Xiaogeng Liu

41 papers A* 11Journal 25Unranked 5
YearRankTypeTitle / Venue / Authors
2026 J jnl
Mind Your HEARTBEAT! Claw Background Execution Inherently Enables Silent Memory Pollution.
CoRR
Yechao Zhang, Shiqian Zhao, Jie Zhang, Gelei Deng, Jiawen Zhang, Xiaogeng Liu, Chaowei Xiao, Tianwei Zhang
2026 J jnl
ROM: Real-time Overthinking Mitigation via Streaming Detection and Intervention.
CoRR
Xinyan Wang, Xiaogeng Liu, Chaowei Xiao
2026 J jnl
ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models.
CoRR
Xiaogeng Liu, Xinyan Wang, Yechao Zhang, Sanjay Kariyappa, Chong Xiang, Muhao Chen, G. Edward Suh, Chaowei Xiao
2025 — conf
AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection.
ACL (1)
Weidi Luo, Shenghong Dai, Xiaogeng Liu, Suman Banerjee, Huan Sun, Muhao Chen, Chaowei Xiao
2025 J jnl
AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection.
CoRR
Weidi Luo, Shenghong Dai, Xiaogeng Liu, Suman Banerjee, Huan Sun, Muhao Chen, Chaowei Xiao
2025 J jnl
AutoDAN-Reasoning: Enhancing Strategies Exploration based Jailbreak Attacks with Test-Time Scaling.
CoRR
Xiaogeng Liu, Chaowei Xiao
2025 A* conf
AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs.
ICLR
Xiaogeng Liu, Peiran Li, G. Edward Suh, Yevgeniy Vorobeychik, Zhuoqing Mao, Somesh Jha, Patrick McDaniel, Huan Sun, Bo Li, Chaowei Xiao
2025 — conf
CVE-Bench: Benchmarking LLM-based Software Engineering Agent's Ability to Repair Real-World CVE Vulnerabilities.
NAACL (Long Papers)
Peiran Wang, Xiaogeng Liu, Chaowei Xiao
2025 A* conf
Can Watermarks be Used to Detect LLM IP Infringement For Free?
ICLR
Zhengyue Zhao, Xiaogeng Liu, Somesh Jha, Patrick McDaniel, Bo Li, Chaowei Xiao
2025 J jnl
Code Agent can be an End-to-end System Hacker: Benchmarking Real-world Threats of Computer-use Agent.
CoRR
Weidi Luo, Qiming Zhang, Tianyu Lu, Xiaogeng Liu, Bin Hu, Hung-Chun Chiu, Siyuan Ma, Yizhe Zhang, Xusheng Xiao, Yinzhi Cao, Zhen Xiang, Chaowei Xiao
2025 J jnl
DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents.
CoRR
Hao Li, Xiaogeng Liu, Hung-Chun Chiu, Dianqi Li, Ning Zhang, Chaowei Xiao
2025 J jnl
Doxing via the Lens: Revealing Privacy Leakage in Image Geolocation for Agentic Multi-Modal Large Reasoning Model.
CoRR
Weidi Luo, Qiming Zhang, Tianyu Lu, Xiaogeng Liu, Yue Zhao, Zhen Xiang, Chaowei Xiao
2025 A* conf
MetaAgent: Automatically Constructing Multi-Agent Systems Based on Finite State Machines.
ICML
Yaolun Zhang, Xiaogeng Liu, Chaowei Xiao
2025 J jnl
MetaAgent: Automatically Constructing Multi-Agent Systems Based on Finite State Machines.
CoRR
Yaolun Zhang, Xiaogeng Liu, Chaowei Xiao
2025 A* conf
MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding.
ICLR
Fei Wang, Xingyu Fu, James Y. Huang, Zekun Li, Qin Liu, Xiaogeng Liu, Mingyu Derek Ma, Nan Xu, Wenxuan Zhou, Kai Zhang, Tianyi Lorena Yan, Wenjie Jacky Mo, Hsiang-Hui Liu, Pan Lu, Chunyuan Li, Chaowei Xiao, Kai-Wei Chang, Dan Roth, Sheng Zhang, Hoifung Poon, Muhao Chen
2025 J jnl
OET: Optimization-based prompt injection Evaluation Toolkit.
CoRR
Jinsheng Pan, Xiaogeng Liu, Chaowei Xiao
2025 — conf
PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free.
ACL (1)
Hao Li, Xiaogeng Liu, Ning Zhang, Chaowei Xiao
2025 — conf
RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process.
NAACL (Findings)
Peiran Wang, Xiaogeng Liu, Chaowei Xiao
2024 — conf
AdaShield : Safeguarding Multimodal Large Language Models from Structure-Based Attack via Adaptive Shield Prompting.
