← Search

Xinwei Zhang

13 accepted papers

2026

On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression

ICML 2026poster

Visual token compression is widely used to accelerate large vision-language models (LVLMs) by pruning or merging visual tokens, yet its adversarial robustness remains unexplored. We show that existing encoder-based attacks can substantially overestimate the robustness of compressed LVLMs, due to an …

Cited by 0SourceScholar
2025

Addax: Utilizing Zeroth-Order Gradients to Improve Memory Efficiency and Performance of SGD for Fine-Tuning Language Models

ICLR 2025poster

Fine-tuning language models (LMs) with the standard Adam optimizer often demands excessive memory, limiting accessibility. The ``in-place'' version of Stochastic Gradient Descent (IP-SGD) and Memory-Efficient Zeroth-order Optimizer (MeZO) have been proposed as solutions to improve memory efficiency.…

Cited by 1SourcePDFScholar
2025

DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction

ICLR 2025poster

Differential privacy (DP) offers a robust framework for safeguarding individual data privacy. To utilize DP in training modern machine learning models, differentially private optimizers have been widely used in recent years. A popular approach to privatize an optimizer is to clip the individual gra…

Cited by 1SourcePDFScholar
2025

Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts

NeurIPS 2025poster

Machine learning models are often vulnerable to inference attacks that expose sensitive information from their training data. Shadow model technique is commonly employed in such attacks, like membership inference. However, the need for a large number of shadow models leads to high computational cost…

Cited by 0SourceScholar
2025

UniT: Data Efficient Tactile Representation With Generalization to Unseen Objects

RA-L 2025

UniT is an approach to tactile representation learning, using VQGAN to learn a compact latent space and serve as the tactile representation. It uses tactile images obtained from a single simple object to train the representation with generalizability. This tactile representation can be zero-shot tra

Cited by 30SourcecodeScholar
2024

Boundary Exploration for Bayesian Optimization With Unknown Physical Constraints

ICML 2024poster

Bayesian optimization has been successfully applied to optimize black-box functions where the number of evaluations is severely limited. However, in many real-world applications, it is hard or impossible to know in advance which designs are feasible due to some physical or system limitations. These…

2024

DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise Reduction

NeurIPS 2024poster

Privacy is a growing concern in modern deep-learning systems and applications. Differentially private (DP) training prevents the leakage of sensitive information in the collected training data from the trained machine learning models. DP optimizers, including DP stochastic gradient descent (DPSGD) a…

Cited by 2SourcePDFScholar
2024

Differentially Private SGD Without Clipping Bias: An Error-Feedback Approach

ICLR 2024poster

Differentially Private Stochastic Gradient Descent with Gradient Clipping (DPSGD-GC) is a powerful tool for training deep learning models using sensitive data, providing both a solid theoretical privacy guarantee and high efficiency. However, existing research has shown that DPSGD-GC only converges…

2024

Pre-training Differentially Private Models with Limited Public Data

NeurIPS 2024poster

The superior performance of large foundation models can be attributed to the use of massive amounts of high-quality data. However, such datasets often contain sensitive, private and copyrighted material that requires formal protection. While differential privacy (DP) is a prominent method used to ga…

2023

FedAvg Converges to Zero Training Loss Linearly for Overparameterized Multi-Layer Neural Networks

ICML 2023poster

Federated Learning (FL) is a distributed learning paradigm that allows multiple clients to learn a joint model by utilizing privately held data at each client. Significant research efforts have been devoted to develop advanced algorithms that deal with the situation where the data at individual clie…

Cited by 8SourcePDFScholar
2022

A Stochastic Multi-Rate Control Framework For Modeling Distributed Optimization Algorithms

ICML 2022spotlight

In modern machine learning systems, distributed algorithms are deployed across applications to ensure data privacy and optimal utilization of computational resources. This work offers a fresh perspective to model, analyze, and design distributed optimization algorithms through the lens of stochastic…

Cited by 1SourcePDFScholar
2022

Grow and Merge: A Unified Framework for Continuous Categories Discovery

NeurIPS 2022accept

Although a number of studies are devoted to novel category discovery, most of them assume a static setting where both labeled and unlabeled data are given at once for finding new categories. In this work, we focus on the application scenarios where unlabeled data are continuously fed into the catego…

Cited by 32SourcePDFScholar
2022

Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacy

ICML 2022spotlight

Providing privacy protection has been one of the primary motivations of Federated Learning (FL). Recently, there has been a line of work on incorporating the formal privacy notion of differential privacy with FL. To guarantee the client-level differential privacy in FL algorithms, the clients’ trans…

Cited by 133SourcePDFScholar