← Search

Yiming Li

127 accepted papers

2026

AudioTrust: Benchmarking The Multifaceted Trustworthiness of Audio Large Language Models

ICLR 2026poster

The rapid development and widespread adoption of Audio Large Language Models (ALLMs) require a rigorous assessment of their trustworthiness. However, existing evaluation frameworks, primarily designed for text, are not equipped to handle the unique vulnerabilities introduced by audio’s acoustic prop…

Cited by 0SourcecodeScholar
2026

BADREASONER: PLANTING TUNABLE OVERTHINKING BACKDOORS INTO LARGE REASONING MODELS FOR FUN OR PROFIT

ICASSP 2026oral

Large reasoning models (LRMs) have emerged as a significant advancement in artificial intelligence, representing a specialized class of large language models (LLMs) designed to tackle complex reasoning tasks. The defining characteristic of LRMs lies in their extensive chain-of-thought (CoT) reasonin…

Cited by 0SourcePDFScholar
2026

Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing

ICML 2026poster

Large-scale text-to-image (T2I) diffusion models have enabled unprecedented creative applications, but their unauthorized use and reproduction have raised serious intellectual property concerns, making model ownership verification (MOV) increasingly critical. We find that existing backdoor-based dif…

Cited by 0SourceScholar
2026

Echoes within the Reasoning: Stealth and Effective Watermarking via Chain of Thought

ICML 2026poster

Large Language Models (LLMs) with proprietary Chain-of-Thought (CoT) capabilities constitute high-value intellectual property, yet protecting them against unauthorized theft and unlicensed commercialization remains a critical challenge. Existing watermarking paradigms are ill-suited for safeguarding…

Cited by 0SourceScholar
2026

Explainable Token-level Noise Filtering for LLM Fine-tuning Datasets

ICLR 2026poster

Large Language Models (LLMs) have seen remarkable advancements, achieving state-of-the-art results in diverse applications. Fine-tuning, an important step for adapting LLMs to specific downstream tasks, typically involves further training on corresponding datasets. However, a fundamental discrepancy…

Cited by 0SourceScholar
2026

GameVerse: Can Vision-Language Models Learn from Video-based Reflection?

ICML 2026poster

Human gameplay is a visually grounded interaction loop in which players act, reflect on failures, and watch tutorials to refine strategies. Can Vision-Language Models (VLMs) also learn from video-based reflection? We present **GameVerse**, a comprehensive video game benchmark that enables a *reflect…

Cited by 0SourceScholar
2026

Learning Better UAV-Based Cross-View Object Geo-Localization from Multi-Modal Prompts: MoP-UAV Benchmark and MoPT Framework

AAAI 2026technical

We present MoP-UAV, a new benchmark for UAV-based cross-view object geo-localization guided by multi-modal prompts. MoP-UAV supports fine-grained object-level cross-view localization under diverse prompt modalities, including natural language, bounding boxes, and click points. It offers potential fo

Cited by 0SourcePDFScholar
2026

Listening Between the Frames: Bridging Temporal Gaps in Large Audio-Language Models

AAAI 2026technical

Recent Large Audio-Language Models (LALMs) exhibit impressive capabilities in understanding audio content for conversational QA tasks. However, these models struggle to accurately understand timestamps for temporal localization (e.g., Temporal Audio Grounding) and are restricted to short audio perce

Cited by 0SourcePDFScholar
2026

Probing Semantic Insensitivity for Inference-Time Backdoor Defense in Multimodal Large Language Model

AAAI 2026technical

The massive scale of data and computation required for training Multimodal Large Language Models (MLLMs) has fueled the rise of Fine-Tuning as a Service (FTaaS), enabling users to rapidly customize models for diverse real-world tasks. While FTaaS democratizes access to advanced multimodal intelligen

Cited by 0SourcePDFScholar
2026

RaGS: Unleashing 3D Gaussian Splatting from 4D Radar and Monocular Cue for 3D Object Detection

CVPR 2026

4D millimeter-wave radar is a promising sensing modality for autonomous driving, yet effective 3D object detection from 4D radar and monocular images remains challenging. Existing fusion approaches either rely on instance proposals lacking global context or dense BEV grids constrained by rigid struc

Cited by 0SourcecodeScholar
2026

Safety-Critical Dynamic Motion Generation for Manipulators Using Differentiable Distance Fields in Configuration Space

ICRA 2026poster

Generating collision-free motions in dynamic environments is a challenging problem for high-dimensional robotics, particularly under real-time constraints. Control Barrier Functions (CBFs), widely utilized in safety-critical control, have shown significant potential for motion generation. However, f…

Cited by 0Scholar
2026

Scaling Up, Speeding Up: A Benchmark of Speculative Decoding for Efficient LLM Test-Time Scaling

ICLR 2026poster

Test-time scaling has emerged as a powerful paradigm for enhancing the reasoning capabilities of large language models (LLMs) by allocating additional computational resources during inference. However, this paradigm is inherently inefficient due to the generation of redundant and repetitive reasonin…

