← Search

Zhuosheng Zhang

66 accepted papers

2026

An LLM-based Quantitative Framework for Evaluating High-Stealthy Backdoor Risks in OSS Supply Chains

AAAI 2026technical

In modern software development workflows, the open-source software supply chain significantly contributes to efficient and convenient engineering practices. With increasing system complexity, it has become a common practice to use open-source software as third-party dependencies. However, due to the

Cited by 0SourcePDFScholar
2026

DeepMath-103K: A Large-Scale, Challenging, Decontaminated, and Verifiable Mathematical Dataset for Advancing Reasoning

ICLR 2026poster

Reinforcement learning (RL) with large language models shows promise in complex reasoning. However, its progress is hindered by the lack of large-scale training data that is sufficiently challenging, contamination-free and verifiable. To this end, we introduce DeepMath-103K, a large-scale mathematic…

Cited by 0SourcecodeScholar
2026

Faithful Mobile GUI Agents with Guided Advantage Estimator

ICML 2026poster

Vision-language model (VLM) based graphical user interface (GUI) agents have shown strong interaction capabilities. However, they often behave unfaithfully, relying on memorized shortcuts rather than grounding actions in displayed screen evidence or user instructions. To address this, we propose **F…

Cited by 0SourceScholar
2026

GEM: Gaussian Embedding Modeling for Out-of-Distribution Detection in GUI Agents

AAAI 2026technical

Graphical user interface (GUI) agents have recently emerged as an intriguing paradigm for human-computer interaction, capable of automatically executing user instructions to operate intelligent terminal devices. However, when encountering out-of-distribution (OOD) instructions that violate environm

Cited by 0SourcePDFScholar
2026

LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents

CVPR 2026

Graphical user interface (GUI) agents built on multimodal large language models (MLLMs) have recently demonstrated strong decision-making abilities in screen-based interaction tasks. However, they remain highly vulnerable to pop-up-based environmental injection attacks, where malicious visual elemen

Cited by 0SourcecodeScholar
2026

See, Think, Act: Teaching Multimodal Agents to Effectively Interact with GUI by Identifying Toggles

CVPR 2026

The advent of multimodal agents facilitates effective interaction within graphical user interface (GUI), especially in ubiquitous GUI control. However, their inability to reliably execute toggle control instructions remains a key bottleneck. To investigate this, we construct a state control benchmar

Cited by 0SourcecodeScholar
2026

Training High-Level Schedulers with Execution-Feedback Reinforcement Learning for Long-Horizon GUI Automation

CVPR 2026

The rapid development of large vision-language model (VLM) has greatly promoted the research of GUI agent. However, GUI agents still face significant challenges in handling long-horizon tasks. First, single-agent models struggle to balance high-level capabilities and low-level execution capability,

Cited by 0SourcecodeScholar
2026

Zooming without Zooming: Region-to-Image Distillation for Fine-Grained Multimodal Perception

ICML 2026poster

Multimodal Large Language Models (MLLMs) excel at broad visual understanding but still struggle with fine-grained perception, where decisive evidence is small and easily overwhelmed by global context. Recent "Thinking-with-Images" methods alleviate this by iteratively zooming into regions of interes…

Cited by 0SourceScholar
2025

Can Knowledge be Transferred from Unimodal to Multimodal? Investigating the Transitivity of Multimodal Knowledge Editing

ICCV 2025poster

Multimodal Large Language Models (MLLMs) contain a substantial amount of factual knowledge, which may become outdated or inaccurate over time. Consequently, various knowledge editing techniques have been proposed to update the knowledge encoded within these models. Previous approaches maintain modal…

Cited by 0SourcePDFScholar
2025

Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions

ACL 2025long

This paper investigates the faithfulness of multimodal large language model (MLLM) agents in a graphical user interface (GUI) environment, aiming to address the research question of whether multimodal GUI agents can be distracted by environmental context. A general scenario is proposed where both th…

