works on

From the 1 of 38 linked papers with an AI index.

activity
20242026
most citedWhen Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?

1 citations · 1 across the 4 of their papers we have counts for

collaborators

38 papers

cs.CR2026

BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes

Laiqiao Qin, Tianqing Zhu, Longxiang Gao +1

Prompt injection is a critical security threat in large language model (LLM) applications, where attackers hijack model behavior by embedding malicious instructions in user or exte…

cs.CR20261 cited

When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?

Shang Wang, Tianqing Zhu, Dayong Ye +1

The paper proposes a lightweight method to make large language models forget specific information by altering the external knowledge base of Retrieval‑Augmented Generation systems,…

cs.LG2026

One Framework for All: Cross-Modal Membership Inference for Generative Models

Dayong Ye, Tainqing Zhu, Kun Gao +6

Large generative models across text-to-text, text-to-image, and image-to-text modalities have been shown to pose significant privacy risks. One fundamental threat is membership inf…

cs.LG2026

Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget

Dayong Ye, Tianqing Zhu, Ruiding Huang +5

Machine unlearning has been extensively studied in response to growing privacy concerns and regulatory requirements. However, auditing whether unlearning algorithms have truly eras…

cs.MA2026

From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent Collaboration

Yizhe Xie, Congcong Zhu, Xinyue Zhang +5

Large Language Model-based Multi-Agent Systems (LLM-MAS) are increasingly applied to complex collaborative scenarios. However, their collaborative mechanisms may cause minor inaccu…

cs.CR2026

When LLMs Team Up: A Coordinated Attack Framework for Automated Cyber Intrusions

Minfeng Qi, Tianqing Zhu, Zijie Xu +3

Automated intrusion-style workflows require LLM agents to reason over partial observations, tool outputs, and executable artifacts under bounded budgets. A single LLM instance ofte…