2 citations · 2 across the 6 of their papers we have counts for
9 papers
CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection
Qichen Zhao, Shengfang Zhai, Qingni Shen +2
Agents extend their capabilities through reusable skills that package instructions, executable code, and resources. Composing these skills enables complex task workflows, but their…
zkLLMPoT: Efficient Zero Knowledge Proof of Training for Large Language Models
Junkai Liang, Zhanpeng Guo, Pengfei Wu +5
Auditing the claimed outcomes of large language model (LLM) training is challenging when model weights and training data are private, while cryptographically proving the full train…
JITterFlip: Uncovering Fault Attack Surfaces in JIT-Compiled LLM Serving
Tairui Wang, Zhi Zhang, Yansong Gao +3
LLMs are widely deployed through cloud-hosted inference services, where Just-in-Time (JIT) compilation is used to reduce recurring framework and GPU-launch overhead. JIT serving in…
Purify Once, Edit Freely: Breaking Image Protections under Model Mismatch
Qichen Zhao, Shengfang Zhai, Xinjian Bai +4
Diffusion models enable high-fidelity image editing but can also be misused for unauthorized style imitation and harmful content generation. To mitigate these risks, proactive imag…
Life-Cycle Routing Vulnerabilities of LLM Router
Qiqi Lin, Xiaoyang Ji, Shengfang Zhai +4
Large language models (LLMs) have achieved remarkable success in natural language processing, yet their performance and computational costs vary significantly. LLM routers play a c…
Efficient Input-level Backdoor Defense on Text-to-Image Synthesis via Neuron Activation Variation
Shengfang Zhai, Jiajun Li, Yue Liu +7
In recent years, text-to-image (T2I) diffusion models have gained significant attention for their ability to generate high quality images reflecting text prompts. However, their gr…
Towards Evaluating the Robustness of Automatic Speech Recognition Systems via Audio Style Transfer
Weifei Jin, Yuxin Cao, Junjie Su +5
In light of the widespread application of Automatic Speech Recognition (ASR) systems, their security concerns have received much more attention than ever before, primarily due to t…
Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancy
Shengfang Zhai, Huanran Chen, Yinpeng Dong +5
Text-to-image diffusion models have achieved tremendous success in the field of controllable image generation, while also coming along with issues of privacy leakage and data copyr…
Discovering Universal Semantic Triggers for Text-to-Image Synthesis
Shengfang Zhai, Weilong Wang, Jiajun Li +3
Recently text-to-image models have gained widespread attention in the community due to their controllable and high-quality generation ability. However, the robustness of such model…