1 citations · 1 across the 7 of their papers we have counts for
10 papers
Not Where You Think: Protecting Location Privacy Against Reasoning-Based Geolocation
Shanghao Shi, Jian Xiao, Hao Li +5
Recent large reasoning models can infer where ordinary photos were taken using only visual information, creating a serious location privacy risk even when metadata and obvious geog…
Mirage: Targeted Jailbreaks Against Post-Generation Safety Checkers in Multimodal Diffusion Models
Shanghao Shi, Chaoyu Zhang, Heng Jin +4
Post-generation safety checkers are widely employed in diffusion-model pipelines to prevent unsafe generated content from reaching users. In this paper, we show that these safety c…
MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms
Zhen Guo, Shanghao Shi, Shamim Yazdani +2
While LLM attacks span prompt optimization, multi-turn context manipulation, retrieval poisoning, and model backdoors, white-box defenses are typically evaluated on isolated attack…
Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning
Shanghao Shi, Xiao Wang, Chaoyu Zhang +6
The integration of external tools has substantially expanded the capabilities of large language model (LLM) agents, but it also introduces new attack surfaces beyond prompt injecti…
From Efficiency to Leakage -- Privacy Backdoor in Federated Language Model Fine-Tuning
Shanghao Shi, Chaoyu Zhang, Heng Jin +6
Federated learning (FL) enables multiple parties to collaboratively fine-tune language models for domain-specific tasks without sharing raw data. Since full model fine-tuning is of…
Low Rank Adaptation for Adversarial Perturbation
Han Liu, Shanghao Shi, Yevgeniy Vorobeychik +2
Low-Rank Adaptation (LoRA), which leverages the insight that model updates typically reside in a low-dimensional space, has significantly improved the training efficiency of Large…
TraceGuard: Process-Guided Firewall against Reasoning Backdoors in Large Language Models
Zhen Guo, Shanghao Shi, Hao Li +3
Large Reasoning Models (LRMs) introduce a reasoning-level attack surface: adversaries can corrupt intermediate inferences while preserving a plausible trace and an apparently benig…
AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?
Hao Li, Ruoyao Wen, Shanghao Shi +3
AI agents that autonomously interact with external tools and environments have shown great promise across real-world applications. However, their reliance on external data exposes…
Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring
Peichun Hua, Hao Li, Shanghao Shi +2
Large Vision-Language Models (LVLMs) are vulnerable to a growing array of multimodal jailbreak attacks, necessitating defenses that are both generalizable to novel threats and effi…
DarkMind: Latent Chain-of-Thought Backdoor in Customized LLMs
Zhen Guo, Shanghao Shi, Shamim Yazdani +2
With the rapid rise of personalized AI, customized large language models (LLMs) equipped with Chain of Thought (COT) reasoning now power millions of AI agents. However, their compl…