23 papers
Trigger the Straggler: Load Hijack on Mixture-of-Experts LLMs
Rui Zhang, Wenbo Jiang, Hongwei Li +4
Expert parallelism (EP) is a common strategy for serving large Mixture-of-Experts (MoE) models across multiple GPUs by distributing experts among devices. Router decisions then det…
EvoTrustRAG: Evolution-Aware Conflict Attribution and Evidence Handling for Reliable Retrieval-Augmented Generation
Xi Nie, Hongwei Li, Shenghao Wu +3
Retrieval-Augmented Generation (RAG) improves the factuality of large language models with external knowledge, yet conflicting evidence remains a fundamental challenge in dynamic a…
InkShield: Writing Style Protection Against Unauthorized Handwriting Mimicry
Jian Xiong, Wenbo Jiang, Zihan Wang +4
InkShield introduces a proactive defense that adds subtle, stroke‑confined perturbations to handwritten reference images, making it harder for handwriting generators to mimic a wri…
OnePath: Efficient and Privacy-Preserving Decision Tree Inference in the Cloud
Shuai Yuan, Hongwei Li, Xinyuan Qian +1
The vast storage capacity and computational power of cloud servers have led to the widespread outsourcing of machine learning inference services. While offering significant operati…
When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines
Xi Nie, Hongwei Li, Shenghao Wu +3
Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate downstream model outputs through malicious knowledge injection. Existing stu…
State Backdoor: Towards Stealthy Real-world Poisoning Attack on Vision-Language-Action Model in State Space
Ji Guo, Wenbo Jiang, Yansong Lin +6
Vision-Language-Action (VLA) models are widely deployed in safety-critical embodied AI applications such as robotics. However, their complex multimodal interactions also expose new…