most citedTowards Reliable Vector Database Management Systems: A Software Testing Roadmap for 2030

1 citations · 2 across the 10 of their papers we have counts for

collaborators

11 papers

cs.AI2026

From Latents to Wires: Surgical Post-Editing on Large Language Models

Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4

Given a large language model (LLM), can whoever holds the weights name a semantic target (e.g., the model's identity), locate the model components that produce it, and edit them so…

cs.CR2026

SkillSentry: Adaptive Honey Worlds for Dynamic Safety Testing of Agent Skills

Nizhang Li, Zonghao Ying, Xiangfan Wu +7

External skills extend the capabilities of large language model agents, but also introduce an execution-time attack surface: a skill that appears benign under inspection may reveal…

cs.MA2026

SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems

Haowen Dai, Zonghao Ying, Wenfeng Li +10

Multi-agent systems improve capability through task decomposition and role specialization, but these same mechanisms introduce an important safety blind spot: a harmful objective c…

cs.AI2026

Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models

Dongdong Yang, Deyue Zhang, Zhao Liu +5

Text-to-Image (T2I) generative models have achieved remarkable progress in synthesizing high-quality visual content, yet they remain vulnerable to adversarial misuse, particularly…

cs.AI2026

ElephantAgent: Contextual State Continuity in Agentic Systems

Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4

Agentic systems enhance their capabilities by invoking external tools and maintaining persistent memory. However, these external dependencies introduce novel attack surfaces. Recen…

cs.CR2026

Demystifying and Detecting Agentic Workflow Injection Vulnerabilities in GitHub Actions

Shenao Wang, Xinyi Hou, Zhao Liu +5

GitHub Actions is increasingly used to deploy LLM-based agents for repository-centric tasks such as issue triage, pull-request review, code modification, and release assistance. Th…

cs.CR2026

SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety

Zhe Liu, Zonghao Ying, Wenxin Zhang +5

Recent advances in foundation models have transformed LLMs from passive conversational systems into autonomous agents capable of reasoning and tool execution. While these capabilit…

cs.CR2026

Reasoning-Oriented Programming: Chaining Semantic Gadgets to Jailbreak Large Vision Language Models

Quanchen Zou, Moyang Chen, Zonghao Ying +6

Large Vision-Language Models (LVLMs) undergo safety alignment to suppress harmful content. However, current defenses predominantly target explicit malicious patterns in the input r…

cs.LG2026

Robust Privacy: Inference-Stage Privacy through Certified Robustness

Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4

An adversary observing a model's released prediction can infer sensitive attributes of the queried input, or even reconstruct representatives of the model's training data. The infe…

cs.SE2025★ 1 cited

Towards Reliable Vector Database Management Systems: A Software Testing Roadmap for 2030

Shenao Wang, Yanjie Zhao, Yinglin Xie +4

The rapid growth of Large Language Models (LLMs) and AI-driven applications has propelled Vector Database Management Systems (VDBMSs) into the spotlight as a critical infrastructur…

cs.CR2025★ 1 cited

Demystifying LLM Supply Chain Vulnerabilities in the Wild: Distribution, Root Cause, and Real-World Impact

Shenao Wang, Yanjie Zhao, Zhao Liu +2

LLMs are rapidly transitioning from research prototypes to core components in production systems across industries such as finance and healthcare. These deployments rely on a growi…