← Search

Xingyu Zhao

23 accepted papers

2026

Fragile by Design: On the Limits of Adversarial Defenses in Personalized DreamBooth Generation

AAAI 2026technical

Personalized AI applications such as DreamBooth enable the generation of customized content from user images, but also raise significant privacy concerns, particularly the risk of facial identity leakage. Recent defense mechanisms like Anti-DreamBooth attempt to mitigate this risk by injecting adver

Cited by 0SourcePDFScholar
2026

Non-Parametric Probabilistic Robustness: A Conservative Risk Estimator under Unknown Perturbation Distributions

ICML 2026poster

Deep learning (DL) models, despite their remarkable success, remain vulnerable to small input perturbations that can cause erroneous outputs, motivating probabilistic robustness (PR) as a complementary notion to adversarial robustness (AR) for stochastic reliability assessment. However, existing PR …

Cited by 0SourceScholar
2026

OBJVanish: Prompt-Driven Generation of Physically Realizable 3D LiDAR-Invisible Objects

ICML 2026poster

LiDAR-based 3D object detectors are fundamental to autonomous driving, where missed detections pose severe safety risks. While adversarial attacks are crucial for evaluating the robustness of these detectors, existing point-level perturbation methods rarely cause complete object disappearance and pr…

Cited by 0SourceScholar
2026

Self-Supervised Cross-City Trajectory Representation Learning Based on Meta-Learning

AAAI 2026technical

Trajectory representation learning transforms complex spatio-temporal features of trajectories into dense, low-dimensional embeddings, enabling applications in intelligent transportation systems. With advances in this field and the availability of large-scale traffic data, intelligent urban systems

Cited by 0SourcePDFScholar
2026

Towards Efficient and Effective Unimodal Trajectory Representation Learning: A Simple Yet Powerful Approach

IJCAI 2026

Trajectory representation learning transforms trajectory data into low-dimensional embeddings for downstream analytics. Although trajectory data inherently contains rich spatiotemporal information that remains to be more deeply explored, recent approaches have increasingly favored integrating extern

Cited by 0Scholar
2026

TrajAgg: Dual-Scale Feature Aggregation with Hybrid Training for Trajectory Similarity Computation in Free Space

AAAI 2026technical

With the widespread use of location-tracking technologies, large volumes of trajectory data are continuously generated. Trajectory similarity computation is a core task in trajectory mining with broad applications. However, existing methods still face two key challenges: (1) the difficulty of balanc

Cited by 0SourcePDFScholar
2025

Adversarial Training for Probabilistic Robustness

ICCV 2025poster

Deep learning (DL) has shown transformative potential across industries, yet its sensitivity to adversarial examples (AEs) limits its reliability and broader deployment. Research on DL robustness has developed various techniques, with adversarial training (AT) established as a leading approach to co…

2025

Correlation-Attention Masked Temporal Transformer for User Identity Linkage Using Heterogeneous Mobility Data

AAAI 2025technical

With the rise of social media and Location-Based Social Networks (LBSN), check-in data across platforms has become crucial for User Identity Linkage (UIL). These data not only reveal users' spatio-temporal information but also provide insights into their behavior patterns and interests. However, cro…

2025

SIDA: Social Media Image Deepfake Detection, Localization and Explanation with Large Multimodal Model

CVPR 2025poster

The rapid advancement of generative models in creating highly realistic images poses substantial risks for misinformation dissemination. For instance, a synthetic image, when shared on social media, can mislead extensive audiences and erode trust in digital content, resulting in severe repercussions…

Cited by 10SourcePDFScholar
2025

Scalable Trajectory-User Linking with Dual-Stream Representation Networks

AAAI 2025technical

Trajectory-user linking (TUL) aims to match anonymous trajectories to the most likely users who generated them, offering benefits for a wide range of real-world spatio-temporal applications. However, existing TUL methods are limited by high model complexity and poor learning of the effective represe…

2024

ODD-based Query-time Scenario Mutation Framework for Autonomous Driving Scenario databases

ICRA 2024poster

Large-scale scenario databases may contain hundreds of thousands of scenarios for the verification and validation (V&V) of autonomous vehicles (AV). Scenarios in the database are often labelled with semantic Operational Design Domain (ODD) tags (e.g., WeatherRainy, RoadTypeHighway and ActorTypeTruck…

Cited by 0SourceScholar
2024

Position: Building Guardrails for Large Language Models Requires Systematic Design

ICML 2024poster

As Large Language Models (LLMs) become more integrated into our daily lives, it is crucial to identify and mitigate their risks, especially when the risks can have profound impacts on human users and societies. Guardrails, which filter the inputs or outputs of LLMs, have emerged as a core safeguardi…

Cited by 3SourcePDFScholar
2024

Reachability Verification Based Reliability Assessment for Deep Reinforcement Learning Controlled Robotics and Autonomous Systems

RA-L 2024

Deep Reinforcement Learning (DRL) has achieved impressive performance in robotics and autonomous systems (RAS). A key challenge to its deployment in real-life operations is the presence of spuriously unsafe DRL policies. Unexplored states may lead the agent to make wrong decisions that could result

Cited by 8SourceScholar
2024

Representation-Based Robustness in Goal-Conditioned Reinforcement Learning

AAAI 2024technical

While Goal-Conditioned Reinforcement Learning (GCRL) has gained attention, its algorithmic robustness against adversarial perturbations remains unexplored. The attacks and robust representation training methods that are designed for traditional RL become less effective when applied to GCRL. To addre…

2024

TARP-VP: Towards Evaluation of Transferred Adversarial Robustness and Privacy on Label Mapping Visual Prompting Models

NeurIPS 2024poster

Adversarial robustness and privacy of deep learning (DL) models are two widely studied topics in AI security. Adversarial training (AT) is an effective approach to improve the robustness of DL models against adversarial attacks. However, while models with AT demonstrate enhanced robustness, they be…

Cited by 0SourcePDFScholar
2023

SAFARI: Versatile and Efficient Evaluations for Robustness of Interpretability

ICCV 2023poster

Interpretability of Deep Learning (DL) is a barrier to trustworthy AI. Despite great efforts made by the Explainable AI (XAI) community, explanations lack robustness--indistinguishable input perturbations may lead to different XAI results. Thus, it is vital to assess how robust DL interpretability i…

Cited by 32PDFcodeScholar
2022

Dependability Analysis of Deep Reinforcement Learning based Robotics and Autonomous Systems through Probabilistic Model Checking

IROS 2022poster

While Deep Reinforcement Learning (DRL) provides transformational capabilities to the control of Robotics and Autonomous Systems (RAS), the black-box nature of DRL and uncertain deployment environments of RAS pose new challenges on its dependability. Although existing works impose constraints on the…

Cited by 8SourcecodeScholar
2021

BayLIME: Bayesian local interpretable model-agnostic explanations

UAI 2021poster

Given the pressing need for assuring algorithmic transparency, Explainable AI (XAI) has emerged as one of the key areas of AI research. In this paper, we develop a novel Bayesian extension to the LIME framework, one of the most widely used approaches in XAI – which we call BayLIME. Compared to LIME,…