← Search

Xiaoyuan Zhu

5 accepted papers

2026

Auditing Black-Box LLM APIs with a Rank-Based Uniformity Test

ICLR 2026poster

As API access becomes a primary interface to large language models (LLMs), users often interact with black-box systems that offer little transparency into the deployed model. To reduce costs or maliciously alter model behaviors, API providers may discreetly serve quantized or fine-tuned variants, wh…

Cited by 0SourcecodeScholar
2026

Hubble: a Model Suite to Advance the Study of LLM Memorization

ICLR 2026oral

We present Hubble, a suite of open-source large language models (LLMs) for the scientific study of LLM memorization. Hubble models come as minimal pairs: standard models are pretrained on a large English corpus, and perturbed models are trained in the same way but with controlled insertion of text (…

Cited by 0SourcecodeScholar
2025

Using Linguistic Entrainment to Evaluate Large Language Models for Use in Cognitive Behavioral Therapy

NAACL 2025findings

Entrainment, the responsive communication between interacting individuals, is a crucial process in building a strong relationship between a mental health therapist and their client, leading to positive therapeutic outcomes. However, so far entrainment has not been investigated as a measure of effica…

Cited by 0SourcePDFScholar
2024

The WMDP Benchmark: Measuring and Reducing Malicious Use with Unlearning

ICML 2024poster

The White House Executive Order on Artificial Intelligence highlights the risks of large language models (LLMs) empowering malicious actors in developing biological, cyber, and chemical weapons. To measure these risks, government institutions and major AI labs are developing evaluations for hazardou…

Cited by 145SourcePDFScholar
2023

Learn Your Tokens: Word-Pooled Tokenization for Language Modeling

EMNLP 2023long findings

Language models typically tokenize text into subwords, using a deterministic, hand-engineered heuristic of combining characters into longer surface-level strings such as 'ing' or whole words. Recent literature has repeatedly shown the limitations of such a tokenization strategy, particularly for do…

Cited by 0SourcecodeScholar