2025

ChemAgent: Self-updating Memories in Large Language Models Improves Chemical Reasoning

ICLR 2025poster

Chemical reasoning usually involves complex, multi-step processes that demand precise calculations, where even minor errors can lead to cascading failures. Furthermore, large language models (LLMs) encounter difficulties handling domain-specific formulas, executing reasoning steps accurately, and in…

2025

Do NOT Think That Much for 2+3=? On the Overthinking of Long Reasoning Models

ICML 2025poster

The remarkable performance of long reasoning models can be attributed to their ability to emulate human-like long-time thinking during inference. These models employ extended chain-of-thought (CoT) processes, exploring multiple strategies to enhance problem-solving capabilities. However, a critical…

2025

Gracefully Filtering Backdoor Samples for Generative Large Language Models without Retraining

COLING 2025main

Backdoor attacks remain significant security threats to generative large language models (LLMs). Since generative LLMs output sequences of high-dimensional token logits instead of low-dimensional classification logits, most existing backdoor defense methods designed for discriminative models like BE…

2025

GuideBench: Benchmarking Domain-Oriented Guideline Following for LLM Agents

ACL 2025long

Large language models (LLMs) have been widely deployed as autonomous agents capable of following user instructions and making decisions in real-world applications. Previous studies have made notable progress in benchmarking the instruction following capabilities of LLMs in general domains, with a pr…

2025

Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents

EMNLP 2025

Graphical user interface (GUI) agents powered by multimodal large language models (MLLMs) have shown greater promise for human-interaction. However, due to the high fine-tuning cost, users often rely on open-source GUI agents or APIs offered by AI providers, which introduces a critical but underexpl

2025

Look Before You Leap: Enhance Attention and Vigilance Regarding Harmful Content with GuidelineLLM

AAAI 2025technical

Despite being empowered with alignment mechanisms, large language models (LLMs) are increasingly vulnerable to emerging jailbreak attacks that can compromise their alignment mechanisms. This vulnerability poses significant risks to real-world applications. Existing work faces challenges in both tra…

2025

MEGen: Generative Backdoor into Large Language Models via Model Editing

ACL 2025finding

Large language models (LLMs) have exhibited remarkable versatility and adaptability, while their widespread adoption across various applications also raises critical safety concerns.This paper focuses on the impact of backdoored LLMs. Traditional backdoor injection methods are primarily limited to y…

2025

OS-Kairos: Adaptive Interaction for MLLM-Powered GUI Agents

ACL 2025finding

Autonomous graphical user interface (GUI) agents powered by multimodal large language models have shown great promise. However, a critical yet underexplored issue persists: over-execution, where the agent executes tasks in a fully autonomous way, without adequate assessment of its action confidence…

2025

RaSA: Rank-Sharing Low-Rank Adaptation

ICLR 2025poster

Low-rank adaptation (LoRA) has been prominently employed for parameter-efficient fine-tuning of large language models (LLMs). However, the limited expressive capacity of LoRA, stemming from the low-rank constraint, has been recognized as a bottleneck, particularly in rigorous tasks like code generat…

2025

Sampling-Efficient Test-Time Scaling: Self-Estimating the Best-of-N Sampling in Early Decoding

NeurIPS 2025spotlight

Test-time scaling enhances large language model performance by allocating additional compute resources during decoding. Best-of-$N$ (BoN) sampling serves as a common sampling-based scaling technique, broadening the search space in parallel to find better solutions from the model distribution. Howeve…

Cited by 0SourceScholar
2025

Thoughts Are All Over the Place: On the Underthinking of Long Reasoning Models

NeurIPS 2025spotlight

Long reasoning models (LRMs) such as OpenAI's o1 and DeepSeek's R1 have demonstrated remarkable abilities in complex reasoning tasks by scaling test-time compute and exhibiting human-like deep thinking. However, we identify a phenomenon we term underthinking, where LRMs frequently switch between dif…

