← Search

Zhendong Zhao

10 accepted papers

2026

ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution

AAAI 2026technical

The proliferation of large language models has intensified demands for reliable content attribution, yet existing watermarking techniques face a fundamental trilemma: they cannot simultaneously optimize for robustness against attacks, minimal text quality degradation, and detection efficiency. To re

Cited by 0SourcePDFScholar
2026

DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks

AAAI 2026technical

Model watermarking techniques can embed watermark information into the protected model for ownership declaration by constructing specific input-output pairs. However, existing watermarks are easily removed when facing model stealing attacks, and make it difficult for model owners to effectively veri

Cited by 0SourcePDFScholar
2026

Exposing Functional Fusion: A New Class of Strategic Backdoor in Dynamic Prompt Architectures

CVPR 2026

Existing ViT backdoor attacks based on backbone-overwriting full-tuning are computationally expensive and inflict performance degradation. This has forced adversaries towards the Visual Parameter-Efficient Fine-Tuning (PEFT) paradigm, dominated by adapter-based (e.g., LoRA) and prompt-based (e.g., V

Cited by 0SourceScholar
2026

Value-Aligned Prompt Moderation via Zero-Shot Agentic Rewriting for Safe Image Generation

AAAI 2026technical

Generative vision-language models like Stable Diffusion demonstrate remarkable capabilities in creative media synthesis, but they also pose substantial risks of producing unsafe, offensive, or culturally inappropriate content when prompted adversarially. Current defenses struggle to align outputs wi

Cited by 0SourcePDFScholar
2025

A Dual-Agent Collaboration Framework Based on LLMs for Nursing Robots to Perform Bimanual Coordination Tasks

RA-L 2025

Dual-arm coordination is a fundamental problem in humanoid nursing robot. Large language model (LLM)-driven dual-arm collaboration is gradually becoming a research hotspot in this field. However, the single-thread LLM task planner lacks the ability of co-scheduling, which leads to poor efficiency in

Cited by 9SourceScholar
2025

Take Attention Inside: Neighbor Pair Graph Contrastive Learning

ICASSP 2025accepted

Graph Contrastive Learning(GCL) is a fundamental pretraining research method in Graph Neural Networks (GNNs), which puts rich graph-level insights into the graph data to augment the data representation. However, since the existing GCLs generally regard the intra-layer node as negative samples, they…

Cited by 0SourceScholar
2025

Watermarking with Low-Entropy POS-Guided Token Partitioning and Z-Score-Driven Dynamic Bias for Large Language Models

EMNLP 2025

Texts generated by large language models (LLMs) are increasingly widespread online. Due to the lack of effective attribution mechanisms, the enforcement of copyright and the prevention of misuse remain significant challenges in the context of LLM-generated content. LLMs watermark emerges as a crucia

Cited by 0SourcePDFScholar
2025

Who Speaks for the Trigger? Dynamic Expert Routing in Backdoored Mixture-of-Experts Transformers

NeurIPS 2025poster

Large language models (LLMs) with Mixture-of-Experts (MoE) architectures achieve impressive performance and efficiency by dynamically routing inputs to specialized subnetworks, known as experts. However, this sparse routing mechanism inherently exhibits task preferences due to expert specialization…

Cited by 0SourceScholar
2024

CipherDM: Secure Three-Party Inference for Diffusion Model Sampling

ECCV 2024poster

"Diffusion Models (DMs) achieve state-of-the-art synthesis results in image generation and have been applied to various fields. However, DMs sometimes seriously violate user privacy during usage, making the protection of privacy an urgent issue. Using traditional privacy computing schemes like Secur…

2022

DEFEAT: Deep Hidden Feature Backdoor Attacks by Imperceptible Perturbation and Latent Representation Constraints

CVPR 2022poster

Backdoor attack is a type of serious security threat to deep learning models.An adversary can provide users with a model trained on poisoned data to manipulate prediction behavior in test stage using a backdoor. The backdoored models behave normally on clean images, yet can be activated and output i…

Cited by 97PDFScholar