← Search

Xinlei He

14 accepted papers

2026

6DAttack: Backdoor Attacks in the 6DoF Pose Estimation

AAAI 2026technical

Recent advances in deep learning have enabled highly accurate six-degree-of-freedom (6DoF) object pose estimation, leading to its widespread use in real-world applications such as robotics, augmented reality, virtual reality, and autonomous systems. However, backdoor attacks pose a major security ri

Cited by 2SourcePDFScholar
2026

An Improved Privacy and Utility Analysis of Differentially Private SGD with Bounded Domain and Smooth Losses

AAAI 2026technical

Differentially Private Stochastic Gradient Descent (DPSGD) is widely used to protect sensitive data during the training of machine learning models, but its privacy guarantee often comes at a large cost of model performance due to the lack of tight theoretical bounds quantifying privacy loss. While r

Cited by 5SourcePDFScholar
2026

JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models

ICLR 2026poster

Large Audio Language Models (LALMs) integrate the audio modality directly into the model, rather than converting speech into text and inputting text to Large Language Models (LLMs). While jailbreak attacks on LLMs have been extensively studied, the security of LALMs with audio modalities remains lar…

Cited by 0SourcecodeScholar
2025

Are We in the AI-Generated Text World Already? Quantifying and Monitoring AIGT on Social Media

ACL 2025long

Social media platforms are experiencing a growing presence of AI-Generated Texts (AIGTs). However, the misuse of AIGTs could have profound implications for public opinion, such as spreading misinformation and manipulating narratives. Despite its importance, it remains unclear how prevalent AIGTs are…

2025

Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models

ACL 2025finding

Small language models (SLMs) have become increasingly prominent in the deployment on edge devices due to their high efficiency and low computational cost. While researchers continue to advance the capabilities of SLMs through innovative training strategies and model compression techniques, the secur…

Cited by 0SourcePDFScholar
2025

CHASM: Unveiling Covert Advertisements on Chinese Social Media

NeurIPS 2025poster

Current benchmarks for evaluating large language models (LLMs) in social media moderation completely overlook a serious threat: covert advertisements, which disguise themselves as regular posts to deceive and mislead consumers into making purchases, leading to significant ethical and legal concerns.…

Cited by 0SourceScholar
2025

CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers

AAAI 2025technical

Backdoor attacks significantly compromise the security of large language models by triggering them to output specific and controlled content. Currently, triggers for textual backdoor attacks fall into two categories: fixed-token triggers and sentence-pattern triggers. However, the former are typical…

2025

FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts

EMNLP 2025

Multimodal Large Language Models (MLLMs) have become powerful and widely adopted in some practical applications.However, recent research has revealed their vulnerability to multimodal jailbreak attacks, whereby the model can be induced to generate harmful content, leading to safety risks. Although m

2025

FacLens: Transferable Probe for Foreseeing Non-Factuality in Fact-Seeking Question Answering of Large Language Models

EMNLP 2025

Despite advancements in large language models (LLMs), non-factual responses still persist in fact-seeking question answering. Unlike extensive studies on post-hoc detection of these responses, this work studies non-factuality prediction (NFP), predicting whether an LLM will generate a non-factual re

2023

Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders

CVPR 2023poster

Self-supervised representation learning techniques have been developing rapidly to make full use of unlabeled images. They encode images into rich features that are oblivious to downstream tasks. Behind their revolutionary representation power, the requirements for dedicated model designs and a mass…

2023

Data Poisoning Attacks Against Multimodal Encoders

ICML 2023poster

Recently, the newly emerged multimodal models, which leverage both visual and linguistic modalities to train powerful encoders, have gained increasing attention. However, learning from a large-scale unlabeled dataset also exposes the model to the risk of potential poisoning attacks, whereby the adve…

2022

Semi-Leak: Membership Inference Attacks against Semi-Supervised Learning

ECCV 2022poster

"Semi-supervised learning (SSL) leverages both labeled and unlabeled data to train machine learning (ML) models. State-of-the-art SSL methods can achieve comparable performance to supervised learning by leveraging much fewer labeled data. However, most existing works focus on improving the performan…