Cited by 0SourcecodeScholar
2025

Watch Out Your Album! On the Inadvertent Privacy Memorization in Multi-Modal Large Language Models

ICML 2025poster

Multi-Modal Large Language Models (MLLMs) have exhibited remarkable performance on various vision-language tasks such as Visual Question Answering (VQA). Despite accumulating evidence of privacy concerns associated with task-relevant content, it remains unclear whether MLLMs inadvertently memorize p…

2024

Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space

ACL 2024long

Despite the notable success of language models (LMs) in various natural language processing (NLP) tasks, the reliability of LMs is susceptible to backdoor attacks. Prior research attempts to mitigate backdoor learning while training the LMs on the poisoned dataset, yet struggles against complex back…

2024

AuRoRA: A One-for-all Platform for Augmented Reasoning and Refining with Task-Adaptive Chain-of-Thought Prompting

COLING 2024main

Large language models (LLMs) empowered by chain-of-thought (CoT) prompting have yielded remarkable prowess in reasoning tasks. Nevertheless, current methods predominantly lean on handcrafted or task-specific demonstrations, lack reliable knowledge basis and thus struggle for trustworthy responses in…

Cited by 2SourcePDFScholar
2024

Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models

ACL 2024long

Text watermarking technology aims to tag and identify content produced by large language models (LLMs) to prevent misuse. In this study, we introduce the concept of cross-lingual consistency in text watermarking, which assesses the ability of text watermarks to maintain their effectiveness after bei…

2024

CoCo-Agent: A Comprehensive Cognitive MLLM Agent for Smartphone GUI Automation

ACL 2024findings

Multimodal large language models (MLLMs) have shown remarkable potential as human-like autonomous language agents to interact with real-world environments, especially for graphical user interface (GUI) automation.However, those GUI agents require comprehensive cognition including exhaustive percepti…

2024

Dynamic Planning for LLM-based Graphical User Interface Automation

EMNLP 2024finding

The advent of large language models (LLMs) has spurred considerable interest in advancing autonomous LLMs-based agents, particularly in intriguing applications within smartphone graphical user interfaces (GUIs). When presented with a task goal, these agents typically emulate human actions within a G…

2024

Embedding Trajectory for Out-of-Distribution Detection in Mathematical Reasoning

NeurIPS 2024poster

Real-world data deviating from the independent and identically distributed (\textit{i.i.d.}) assumption of in-distribution training data poses security threats to deep networks, thus advancing out-of-distribution (OOD) detection algorithms. Detection methods in generative language models (GLMs) main…

2024

Fact-Driven Logical Reasoning for Machine Reading Comprehension

AAAI 2024technical

Recent years have witnessed an increasing interest in training machines with reasoning ability, which deeply relies on accurately and clearly presented clue forms. The clues are usually modeled as entity-aware knowledge in existing studies. However, those entity-aware clues are primarily focused on…

2024

Improving Machine Translation with Human Feedback: An Exploration of Quality Estimation as a Reward Model

NAACL 2024long

Insufficient modeling of human preferences within the reward model is a major obstacle for leveraging human feedback to improve translation quality. Fortunately, quality estimation (QE), which predicts the quality of a given translation without reference, has achieved impressive alignment with human…

2024

Investigating Multi-Hop Factual Shortcuts in Knowledge Editing of Large Language Models

ACL 2024long

Recent work has showcased the powerful capability of large language models (LLMs) in recalling knowledge and reasoning. However, the reliability of LLMs in combining these two capabilities into reasoning through multi-hop facts has not been widely explored. This paper systematically investigates the…

2024

Measuring Bargaining Abilities of LLMs: A Benchmark and A Buyer-Enhancement Method

ACL 2024findings

Bargaining is an important and unique part of negotiation between humans. As LLM-driven agents learn to negotiate and act like real humans, how to evaluate agents’ bargaining abilities remains an open problem.For the first time, we formally described the Bargaining task as an asymmetric incomplete i…

