arXiv subjects

Qian Wang

Publications and source records attributed to Qian Wang.

At least 235 records · Page 13Linked to original sources

arXiv2025

Quantum Trojan Insertion: Controlled Activation for Covert Circuit Manipulation

Quantum computing has demonstrated superior efficiency compared to classical computing. Quantum circuits are essential for implementing functions and achieving correct computational outcomes. Quantum circuit compilers, which translate high-level quantum operations into hardware-specific gates while optimizing performance, serve as the interface between the quantum software stack and physical quantum machines. However, untrusted compilers can introduce malicious hardware Trojans into quantum circuits, altering their functionality and leading to incorrect results. In the world of classical computing, effective hardware Trojans are a critical threat to integrated circuits. This process often involves stealthily inserting conditional logic gates that activate under specific input conditions. In this paper, we propose a novel advanced quantum Trojan that is controllable, allowing it to be activated or deactivated under different circumstances. These Trojans remain dormant until triggered by predefined input conditions, making detection challenging. Through a series of benchmark experiments, we demonstrate the feasibility of this method by evaluating the effectiveness of embedding controlled trojans in quantum circuits and measuring their impact on circuit performance and security.

quant-ph↗

arXiv2025

JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation

Despite the implementation of safety alignment strategies, large language models (LLMs) remain vulnerable to jailbreak attacks, which undermine these safety guardrails and pose significant security threats. Some defenses have been proposed to detect or mitigate jailbreaks, but they are unable to withstand the test of time due to an insufficient understanding of jailbreak mechanisms. In this work, we investigate the mechanisms behind jailbreaks based on the Linear Representation Hypothesis (LRH), which states that neural networks encode high-level concepts as subspaces in their hidden representations. We define the toxic semantics in harmful and jailbreak prompts as toxic concepts and describe the semantics in jailbreak prompts that manipulate LLMs to comply with unsafe requests as jailbreak concepts. Through concept extraction and analysis, we reveal that LLMs can recognize the toxic concepts in both harmful and jailbreak prompts. However, unlike harmful prompts, jailbreak prompts activate the jailbreak concepts and alter the LLM output from rejection to compliance. Building on our analysis, we propose a comprehensive jailbreak defense framework, JBShield, consisting of two key components: jailbreak detection JBShield-D and mitigation JBShield-M. JBShield-D identifies jailbreak prompts by determining whether the input activates both toxic and jailbreak concepts. When a jailbreak prompt is detected, JBShield-M adjusts the hidden representations of the target LLM by enhancing the toxic concept and weakening the jailbreak concept, ensuring LLMs produce safe content. Extensive experiments demonstrate the superior performance of JBShield, achieving an average detection accuracy of 0.95 and reducing the average attack success rate of various jailbreak attacks to 2% from 61% across distinct LLMs.

cs.CR↗

arXiv2025

The Cabibbo-favored hadronic weak decays of the $Ξ_c$ in the quark model

The Cabibbo-favored hadronic weak decay of the $Ξ_c^+\to Ξ^0π^+$, $Ξ_c^0\to Ξ^-π^+$, $Ξ_c^0\to Ξ^0π^0$, $Ξ_c^0\to Ξ^0η^{(')}$ and $Ξ_c^0\to Ξ^+K^-$ are studied in the non-relativistic constituent quark model. By analyzing their decay mechanisms at the quark level we show that the pole terms are essential for understanding the transition dynamics in addition to the usually considered direct meson emission process and color suppressed process in the charmed baryon hadronic weak decays. The experimentally measurable asymmetry parameters are also predicted in order to further pin down the decay mechanism.

hep-ph↗

arXiv2025

Deep Learning Library Testing: Definition, Methods and Challenges

In recent years, software systems powered by deep learning (DL) techniques have significantly facilitated people's lives in many aspects. As the backbone of these DL systems, various DL libraries undertake the underlying optimization and computation. However, like traditional software, DL libraries are not immune to bugs, which can pose serious threats to users' personal property and safety. Studying the characteristics of DL libraries, their associated bugs, and the corresponding testing methods is crucial for enhancing the security of DL systems and advancing the widespread application of DL technology. This paper provides an overview of the testing research related to various DL libraries, discusses the strengths and weaknesses of existing methods, and provides guidance and reference for the application of the DL library. This paper first introduces the workflow of DL underlying libraries and the characteristics of three kinds of DL libraries involved, namely DL framework, DL compiler, and DL hardware library. It then provides definitions for DL underlying library bugs and testing. Additionally, this paper summarizes the existing testing methods and tools tailored to these DL libraries separately and analyzes their effectiveness and limitations. It also discusses the existing challenges of DL library testing and outlines potential directions for future research.

cs.SE↗

arXiv2025

Binding of the three-hadron $DD^{*}K$ system from the lattice effective field theory