Cited by 0SourcecodeScholar
2026

Thinking in 360deg: Humanoid Visual Search in the Wild

CVPR 2026

Humans rely on the synergistic control of head (cephalomotor) and eye (oculomotor) to efficiently search for visual information in 360deg. However, prior approaches to visual search are limited to a static image, neglecting the physical embodiment and its interaction with the 3D world. How can we de

Cited by 0SourcecodeScholar
2026

TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting

ICML 2026poster

Time Series Forecasting (TSF) plays a critical role across many domains, yet it is vulnerable to backdoor attacks. However, backdoor defenses tailored to TSF remain underexplored, due to data entanglement and task-formulation shift challenges. To fill this gap, we conduct a systematic evaluation of …

Cited by 0SourceScholar
2026

Wanderland: Geometrically Grounded Simulation for Open-World Embodied AI

CVPR 2026

Reproducible closed-loop evaluation remains a major bottleneck in Embodied AI such as visual navigation. A promising path forward is high-fidelity simulation that combines photorealistic sensor rendering with geometrically grounded interaction in complex, open-world urban environments. Although rece

Cited by 0SourcecodeScholar
2025

A Benchmark for Semantic Sensitive Information in LLMs Outputs

ICLR 2025poster

Large language models (LLMs) can output sensitive information, which has emerged as a novel safety concern. Previous works focus on structured sensitive information (e.g. personal identifiable information). However, we notice that sensitive information can also be at semantic level, i.e. semantic s…

2025

Accurate KV Cache Eviction via Anchor Direction Projection for Efficient LLM Inference

NeurIPS 2025poster

Key-Value (KV) cache eviction---which retains the KV pairs of the most important tokens while discarding less important ones---is a critical technique for optimizing both memory usage and inference latency in large language models (LLMs). However, existing approaches often rely on simple heuristics-…

Cited by 0SourceScholar
2025

Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment

NeurIPS 2025poster

Multimodal large language models (MLLMs) remain vulnerable to transferable adversarial examples. While existing methods typically achieve targeted attacks by aligning global features—such as CLIP’s [CLS] token—between adversarial and target samples, they often overlook the rich local information enc…

Cited by 0SourcecodeScholar
2025

Adversarial Exploitation of Data Diversity Improves Visual Localization

ICCV 2025poster

Visual localization, which estimates a camera's pose within a known scene, is a fundamental capability for autonomous systems. While absolute pose regression (APR) methods have shown promise for efficient inference, they often struggle with generalization. Recent approaches attempt to address this t…

Cited by 0SourcePDFScholar
2025

Backdoor Cleaning without External Guidance in MLLM Fine-tuning

NeurIPS 2025poster

Multimodal Large Language Models (MLLMs) are increasingly deployed in fine-tuning-as-a-service (FTaaS) settings, where user-submitted datasets adapt general-purpose models to downstream tasks. This flexibility, however, introduces serious security risks, as malicious fine-tuning can implant backdoor…

Cited by 0SourcecodeScholar
2025

Cockroach's Turning Strategy Enhanced Hexapod Robot with Flexible Torso

IROS 2025

The design and control of hexapod robots have become an active research field due to the ability to achieve adaptive and stable multi-terrain locomotion. However, existing hexapod robots focus on the integration of flexible pitch joints to enhance their obstacle-crossing and slope-climbing abilities

Cited by 0SourceScholar
2025

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems

ICML 2025poster

Vision Language Model (VLM) Agents are stateful, autonomous entities capable of perceiving and interacting with their environments through vision and language. Multi-agent systems comprise specialized agents who collaborate to solve a (complex) task. A core security property is **robustness**, stat…

Cited by 0SourcePDFScholar
2025

Exposing Numeracy Gaps: A Benchmark to Evaluate Fundamental Numerical Abilities in Large Language Models

ACL 2025finding

Large Language Models (LLMs) have demonstrated impressive capabilities in natural language processing tasks, such as text generation and semantic understanding. However, their performance on numerical reasoning tasks, such as basic arithmetic, numerical retrieval, and magnitude comparison, remains s…

2025

Extrapolated Urban View Synthesis Benchmark

ICCV 2025poster

Photorealistic simulators are essential for the training and evaluation of vision-centric autonomous vehicles (AVs). At their core is Novel View Synthesis (NVS), a crucial capability that generates diverse unseen viewpoints to accommodate the broad and continuous pose distribution of AVs. Recent adv…

2025

KVTuner: Sensitivity-Aware Layer-Wise Mixed-Precision KV Cache Quantization for Efficient and Nearly Lossless LLM Inference

ICML 2025poster

KV cache quantization can improve Large Language Models (LLMs) inference throughput and latency in long contexts and large batch-size scenarios while preserving LLMs effectiveness. However, current methods have three unsolved issues: overlooking layer-wise sensitivity to KV cache quantization, high…

2025

Leveraging Large Language Models for Conversational Multi-Doc Question Answering: The First Place of WSDM Cup 2024

ACL 2025finding

Conversational multi-doc question answering aims to answer specific questions based on the retrieved documents as well as the contextual conversations. In this paper, we introduce our winning approach for the “Conversational Multi-Doc QA” challenge in WSDM Cup 2024, which exploits the superior natur…

