← Search

Yingfei Sun

17 accepted papers

2026

Hidden Dangers of Compositional Generation: Diagnosing Semantic Safety Failures in Text-to-Image Models

CVPR 2026

Text-to-Image (T2I) models have achieved significant progress in generating high-quality images, with compositional visual generation emerging as an important capability that enables them to synthesize coherent, natural scenes from multiple discrete concepts. However, this powerful compositionality,

Cited by 0SourceScholar
2026

TFRank: Think-Free Reasoning Enables Practical Pointwise LLM Ranking

AAAI 2026technical

Reasoning-intensive ranking models built on Large Language Models (LLMs) have made notable progress. However, existing approaches often rely on large-scale LLMs and explicit Chain-of-Thought (CoT) reasoning, resulting in high computational cost and latency that limit real-world use. To address this

Cited by 0SourcePDFScholar
2025

Boosting Segment Anything Model Towards Open-Vocabulary Learning

AAAI 2025technical

The recent Segment Anything Model (SAM) has emerged as a new paradigmatic vision foundation model, showcasing potent zero-shot generalization and flexible prompting. Despite SAM finding applications and adaptations in various domains, its primary limitation lies in the inability to grasp object sema…

2025

Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs

ICML 2025poster

Despite the remarkable performance of Large Language Models (\textbf{LLMs}), they remain vulnerable to jailbreak attacks, which can compromise their safety mechanisms. Existing studies often rely on brute-force optimization or manual design, failing to uncover potential risks in real-world scenarios…

Cited by 0SourcePDFScholar
2025

Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain

ICML 2025spotlight

The diffusion-based adversarial purification methods attempt to drown adversarial perturbations into a part of isotropic noise through the forward process, and then recover the clean images through the reverse process. Due to the lack of distribution information about adversarial perturbations in th…

Cited by 0SourcePDFScholar
2025

Divide and Conquer: Heterogeneous Noise Integration for Diffusion-based Adversarial Purification

CVPR 2025poster

Existing diffusion-based purification methods aim to disrupt adversarial perturbations by introducing a certain amount of noise through a forward diffusion process, followed by a reverse process to recover clean examples. However, this approach is fundamentally flawed: the uniform operation of the f…

Cited by 2SourcePDFScholar
2025

Exploring Query Efficient Data Generation Towards Data-Free Model Stealing in Hard Label Setting

AAAI 2025technical

Data-free model stealing involves replicating the functionality of a target model into a substitute model without accessing the target model's structure, parameters, or training data. Instead, the adversary can only access the target model's predictions for generated samples. Once the substitute mod…

Cited by 1SourcePDFScholar
2025

Large Language Models Often Say One Thing and Do Another

ICLR 2025poster

As large language models (LLMs) increasingly become central to various applications and interact with diverse user populations, ensuring their reliable and consistent performance is becoming more important. This paper explores a critical issue in assessing the reliability of LLMs: the consistency be…

2025

Memorizing is Not Enough: Deep Knowledge Injection Through Reasoning

ACL 2025long

Although large language models (LLMs) excel in knowledge recall and reasoning, their static nature leads to outdated information as the real world evolves or when adapting to domain-specific knowledge, highlighting the need for effective knowledge injection. However, current research on knowledge in…

2025

SAM-CP: Marrying SAM with Composable Prompts for Versatile Segmentation

ICLR 2025poster

The Segment Anything model (SAM) has shown a generalized ability to group image pixels into patches, but applying it to semantic-aware segmentation still faces major challenges. This paper presents SAM-CP, a simple approach that establishes two types of composable prompts beyond SAM and composes the…

2024

Spiral of Silence: How is Large Language Model Killing Information Retrieval?—A Case Study on Open Domain Question Answering

ACL 2024long

The practice of Retrieval-Augmented Generation (RAG), which integrates Large Language Models (LLMs) with retrieval systems, has become increasingly prevalent. However, the repercussions of LLM-derived content infiltrating the web and influencing the retrieval-generation feedback loop are largely unc…

2023

Hidding the Ghostwriters: An Adversarial Evaluation of AI-Generated Student Essay Detection

EMNLP 2023long main

Large language models (LLMs) have exhibited remarkable capabilities in text generation tasks. However, the utilization of these models carries inherent risks, including but not limited to plagiarism, the dissemination of fake news, and issues in educational exercises. Although several detectors have…

Cited by 0SourcecodeScholar
2023

Towards Imperceptible Document Manipulations against Neural Ranking Models

ACL 2023findings

Adversarial attacks have gained traction in order to identify vulnerabilities in neural ranking models (NRMs), but current attack methods often introduce noticeable errors. Moreover, current methods rely heavily on using a well-imitated surrogate NRM to guarantee the attack effect, making them diffi…

2023

Understanding Differential Search Index for Text Retrieval

ACL 2023findings

The Differentiable Search Index (DSI) is a novel information retrieval (IR) framework that utilizes a differentiable function to generate a sorted list of document identifiers in response to a given query. However, due to the black-box nature of the end-to-end neural architecture, it remains to be u…

2022

Towards Robust Dense Retrieval via Local Ranking Alignment

IJCAI 2022poster

Dense retrieval (DR) has extended the employment of pre-trained language models, like BERT, for text ranking. However, recent studies have raised the robustness issue of DR model against query variations, like query with typos, along with non-trivial performance losses. Herein, we argue that it woul…