We employ the nuclear lattice effective field theory (NLEFT), an efficient tool for nuclear ab initio calculations, to solve the asymmetric multihadron systems. We take the $DD^*K$ three-body system as an illustration to demonstrate the capability of the method. Here the two-body chiral interactions between $D$, $D^*$, and $K$ are regulated with a soft lattice regulator and calibrated with the binding energies of the $T_{cc}^+$, $D^{*}_{s0}(2317)$, and $D_{s1}(2460)$ molecular states. We then calculate the three-body binding energy using the NLEFT and analyze the systematic uncertainties due to the finite volume effects, the sliding cutoff, and the leading-order three-body forces. Even when the three-body interaction is repulsive (even as large as the infinite repulsive interaction), the three-body system has a bound state unambiguously with binding energy no larger than the $D_{s1}(2460)D$ threshold. To check the renormalization group invariance of our framework, we extract the first excited state. We find that when the ground state is fixed, the first excited states with various cutoffs coincide with each other when the cubic size goes larger. In addition, the standard angular momentum and parity projection technique is implemented for the quantum numbers of the ground and excited states. We find that both of them are $S$-wave states with quantum number $J^{P}=1^-$. Because the three-body state contains two charm quarks, it is easier to be detected in the Large Hadron Collider.

hep-ph↗

arXiv2025

A Survey on Facial Image Privacy Preservation in Cloud-Based Services

Facial recognition models are increasingly employed by commercial enterprises, government agencies, and cloud service providers for identity verification, consumer services, and surveillance. These models are often trained using vast amounts of facial data processed and stored in cloud-based platforms, raising significant privacy concerns. Users' facial images may be exploited without their consent, leading to potential data breaches and misuse. This survey presents a comprehensive review of current methods aimed at preserving facial image privacy in cloud-based services. We categorize these methods into two primary approaches: image obfuscation-based protection and adversarial perturbation-based protection. We provide an in-depth analysis of both categories, offering qualitative and quantitative comparisons of their effectiveness. Additionally, we highlight unresolved challenges and propose future research directions to improve privacy preservation in cloud computing environments.

cs.CV↗

arXiv2025

ARMOR: Shielding Unlearnable Examples against Data Augmentation

Private data, when published online, may be collected by unauthorized parties to train deep neural networks (DNNs). To protect privacy, defensive noises can be added to original samples to degrade their learnability by DNNs. Recently, unlearnable examples are proposed to minimize the training loss such that the model learns almost nothing. However, raw data are often pre-processed before being used for training, which may restore the private information of protected data. In this paper, we reveal the data privacy violation induced by data augmentation, a commonly used data pre-processing technique to improve model generalization capability, which is the first of its kind as far as we are concerned. We demonstrate that data augmentation can significantly raise the accuracy of the model trained on unlearnable examples from 21.3% to 66.1%. To address this issue, we propose a defense framework, dubbed ARMOR, to protect data privacy from potential breaches of data augmentation. To overcome the difficulty of having no access to the model training process, we design a non-local module-assisted surrogate model that better captures the effect of data augmentation. In addition, we design a surrogate augmentation selection strategy that maximizes distribution alignment between augmented and non-augmented samples, to choose the optimal augmentation strategy for each class. We also use a dynamic step size adjustment algorithm to enhance the defensive noise generation process. Extensive experiments are conducted on 4 datasets and 5 data augmentation methods to verify the performance of ARMOR. Comparisons with 6 state-of-the-art defense methods have demonstrated that ARMOR can preserve the unlearnability of protected private data under data augmentation. ARMOR reduces the test accuracy of the model trained on augmented protected samples by as much as 60% more than baselines.

cs.LG↗

arXiv2025

DCIM-AVSR : Efficient Audio-Visual Speech Recognition via Dual Conformer Interaction Module

Speech recognition is the technology that enables machines to interpret and process human speech, converting spoken language into text or commands. This technology is essential for applications such as virtual assistants, transcription services, and communication tools. The Audio-Visual Speech Recognition (AVSR) model enhances traditional speech recognition, particularly in noisy environments, by incorporating visual modalities like lip movements and facial expressions. While traditional AVSR models trained on large-scale datasets with numerous parameters can achieve remarkable accuracy, often surpassing human performance, they also come with high training costs and deployment challenges. To address these issues, we introduce an efficient AVSR model that reduces the number of parameters through the integration of a Dual Conformer Interaction Module (DCIM). In addition, we propose a pre-training method that further optimizes model performance by selectively updating parameters, leading to significant improvements in efficiency. Unlike conventional models that require the system to independently learn the hierarchical relationship between audio and visual modalities, our approach incorporates this distinction directly into the model architecture. This design enhances both efficiency and performance, resulting in a more practical and effective solution for AVSR tasks.