2025

NYC-Event-VPR: A Large-Scale High-Resolution Event-Based Visual Place Recognition Dataset in Dense Urban Environments

ICRA 2025

Visual place recognition (VPR) enables autonomous robots to identify previously visited locations, which contributes to tasks like simultaneous localization and mapping (SLAM). VPR faces challenges such as accurate image neighbor retrieval and appearance change in scenery. Event cameras, also known

Cited by 8SourcecodeScholar
2025

Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models

ICLR 2025poster

Backdoor unalignment attacks against Large Language Models (LLMs) enable the stealthy compromise of safety alignment using a hidden trigger while evading normal safety auditing. These attacks pose significant threats to the applications of LLMs in the real-world Large Language Model as a Service (LL…

2025

REFINE: Inversion-Free Backdoor Defense via Model Reprogramming

ICLR 2025poster

Backdoor attacks on deep neural networks (DNNs) have emerged as a significant security threat, allowing adversaries to implant hidden malicious behaviors during the model training phase. Pre-processing-based defense, which is one of the most important defense paradigms, typically focuses on input tr…

Cited by 2SourcePDFScholar
2025

Recovering Parametric Scenes from Very Few Time-of-Flight Pixels

ICCV 2025poster

We aim to recover the geometry of 3D parametric scenes using very few depth measurements from low-cost, commercially available time-of-flight sensors. These sensors offer very low spatial resolution (i.e., a single pixel), but image a wide field-of-view per pixel and capture detailed time-of-flight…

Cited by 0SourcePDFScholar
2025

Self-Supervised Place Recognition by Refining Temporal and Featural Pseudo Labels From Panoramic Data

RA-L 2025

Visual place recognition (VPR) using deep networks has achieved state-of-the-art performance. However, most of them require a training set with ground truth sensor poses to obtain positive and negative samples of each observation's spatial neighborhood for supervised learning. When such information

Cited by 6SourcecodeScholar
2025

SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models

CVPR 2025poster

Recent advances in large-scale text-to-image (T2I) diffusion models have enabled a variety of downstream applications. As T2I models require extensive resources for training, they constitute highly valued intellectual property (IP) for their legitimate owners, yet making them incentive targets for u…

2025

Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack

NeurIPS 2025poster

Knowledge distillation (KD) is a vital technique for deploying deep neural networks (DNNs) on resource-constrained devices by transferring knowledge from large teacher models to lightweight student models. While teacher models from third-party platforms may undergo security verification (e.g., backd…

Cited by 0SourcecodeScholar
2025

Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning

NeurIPS 2025poster

Text-to-image (T2I) diffusion models have achieved impressive image generation quality and are increasingly fine-tuned for personalized applications. However, these models often inherit unsafe behaviors from toxic pretraining data, raising growing safety concerns. While recent safety-driven unlearni…

Cited by 0SourcecodeScholar
2025

TrackOcc: Camera-Based 4D Panoptic Occupancy Tracking

ICRA 2025

Comprehensive and consistent dynamic scene understanding from camera input is essential for advanced autonomous systems. Traditional camera-based perception tasks like 3D object tracking and semantic occupancy prediction lack either spatial comprehensiveness or temporal consistency. In this work, we

Cited by 4SourcecodeScholar
2025

Tree-of-Quote Prompting Improves Factuality and Attribution in Multi-Hop and Medical Reasoning

EMNLP 2025

Large language models (LLMs) can produce fluent but factually incorrect outputs and often have limited ability to attribute their claims to source material. This undermines their reliability, particularly in multi-hop and high-stakes domains such as medicine. We propose Tree-of-Quote (ToQ) prompting

Cited by 0SourcePDFScholar
2025

Understanding the Dark Side of LLMs’ Intrinsic Self-Correction

ACL 2025long

Intrinsic self-correction was initially proposed to improve LLMs’ responses via feedback solely based on their inherent capability. However, recent works show that LLMs’ intrinsic self-correction fails without oracle labels as feedback. In this paper, our research goal is to *interpret LLMs’ intrins…

Cited by 0SourcePDFScholar
2025

Unraveling the Effects of Synthetic Data on End-to-End Autonomous Driving

ICCV 2025poster

End-to-end (E2E) autonomous driving (AD) models require diverse, high-quality data to perform well across various driving scenarios. However, collecting large-scale real-world data is expensive and time-consuming, making high-fidelity synthetic data essential for enhancing data diversity and model r…

2025

VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking

ICLR 2025poster

Artificial Intelligence Generated Content (AIGC) has advanced significantly, particularly with the development of video generation models such as text-to-video (T2V) models and image-to-video (I2V) models. However, like other AIGC types, video generation requires robust content control. A common app…

2025

When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanations

ACL 2025long

Large Language Models (LLMs) are known to be vulnerable to backdoor attacks, where triggers embedded in poisoned samples can maliciously alter LLMs’ behaviors. In this paper, we move beyond attacking LLMs and instead examine backdoor attacks through the novel lens of natural language explanations. S…

