmentation

CVPR 2024poster

Consistency learning is a central strategy to tackle unlabeled data in semi-supervised medical image segmentation (SSMIS) which enforces the model to produce consistent predictions under the perturbation. However most current approaches solely focus on utilizing a specific single perturbation which…

2024

Adaptive Immune-based Sound-Shape Code Substitution for Adversarial Chinese Text Attacks

EMNLP 2024main

Adversarial textual examples reveal the vulnerability of natural language processing (NLP) models. Most existing text attack methods are designed for English text, while the robust implementation of the second popular language, i.e., Chinese with 1 billion users, is greatly underestimated. Although…

2024

Lips Are Lying: Spotting the Temporal Inconsistency between Audio and Visual in Lip-Syncing DeepFakes

NeurIPS 2024poster

In recent years, DeepFake technology has achieved unprecedented success in high-quality video synthesis, but these methods also pose potential and severe security threats to humanity. DeepFake can be bifurcated into entertainment applications like face swapping and illicit uses such as lip-syncing f…

2024

Rethinking Prior Information Generation with CLIP for Few-Shot Segmentation

CVPR 2024poster

Few-shot segmentation remains challenging due to the limitations of its labeling information for unseen classes. Most previous approaches rely on extracting high-level feature maps from the frozen visual encoder to compute the pixel-wise similarity as a key prior guidance for the decoder. However su…

2023

Annealing Genetic-based Preposition Substitution for Text Rubbish Example Generation

IJCAI 2023poster

Modern Natural Language Processing (NLP) models expose under-sensitivity towards text rubbish examples. The text rubbish example is the heavily modified input text which is nonsensical to humans but does not change the model’s prediction. Prior work crafts rubbish examples by iteratively deleting wo…

2022

Agcyclegan: Attention-Guided Cyclegan for Single Underwater Image Restoration

ICASSP 2022accepted

Underwater image restoration is a fundamental problem in image processing and computer vision. It has broad application prospects for underwater operations, especially underwater robot operations. The challenging work is how to keep the color authenticity of the captured underwater image. In this pa…

Cited by 0SourceScholar
2022

On the Complementarity between Pre-Training and Random-Initialization for Resource-Rich Machine Translation

COLING 2022main

Pre-Training (PT) of text representations has been successfully applied to low-resource Neural Machine Translation (NMT). However, it usually fails to achieve notable gains (some- times, even worse) on resource-rich NMT on par with its Random-Initialization (RI) counterpart. We take the first step t…

2022

Path Planning of Multi-Robot Systems With Boolean Specifications Based on Simulated Annealing

RA-L 2022

In this letter, we address the path planning of multi-robot systems (i.e., a team of identical mobile robots) with a global high-level specification that is given as a Boolean formula over some regions of the environment. The task is composed of logical requirements on the trajectories and the final

Cited by 36SourceScholar
2021

BESA: BERT-based Simulated Annealing for Adversarial Text Attacks

IJCAI 2021poster

Modern Natural Language Processing (NLP) models are known immensely brittle towards text adversarial examples. Recent attack algorithms usually adopt word-level substitution strategies following a pre-computed word replacement mechanism. However, their resultant adversarial examples are still imperf…

Cited by 13SourcePDFScholar
2021

Bigram and Unigram Based Text Attack via Adaptive Monotonic Heuristic Search

AAAI 2021technical

Deep neural networks (DNNs) are known to be vulnerable to adversarial images, while their robustness in text classification are rarely studied. Several lines of text attack methods have been proposed in the literature, such as character-level, word-level, and sentence-level attacks. However, it is s…