2024

MedAgents: Large Language Models as Collaborators for Zero-shot Medical Reasoning

ACL 2024findings

Large language models (LLMs), despite their remarkable progress across various general domains, encounter significant barriers in medicine and healthcare. This field faces unique challenges such as domain-specific terminologies and reasoning over specialized knowledge. To address these issues, we pr…

2024

Meta-Reasoning: Semantics-Symbol Deconstruction for Large Language Models

ACL 2024findings

Neural-symbolic methods have demonstrated efficiency in enhancing the reasoning abilities of large language models (LLMs). However, existing methods mainly rely on syntactically mapping natural languages to complete formal languages like Python and SQL. Those methods require that reasoning tasks be…

2024

Mitigating Misleading Chain-of-Thought Reasoning with Selective Filtering

COLING 2024main

Large language models have manifested remarkable capabilities by leveraging chain-of-thought (CoT) reasoning techniques to solve intricate questions through step-by-step reasoning chains. Despite its success, the efficacy of such reasoning is inherently contingent upon the quality of CoT. However, f…

2024

On the Robustness of Editing Large Language Models

EMNLP 2024main

Large language models (LLMs) have played a pivotal role in building communicative AI, yet they encounter the challenge of efficient updates. Model editing enables the manipulation of specific knowledge memories and the behavior of language generation without retraining. However, the robustness of mo…

2024

R-Judge: Benchmarking Safety Risk Awareness for LLM Agents

EMNLP 2024finding

Large language models (LLMs) have exhibited great potential in autonomously completing tasks across real-world applications. Despite this, these LLM agents introduce unexpected safety risks when operating in interactive environments. Instead of centering on the harmlessness of LLM-generated content…

2024

Self-Prompting Large Language Models for Zero-Shot Open-Domain QA

NAACL 2024long

Open-Domain Question Answering (ODQA) aims to answer questions without explicitly providing specific background documents. This task becomes notably challenging in a zero-shot setting where no data is available to train tailored retrieval-reader models.While recent Large Language Models (LLMs) like…

2024

Structured Chemistry Reasoning with Large Language Models

ICML 2024poster

Large Language Models (LLMs) excel in diverse areas, yet struggle with complex scientific reasoning, especially in the field of chemistry. Different from the simple chemistry tasks (e.g., molecule classification) addressed in previous studies, complex chemistry problems require not only vast knowled…

2023

Automatic Chain of Thought Prompting in Large Language Models

ICLR 2023poster

Large Language Models (LLMs) can carry out complex reasoning tasks by generating intermediate reasoning steps. These steps are triggered by what is called chain-of-thought (CoT) prompting, which comes in two flavors: one leverages a simple prompt like "Let’s think step by step" to facilitate step-by…

2023

Decker: Double Check with Heterogeneous Knowledge for Commonsense Fact Verification

ACL 2023findings

Commonsense fact verification, as a challenging branch of commonsense question-answering (QA), aims to verify through facts whether a given commonsense claim is correct or not. Answering commonsense questions necessitates a combination of knowledge from various levels. However, existing studies prim…

2023

Element-aware Summarization with Large Language Models: Expert-aligned Evaluation and Chain-of-Thought Method

ACL 2023long

Automatic summarization generates concise summaries that contain key ideas of source documents. As the most mainstream datasets for the news sub-domain, CNN/DailyMail and BBC XSum have been widely used for performance benchmarking. However, the reference summaries of those datasets turn out to be no…

2023

Is ChatGPT a General-Purpose Natural Language Processing Task Solver?