Cited by 0SourcePDFScholar
2024

BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection

ICLR 2024poster

We present a novel defense, against backdoor attacks on Deep Neural Networks (DNNs), wherein adversaries covertly implant malicious behaviors (backdoors) into DNNs. Our defense falls within the category of post-development defenses that operate independently of how the model was generated. The propo…

2024

BadActs: A Universal Backdoor Defense in the Activation Space

ACL 2024findings

Backdoor attacks pose an increasingly severe security threat to Deep Neural Networks (DNNs) during their development stage. In response, backdoor sample purification has emerged as a promising defense mechanism, aiming to eliminate backdoor triggers while preserving the integrity of the clean conten…

2024

CVT-Occ: Cost Volume Temporal Fusion for 3D Occupancy Prediction

ECCV 2024poster

"Vision-based 3D occupancy prediction is significantly challenged by the inherent limitations of monocular vision in depth estimation. This paper introduces CVT-Occ, a novel approach that leverages temporal fusion through the geometric correspondence of voxels over time to improve the accuracy of 3D…

2024

Calibration-Free Vision-Assisted Container Loading of RTG Cranes

IROS 2024poster

Vision-assisted container loading of Rubber Tyred Gantry (RTG) cranes are facing two primary challenges. Firstly, the uncertainty inherent in Covolutional Neural Network (CNN) based detection hinders its direct application in the safety-critical operation of such heavy-duty machinery. Secondly, sens…

Cited by 0SourceScholar
2024

Collaborative Multi-Object Tracking With Conformal Uncertainty Propagation

RA-L 2024

Object detection and multiple object tracking (MOT) are essential components of self-driving systems. Accurate detection and uncertainty quantification are both critical for onboard modules, such as perception, prediction, and planning, to improve the safety and robustness of autonomous vehicles. Co

Cited by 44SourceScholar
2024

Configuration Space Distance Fields for Manipulation Planning

RSS 2024poster

The signed distance field (SDF) is a popular implicit shape representation in robotics, providing geometric information about objects and obstacles in a form that can easily be combined with control, optimization and learning techniques. Most often, SDFs are used to represent distances in task space…

Cited by 14SourcePDFScholar
2024

Defending Against Backdoor Attacks by Layer-wise Feature Analysis (Extended Abstract)

IJCAI 2024poster

Training deep neural networks (DNNs) usually requires massive training data and computational resources. Users who cannot afford this may prefer to outsource training to a third party or resort to publicly available pre-trained models. Unfortunately, doing so facilitates a new training-time attack (…

Cited by 0SourcePDFScholar
2024

EgoPAT3Dv2: Predicting 3D Action Target from 2D Egocentric Vision for Human-Robot Interaction

ICRA 2024poster

A robot’s ability to anticipate the 3D action target location of a hand’s movement from egocentric videos can greatly improve safety and efficiency in human-robot interaction (HRI). While previous research predominantly focused on semantic action classification or 2D target region prediction, we arg…

Cited by 2SourceScholar
2024

IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency

ICML 2024poster

Deep neural networks (DNNs) are vulnerable to backdoor attacks, where adversaries can maliciously trigger model misclassifications by implanting a hidden backdoor during model training. This paper proposes a simple yet effective input-level backdoor detection (dubbed IBD-PSC) as a `firewall' to filt…

2024

LLM-Driven Knowledge Injection Advances Zero-Shot and Cross-Target Stance Detection

NAACL 2024short

Stance detection aims at inferring an author’s attitude towards a specific target in a text. Prior methods mainly consider target-related background information for a better understanding of targets while neglecting the accompanying input texts. In this study, we propose to prompt Large Language Mod…

2024

Learning Realistic and Reasonable Grasps for Anthropomorphic Hand in Cluttered Scenes

ICRA 2024poster

Grasping is one of the most fundamental skills for humans to interact with objects. However, it remains a challenging problem for anthropomorphic hands, due to the lack of object affordance understanding and high-dimensional grasp planning. In this work, we propose an anthropomorphic hand grasping f…

Cited by 2SourceScholar
2024

LiDAR-based 4D Occupancy Completion and Forecasting

IROS 2024poster

Scene completion and forecasting are two popular perception problems in research for mobile agents like autonomous vehicles. Existing approaches treat the two problems in isolation, resulting in a separate perception of the two aspects. In this paper, we introduce a novel LiDAR perception task of Oc…

Cited by 18SourcecodeScholar
2024

Memorize What Matters: Emergent Scene Decomposition from Multitraverse

NeurIPS 2024spotlight

Humans naturally retain memories of permanent elements, while ephemeral moments often slip through the cracks of memory. This selective retention is crucial for robotic perception, localization, and mapping. To endow robots with this capability, we introduce 3D Gaussian Mapping (3DGM), a self-superv…

2024

Multi-Modality Action Recognition Based on Dual Feature Shift in Vehicle Cabin Monitoring

ICASSP 2024accepted

Driver Action Recognition (DAR) is crucial in vehicle cabin monitoring systems. In real-world applications, it is common for vehicle cabins to be equipped with cameras featuring different modalities. However, multi-modality fusion strategies for the DAR task within car cabins have rarely been studie…

