← Search

Wenshu Fan

4 accepted papers

2026

MPMA: Preference Manipulation Attack Against Model Context Protocol

AAAI 2026technical

Model Context Protocol (MCP) standardizes interface mapping for large language models (LLMs) to access external data and tools, which revolutionizes the paradigm of tool selection and facilitates the rapid expansion of the LLM agent tool ecosystem. However, as the MCP is increasingly adopted, third-

Cited by 0SourcePDFScholar
2025

Omni-Angle Assault: An Invisible and Powerful Physical Adversarial Attack on Face Recognition

ICML 2025poster

Deep learning models employed in face recognition (FR) systems have been shown to be vulnerable to physical adversarial attacks through various modalities, including patches, projections, and infrared radiation. However, existing adversarial examples targeting FR systems often suffer from issues suc…

Cited by 0SourcePDFScholar
2025

Watch Out for Your Guidance on Generation! Exploring Conditional Backdoor Attacks against Large Language Models

AAAI 2025technical

Mainstream backdoor attacks on large language models (LLMs) typically set a fixed trigger in the input instance and specific responses for triggered queries. However, the fixed trigger setting (e.g., unusual words) may be easily detected by human detection, limiting the effectiveness and practicali…

Cited by 0SourcePDFScholar