← Search

Zhuoqing Mao

10 accepted papers

2026

SWINGARENA: Adversarial Programming Arena for Long-context GitHub Issue Solving

ICLR 2026oral

We present \textsc{SwingArena}, a adversarial evaluation framework for Large Language Models (LLMs) that closely mirrors real-world software development workflows. Unlike traditional static benchmarks, \textsc{SwingArena} models the collaborative process of software iteration by pairing LLMs as \tex…

Cited by 0SourcecodeScholar
2025

AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

ICLR 2025spotlight

Jailbreak attacks serve as essential red-teaming tools, proactively assessing whether LLMs can behave responsibly and safely in adversarial environments. Despite diverse strategies (e.g., cipher, low-resource language, persuasions, and so on) that have been proposed and shown success, these strategi…

2025

Cocoon: Robust Multi-Modal Perception with Uncertainty-Aware Sensor Fusion

ICLR 2025poster

An important paradigm in 3D object detection is the use of multiple modalities to enhance accuracy in both normal and challenging conditions, particularly for long-tail scenarios. To address this, recent studies have explored two directions of adaptive approaches: MoE-based adaptive fusion, which st…

Cited by 1SourcePDFScholar
2024

CALICO: Self-Supervised Camera-LiDAR Contrastive Pre-training for BEV Perception

ICLR 2024poster

Perception is crucial in the realm of autonomous driving systems, where bird's eye view (BEV)-based architectures have recently reached state-of-the-art performance. The desirability of self-supervised representation learning stems from the expensive and laborious process of annotating 2D and 3D dat…

Cited by 13SourcePDFScholar
2024

Learn To be Efficient: Build Structured Sparsity in Large Language Models

NeurIPS 2024spotlight

Large Language Models (LLMs) have achieved remarkable success with their billion-level parameters, yet they incur high inference overheads. The emergence of activation sparsity in LLMs provides a natural approach to reduce this cost by involving only parts of the parameters for inference. However, e…

Cited by 14SourcePDFScholar
2023

A Critical Revisit of Adversarial Robustness in 3D Point Cloud Recognition with Diffusion-Driven Purification

ICML 2023poster

3D point clouds serve as a crucial data representation in numerous real-world applications such as autonomous driving, robotics, and medical imaging. While the advancements in deep learning have spurred the utilization of 3D point clouds, deep models are notoriously vulnerable to adversarial attacks…

Cited by 14SourcePDFScholar
2022

Adversarial Unlearning of Backdoors via Implicit Hypergradient

ICLR 2022poster

We propose a minimax formulation for removing backdoors from a given poisoned model based on a small set of clean data. This formulation encompasses much of prior work on backdoor removal. We propose the Implicit Backdoor Adversarial Unlearning (I-BAU) algorithm to solve the minimax. Unlike previous…

2022

Robust Trajectory Prediction against Adversarial Attacks

CoRL 2022oral

Trajectory prediction using deep neural networks (DNNs) is an essential component of autonomous driving (AD) systems. However, these methods are vulnerable to adversarial attacks, leading to serious consequences such as collisions. In this work, we identify two key ingredients to defend trajectory…

Cited by 47SourceScholar
2021

Adversarially Robust 3D Point Cloud Recognition Using Self-Supervisions

NeurIPS 2021poster

3D point cloud data is increasingly used in safety-critical applications such as autonomous driving. Thus, the robustness of 3D deep learning models against adversarial attacks becomes a major consideration. In this paper, we systematically study the impact of various self-supervised learning proxy…

Cited by 58SourcePDFScholar