← Search

Zongyu Wu

8 accepted papers

2026

Bradley-Terry and Multi-Objective Reward Modeling Are Complementary

ICLR 2026poster

Reward models trained on human preference data have demonstrated strong effectiveness in aligning Large Language Models (LLMs) with human intent under the framework of Reinforcement Learning from Human Feedback (RLHF). However, RLHF remains vulnerable to reward hacking, where the policy exploits imp…

Cited by 0SourceScholar
2025

AgentTTS: Large Language Model Agent for Test-time Compute-optimal Scaling Strategy in Complex Tasks

NeurIPS 2025poster

Test-time scaling (TTS) enhances the performance of large language models (LLMs) by allocating additional compute resources during inference. However, existing research primarily investigates TTS in single-stage tasks; while many real-world problems are multi-stage complex tasks, composed of a seque…

Cited by 0SourceScholar
2025

Catastrophic Failure of LLM Unlearning via Quantization

ICLR 2025poster

Large language models (LLMs) have shown remarkable proficiency in generating text, benefiting from extensive training on vast textual corpora. However, LLMs may also acquire unwanted behaviors from the diverse and sensitive nature of their training data, which can include copyrighted and private con…

2025

Divide-Verify-Refine: Can LLMs Self-align with Complex Instructions?

ACL 2025finding

Recent studies show LLMs struggle with complex instructions involving multiple constraints (e.g., length, format, sentiment). Existing research enhances open-source LLMs using closed-source guidance (e.g., GPT-4), but this heavily relies on generated data quality. An alternative is leveraging LLMs’…

Cited by 0SourcePDFScholar
2025

Robustness Inspired Graph Backdoor Defense

ICLR 2025oral

Graph Neural Networks (GNNs) have achieved promising results in tasks such as node classification and graph classification. However, recent studies reveal that GNNs are vulnerable to backdoor attacks, posing a significant threat to their real-world adoption. Despite initial efforts to defend against…

2025

Test-Time Multimodal Backdoor Detection by Contrastive Prompting

ICML 2025poster

While multimodal contrastive learning methods (e.g., CLIP) can achieve impressive zero-shot classification performance, recent research has revealed that these methods are vulnerable to backdoor attacks. To defend against backdoor attacks on CLIP, existing defense methods focus on either the pre-tra…

Cited by 0SourcePDFScholar
2024

Leveraging Catastrophic Forgetting to Develop Safe Diffusion Models against Malicious Finetuning

NeurIPS 2024spotlight

Diffusion models (DMs) have demonstrated remarkable proficiency in producing images based on textual prompts. Numerous methods have been proposed to ensure these models generate safe images. Early methods attempt to incorporate safety filters into models to mitigate the risk of generating harmful im…

Cited by 1SourcePDFScholar
2024

Universal Prompt Optimizer for Safe Text-to-Image Generation

NAACL 2024long

Text-to-Image (T2I) models have shown great performance in generating images based on textual prompts. However, these models are vulnerable to unsafe input to generate unsafe content like sexual, harassment and illegal-activity images. Existing studies based on image checker, model fine-tuning and e…