← Search

Yi Xie

24 accepted papers

2026

PrivGate: Steering Contextual Integrity in LLMs via Latent Space Geometry

ICML 2026poster

Securing *Contextual Integrity* (CI) is critical for privacy-preserving Large Language Model (LLM) agent execution. However, existing agents struggle to balance the agility of direct generation against the prohibitive latency of CI-constrained thinking. To address this, we propose *PrivGate*, a fram…

Cited by 0SourceScholar
2026

TeamTR: Trust-Region Fine-Tuning for Multi-Agent LLM Coordination

ICML 2026poster

Multi-agent LLM systems can improve reasoning and tool use, yet recent evidence shows their gains are often unstable and sensitive to interaction design. A promising direction is to \emph{train} collaboration, but team post-training introduces a moving-target effect: when agents interact through a s…

Cited by 0SourceScholar
2025

A Multi-Region Brain Model to Elucidate the Role of Hippocampus in Spatially Embedded Decision-Making

ICML 2025poster

Brains excel at robust decision-making and data-efficient learning. Understanding the architectures and dynamics underlying these capabilities can inform inductive biases for deep learning. We present a multi-region brain model that explores the normative role of structured memory circuits in a spat…

Cited by 0SourcePDFScholar
2025

Enhancing Masked Time-Series Modeling via Dropping Patches

AAAI 2025technical

This paper explores how to enhance existing masked time-series modeling by randomly dropping sub-sequence level patches of time series. On this basis, a simple yet effective method named DropPatch is proposed, which has two remarkable advantages: 1) It improves the pre-training efficiency by a squar…

2025

Knowledge Bridger: Towards Training-Free Missing Modality Completion

CVPR 2025poster

Previous successful approaches to missing modality completion rely on carefully designed fusion techniques and extensive pre-training on complete data, which can limit their generalizability in out-of-domain (OOD) scenarios. In this study, we pose a new challenge: can we develop a missing modality c…

2025

MSSDA: Multi-Sub-Source Domain Adaptation for Diabetic Foot Neuropathy Recognition

AAAI 2025technical

Diabetic foot neuropathy (DFN) is a critical factor leading to diabetic foot ulcers, which is one of the most common and severe complications of diabetes mellitus (DM) and is associated with high risks of amputation and mortality. Despite its significance, existing datasets do not directly derive fr…

2025

MemSim: A Bayesian Simulator for Evaluating Memory of LLM-based Personal Assistants

NeurIPS 2025poster

LLM-based agents have been widely applied as personal assistants, capable of memorizing information from user messages and responding to personal queries. However, there still lacks an objective and automatic evaluation on their memory capability, largely due to the challenges in constructing reliab…

Cited by 0SourcecodeScholar
2025

Reasoning under Uncertainty: Efficient LLM Inference via Unsupervised Confidence Dilution and Convergent Adaptive Sampling

EMNLP 2025

Large language models (LLMs) excel at complex reasoning tasks but often suffer from overconfidence and computational inefficiency due to fixed computation budgets and miscalibrated confidence estimates. We present a novel framework for computationally efficient, trustworthy reasoning under uncertain

Cited by 0SourcePDFScholar
2025

Slow Transition to Low-Dimensional Chaos in Heavy-Tailed Recurrent Neural Networks

NeurIPS 2025poster

Growing evidence suggests that synaptic weights in the brain follow heavy-tailed distributions, yet most theoretical analyses of recurrent neural networks (RNNs) assume Gaussian connectivity. We systematically study the activity of RNNs with random weights drawn from biologically plausible Lévy alph…

Cited by 0SourcecodeScholar
2024

D3still: Decoupled Differential Distillation for Asymmetric Image Retrieval

CVPR 2024poster

Existing methods for asymmetric image retrieval employ a rigid pairwise similarity constraint between the query network and the larger gallery network. However these one-to-one constraint approaches often fail to maintain retrieval order consistency especially when the query network has limited repr…

2024

Mask4Align: Aligned Entity Prompting with Color Masks for Multi-Entity Localization Problems

