← Search

Yulin Chen

30 accepted papers

2026

AliMark: Enhancing Robustness of Sentence-Level Watermarks Against Text Paraphrasing

ICML 2026poster

Existing sentence-level watermarking methods enhance robustness to paraphrasing by anchoring watermarks in sentence semantics. However, their prefix-based designs remain vulnerable to structural perturbations, such as sentence splitting and merging, which commonly arise under strong paraphrasers lik…

Cited by 0SourceScholar
2026

MAPS: Memory-Aware Predictive Scheduling Framework for Large Language Models Serving

ICML 2026poster

The surge of large language model (LLM) applications on personal devices imposes massive, bursty workloads on cloud serving infrastructure. While prefill-decode disaggregation improves throughput and scalability, memory-bound decode instances often suffer from persistent load imbalance, as output le…

Cited by 0SourceScholar
2026

Monitoring Decomposition Attacks with Lightweight Sequential Monitors

ICLR 2026poster

As LLMs become more agentic, a critical risk emerges: attackers can \emph{decompose} harmful goals into stateful, benign subtasks that trick LLM agents into executing them without realizing the harmful intent in the same context. The challenge lies in the existing shallow safety alignment techniques…

Cited by 0SourcecodeScholar
2026

One-Step Generative Policies with Q-Learning: A Reformulation of MeanFlow

AAAI 2026technical

We introduce a one-step generative policy for offline reinforcement learning that maps *noise* directly to *actions* via a *residual reformulation* of MeanFlow, making it compatible with Q-learning. While one-step Gaussian policies enable fast inference, they struggle to capture complex, multimodal

Cited by 0SourcePDFScholar
2026

Zero-Shot Exocentric Viewpoint-Robust Imitation Learning (VIL): Bridging Handheld Gripper and Exocentric Views

ICRA 2026poster

Recent advances in robot learning have motivated integrated pipelines that combine hardware for data collection with imitation learning algorithms. Existing data collection methods like leader–follower, VR/AR, and exoskeletons rely on costly hardware and exhibit limited scalability, while imitation …

Cited by 0codeScholar
2025

Backdoor-Powered Prompt Injection Attacks Nullify Defense Methods

EMNLP 2025

With the development of technology, large language models (LLMs) have dominated the downstream natural language processing (NLP) tasks. However, because of the LLMs’ instruction-following abilities and inability to distinguish the instructions in the data content, such as web pages from search engin

2025

Can Indirect Prompt Injection Attacks Be Detected and Removed?

ACL 2025long

Prompt injection attacks manipulate large language models (LLMs) by misleading them to deviate from the original input instructions and execute maliciously injected instructions, because of their instruction-following capabilities and inability to distinguish between the original input instructions…

2025

Defense Against Prompt Injection Attack by Leveraging Attack Techniques

ACL 2025long

With the advancement of technology, large language models (LLMs) have achieved remarkable performance across various natural language processing (NLP) tasks, powering LLM-integrated applications like Microsoft Copilot. However, as LLMs continue to evolve, new vulnerabilities, especially prompt injec…

Cited by 0SourcePDFScholar
2025

Fusing Highly Specialized Language Models for Comprehensive Expertise

ACL 2025long

Underlying data distributions of natural language, programming code, and mathematical symbols vary vastly, presenting a complex challenge for large language models (LLMs) that strive to achieve high performance across all three domains simultaneously. Achieving a very high level of proficiency for a…

Cited by 0SourcePDFScholar
2025

GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning

NeurIPS 2025poster

To enhance the safety of VLMs, this paper introduces a novel reasoning-based VLM guard model dubbed GuardReasoner-VL. The core idea is to incentivize the guard model to deliberatively reason before making moderation decisions via online RL. First, we construct GuardReasoner-VLTrain, a reasoning corp…

Cited by 0SourcecodeScholar
2025

MA-Det: A Discriminative Morphology-Aware Detector for Cervical Lesion Cell Clumps

ICASSP 2025accepted

Automated detection of cervical lesion cell clumps is crucial for cervical cancer screening. However, the dense packing and overlap of cells, caused by adhesion molecules, make detection challenging. To address this issue, we propose the Morphology-Aware Detector (MA-Det). Specifically, by innovativ…

Cited by 0SourceScholar
2025

NucleiFormer: A Nuclei Segmentation Model Optimized by Joint Haar Wavelet and Adaptive Feature Calibration

ICASSP 2025accepted

Nucleus segmentation plays a vital role in medical image analysis. However, existing segmentation methods frequently encounter hurdles, such as the loss of crucial image details during downsampling and issues like noise and spatial displacement. In this study, we propose NucleiFormer, where Haar wav…