EMNLP 2023long main

Spurred by advancements in scale, large language models (LLMs) have demonstrated the ability to perform a variety of natural language processing (NLP) tasks zero-shot---i.e., without adaptation on downstream data. Recently, the debut of ChatGPT has drawn a great deal of attention from the natural la…

Cited by 0SourceScholar
2022

Back to the Future: Bidirectional Information Decoupling Network for Multi-turn Dialogue Modeling

EMNLP 2022main

Multi-turn dialogue modeling as a challenging branch of natural language understanding (NLU), aims to build representations for machines to understand human dialogues, which provides a solid foundation for multiple downstream tasks. Recent studies of dialogue modeling commonly employ pre-trained lan…

2022

Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model

ACL 2022findings

Recently, the problem of robustness of pre-trained language models (PrLMs) has received increasing research interest. Latest studies on adversarial attacks achieve high attack success rates against PrLMs, claiming that PrLMs are not robust. However, we find that the adversarial samples that PrLMs fa…

2022

Instance Regularization for Discriminative Language Model Pre-training

EMNLP 2022main

Discriminative pre-trained language models (PrLMs) can be generalized as denoising auto-encoders that work with two procedures, ennoising and denoising. First, an ennoising process corrupts texts with arbitrary noising functions to construct training instances. Then, a denoising language model is tr…

2022

Modeling Hierarchical Reasoning Chains by Linking Discourse Units and Key Phrases for Reading Comprehension

COLING 2022main

Machine reading comprehension (MRC) poses new challenges to logical reasoning, which aims to understand the implicit logical relations entailed in the given contexts and perform inference over them. Due to the complexity of logic, logical connections exist at different granularity levels. However, m…

2022

Retrieval Augmentation for Commonsense Reasoning: A Unified Approach

EMNLP 2022main

A common thread of retrieval-augmented methods in the existing literature focuses on retrieving encyclopedic knowledge, such as Wikipedia, which facilitates well-defined entity and relation spaces that can be modeled. However, applying such methods to commonsense reasoning tasks faces two unique cha…

2022

Sentence-aware Contrastive Learning for Open-Domain Passage Retrieval

ACL 2022long

Training dense passage representations via contrastive learning has been shown effective for Open-Domain Passage Retrieval (ODPR). Existing studies focus on further optimizing by improving negative sampling strategy or extra pretraining. However, these studies keep unknown in capturing passage with…

2022

Task Compass: Scaling Multi-task Pre-training with Task Prefix

EMNLP 2022finding

Leveraging task-aware annotated data as supervised signals to assist with self-supervised learning on large-scale unlabeled data has become a new trend in pre-training language models. Existing studies show that multi-task learning with large-scale supervised tasks suffers from negative effects acro…

2021

Filling the Gap of Utterance-aware and Speaker-aware Representation for Multi-turn Dialogue

AAAI 2021technical

A multi-turn dialogue is composed of multiple utterances from two or more different speaker roles. Thus utterance- and speaker-aware clues are supposed to be well captured in models. However, in the existing retrieval-based multi-turn dialogue modeling, the pre-trained language models (PrLMs) as enc…

2021

Smoothing Dialogue States for Open Conversational Machine Reading

EMNLP 2021main

Conversational machine reading (CMR) requires machines to communicate with humans through multi-turn interactions between two salient dialogue states of decision making and question generation processes. In open CMR settings, as the more realistic scenario, the retrieved background knowledge would b…

2020

Data-dependent Gaussian Prior Objective for Language Generation

ICLR 2020talk

For typical sequence prediction problems such as language generation, maximum likelihood estimation (MLE) has commonly been adopted as it encourages the predicted sequence most consistent with the ground-truth sequence to have the highest probability of occurring. However, MLE focuses on once-to-all…

Cited by 69SourceScholar
2020

Neural Machine Translation with Universal Visual Representation

ICLR 2020spotlight

Though visual information has been introduced for enhancing neural machine translation (NMT), its effectiveness strongly relies on the availability of large amounts of bilingual parallel sentence pairs with manual image annotations. In this paper, we present a universal visual representation learned…

Cited by 141SourcecodeScholar