activity
20242026
most citedBadRobot: Jailbreaking Embodied LLM Agents in the Physical World

1 citations · 2 across the 2 of their papers we have counts for

collaborators

9 papers

cs.CY20261 cited

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World

Hangtao Zhang, Chenyu Zhu, Xianlong Wang +9

Embodied AI represents systems where AI is integrated into physical entities. Large Language Model (LLM), which exhibits powerful language understanding abilities, has been extensi…

cs.CR20261 cited

Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation

Di Mi, Yanjun Zhang, Leo Yu Zhang +4

Model extraction attacks (MEAs) enable an attacker to replicate the functionality of a victim deep neural network (DNN) model by only querying its API service remotely, posing a se…

cs.LG2025

Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability

Yechao Zhang, Shengshan Hu, Leo Yu Zhang +5

Adversarial examples (AEs) for DNNs have been shown to be transferable: AEs that successfully fool white-box surrogate models can also deceive other black-box models with different…

cs.CL2025

Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks

Xiaomei Zhang, Zhaoxi Zhang, Yanjun Zhang +4

Textual adversarial examples pose serious threats to the reliability of natural language processing systems. Recent studies suggest that adversarial examples tend to deviate from t…

cs.LG2024

Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning

Hangtao Zhang, Zeming Yao, Leo Yu Zhang +4

Federated learning (FL) is vulnerable to poisoning attacks, where adversaries corrupt the global aggregation results and cause denial-of-service (DoS). Unlike recent model poisonin…

cs.CV2024

Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving

Hangtao Zhang, Shengshan Hu, Yichen Wang +5

Object detection tasks, crucial in safety-critical systems like autonomous driving, focus on pinpointing object locations. These detectors are known to be susceptible to backdoor a…