Cited by 0SourceScholar
2024

Multiagent Multitraversal Multimodal Self-Driving: Open MARS Dataset

CVPR 2024poster

Large-scale datasets have fueled recent advancements in AI-based autonomous vehicle research. However these datasets are usually collected from a single vehicle's one-time pass of a certain location lacking multiagent interactions or repeated traversals of the same place. Such information could lead…

2024

Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks

CVPR 2024poster

Model quantization is widely used to compress and accelerate deep neural networks. However recent studies have revealed the feasibility of weaponizing model quantization via implanting quantization-conditioned backdoors (QCBs). These special backdoors stay dormant on released full-precision models b…

2024

Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers

CVPR 2024poster

Given the power of vision transformers a new learning paradigm pre-training and then prompting makes it more efficient and effective to address downstream visual recognition tasks. In this paper we identify a novel security threat towards such a paradigm from the perspective of backdoor attacks. Spe…

2024

Purifying Quantization-conditioned Backdoors via Layer-wise Activation Correction with Distribution Approximation

ICML 2024poster

Model quantization is a compression technique that converts a full-precision model to a more compact low-precision version for better storage. Despite the great success of quantization, recent studies revealed the feasibility of malicious exploiting model quantization via implanting quantization-con…

Cited by 9SourcePDFScholar
2024

RadarOcc: Robust 3D Occupancy Prediction with 4D Imaging Radar

NeurIPS 2024poster

3D occupancy-based perception pipeline has significantly advanced autonomous driving by capturing detailed scene descriptions and demonstrating strong generalizability across various object categories and shapes. Current methods predominantly rely on LiDAR or camera inputs for 3D occupancy predictio…

2024

Representing Robot Geometry as Distance Fields: Applications to Whole-body Manipulation

ICRA 2024poster

In this work, we propose a novel approach to represent robot geometry as distance fields (RDF) that extends the principle of signed distance fields (SDFs) to articulated kinematic chains. Our method employs a combination of Bernstein polynomials to encode the signed distance for each robot link with…

Cited by 18SourcecodeScholar
2024

Robust Collaborative Perception against Temporal Information Disturbance

ICRA 2024poster

Collaborative perception facilitates a more comprehensive representation of the environment by leveraging complementary information shared among various agents and sensors. However, practical applications often encounter information disturbance which includes perception packet loss and time delays,…

Cited by 3SourcecodeScholar
2024

SSCBench: A Large-Scale 3D Semantic Scene Completion Benchmark for Autonomous Driving

IROS 2024

Monocular scene understanding is a foundational component of autonomous systems. Within the spectrum of monocular perception topics, one crucial and useful task for holistic 3D scene understanding is semantic scene completion (SSC), which jointly completes semantic information and geometric details

Cited by 90SourcecodeScholar
2024

Semi-Supervised Sound Event Detection with Local and Global Consistency Regularization

ICASSP 2024accepted

Learning meaningful frame-wise features on a partially labeled dataset is crucial to semi-supervised sound event detection. Prior works either maintain consistency on frame-level predictions or seek feature-level similarity among neighboring frames, which cannot exploit the potential of unlabeled da…

Cited by 0SourceScholar
2024

Towards Faithful XAI Evaluation via Generalization-Limited Backdoor Watermark

ICLR 2024poster

Saliency-based representation visualization (SRV) ($e.g.$, Grad-CAM) is one of the most classical and widely adopted explainable artificial intelligence (XAI) methods for its simplicity and efficiency. It can be used to interpret deep neural networks by locating saliency areas contributing the most…

2024

Towards Reliable and Efficient Backdoor Trigger Inversion via Decoupling Benign Features

ICLR 2024spotlight

Recent studies revealed that using third-party models may lead to backdoor threats, where adversaries can maliciously manipulate model predictions based on backdoors implanted during model training. Arguably, backdoor trigger inversion (BTI), which generates trigger patterns of given benign samples…

Cited by 31SourcePDFScholar
2024

Which Model Generated This Image? A Model-Agnostic Approach for Origin Attribution

ECCV 2024poster

"Recent progress in visual generative models enables the generation of high-quality images. To prevent the misuse of generated images, it is important to identify the origin model that generates them. In this work, we study the origin attribution of generated images in a practical setting where only…

2024

ZeroMark: Towards Dataset Ownership Verification without Disclosing Watermark

NeurIPS 2024poster

High-quality public datasets significantly prompt the prosperity of deep neural networks (DNNs). Currently, dataset ownership verification (DOV), which consists of dataset watermarking and ownership verification, is the only feasible solution to protect their copyright by preventing unauthorized use…

2023

Among Us: Adversarially Robust Collaborative Perception by Consensus

ICCV 2023poster

Multiple robots could perceive a scene (e.g., detect objects) collaboratively better than individuals, although easily suffer from adversarial attacks when using deep learning. This could be addressed by the adversarial defense, but its training requires the often-unknown attacking mechanism. Differ…

Cited by 33PDFcodeScholar
2023

Boosting UAV Tracking With Voxel-Based Trajectory-Aware Pre-Training

RA-L 2023

Siamese network-based object tracking has remarkably promoted the automatic capability for highly-maneuvered unmanned aerial vehicles (UAVs). However, the leading-edge tracking framework often depends on template matching, making it trapped when facing multiple views of object in consecutive frames.

