activity
20242026
most citedWhy Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models

1 citations · 1 across the 9 of their papers we have counts for

collaborators

9 papers

cs.CR2026

Inferring Hidden User Models from the Behavior of Personalized LLM Agents

Haoyang Li, Yaxin Xiao, Qingqing Ye +2

Recent personalized LLM agents increasingly transform information retained in memory into compressed or structured representations, which we call user models, to guide later decisi…

cs.CR2026

What You See Is Not What AI Gets: DPAgent-in-the-Middle Defense Against AI-Groomed Deceptive Patterns

Zewei Shi, Ruoxi Sun, Haoyang Li +4

Privacy deceptive patterns in web interfaces manipulate users into disclosing personal data, yet existing defenses are fragmented, static, and increasingly vulnerable to manipulati…

cs.CV2026

IDDM: Identity-Decoupled Personalized Diffusion Models with a Tunable Privacy-Utility Trade-off

Linyan Dai, Xinwei Zhang, Haoyang Li +2

Personalized text-to-image diffusion models (e.g., DreamBooth, LoRA) enable users to synthesize high-fidelity avatars from a few reference photos for social expression. However, on…

cs.CR2025

Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks

Yaxin Xiao, Qingqing Ye, Zi Liang +4

Machine learning models constitute valuable intellectual property, yet remain vulnerable to model extraction attacks (MEA), where adversaries replicate their functionality through…

cs.LG2025

Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy

Yaxin Xiao, Qingqing Ye, Li Hu +5

Machine unlearning enables the removal of specific data from ML models to uphold the right to be forgotten. While approximate unlearning algorithms offer efficient alternatives to…

cs.CR2025

What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift

Jiamin Chang, Haoyang Li, Hammond Pearce +3

The growing adoption of artificial intelligence (AI) has amplified concerns about trustworthiness, including integrity, privacy, robustness, and bias. To assess and attribute these…

cs.LG2025

A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks

Haoyang Li, Li Bai, Qingqing Ye +4

Model Inversion (MI) attacks, which reconstruct the training dataset of neural networks, pose significant privacy concerns in machine learning. Recent MI attacks have managed to re…

cs.CR2024

Membership Inference Attacks and Defenses in Federated Learning: A Survey

Li Bai, Haibo Hu, Qingqing Ye +3

Federated learning is a decentralized machine learning approach where clients train models locally and share model updates to develop a global model. This enables low-resource devi…

cs.CL2024★ 1 cited

Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models

Zi Liang, Haibo Hu, Qingqing Ye +2

The drastic increase of large language models' (LLMs) parameters has led to a new research direction of fine-tuning-free downstream customization by prompts, i.e., task description…