← Search

Ziyi Yin

9 accepted papers

2026

Towards Robust Multimodal Large Language Models Against Jailbreak Attacks

CVPR 2026

While multimodal large language models (MLLMs) have achieved remarkable success in recent advancements, their susceptibility to jailbreak attacks has come to light. In such attacks, adversaries exploit carefully crafted prompts to coerce models into generating harmful or undesirable content. Existin

Cited by 0SourcecodeScholar
2025

Shadow-Activated Backdoor Attacks on Multimodal Large Language Models

ACL 2025finding

This paper delves into a novel backdoor attack scenario, aiming to uncover potential security risks associated with Multimodal Large Language Models (MLLMs) during multi-round open-ended conversations with users. In the practical use of MLLMs, users have full control over the interaction process wit…

2024

Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization

NeurIPS 2024poster

Researchers have been studying approaches to steer the behavior of Large Language Models (LLMs) and build personalized LLMs tailored for various applications. While fine-tuning seems to be a direct solution, it requires substantial computational resources and may significantly affect the utility of…

2024

Recent Advances in Predictive Modeling with Electronic Health Records

IJCAI 2024poster

The development of electronic health records (EHR) systems has enabled the collection of a vast amount of digitized patient data. However, utilizing EHR data for predictive modeling presents several challenges due to its unique characteristics. With the advancements in machine learning techniques, d…

Cited by 5SourcePDFScholar
2024

VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models

AAAI 2024technical

Visual Question Answering (VQA) is a fundamental task in computer vision and natural language process fields. Although the “pre-training & finetuning” learning paradigm significantly improves the VQA performance, the adversarial robustness of such a learning paradigm has not been explored. In this p…

2023

Hierarchical Pretraining on Multimodal Electronic Health Records

EMNLP 2023long main

Pretraining has proven to be a powerful technique in natural language processing (NLP), exhibiting remarkable success in various NLP downstream tasks. However, in the medical domain, existing pretrained models on electronic health records (EHR) fail to capture the hierarchical nature of EHR data, li…

Cited by 0SourcecodeScholar
2023

UniT: A Unified Look at Certified Robust Training against Text Adversarial Perturbation

NeurIPS 2023poster

Recent years have witnessed a surge of certified robust training pipelines against text adversarial perturbation constructed by synonym substitutions. Given a base model, existing pipelines provide prediction certificates either in the discrete word space or the continuous latent space. However, the…

Cited by 1SourcePDFScholar
2023

VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models

NeurIPS 2023poster

Vision-Language (VL) pre-trained models have shown their superiority on many multimodal tasks. However, the adversarial robustness of such models has not been fully explored. Existing approaches mainly focus on exploring the adversarial robustness under the white-box setting, which is unrealistic. I…

2021

Multimodal Transformer Networks for Pedestrian Trajectory Prediction

IJCAI 2021poster

We consider the problem of forecasting the future locations of pedestrians in an ego-centric view of a moving vehicle. Current CNNs or RNNs are flawed in capturing the high dynamics of motion between pedestrians and the ego-vehicle, and suffer from the massive parameter usages due to the inefficienc…