← Search

Zhifang Zhang

5 accepted papers

2026

Test-Time Attention Purification for Backdoored Large Vision Language Models

CVPR 2026

Despite the strong multimodal performance, large vision-language models (LVLMs) are vulnerable during fine-tuning to backdoor attacks, where adversaries insert trigger-embedded samples into the training data to implant behaviors that can be maliciously activated at test time. Existing defenses typic

Cited by 0SourceScholar
2026

TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models

ICML 2026poster

Large vision-language models (LVLMs) excel at vision-language tasks but remain vulnerable to backdoor attacks. Most existing backdoor attacks on LVLMs force the model to generate predefined target patterns. However, these fixed-pattern attacks are easy to detect, as the model tends to memorize frequ…

Cited by 0SourceScholar
2025

Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning

NeurIPS 2025poster

Multimodal contrastive learning models (e.g., CLIP) can learn high-quality representations from large-scale image-text datasets, while they exhibit significant vulnerabilities to backdoor attacks, raising serious safety concerns. In this paper, we reveal that CLIP's vulnerabilities primarily stem fr…

Cited by 0SourceScholar
2025

Towards Reverse Engineering of Language Models: A Survey

EMNLP 2025

With the continuous development of language models and the widespread availability of various types of accessible interfaces, large language models (LLMs) have been applied to an increasing number of fields. However, due to the vast amounts of data and computational resources required for model deve

Cited by 0SourcePDFScholar