Cited by 9SourceScholar
2023

DeepMapping2: Self-Supervised Large-Scale LiDAR Map Optimization

CVPR 2023poster

LiDAR mapping is important yet challenging in self-driving and mobile robotics. To tackle such a global point cloud registration problem, DeepMapping converts the complex map estimation into a self-supervised training of simple deep networks. Despite its broad convergence range on small datasets, De…

2023

Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand

NeurIPS 2023poster

The prosperity of deep neural networks (DNNs) is largely benefited from open-source datasets, based on which users can evaluate and improve their methods. In this paper, we revisit backdoor-based dataset ownership verification (DOV), which is currently the only feasible approach to protect the copyr…

2023

Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization

AAAI 2023technical

Recent studies have demonstrated that existing deep neural networks (DNNs) on 3D point clouds are vulnerable to adversarial examples, especially under the white-box settings where the adversaries have access to model parameters. However, adversarial 3D point clouds generated by existing white-box me…

2023

Metric-Free Exploration for Topological Mapping by Task and Motion Imitation in Feature Space

RSS 2023poster

We propose DeepExplorer, a simple and lightweight metric-free exploration method for topological mapping of unknown environments. It performs task and motion planning (TAMP) entirely in image feature space. The task planner is a recurrent network using the latest image observation sequence to halluc…

2023

One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training

ICCV 2023poster

Deep neural networks (DNNs) are widely deployed on real-world devices. Concerns regarding their security have gained great attention from researchers. Recently, a new weight modification attack called bit flip attack (BFA) was proposed, which exploits memory fault inject techniques such as row hamme…

Cited by 19PDFcodeScholar
2023

PVT++: A Simple End-to-End Latency-Aware Visual Tracking Framework

ICCV 2023poster

Visual object tracking is essential to intelligent robots. Most existing approaches have ignored the online latency that can cause severe performance degradation during real-world processing. Especially for unmanned aerial vehicles (UAVs), where robust tracking is more challenging and onboard comput…

Cited by 11PDFcodeScholar
2023

Revisiting the Assumption of Latent Separability for Backdoor Defenses

ICLR 2023poster

Recent studies revealed that deep learning is susceptible to backdoor poisoning attacks. An adversary can embed a hidden backdoor into a model to manipulate its predictions by only modifying a few training data, without controlling the training process. Currently, a tangible signature has been widel…

2023

Robust and Adaptive Calibration of UWB-Aided Vision Navigation System for UAVs

RA-L 2023

This letter proposes an adaptive calibration scheme that integrates Ultra-Wideband (UWB) anchor position estimation and adaptive path planning for Unmanned Aerial Vehicles (UAVs). A closed-form solution, independent of the initial guess of the UWB anchor positions, is rigorously derived, in the UWB

Cited by 9SourceScholar
2023

SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency

ICLR 2023poster

Deep neural networks (DNNs) are vulnerable to backdoor attacks, where adversaries embed a hidden backdoor trigger during the training process for malicious prediction manipulation. These attacks pose great threats to the applications of DNNs under the real-world machine learning as a service (MLaaS)…

2023

Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots

NeurIPS 2023poster

In the field of natural language processing, the prevalent approach involves fine-tuning pretrained language models (PLMs) using local samples. Recent research has exposed the susceptibility of PLMs to backdoor attacks, wherein the adversaries can embed malicious prediction behaviors by manipulating…

Cited by 18SourcePDFScholar
2023

Towards Robust Model Watermark via Reducing Parametric Vulnerability

ICCV 2023poster

Deep neural networks are valuable assets considering their commercial benefits and huge demands for costly annotation and computation resources. To protect the copyright of DNNs, backdoor-based ownership verification becomes popular recently, in which the model owner can watermark the model by embed…

Cited by 11PDFcodeScholar
2023

Uncertainty Quantification of Collaborative Detection for Self-Driving

ICRA 2023poster

Sharing information between connected and autonomous vehicles (CAVs) fundamentally improves the performance of collaborative object detection for self-driving. However, CAVs still have uncertainties on object detection due to practical challenges, which will affect the later modules in self-driving…

Cited by 69SourcecodeScholar
2023

VoxFormer: Sparse Voxel Transformer for Camera-Based 3D Semantic Scene Completion

CVPR 2023highlight

Humans can easily imagine the complete 3D geometry of occluded objects and scenes. This appealing ability is vital for recognition and understanding. To enable such capability in AI systems, we propose VoxFormer, a Transformer-based semantic scene completion framework that can output complete 3D vol…

2022

Backdoor Defense via Decoupling the Training Process

ICLR 2022poster

Recent studies have revealed that deep neural networks (DNNs) are vulnerable to backdoor attacks, where attackers embed hidden backdoors in the DNN model by poisoning a few training samples. The attacked model behaves normally on benign samples, whereas its prediction will be maliciously changed whe…

