1 citations · 1 across the 11 of their papers we have counts for
11 papers
Inferring Hidden User Models from the Behavior of Personalized LLM Agents
Haoyang Li, Yaxin Xiao, Qingqing Ye +2
Recent personalized LLM agents increasingly transform information retained in memory into compressed or structured representations, which we call user models, to guide later decisi…
Machine Unlearning in Low-Dimensional Feature Subspace
Kun Fang, Qinghua Tao, Junxu Liu +5
Machine Unlearning (MU) aims at removing the influence of specific data from a pretrained model while preserving performance on the remaining data. In this work, a novel perspectiv…
FIT to Forget: Robust Continual Unlearning for Large Language Models
Xiaoyu Xu, Minxin Du, Kun Fang +5
While large language models (LLMs) exhibit remarkable capabilities, they increasingly face demands to unlearn memorized privacy-sensitive, copyrighted, or harmful content. Existing…
When Backdoors Meet Partial Observability: Attacking Real-World Reinforcement Learning
Tairan Huang, Qingqing Ye, Yulin Jin +4
Backdoor attacks can cause reinforcement learning (RL) policies to behave normally under clean inputs while executing malicious behaviors when triggers are present. Existing RL bac…
Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks
Yaxin Xiao, Qingqing Ye, Zi Liang +4
Machine learning models constitute valuable intellectual property, yet remain vulnerable to model extraction attacks (MEA), where adversaries replicate their functionality through…
Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy
Yaxin Xiao, Qingqing Ye, Li Hu +5
Machine unlearning enables the removal of specific data from ML models to uphold the right to be forgotten. While approximate unlearning algorithms offer efficient alternatives to…
Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks?
Zi Liang, Haibo Hu, Qingqing Ye +2
Low rank adaptation (LoRA) has emerged as a prominent technique for fine-tuning large language models (LLMs) thanks to its superb efficiency gains over previous methods. While exte…
Dual Utilization of Perturbation for Stream Data Publication under Local Differential Privacy
Rong Du, Qingqing Ye, Yaxin Xiao +3
Stream data from real-time distributed systems such as IoT, tele-health, and crowdsourcing has become an important data source. However, the collection and analysis of user-generat…
A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks
Haoyang Li, Li Bai, Qingqing Ye +4
Model Inversion (MI) attacks, which reconstruct the training dataset of neural networks, pose significant privacy concerns in machine learning. Recent MI attacks have managed to re…
"Yes, My LoRD." Guiding Language Model Extraction with Locality Reinforced Distillation
Zi Liang, Qingqing Ye, Yanyun Wang +5
Model extraction attacks (MEAs) on large language models (LLMs) have received increasing attention in recent research. However, existing attack methods typically adapt the extracti…
Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models
Zi Liang, Haibo Hu, Qingqing Ye +2
The drastic increase of large language models' (LLMs) parameters has led to a new research direction of fine-tuning-free downstream customization by prompts, i.e., task description…