← Search

Yue Dong

37 accepted papers

2026

Decoy for the Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting

ICML 2026poster

Multi-turn jailbreak attacks have emerged as a powerful threat to LLM safety, leveraging feedback from auxiliary judge models to iteratively refine harmful queries. Existing defenses mainly focus on detecting or blocking harmful content at the final turn, leaving the judge-driven refinement loop int…

Cited by 0SourceScholar
2026

Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness

ICLR 2026poster

We **color-coded** the added changes to the **paper** and **Appendix** for the comfort of our reviewers. Computer-Use Agents (CUAs) are an increasingly deployed class of agents that take actions on GUIs to accomplish user goals. In this paper, we show that CUAs consistently exhibit *Blind Goal-Dir…

Cited by 0SourceScholar
2026

Misaligned Roles, Misplaced Images: Structural Input Perturbations Expose Multimodal Alignment Blind Spots

ICLR 2026poster

We **color-coded** the added changes to the **paper** and **Appendix** for the comfort of our reviewers. Multimodal Language Models (MMLMs) typically undergo post-training alignment to prevent harmful content generation. However, these alignment stages focus primarily on the *assistant* role, leavi…

Cited by 0SourceScholar
2026

Native and Compact Structured Latents for 3D Generation

CVPR 2026

Recent advancements in 3D generative modeling have significantly improved the generation realism, yet the field is still hampered by existing representations, which struggle to capture assets with complex topologies and detailed appearance. This paper present an approach for learning a structured la

Cited by 0SourcecodeScholar
2025

A Hybrid CNN-GRU Model for Real-Time Prediction of Sepsis Clinical Trajectories in the ICU

RA-L 2025

Sepsis progression varies widely among intensive care unit (ICU) patients, making early and accurate trajectory prediction crucial. Traditional models focus on static assessments or binary outcomes, limiting their clinical utility. This study considers clinical trajectories of patients with sepsis f

Cited by 3SourceScholar
2025

Attention Eclipse: Manipulating Attention to Bypass LLM Safety-Alignment

EMNLP 2025

Recent research has shown that carefully crafted jailbreak inputs can induce large language models to produce harmful outputs, despite safety measures such as alignment. It is important to anticipate the range of potential Jailbreak attacks to guide effective defenses and accurate assessment of mode

Cited by 0SourcePDFScholar
2025

ExpertGenQA: Open-ended QA generation in Specialized Domains

EMNLP 2025

Generating high-quality question–answer (QA) pairs for specialized technical domains is essential for advancing knowledge comprehension, yet remains challenging. Existing methods often yield generic or shallow questions that fail to reflect the depth and structure of expert-written examples. We prop

2025

HEAL: An Empirical Study on Hallucinations in Embodied Agents Driven by Large Language Models

EMNLP 2025

Large language models (LLMs) are increasingly being adopted as the cognitive core of embodied agents. However, inherited hallucinations, which stem from failures to ground user instructions in the observed physical environment, can lead to navigation errors, such as searching for a refrigerator that

Cited by 0SourcePDFScholar
2025

LaMMA-P: Generalizable Multi-Agent Long-Horizon Task Allocation and Planning with LM-Driven PDDL Planner

ICRA 2025

Language models (LMs) possess a strong capability to comprehend natural language, making them effective in translating human instructions into detailed plans for simple robot tasks. Nevertheless, it remains a significant challenge to handle long-horizon tasks, especially in subtask identification an

Cited by 41SourcecodeScholar
2025

Layer-wise Alignment: Examining Safety Alignment Across Image Encoder Layers in Vision Language Models

ICML 2025spotlight

Vision-language models (VLMs) have improved significantly in their capabilities, but their complex architecture makes their safety alignment challenging. In this paper, we reveal an uneven distribution of harmful information across the intermediate layers of the image encoder and show that skipping…

Cited by 0SourcePDFScholar
2025

MoGe-2: Accurate Monocular Geometry with Metric Scale and Sharp Details

NeurIPS 2025poster

We propose MoGe-2, an advanced open-domain geometry estimation model that recovers a metric-scale 3D point map of a scene from a single image. Our method builds upon the recent monocular geometry estimation approach, MoGe, which predicts affine-invariant point maps with unknown scales. We explore ef…