2022

DVGG: Deep Variational Grasp Generation for Dextrous Manipulation

RA-L 2022

Grasping with anthropomorphic robotic hands involves much more hand-object interactions compared to parallel-jaw grippers. Modeling hand-object interactions is essential to the study of multi-finger hand dextrous manipulation. This work presents DVGG, an efficient grasp generation network that takes

Cited by 64SourceScholar
2022

Defending against Model Stealing via Verifying Embedded External Features

AAAI 2022technical

Obtaining a well-trained model involves expensive data collection and training procedures, therefore the model is a valuable intellectual property. Recent studies revealed that adversaries can `steal' deployed models even when they have no training samples and can not get access to the model paramet…

2022

Egocentric Prediction of Action Target in 3D

CVPR 2022poster

We are interested in anticipating as early as possible the target location of a person's object manipulation action in a 3D workspace from egocentric vision. It is important in fields like human-robot collaboration, but has not yet received enough attention from vision and learning communities. To s…

Cited by 17PDFScholar
2022

Few-Shot Backdoor Attacks on Visual Object Tracking

ICLR 2022poster

Visual object tracking (VOT) has been widely adopted in mission-critical applications, such as autonomous driving and intelligent surveillance systems. In current practice, third-party resources such as datasets, backbone networks, and training platforms are frequently used to train high-performance…

2022

HGC-Net: Deep Anthropomorphic Hand Grasping in Clutter

ICRA 2022poster

Grasping in cluttered environments is one of the most fundamental skills in robotic manipulation. Most of the current works focus on estimating grasp poses for parallel-jaw or suction-cup end effectors. However, the study for dexterous anthropomorphic hand grasping in clutter remains a great challen…

Cited by 20SourcecodeScholar
2022

Multi-Robot Scene Completion: Towards Task-Agnostic Collaborative Perception

CoRL 2022poster

Collaborative perception learns how to share information among multiple robots to perceive the environment better than individually done. Past research on this has been task-specific, such as detection or segmentation. Yet this leads to different information sharing for different tasks, hindering th…

Cited by 55SourcecodeScholar
2022

Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection

NeurIPS 2022accept

Deep neural networks (DNNs) have demonstrated their superiority in practice. Arguably, the rapid development of DNNs is largely benefited from high-quality (open-sourced) datasets, based on which researchers and developers can easily evaluate and improve their learning methods. Since the data collec…

2022

V2X-Sim: Multi-Agent Collaborative Perception Dataset and Benchmark for Autonomous Driving

RA-L 2022

Vehicle-to-everything (V2X) communication techniques enable the collaboration between vehicles and many other entities in the neighboring environment, which could fundamentally improve the perception system for autonomous driving. However, the lack of a public dataset significantly restricts the res

Cited by 346SourceScholar
2021

Backdoor Attack Against Speaker Verification

ICASSP 2021accepted

Speaker verification has been widely and successfully adopted in many mission-critical areas for user identification. The training of speaker verification requires a large amount of data, therefore users usually need to adopt third-party data (e.g., data from the Internet or third-party data company…

Cited by 0SourceScholar
2021

Fooling LiDAR Perception via Adversarial Trajectory Perturbation

ICCV 2021poster

LiDAR point clouds collected from a moving vehicle are functions of its trajectories, because the sensor motion needs to be compensated to avoid distortions. When autonomous vehicles are sending LiDAR point clouds to deep networks for perception and planning, could the motion compensation consequent…

Cited by 66PDFcodeScholar
2021

HiFT: Hierarchical Feature Transformer for Aerial Tracking

ICCV 2021poster

Most existing Siamese-based tracking methods execute the classification and regression of the target object based on the similarity maps. However, they either employ a single map from the last convolutional layer which degrades the localization accuracy in complex scenarios or separately use multipl…

Cited by 297PDFcodeScholar
2021

Invisible Backdoor Attack With Sample-Specific Triggers

ICCV 2021poster

Recently, backdoor attacks pose a new security threat to the training process of deep neural networks (DNNs). Attackers intend to inject hidden backdoors into DNNs, such that the attacked model performs well on benign samples, whereas its prediction will be maliciously changed if hidden backdoors ar…

Cited by 603PDFcodeScholar
2021

Learning Distilled Collaboration Graph for Multi-Agent Perception

NeurIPS 2021poster

To promote better performance-bandwidth trade-off for multi-agent perception, we propose a novel distilled collaboration graph (DiscoGraph) to model trainable, pose-aware, and adaptive collaboration among agents. Our key novelties lie in two aspects. First, we propose a teacher-student framework to…

2021

SiamAPN++: Siamese Attentional Aggregation Network for Real-Time UAV Tracking

IROS 2021poster

Recently, the Siamese-based method has stood out from multitudinous tracking methods owing to its state-of-the-art (SOTA) performance. Nevertheless, due to various special challenges in UAV tracking, e.g., severe occlusion and fast motion, most existing Siamese-based trackers hardly combine superior…

