← Search

Zhi Xu

17 accepted papers

2026

TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models

ICLR 2026poster

Large language models (LLMs) have achieved remarkable success across diverse applications but remain vulnerable to jailbreak attacks, where attackers craft prompts that bypass safety alignment and elicit unsafe responses. Among existing approaches, optimization-based attacks have shown strong effect…

Cited by 0SourcecodeScholar
2026

Vision-G1: Towards General Reasoning Vision-Language Models via Reinforcement Learning

AAAI 2026technical

Recent vision-language models (VLMs) show strong reasoning capabilities through training with reinforcement learning from verifiable rewards (RLVR). Despite their impressive capabilities, current VLMs focus on a limited range of reasoning tasks, such as mathematical and logical reasoning, due to the

Cited by 0SourcePDFScholar
2025

Debiased Multimodal Understanding for Human Language Sequences

AAAI 2025technical

Human multimodal language understanding (MLU) is an indispensable component of expression analysis (e.g., sentiment or humor) from heterogeneous modalities, including visual postures, linguistic contents, and acoustic behaviours. Existing works invariably focus on designing sophisticated structures…

Cited by 1SourcePDFScholar
2025

HQA-VLAttack: Towards High Quality Adversarial Attack on Vision-Language Pre-Trained Models

NeurIPS 2025poster

Black-box adversarial attack on vision-language pre-trained models is a practical and challenging task, as text and image perturbations need to be considered simultaneously, and only the predicted results are accessible. Research on this problem is in its infancy, and only a handful of methods are a…

Cited by 0SourceScholar
2023

AIDE: A Vision-Driven Multi-View, Multi-Modal, Multi-Tasking Dataset for Assistive Driving Perception

ICCV 2023poster

Driver distraction has become a significant cause of severe traffic accidents over the past decade. Despite the growing development of vision-driven driver monitoring systems, the lack of comprehensive perception datasets restricts road safety and traffic security. In this paper, we present an AssIs…

Cited by 54PDFcodeScholar
2023

HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text

NeurIPS 2023poster

Black-box hard-label adversarial attack on text is a practical and challenging task, as the text data space is inherently discrete and non-differentiable, and only the predicted label is accessible. Research on this problem is still in the embryonic stage and only a few methods are available. Nevert…

2023

How2comm: Communication-Efficient and Collaboration-Pragmatic Multi-Agent Perception

NeurIPS 2023poster

Multi-agent collaborative perception has recently received widespread attention as an emerging application in driving scenarios. Despite the advancements in previous efforts, challenges remain due to various noises in the perception procedure, including communication redundancy, transmission delay,…

2023

SSPAttack: A Simple and Sweet Paradigm for Black-Box Hard-Label Textual Adversarial Attack

AAAI 2023technical

Hard-label textual adversarial attack is a challenging task, as only the predicted label information is available, and the text space is discrete and non-differentiable. Relevant research work is still in fancy and just a handful of methods are proposed. However, existing methods suffer from either…

Cited by 21SourcePDFScholar
2022

"Contributions of Shape, Texture, and Color in Visual Recognition"

ECCV 2022poster

"We investigate the contributions of three important features of the human visual system (HVS)---shape, texture, and color ---to object classification. We build a humanoid vision engine (HVE) that explicitly and separately computes shape, texture, and color features from images. The resulting featur…

2022

Polytopic Planar Region Characterization of Rough Terrains for Legged Locomotion

IROS 2022poster

This paper studies the problem of constructing polytopic representations for planar regions from depth camera readings. This problem is of great importance for terrain mapping in complicated environment and has great potentials in legged locomotion applications. To address the polytopic planar regio…

Cited by 5SourceScholar
2021

A Peek Into the Reasoning of Neural Networks: Interpreting With Structural Visual Concepts

CVPR 2021poster

Despite substantial progress in applying neural networks (NN) to a wide variety of areas, they still largely suffer from a lack of transparency and interpretability. While recent developments in explainable artificial intelligence attempt to bridge this gap (e.g., by visualizing the correlation betw…

Cited by 60PDFScholar
2021

PerSim: Data-Efficient Offline Reinforcement Learning with Heterogeneous Agents via Personalized Simulators

NeurIPS 2021poster

We consider offline reinforcement learning (RL) with heterogeneous agents under severe data scarcity, i.e., we only observe a single historical trajectory for every agent under an unknown, potentially sub-optimal policy. We find that the performance of state-of-the-art offline and model-based RL met…

Cited by 25SourcePDFScholar
2020

Harnessing Structures for Value-Based Planning and Reinforcement Learning

ICLR 2020talk

Value-based methods constitute a fundamental methodology in planning and deep reinforcement learning (RL). In this paper, we propose to exploit the underlying structures of the state-action value function, i.e., Q function, for both planning and deep RL. In particular, if the underlying system dynam…

Cited by 40SourcecodeScholar
2020

Sample Efficient Reinforcement Learning via Low-Rank Matrix Estimation

NeurIPS 2020poster

We consider the question of learning $Q$-function in a sample efficient manner for reinforcement learning with continuous state and action spaces under a generative model. If $Q$-function is Lipschitz continuous, then the minimal sample complexity for estimating $\epsilon$-optimal $Q$-function is kn…

Cited by 52SourcePDFScholar
2019

ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation

ICML 2019oral

Deep neural networks are vulnerable to adversarial attacks. The literature is rich with algorithms that can easily craft successful adversarial examples. In contrast, the performance of defense techniques still lags behind. This paper proposes ME-Net, a defense method that leverages matrix estimatio…