11 papers
Machine Unlearning for Large Language Models: Foundations, Advances, and Agentic Extensions
Xiaoyu Xu, Minxin Du, Li Bai +8
Machine unlearning aims to remove target influence while preserving other capabilities. This survey compares methods, benchmarks, and evidence across large language models and syst…
Cross-Modal Backdoors in Multimodal Large Language Models
Runhe Wang, Li Bai, Haibo Hu +1
Developers increasingly construct multimodal large language models (MLLMs) by assembling pretrained components,introducing supply-chain attack surfaces.Existing security research p…
Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models
Xinwei Zhang, Li Bai, Tianwei Zhang +5
Large vision-language models (LVLMs) have achieved impressive performance across multimodal tasks, but their reliance on visual inputs exposes them to adversarial threats. Encoder-…
United We Defend: Collaborative Membership Inference Defenses in Federated Learning
Li Bai, Junxu Liu, Sen Zhang +3
Membership inference attacks (MIAs), which determine whether a specific data point was included in the training set of a target model, have posed severe threats in federated learni…
On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression
Xinwei Zhang, Hangcheng Liu, Li Bai +4
Visual token compression is widely used to accelerate large vision-language models (LVLMs) by pruning or merging visual tokens, yet its adversarial robustness remains unexplored. W…
Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts
Li Bai, Qingqing Ye, Xinwei Zhang +4
Machine learning models are often vulnerable to inference attacks that expose sensitive information from their training data. Shadow model technique is commonly employed in such at…
MER-Inspector: Assessing model extraction risks from an attack-agnostic perspective
Xinwei Zhang, Haibo Hu, Qingqing Ye +2
Information leakage issues in machine learning-based Web applications have attracted increasing attention. While the risk of data privacy leakage has been rigorously analyzed, the…
Trustworthy Efficient Communication for Distributed Learning using LQ-SGD Algorithm
Hongyang Li, Lincen Bai, Caesar Wu +3
We propose LQ-SGD (Low-Rank Quantized Stochastic Gradient Descent), an efficient communication gradient compression algorithm designed for distributed training. LQ-SGD further deve…
A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks
Haoyang Li, Li Bai, Qingqing Ye +4
Model Inversion (MI) attacks, which reconstruct the training dataset of neural networks, pose significant privacy concerns in machine learning. Recent MI attacks have managed to re…
Membership Inference Attacks and Defenses in Federated Learning: A Survey
Li Bai, Haibo Hu, Qingqing Ye +3
Federated learning is a decentralized machine learning approach where clients train models locally and share model updates to develop a global model. This enables low-resource devi…
Adaptive Pruning with Module Robustness Sensitivity: Balancing Compression and Robustness
Lincen Bai, Hedi Tabia, Raúl Santos-Rodríguez
Neural network pruning has traditionally focused on weight-based criteria to achieve model compression, frequently overlooking the crucial balance between adversarial robustness an…