← Search

Xuwang Yin

6 accepted papers

2026

Scalable Energy-Based Models via Adversarial Training: Unifying Discrimination and Generation

ICLR 2026poster

Simultaneously achieving robust classification and high-fidelity generative modeling within a single framework presents a significant challenge. Hybrid approaches, such as Joint Energy-Based Models (JEM), interpret classifiers as EBMs but are often limited by the instability and poor sample quality…

Cited by 0SourcecodeScholar
2025

Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIs

NeurIPS 2025spotlight

As AIs rapidly advance and become more agentic, the risk they pose is governed not only by their capabilities but increasingly by their propensities, including goals and values. Tracking the emergence of goals and values has proven a longstanding problem, and despite much interest over the years it…

Cited by 0SourceScholar
2024

HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal

ICML 2024poster

Automated red teaming holds substantial promise for uncovering and mitigating the risks associated with the malicious use of large language models (LLMs), yet the field lacks a standardized evaluation framework to rigorously assess new methods. To address this issue, we introduce HarmBench, a standa…

2024

Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?

NeurIPS 2024poster

Performance on popular ML benchmarks is highly correlated with model scale, suggesting that most benchmarks tend to measure a similar underlying factor of general model capabilities. However, substantial research effort remains devoted to designing new benchmarks, many of which claim to measure nove…

Cited by 22SourcecodeScholar
2020

GAT: Generative Adversarial Training for Adversarial Example Detection and Robust Classification

ICLR 2020poster

The vulnerabilities of deep neural networks against adversarial examples have become a significant concern for deploying these models in sensitive domains. Devising a definitive defense against such attacks is proven to be challenging, and the methods relying on detecting adversarial samples are onl…

Cited by 60SourcecodeScholar