12 papers
From Approval to Abuse: Privilege Escalation Attacks on Harness-Protected Coding Agents
Xianglin Yang, Yechao Zhang, Jiahao Liu +4
Coding agents use execution harnesses to constrain the consequences of prompt injection by enforcing permission boundaries. These systems deterministically intercept any out-of-san…
Preserving Provenance in Shared KV Caches for LLM Serving
Wei Song, Yuxin Cao, Xi Zheng +2
Production LLM serving stacks combine an inference engine's local prefix cache with a shared KV-cache tier for fleet-wide reuse. The local cache distinguishes requests by adapter,…
Rule-Constrained Assignment for Cue-Ball Identification in Broadcast Snooker
Yuxin Cao, Wei Song, Yuezhong Wu +1
Accurate cue-ball identification is essential for metric analysis of broadcast snooker. Existing systems evaluate each candidate independently against a fixed white prototype and r…
Runtime Safety Filtering for Two-Terminal Hazards in Robotic Battery Recycling
Yuxin Cao, Wei Song, Xianglin Yang +4
Runtime safety filters for learned manipulation policies typically define unsafe states as unions of object-wise keep-out regions. This representation can be unnecessarily restrict…
SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding
Wei Song, Yuxin Cao, Zhenchang Xing +4
Invisible image watermarks are increasingly used for deepfake detection and provenance tracking, where they must survive not only incidental distortions but also deliberate removal…
Caved or Convinced: Temporal Sampling Gates Claim Deference in Video Large Language Models
Yuxin Cao, Wei Song, Jingling Xue +1
When asked which of two events came first, video large language models can fail in two opposite ways: cave to a false claim, or reject a true one. Prior video sycophancy work measu…
DUAP: Dual-task Universal Adversarial Perturbations Against Voice Control Systems
Suyang Sun, Weifei Jin, Yuxin Cao +2
Modern Voice Control Systems (VCS) rely on the collaboration of Automatic Speech Recognition (ASR) and Speaker Recognition (SR) for secure interaction. However, prior adversarial a…
ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models
Weifei Jin, Yuxin Cao, Junjie Su +5
Recent advances in Audio-Language Models (ALMs) have significantly improved multimodal understanding capabilities. However, the introduction of the audio modality also brings new a…
Poisoning Prompt-Guided Sampling in Video Large Language Models
Yuxin Cao, Wei Song, Jingling Xue +1
Video Large Language Models (VideoLLMs) are increasingly deployed as automated moderators on user-generated video platforms, where a few unwatched seconds of harmful footage are en…
Towards Powerful and Practical Patch Attacks for 2D Object Detection in Autonomous Driving
Yuxin Cao, Yedi Zhang, Wentao He +5
Learning-based autonomous driving systems remain critically vulnerable to adversarial patches, posing serious safety and security risks in their real-world deployment. Black-box at…
Towards Stealthy and Effective Backdoor Attacks on Lane Detection: A Naturalistic Data Poisoning Approach
Yifan Liao, Yuxin Cao, Yedi Zhang +5
Deep learning-based lane detection (LD) plays a critical role in autonomous driving and advanced driver assistance systems. However, its vulnerability to backdoor attacks presents…
Failures to Surface Harmful Contents in Video Large Language Models
Yuxin Cao, Wei Song, Derui Wang +2
Video Large Language Models (VideoLLMs) are increasingly deployed on numerous critical applications, where users rely on auto-generated summaries while casually skimming the video…