Cited by 151SourcecodeScholar
2021

Siamese Anchor Proposal Network for High-Speed Aerial Tracking

ICRA 2021poster

In the domain of visual tracking, most deep learning-based trackers highlight the accuracy but casting aside efficiency. Therefore, their real-world deployment on mobile platforms like the unmanned aerial vehicle (UAV) is impeded. In this work, a novel two-stage Siamese network-based method is propo…

Cited by 94SourcecodeScholar
2021

Simultaneous Semantic and Collision Learning for 6-DoF Grasp Pose Estimation

IROS 2021poster

Grasping in cluttered scenes has always been a great challenge for robots, due to the requirement of the ability to well understand the scene and object information. Previous works usually assume that the geometry information of the objects is available, or utilize a step-wise, multi-stage strategy…

Cited by 64SourcecodeScholar
2021

Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits

ICLR 2021poster

To explore the vulnerability of deep neural networks (DNNs), many attack paradigms have been well studied, such as the poisoning-based backdoor attack in the training stage and the adversarial attack in the inference stage. In this paper, we study a novel attack paradigm, which modifies model parame…

2021

t-k-means: A ROBUST AND STABLE k-means VARIANT

ICASSP 2021accepted

k-means algorithm is one of the most classical clustering methods, which has been widely and successfully used in signal processing. However, due to the thin-tailed property of the Gaussian distribution, k-means algorithm suffers from relatively poor performance on the dataset containing heavy-taile…

Cited by 0SourceScholar
2020

Augmented Memory for Correlation Filters in Real-Time UAV Tracking

IROS 2020poster

The outstanding computational efficiency of discriminative correlation filter (DCF) fades away with various complicated improvements. Previous appearances are also gradually forgotten due to the exponential decay of historical views in traditional appearance updating scheme of DCF framework, reducin…

Cited by 44SourcecodeScholar
2020

AutoTrack: Towards High-Performance Visual Tracking for UAV With Automatic Spatio-Temporal Regularization

CVPR 2020poster

Most existing trackers based on discriminative correlation filters (DCF) try to introduce predefined regularization term to improve the learning of target objects, e.g., by suppressing background learning or by restricting change rate of correlation filters. However, predefined parameters introduce…

Cited by 462PDFcodeScholar
2020

Automatic Failure Recovery and Re-Initialization for Online UAV Tracking with Joint Scale and Aspect Ratio Optimization

IROS 2020poster

Current unmanned aerial vehicle (UAV) visual tracking algorithms are primarily limited with respect to: (i) the kind of size variation they can deal with, (ii) the implementation speed which hardly meets the real-time requirement. In this work, a real-time UAV tracking algorithm with powerful size e…

Cited by 12SourcecodeScholar
2020

DR2Track: Towards Real-Time Visual Tracking for UAV via Distractor Repressed Dynamic Regression

IROS 2020poster

Visual tracking has yielded promising applications with unmanned aerial vehicle (UAV). In literature, the advanced discriminative correlation filter (DCF) type trackers generally distinguish the foreground from the background with a learned regressor which regresses the implicit circulated samples i…

Cited by 13SourceScholar
2020

Targeted Attack for Deep Hashing based Retrieval

ECCV 2020poster

The deep hashing based retrieval method is widely adopted in large-scale image and video retrieval. However, there is little investigation on its security. In this paper, we propose a novel method, dubbed deep hashing targeted attack (DHTA), to study the targeted attack on such retrieval. Specifical…

2020

Towards Robust Visual Tracking for Unmanned Aerial Vehicle with Tri-Attentional Correlation Filters

IROS 2020poster

Object tracking has been broadly applied in unmanned aerial vehicle (UAV) tasks in recent years. However, existing algorithms still face difficulties such as partial occlusion, clutter background, and other challenging visual factors. Inspired by the cutting-edge attention mechanisms, a novel object…

Cited by 21SourcecodeScholar
2020

Training-Set Distillation for Real-Time UAV Object Tracking

ICRA 2020poster

Correlation filter (CF) has recently exhibited promising performance in visual object tracking for unmanned aerial vehicle (UAV). Such online learning method heavily depends on the quality of the training-set, yet complicated aerial scenarios like occlusion or out of view can reduce its reliability.…

Cited by 34SourcecodeScholar
2019

Boundary Effect-Aware Visual Tracking for UAV with Online Enhanced Background Learning and Multi-Frame Consensus Verification

IROS 2019poster

Due to implicitly introduced periodic shifting of limited searching area, visual object tracking using correlation filters often has to confront undesired boundary effect. As boundary effect severely degrade the quality of object model, it has made it a challenging task for unmanned aerial vehicles…

Cited by 33SourcecodeScholar
2019

Learning Aberrance Repressed Correlation Filters for Real-Time UAV Tracking

ICCV 2019poster

Traditional framework of discriminative correlation filters (DCF) is often subject to undesired boundary effects. Several approaches to enlarge search regions have been already proposed in the past years to make up for this shortcoming. However, with excessive background information, more background…

Cited by 448PDFcodeScholar