8 papers
Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents
Zihao Wang, Yiming Li, Yutong Wu +8
LLM-based web agents are increasingly deployed in real-world settings such as e-commerce, where they interact extensively with untrusted web content while executing actions that ca…
SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models
Renyang Liu, Kangjie Chen, Han Qiu +4
Image generation models (IGMs), while capable of producing impressive and creative content, often memorize a wide range of undesirable concepts from their training data, leading to…
Coward: Collision-based OOD Watermarking for Practical Proactive Federated Backdoor Detection
Wenjie Li, Siying Gu, Yiming Li +4
Backdoor detection is currently the mainstream defense against backdoor attacks in federated learning (FL), where a small number of malicious clients can upload poisoned updates to…
When Search Goes Wrong: Red-Teaming Web-Augmented Large Language Models
Haoran Ou, Kangjie Chen, Xingshuo Han +4
Large Language Models (LLMs) have been augmented with web search to overcome the limitations of the static knowledge boundary by accessing up-to-date information from the open Inte…
DECEIVE-AFC: Adversarial Claim Attacks against Search-Enabled LLM-based Fact-Checking Systems
Haoran Ou, Kangjie Chen, Gelei Deng +4
Fact-checking systems with search-enabled large language models (LLMs) have shown strong potential for verifying claims by dynamically retrieving external evidence. However, the ro…
Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models
Shiqian Zhao, Chong Wang, Yiming Li +7
Text-to-Image (T2I) models, represented by DALLE and Midjourney, have gained huge popularity for creating realistic images. The quality of these images relies on the careful…