Cited by 0SourceScholar
2025

PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance

ACL 2025long

Recent advancements in generative large language models (LLMs) have enabled wider applicability, accessibility, and flexibility. However, their reliability and trustworthiness are still in doubt, especially for concerns regarding individuals’ data privacy. Great efforts have been made on privacy by…

2025

Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory

NAACL 2025long

Privacy research has attracted wide attention as individuals worry that their private data can be easily leaked during interactions with smart devices, social platforms, and AI applications. Existing works mostly consider privacy attacks and defenses on various sub-fields. Within each field, various…

2025

Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models

AAAI 2025technical

With rapid advances, generative large language models (LLMs) dominate various Natural Language Processing (NLP) tasks from understanding to reasoning. Yet, language models' inherent vulnerabilities may be exacerbated due to increased accessibility and unrestricted model training on massive data. A m…

2025

TopicAttack: An Indirect Prompt Injection Attack via Topic Transition

EMNLP 2025

Large language models (LLMs) have shown remarkable performance across a range of NLP tasks. However, their strong instruction-following capabilities and inability to distinguish instructions from data content make them vulnerable to indirect prompt injection attacks. In such attacks, instructions wi

Cited by 0SourcePDFScholar
2025

Weed Out, Then Harvest: Dual Low-Rank Adaptation is an Effective Noisy Label Detector for Noise-Robust Learning

ACL 2025finding

Parameter-efficient fine-tuning (PEFT) large language models (LLMs) have shown impressive performance in various downstream tasks. However, in many real-world scenarios, the collected training data inevitably contains noisy labels. To learn from noisy labels, most solutions select samples with small…

Cited by 0SourcePDFScholar
2024

Hide and Seek in Noise Labels: Noise-Robust Collaborative Active Learning with LLMs-Powered Assistance

ACL 2024long

Learning from noisy labels (LNL) is a challenge that arises in many real-world scenarios where collected training data can contain incorrect or corrupted labels. Most existing solutions identify noisy labels and adopt active learning to query human experts on them for denoising. In the era of large…

2023

Enhancing Chat Language Models by Scaling High-quality Instructional Conversations

EMNLP 2023long main

Fine-tuning on instruction data has been widely validated as an effective practice for implementing chat language models like ChatGPT. Scaling the diversity and quality of such data, although straightforward, stands a great chance of leading to improved performance. This paper aims to push the upper…

Cited by 0SourcecodeScholar
2023

Exploring Lottery Prompts for Pre-trained Language Models

ACL 2023long

Consistently scaling pre-trained language models (PLMs) imposes substantial burdens on model adaptation, necessitating more efficient alternatives to conventional fine-tuning. Given the advantage of prompting in the zero-shot setting and the observed performance fluctuation among different prompts,…

Cited by 11SourcePDFScholar
2023

Few-shot Classification with Hypersphere Modeling of Prototypes

ACL 2023findings

Metric-based meta-learning is one of the de facto standards in few-shot learning. It composes of representation learning and metrics calculation designs. Previous works construct class representations in different ways, varying from mean output embedding to covariance and distributions. However, usi…

Cited by 9SourcePDFScholar
2023

Sparse Low-rank Adaptation of Pre-trained Language Models

EMNLP 2023long main

Fine-tuning pre-trained large language models in a parameter-efficient manner is widely studied for its effectiveness and efficiency. The popular method of low-rank adaptation (LoRA) offers a notable approach, hypothesizing that the adaptation process is intrinsically low-dimensional. Although LoRA…

Cited by 0SourcecodeScholar
2022

MAVEN-ERE: A Unified Large-scale Dataset for Event Coreference, Temporal, Causal, and Subevent Relation Extraction

EMNLP 2022main

The diverse relationships among real-world events, including coreference, temporal, causal, and subevent relations, are fundamental to understanding natural languages. However, two drawbacks of existing datasets limit event relation extraction (ERE) tasks: (1) Small scale. Due to the annotation comp…

2022

Prompt-learning for Fine-grained Entity Typing

EMNLP 2022finding

As an effective approach to adapting pre-trained language models (PLMs) for specific tasks, prompt-learning has recently attracted much attention from researchers. By using cloze-style language prompts to stimulate the versatile knowledge of PLMs, prompt-learning can achieve promising results on a s…

Cited by 172SourcePDFScholar
2021

Few-NERD: A Few-shot Named Entity Recognition Dataset

ACL 2021long

Recently, considerable literature has grown up around the theme of few-shot named entity recognition (NER), but little published benchmark data specifically focused on the practical and challenging task. Current approaches collect existing supervised NER datasets and re-organize them to the few-shot…