Cited by 0SourceScholar
2025

Not All Heads Matter: A Head-Level KV Cache Compression Method with Integrated Retrieval and Reasoning

ICLR 2025poster

Key-Value (KV) caching is a common technique to enhance the computational efficiency of Large Language Models (LLMs), but its memory overhead grows rapidly with input length. Prior work has shown that not all tokens are equally important for text generation, proposing layer-level KV cache compressio…

2024

Adversarial Attacks on Parts of Speech: An Empirical Study in Text-to-Image Generation

EMNLP 2024finding

Recent studies show that text-to-image (T2I) models are vulnerable to adversarial attacks, especially with noun perturbations in text prompts. In this study, we investigate the impact of adversarial attacks on different POS tags within text prompts on the images generated by T2I models. We create a…

2024

Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks

ACL 2024findings

The widespread use of Text-to-Image (T2I) models in content generation requires careful examination of their safety, including their robustness to adversarial attacks. Despite extensive research on adversarial attacks, the reasons for their effectiveness remain underexplored. This paper presents an…

2024

Biasly: An Expert-Annotated Dataset for Subtle Misogyny Detection and Mitigation

ACL 2024findings

Using novel approaches to dataset development, the Biasly dataset captures the nuance and subtlety of misogyny in ways that are unique within the literature. Built in collaboration with multi-disciplinary experts and annotators themselves, the dataset contains annotations of movie subtitles, capturi…

2024

Can Textual Unlearning Solve Cross-Modality Safety Alignment?

EMNLP 2024finding

Recent studies reveal that integrating new modalities into large language models (LLMs), such as vision-language models (VLMs), creates a new attack surface that bypasses existing safety training techniques like supervised fine-tuning (SFT) and reinforcement learning with human feedback (RLHF). Whil…

Cited by 1SourcePDFScholar
2024

EcoRank: Budget-Constrained Text Re-ranking Using Large Language Models

ACL 2024findings

Large Language Models (LLMs) have achieved state-of-the-art performance in text re-ranking. This process includes queries and candidate passages in the prompts, utilizing pointwise, listwise, and pairwise prompting strategies. A limitation of these ranking strategies with LLMs is their cost: the pro…

2024

Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models

ICLR 2024spotlight

We introduce new jailbreak attacks on vision language models (VLMs), which use aligned LLMs and are resilient to text-only jailbreak attacks. Specifically, we develop cross-modality attacks on alignment where we pair adversarial images going through the vision encoder with textual prompts to break t…

Cited by 147SourcePDFScholar
2024

Mechanistic Understanding and Mitigation of Language Model Non-Factual Hallucinations

EMNLP 2024finding

State-of-the-art language models (LMs) sometimes generate that misalign with world knowledge. To explore the mechanistic causes of these hallucinations, we create diagnostic datasets with subject-relation queries and adapt interpretability methods to trace hallucinations through internal model repre…

2024

PAT-Questions: A Self-Updating Benchmark for Present-Anchored Temporal Question-Answering

ACL 2024findings

Existing work on Temporal Question Answering (TQA) has predominantly focused on questions anchored to specific timestamps or events (e.g. ‘Who was the US president in 1970?’). Little work has studied questions whose temporal context is relative to the present time (e.g. ‘Who was the previous US pres…

Cited by 7SourcePDFScholar
2024

Safety Alignment in NLP Tasks: Weakly Aligned Summarization as an In-Context Attack

ACL 2024long

Recent developments in balancing the usefulness and safety of Large Language Models (LLMs) have raised a critical question: Are mainstream NLP tasks adequately aligned with safety consideration? Our study, focusing on safety-sensitive documents obtained through adversarial attacks, reveals significa…

2024

Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy

AAAI 2024technical

To mitigate potential risks associated with language models (LMs), recent AI detection research proposes incorporating watermarks into machine-generated text through random vocabulary restrictions and utilizing this information for detection. In this paper, we show that watermarking algorithms desig…

2022

Faithful to the Document or to the World? Mitigating Hallucinations via Entity-Linked Knowledge in Abstractive Summarization