CVPR 2024poster

In Visual Question Answering (VQA) recognizing and localizing entities pose significant challenges. Pretrained vision-and-language models have addressed this problem by providing a text description as the answer. However in visual scenes with multiple entities textual descriptions struggle to distin…

Cited by 0SourcePDFScholar
2024

Multi-Person Pose Forecasting with Individual Interaction Perceptron and Prior Learning

ECCV 2024poster

"Human Pose Forecasting is a major problem in human intention comprehension that can be addressed through learning the historical poses via deep methods. However, existing methods often lack the modeling of the person’s role in the event in multi-person scenes. This leads to limited performance in c…

2024

SAME: Sample Reconstruction against Model Extraction Attacks

AAAI 2024technical

While deep learning models have shown significant performance across various domains, their deployment needs extensive resources and advanced computing infrastructure. As a solution, Machine Learning as a Service (MLaaS) has emerged, lowering the barriers for users to release or productize their dee…

2023

Easy Begun Is Half Done: Spatial-Temporal Graph Modeling with ST-Curriculum Dropout

AAAI 2023technical

Spatial-temporal (ST) graph modeling, such as traffic speed forecasting and taxi demand prediction, is an important task in deep learning area. However, for the nodes in the graph, their ST patterns can vary greatly in difficulties for modeling, owning to the heterogeneous nature of ST data. We argu…

2023

Lookahead When It Matters: Adaptive Non-causal Transformers for Streaming Neural Transducers

ICML 2023poster

Streaming speech recognition architectures are employed for low-latency, real-time applications. Such architectures are often characterized by their causality. Causal architectures emit tokens at each frame, relying only on current and past signal, while non-causal models are exposed to a window of…

Cited by 9SourcePDFScholar
2023

Towards a Smaller Student: Capacity Dynamic Distillation for Efficient Image Retrieval

CVPR 2023poster

Previous Knowledge Distillation based efficient image retrieval methods employ a lightweight network as the student model for fast inference. However, the lightweight student model lacks adequate representation capacity for effective knowledge imitation during the most critical early training period…

Cited by 22SourcePDFScholar
2022

Invisible and Efficient Backdoor Attacks for Compressed Deep Neural Networks

ICASSP 2022accepted

Compressed deep neural network (DNN) models have been widely deployed in many resource-constrained platforms and devices. However, the security issue of the compressed models, especially their vulnerability against backdoor attacks, is not well explored yet. In this paper, we study the feasibility o…

Cited by 0SourceScholar
2022

RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN

ECCV 2022poster

"Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed DNNs, which are widely used in the practical applications,…

2022

Real-Valued Backpropagation is Unsuitable for Complex-Valued Neural Networks

NeurIPS 2022accept

Recently complex-valued neural networks have received increasing attention due to successful applications in various tasks and the potential advantages of better theoretical properties and richer representational capacity. However, the training dynamics of complex networks compared to real networks…

Cited by 15SourcePDFScholar
2021

CHIP: CHannel Independence-based Pruning for Compact Neural Networks

NeurIPS 2021poster

Filter pruning has been widely used for neural network compression because of its enabled practical acceleration. To date, most of the existing filter pruning works explore the importance of filters via using intra-channel information. In this paper, starting from an inter-channel perspective, we pr…

2021

Enabling Fast and Universal Audio Adversarial Attack Using Generative Model

AAAI 2021technical

Recently, the vulnerability of deep neural network (DNN)-based audio systems to adversarial attacks has obtained increasing attention. However, the existing audio adversarial attacks allow the adversary to possess the entire user's audio input as well as granting sufficient time budget to generate t…

Cited by 79SourcePDFScholar
2021

Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models

IJCAI 2021poster

Deep neural networks, while generalize well, are known to be sensitive to small adversarial perturbations. This phenomenon poses severe security threat and calls for in-depth investigation of the robustness of deep learning models. With the emergence of neural networks for graph structured data, sim…

2020

Real-Time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems

ICASSP 2020accepted

As the popularity of voice user interface (VUI) exploded in recent years, speaker recognition system has emerged as an important medium of identifying a speaker in many security-required applications and services. In this paper, we propose the first real-time, universal, and robust adversarial attac…

Cited by 0SourceScholar