← Search

Zhun Deng

24 accepted papers

2025

Conformal Tail Risk Control for Large Language Model Alignment

ICML 2025poster

Recent developments in large language models (LLMs) have led to their widespread usage for various tasks. The prevalence of LLMs in society implores the assurance on the reliability of their performance. In particular, risk-sensitive applications demand meticulous attention to unexpectedly poor outc…

Cited by 0SourcePDFScholar
2025

Performative Risk Control: Calibrating Models for Reliable Deployment under Performativity

NeurIPS 2025poster

Calibrating blackbox machine learning models to achieve risk control is crucial to ensure reliable decision-making. A rich line of literature has been studying how to calibrate a model so that its predictions satisfy explicit finite-sample statistical guarantees under a _fixed_, _static_, and unknow…

Cited by 0SourceScholar
2025

QuEst: Enhancing Estimates of Quantile-Based Distributional Measures Using Model Predictions

ICML 2025poster

As machine learning models grow increasingly competent, their predictions can supplement scarce or expensive data in various important domains. In support of this paradigm, algorithms have emerged to combine a small amount of high-fidelity observed data with a much larger set of imputed model output…

Cited by 0SourcePDFScholar
2025

Synergistic Weak-Strong Collaboration by Aligning Preferences

ACL 2025long

Current Large Language Models excel in general reasoning yet struggle with specialized tasks requiring proprietary or domain-specific knowledge. Fine-tuning large models for every niche application is often infeasible due to black-box constraints and high computational overhead. To address this, we…

Cited by 0SourcePDFScholar
2024

Analyzing and Mitigating Object Hallucination in Large Vision-Language Models

ICLR 2024poster

Large vision-language models (LVLMs) have shown remarkable abilities in understanding visual information with human languages. However, LVLMs still suffer from object hallucination, which is the problem of generating descriptions that include objects that do not actually exist in the images. This ca…

2024

Learning and Forgetting Unsafe Examples in Large Language Models

ICML 2024poster

As the number of large language models (LLMs) released to the public grows, there is a pressing need to understand the safety implications associated with these models learning from third-party custom finetuning data. We explore the behavior of LLMs finetuned on noisy custom data containing unsafe c…

2024

Prompt Risk Control: A Rigorous Framework for Responsible Deployment of Large Language Models

ICLR 2024poster

With the explosion of the zero-shot capabilities of (and thus interest in) pre-trained large language models, there has come accompanying interest in how best to prompt a language model to perform a given task. While it may be tempting to choose a prompt based on empirical results on a validation se…

2023

Distribution-Free Statistical Dispersion Control for Societal Applications

NeurIPS 2023spotlight

Explicit finite-sample statistical guarantees on model performance are an important ingredient in responsible machine learning. Previous work has focused mainly on bounding either the expected loss of a predictor or the probability that an individual prediction will incur a loss value in a specifie…

Cited by 5SourcePDFScholar
2023

FIFA: Making Fairness More Generalizable in Classifiers Trained on Imbalanced Data

ICLR 2023poster

Algorithmic fairness plays an important role in machine learning and imposing fairness constraints during learning is a common approach. However, many datasets are imbalanced in certain label classes (e.g. "healthy") and sensitive subgroups (e.g. "older patients"). Empirically, this imbalance leads…

Cited by 19SourcePDFScholar
2023

PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification

NeurIPS 2023poster

Standard approaches for uncertainty quantification in deep learning and physics-informed learning have persistent limitations. Indicatively, strong assumptions regarding the data likelihood are required, the performance highly depends on the selection of priors, and the posterior can be sampled onl…

2023

Quantile Risk Control: A Flexible Framework for Bounding the Probability of High-Loss Predictions

ICLR 2023poster

Rigorous guarantees about the performance of predictive algorithms are necessary in order to ensure their responsible use. Previous work has largely focused on bounding the expected loss of a predictor, but this is not sufficient in many risk-sensitive applications where the distribution of errors i…

2023

Reinforcement Learning with Stepwise Fairness Constraints

AISTATS 2023poster

AI methods are used in societally important settings, ranging from credit to employment to housing, and it is crucial to provide fairness in regard to automated decision making. Moreover, many settings are dynamic, with populations responding to sequential decision policies. We introduce the study o…

Cited by 15SourcePDFScholar
2023

Understanding Multimodal Contrastive Learning and Incorporating Unpaired Data

AISTATS 2023poster

Language-supervised vision models have recently attracted great attention in computer vision. A common approach to build such models is to use contrastive learning on paired data across the two modalities, as exemplified by Contrastive Language-Image Pre-Training (CLIP). In this paper, (i) we initia…

2022

An Unconstrained Layer-Peeled Perspective on Neural Collapse

ICLR 2022poster

Neural collapse is a highly symmetric geometry of neural networks that emerges during the terminal phase of training, with profound implications on the generalization performance and robustness of the trained networks. To understand how the last-layer features and classifiers exhibit this recently d…

Cited by 99SourcePDFScholar
2022

Robustness Implies Generalization via Data-Dependent Generalization Bounds

ICML 2022oral

This paper proves that robustness implies generalization via data-dependent generalization bounds. As a result, robustness and generalization are shown to be connected closely in a data-dependent manner. Our bounds improve previous bounds in two directions, to solve an open problem that has seen lit…

Cited by 31SourcePDFScholar
2021

Adversarial Training Helps Transfer Learning via Better Representations

NeurIPS 2021poster

Transfer learning aims to leverage models pre-trained on source data to efficiently adapt to target setting, where only limited data are available for model fine-tuning. Recent works empirically demonstrate that adversarial training in the source data can improve the ability of models to transfer to…

Cited by 63SourcePDFScholar
2021

How Does Mixup Help With Robustness and Generalization?

ICLR 2021spotlight

Mixup is a popular data augmentation technique based on on convex combinations of pairs of examples and their labels. This simple technique has shown to substantially improve both the model's robustness as well as the generalization of the trained model. However, it is not well-understood why such…

Cited by 313SourcePDFScholar
2021

Improving Adversarial Robustness via Unlabeled Out-of-Domain Data

AISTATS 2021poster

Data augmentation by incorporating cheap unlabeled data from multiple domains is a powerful way to improve prediction especially when there is limited labeled data. In this work, we investigate how adversarial robustness can be enhanced by leveraging out-of-domain unlabeled data. We demonstrate that…

Cited by 28SourcePDFScholar
2020

Interpreting Robust Optimization via Adversarial Influence Functions

ICML 2020poster

Robust optimization has been widely used in nowadays data science, especially in adversarial training. However, little research has been done to quantify how robust optimization changes the optimizers and the prediction losses comparing to standard training. In this paper, inspired by the influence…

Cited by 16SourcePDFScholar
2020

Towards Understanding the Dynamics of the First-Order Adversaries

ICML 2020poster

An acknowledged weakness of neural networks is their vulnerability to adversarial perturbations to the inputs. To improve the robustness of these models, one of the most popular defense mechanisms is to alternatively maximize the loss over the constrained perturbations (or called adversaries) on the…

Cited by 11SourcePDFScholar