EMNLP 2022finding

Existing abstractive summarization systems are hampered by content hallucinations in which models generate text that is not directly inferable from the source alone. Annotations from prior work have shown that some of these hallucinations, while being ‘unfaithful’ to the source, are nonetheless fact…

Cited by 32SourcePDFScholar
2022

Hallucinated but Factual! Inspecting the Factuality of Hallucinations in Abstractive Summarization

ACL 2022long

State-of-the-art abstractive summarization systems often generate hallucinations; i.e., content that is not directly inferable from the source text. Despite being assumed to be incorrect, we find that much hallucinated content is actually consistent with world knowledge, which we call factual halluc…

2022

Learning with Rejection for Abstractive Text Summarization

EMNLP 2022main

State-of-the-art abstractive summarization systems frequently hallucinate content that is not supported by the source document, mainly due to noise in the training dataset.Existing methods opt to drop the noisy samples or tokens from the training set entirely, reducing the effective training set siz…

2022

Modeling of Critically Ill Patient Pathways to Support Intensive Care Delivery

RA-L 2022

The COVID-19 pandemic has exposed long standing deficiencies in critical care knowledge and practice in hospitals worldwide. New methods and strategies to facilitate timely and accurate interventions are needed. A virtual counterpart (digital twin) to critically ill patients would allow bedside prov

Cited by 14SourceScholar
2021

Bringing Structure into Summaries: a Faceted Summarization Dataset for Long Scientific Documents

ACL 2021short

Faceted summarization provides briefings of a document from different perspectives. Readers can quickly comprehend the main points of a long document with the help of a structured outline. However, little research has been conducted on this subject, partially due to the lack of large-scale faceted s…

2021

Large Scale Image Completion via Co-Modulated Generative Adversarial Networks

ICLR 2021spotlight

Numerous task-specific variants of conditional generative adversarial networks have been developed for image completion. Yet, a serious limitation remains that all existing algorithms tend to fail when handling large-scale missing regions. To overcome this challenge, we propose a generic new approac…

2020

MaskFlownet: Asymmetric Feature Matching With Learnable Occlusion Mask

CVPR 2020oral

Feature warping is a core technique in optical flow estimation; however, the ambiguity caused by occluded areas during warping is a major problem that remains unsolved. In this paper, we propose an asymmetric occlusion-aware feature matching module, which can learn a rough occlusion mask that filter…

Cited by 276PDFcodeScholar
2020

Object-based Illumination Estimation with Rendering-aware Neural Networks

ECCV 2020poster

We present a scheme for fast environment light estimation from the RGBD appearance of individual objects and their local image areas. Conventional inverse rendering is too computationally demanding for real-time applications, and the performance of purely learning-based techniques may be limited by…

Cited by 29SourcePDFScholar
2020

TextureFusion: High-Quality Texture Acquisition for Real-Time RGB-D Scanning

CVPR 2020oral

Real-time RGB-D scanning technique has become widely used to progressively scan objects with a hand-held sensor. Existing online methods restore color information per voxel, and thus their quality is often limited by the tradeoff between spatial resolution and time performance. Also, such methods of…

Cited by 27PDFScholar
2019

Recursive Cascaded Networks for Unsupervised Medical Image Registration

ICCV 2019poster

We present recursive cascaded networks, a general architecture that enables learning deep cascades, for deformable image registration. The proposed architecture is simple in design and can be built on any base network. The moving image is warped successively by each cascade and finally aligned to th…

Cited by 350PDFcodeScholar
2019

Synthesizing 3D Shapes From Silhouette Image Collections Using Multi-Projection Generative Adversarial Networks

CVPR 2019poster

We present a new weakly supervised learning-based method for generating novel category-specific 3D shapes from unoccluded image collections. Our method is weakly supervised and only requires silhouette annotations from unoccluded, category-specific objects. Our method does not require access to the…

Cited by 36PDFScholar
2018

Bottleneck Analysis to Improve Multidisciplinary Rounding Process in Intensive Care Units at Mayo Clinic

RA-L 2018

In a hospital's intensive care unit (ICU), multidisciplinary rounding (MDR) is a combination of care management with various healthcare providers from different clinical expertise meeting together to coordinate patient care, establish daily goals, and determine treatment plans. Such meetings require

Cited by 6SourceScholar