← Search

Yihan Wu

27 accepted papers

2026

Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio

ICML 2026poster

As policy catches up with the capabilities of generative AI, watermarking is central to content provenance efforts. Inference-time watermarks for autoregressive models are unfit for continuous modalities due to discretization inconsistencies. Existing methods overcome this by finetuning the modality…

Cited by 0SourceScholar
2025

A Watermark for Order-Agnostic Language Models

ICLR 2025poster

Statistical watermarking techniques are well-established for sequentially decoded language models (LMs). However, these techniques cannot be directly applied to order-agnostic LMs, as the tokens in order-agnostic LMs are not generated sequentially. In this work, we introduce PATTERN-MARK, a pattern-…

Cited by 2SourcePDFScholar
2025

ESPnet-SpeechLM: An Open Speech Language Model Toolkit

NAACL 2025system demonstrations

We present ESPnet-SpeechLM, an open toolkit designed to democratize the development of speech language models (SpeechLMs) and voice-driven agentic applications. The toolkit standardizes speech processing tasks by framing them as universal sequential modeling problems, encompassing a cohesive workflo…

2025

Enhancing Audiovisual Speech Recognition Through Bifocal Preference Optimization

AAAI 2025technical

Audiovisual Automatic Speech Recognition (AV-ASR) aims to improve speech recognition accuracy by leveraging visual signals. It is particularly challenging in unconstrained real-world scenarios across various domains due to noisy acoustic environments, spontaneous speech, and the uncertain use of vis…

2025

Robust Distortion-Free Watermark for Autoregressive Audio Generation Models

NeurIPS 2025poster

The rapid advancement of next-token-prediction models has led to widespread adoption across modalities, enabling the creation of realistic synthetic media. In the audio domain, while autoregressive speech models have propelled conversational interactions forward, the potential for misuse, such as im…

Cited by 0SourceScholar
2025

Towards Optimal Multi-draft Speculative Decoding

ICLR 2025poster

Large Language Models (LLMs) have become an indispensable part of natural language processing tasks. However, autoregressive sampling has become an efficiency bottleneck. Multi-Draft Speculative Decoding (MDSD) is a recent approach where, when generating each token, a small draft model generates mul…

Cited by 2SourcePDFScholar
2024

A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models

ICML 2024poster

Watermarking techniques offer a promising way to identify machine-generated content via embedding covert information into the contents generated from language models. A challenge in the domain lies in preserving the distribution of original generated content after watermarking. Our research extends…

2024

Few-shot Class Incremental Learning with Attention-Aware Self-Adaptive Prompt

ECCV 2024poster

"Few-Shot Class-Incremental Learning (FSCIL) models aim to incrementally learn new classes with scarce samples while preserving knowledge of old ones. Existing FSCIL methods usually fine-tune the entire backbone, leading to overfitting and hindering the potential to learn new classes. On the other h…

2024

Lambda: Learning Matchable Prior For Entity Alignment with Unlabeled Dangling Cases

NeurIPS 2024poster

We investigate the entity alignment (EA) problem with unlabeled dangling cases, meaning that partial entities have no counterparts in the other knowledge graph (KG), yet these entities are unlabeled. The problem arises when the source and target graphs are of different scales, and it is much cheaper…

2024

Lost Domain Generalization Is a Natural Consequence of Lack of Training Domains

AAAI 2024technical

We show a hardness result for the number of training domains required to achieve a small population error in the test domain. Although many domain generalization algorithms have been developed under various domain-invariance assumptions, there is significant evidence to indicate that out-of-distribu…

Cited by 3SourcePDFScholar
2024

Unbiased Watermark for Large Language Models

ICLR 2024spotlight

The recent advancements in large language models (LLMs) have sparked a growing apprehension regarding the potential misuse. One approach to mitigating this risk is to incorporate watermarking techniques into LLMs, allowing for the tracking and attribution of model outputs. This study examines a cruc…

Cited by 129SourcePDFScholar
2024

Your Vision-Language Model Itself Is a Strong Filter: Towards High-Quality Instruction Tuning with Data Selection

ACL 2024findings

Data selection in instruction tuning emerges as a pivotal process for acquiring high-quality data and training instruction-following large language models (LLMs), but it is still a new and unexplored research area for vision-language models (VLMs). Existing data selection approaches on LLMs either r…

2024

ZeroMark: Towards Dataset Ownership Verification without Disclosing Watermark

NeurIPS 2024poster

High-quality public datasets significantly prompt the prosperity of deep neural networks (DNNs). Currently, dataset ownership verification (DOV), which consists of dataset watermarking and ownership verification, is the only feasible solution to protect their copyright by preventing unauthorized use…

2023

Adversarial Weight Perturbation Improves Generalization in Graph Neural Networks

AAAI 2023technical

A lot of theoretical and empirical evidence shows that the flatter local minima tend to improve generalization. Adversarial Weight Perturbation (AWP) is an emerging technique to efficiently and effectively find such minima. In AMP we minimize the loss w.r.t. a bounded worst-case perturbation of the…

2023

Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets

CVPR 2023poster

Despite incredible advances, deep learning has been shown to be susceptible to adversarial attacks. Numerous approaches were proposed to train robust networks both empirically and certifiably. However, most of them defend against only a single type of attack, while recent work steps forward at defen…

Cited by 2SourcePDFScholar
2023

Prompttts: Controllable Text-To-Speech With Text Descriptions

ICASSP 2023accepted

Using a text description as prompt to guide the generation of text or images (e.g., GPT-3 or DALLE-2) has drawn wide attention recently. Beyond text and image generation, in this work, we explore the possibility of utilizing text descriptions to guide speech synthesis. Thus, we develop a text-to-spe…

Cited by 0SourceScholar
2023

VideoDubber: Machine Translation with Speech-Aware Length Control for Video Dubbing

AAAI 2023technical

Video dubbing aims to translate the original speech in a film or television program into the speech in a target language, which can be achieved with a cascaded system consisting of speech recognition, machine translation and speech synthesis. To ensure the translated speech to be well aligned with t…

2021

Completing the Picture: Randomized Smoothing Suffers from the Curse of Dimensionality for a Large Family of Distributions

AISTATS 2021poster

Randomized smoothing is currently the most competitive technique for providing provable robustness guarantees. Since this approach is model-agnostic and inherently scalable we can certify arbitrary classifiers. Despite its success, recent works show that for a small class of i.i.d. distributions, th…