← Search

Weiwei Feng

8 accepted papers

2026

Adversarial Attacks Already Tell the Answer: Directional Bias-Guided Test-time Defense for Vision-Language Models

ICLR 2026poster

Vision-Language Models (VLMs), such as CLIP, have shown strong zero-shot generalization but remain highly vulnerable to adversarial perturbations, posing serious risks in real-world applications. Test-time defenses for VLMs have recently emerged as a promising and efficient approach to defend agains…

Cited by 0SourceScholar
2026

Beyond Next-Token Alignment: Distilling Multimodal Large Language Models via Token Interactions

ICML 2026poster

Multimodal Large Language Models (MLLMs) demonstrate impressive cross-modal capabilities, yet their substantial size poses significant deployment challenges. Knowledge distillation (KD) is a promising solution for compressing these models, but existing methods primarily rely on static next-token ali…

Cited by 0SourceScholar
2026

Ripple Perturbations Through Structure: Likelihood-Constrained Adversarial Attacks on Heterogeneous Tabular Data

ICML 2026poster

Generating realistic adversarial examples for tabular data remains challenging due to heterogeneous feature types and asymmetric inter-feature dependencies. Existing approaches typically rely on handcrafted constraints or undirected similarity criteria to delimit the feasible attack region, which of…

Cited by 0SourceScholar
2026

ViRC: Enhancing Visual Interleaved Mathematical CoT with Reason Chunking

CVPR 2026

CoT has significantly enhanced the reasoning ability of LLMs while it faces challenges when extended to multimodal domains, particularly in mathematical tasks.Existing MLLMs typically perform textual reasoning solely from a single static mathematical image, overlooking dynamic visual acquisition dur

Cited by 0SourcecodeScholar
2025

Mixture-of-Queries Transformer: Camouflaged Instance Segmentation via Queries Cooperation and Frequency Enhancement

IJCAI 2025

Due to the high similarity between camouflaged instances and the surroundings and the widespread camouflage-like scenarios, the recently proposed camouflaged instance segmentation (CIS) is a challenging and relevant task. Previous approaches achieve some progress on CIS, while many overlook camoufla

Cited by 0SourcePDFScholar
2023

Dynamic Generative Targeted Attacks With Pattern Injection

CVPR 2023poster

Adversarial attacks can evaluate model robustness and have been of great concerns in recent years. Among various attacks, targeted attacks aim at misleading victim models to output adversary-desired predictions, which are more challenging and threatening than untargeted ones. Existing targeted attac…

Cited by 23SourcePDFScholar
2023

PanelNet: Understanding 360 Indoor Environment via Panel Representation

CVPR 2023poster

Indoor 360 panoramas have two essential properties. (1) The panoramas are continuous and seamless in the horizontal direction. (2) Gravity plays an important role in indoor environment design. By leveraging these properties, we present PanelNet, a framework that understands indoor environments using…

Cited by 18SourcePDFScholar
2021

Meta-Attack: Class-Agnostic and Model-Agnostic Physical Adversarial Attack

ICCV 2021poster

Modern deep neural networks are often vulnerable to adversarial examples. Most exist attack methods focus on crafting adversarial examples in the digital domain, while only limited works study physical adversarial attack. However, it is more challenging to generate effective adversarial examples in…

Cited by 25PDFScholar