ECCV (20)
Yu Wang, Xiaogeng Liu, Yu Li, Muhao Chen, Chaowei Xiao
2024 J jnl
AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting.
CoRR
Yu Wang, Xiaogeng Liu, Yu Li, Muhao Chen, Chaowei Xiao
2024 J jnl
AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs.
CoRR
Xiaogeng Liu, Peiran Li, G. Edward Suh, Yevgeniy Vorobeychik, Zhuoqing Mao, Somesh Jha, Patrick McDaniel, Huan Sun, Bo Li, Chaowei Xiao
2024 A* conf
AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models.
ICLR
Xiaogeng Liu, Nan Xu, Muhao Chen, Chaowei Xiao
2024 J jnl
Automatic and Universal Prompt Injection Attacks against Large Language Models.
CoRR
Xiaogeng Liu, Zhiyuan Yu, Yizhe Zhang, Ning Zhang, Chaowei Xiao
2024 A* conf
Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models.
USENIX Security Symposium
Zhiyuan Yu, Xiaogeng Liu, Shunning Liang, Zach Cameron, Chaowei Xiao, Ning Zhang
2024 J jnl
Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models.
CoRR
Zhiyuan Yu, Xiaogeng Liu, Shunning Liang, Zach Cameron, Chaowei Xiao, Ning Zhang
2024 J jnl
InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models.
CoRR
Hao Li, Xiaogeng Liu, Chaowei Xiao
2024 J jnl
JailBreakV-28K: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks.
CoRR
Weidi Luo, Siyuan Ma, Xiaogeng Liu, Xiaoyu Guo, Chaowei Xiao
2024 J jnl
MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding.
CoRR
Fei Wang, Xingyu Fu, James Y. Huang, Zekun Li, Qin Liu, Xiaogeng Liu, Mingyu Derek Ma, Nan Xu, Wenxuan Zhou, Kai Zhang, Tianyi Lorena Yan, Wenjie Mo, Hsiang-Hui Liu, Pan Lu, Chunyuan Li, Chaowei Xiao, Kai-Wei Chang, Dan Roth, Sheng Zhang, Hoifung Poon, Muhao Chen
2024 J jnl
RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process.
CoRR
Peiran Wang, Xiaogeng Liu, Chaowei Xiao
2024 J jnl
Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Characte.
CoRR
Siyuan Ma, Weidi Luo, Yu Wang, Xiaogeng Liu, Muhao Chen, Bo Li, Chaowei Xiao
2024 A* conf
Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability.
SP
Yechao Zhang, Shengshan Hu, Leo Yu Zhang, Junyu Shi, Minghui Li, Xiaogeng Liu, Wei Wan, Hai Jin
2023 J jnl
AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models.
CoRR
Xiaogeng Liu, Nan Xu, Muhao Chen, Chaowei Xiao
2023 J jnl
DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions.
CoRR
Fangzhou Wu, Xiaogeng Liu, Chaowei Xiao
2023 A* conf
Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency.
CVPR
Xiaogeng Liu, Minghui Li, Haoyu Wang, Shengshan Hu, Dengpan Ye, Hai Jin, Libing Wu, Chaowei Xiao
2023 J jnl
Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency.
CoRR
Xiaogeng Liu, Minghui Li, Haoyu Wang, Shengshan Hu, Dengpan Ye, Hai Jin, Libing Wu, Chaowei Xiao
2023 A* conf
PointCRT: Detecting Backdoor in 3D Point Cloud via Corruption Robustness.
ACM Multimedia
Shengshan Hu, Wei Liu, Minghui Li, Yechao Zhang, Xiaogeng Liu, Xianlong Wang, Leo Yu Zhang, Junhui Hou
2023 J jnl
Why Does Little Robustness Help? Understanding Adversarial Transferability From Surrogate Training.
CoRR
Yechao Zhang, Shengshan Hu, Leo Yu Zhang, Junyu Shi, Minghui Li, Xiaogeng Liu, Wei Wan, Hai Jin
2022 A* conf
Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer.
CVPR
Shengshan Hu, Xiaogeng Liu, Yechao Zhang, Minghui Li, Leo Yu Zhang, Hai Jin, Libing Wu
2022 J jnl
Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer.
CoRR
Shengshan Hu, Xiaogeng Liu, Yechao Zhang, Minghui Li, Leo Yu Zhang, Hai Jin, Libing Wu
2022 J jnl
Towards Efficient Data-Centric Robust Machine Learning with Noise-based Augmentation.
CoRR
Xiaogeng Liu, Haoyu Wang, Yechao Zhang, Fangzhou Wu, Shengshan Hu
2021 A* conf
AdvHash: Set-to-set Targeted Attack on Deep Hashing with One Single Adversarial Patch.
ACM Multimedia
Shengshan Hu, Yechao Zhang, Xiaogeng Liu, Leo Yu Zhang, Minghui Li, Hai Jin