eess.AS↗

arXiv2025

E-LoQ: Enhanced Locking for Quantum Circuit IP Protection

In recent years, quantum computing has started to demonstrate superior efficiency to classical computing. In quantum computing, quantum circuits that implement specific quantum algorithms are usually not directly executable on quantum computer hardware. Quantum circuit compilers decompose high-level quantum gates into the hardware's native gates and optimize the circuits for accuracy and performance. However, untrusted quantum compilers risk stealing original quantum designs (quantum circuits), leading to the theft of sensitive intellectual property (IP). In classical computing, logic locking is a family of techniques to secure integrated circuit (ICs) designs against reverse engineering and IP piracy. This technique involves inserting a keyed value into the circuit, ensuring the correct output is achieved only with the correct key. To address similar issues in quantum circuit protection, we propose an enhanced locking technique for quantum circuits (E-LoQ) where multiple key bits can be condensed into one key qubit. Compared to previous work that used one qubit for each key bit, our approach achieves higher security levels. We have demonstrated the practicality of our method through experiments on a set of benchmark quantum circuits. The effectiveness of E-LoQ was measured by assessing the divergence distance from the original circuit. Our results demonstrate that E-LoQ effectively conceals the function of the original quantum circuit, with an average fidelity degradation of less than 1%.

quant-ph↗

arXiv2025

On global dynamics of $3$-D irrotational compressible fluids

We consider global-in-time evolution of irrotational, isentropic, compressible Euler flow in $3$-D, for a broad class of $H^4$ classical Cauchy data without assuming symmetry, prescribed on an annulus surrounded by a constant state in the exterior. By giving a sufficient expansion condition on the initial data and using the nonlinear structure of the compressible Euler equations, we show that the decay rate of the first order transversal derivative of the normalized density is better than that of the same derivative of a free wave, provided that the perturbation arising from the tangential derivatives can be properly controlled for all $t$ by using a bootstrap argument. Building on this critical analysis, we construct global exterior solutions in $H^4$ for the broad class of data, with a rather general subclass forming rarefaction at null infinity. Our result does not require smallness on the transversal derivatives of classical data, thus applies to data with a total energy of any size.

math.AP↗

arXiv2025

Role of long-range interaction in critical quantum metrology

Long-range interacting quantum systems are useful for improving the performance of various applications of quantum technologies. In this work, we carry out a detailed analysis of how the long-range interaction affects the measurement precision in critical quantum metrology. By employing the paradigmatic model of a Kiteav chain with power-law decaying interaction, we focus on the impacts of long-range interaction on the critical sensing for the scenarios with and without uncertainty in system parameters.We show that the long-range interaction can be used as a valuable resource for enhancing the sensitivity of critical parameter estimation in both scenarios. Our findings not only provide more insights into the features of the long-range interacting systems, but also verify the usefulness of long-range interacting systems in quantum metrology.

quant-ph↗

arXiv2024

Electrical Manipulation of Spin Splitting Torque in Altermagnetic RuO2

Due to nonrelativistic altermagnetic spin splitting effect (ASSE), altermagnets can generate time-reversal-odd spin current and spin splitting torque (SST) with spin polarization parallel to the Néel vector. Hence the effective manipulation of SST would provide plenty of opportunities for designable spintronic devices, which remains elusive. Here, the electrical control of SST is achieved in altermagnetic RuO2, based on controllable Néel vector of RuO2 and Néel vector-dependent generation of SST. We demonstrate the current-induced switching of Néel vector via spin-orbit torque in RuO2 films, according to the reversible polarity of electrical transport measurements and X-ray magnetic linear dichroism (XMLD). The XMLD also unprecedentedly demonstrates that Néel vector really exists in altermagnets. The switching of Néel vector to the current direction and resultantly enhanced spin polarization parallel to the Néel vector brings about stronger ASSE-induced spin current. Our findings not only enrich the properties of altermagnets but also pave the way for high speed memories and nano-oscillators with excellent controllability and efficiency.

cond-mat.mtrl-sci↗

arXiv2024

Revealing the mystery of the double charm tetraquark in $pp$ collision

A novel approach is proposed to probe the nature of the double charm tetraquark through the prompt production asymmetry between $T_{\bar{c}\bar{c}}^-$ and $T_{cc}^+$ in $pp$ collisions. When comparing two theoretical pictures, i.e. the compact tetraquark and hadronic molecular pictures, we find that the former one exhibits a significantly larger production asymmetry, enabling the unambiguous determination of the tetraquark's internal structure. Additionally, distinctive differences in the transverse momentum and rapidity distributions of $T_{\bar{c}\bar{c}}^-$ and $T_{cc}^+$ cross sections emerge, particularly at $p_\mathrm{T}\approx 2~\mathrm{GeV}$ and $y\approx \pm 6$ at a center-of-mass energy of 14$~\mathrm{TeV}$. The insignificant asymmetry in hadronic molecular picture is because that hadronic molecules are produced in hadronic phase, where the phase space of their constituents needs to be taken into account rigorously. Our work can be extended to the exploration of other double heavy tetraquark candidates, offering a versatile approach to advance our understanding of exotic hadrons.

hep-ph↗

arXiv2024

Solid-SQL: Enhanced Schema-linking based In-context Learning for Robust Text-to-SQL

Recently, large language models (LLMs) have significantly improved the performance of text-to-SQL systems. Nevertheless, many state-of-the-art (SOTA) approaches have overlooked the critical aspect of system robustness. Our experiments reveal that while LLM-driven methods excel on standard datasets, their accuracy is notably compromised when faced with adversarial perturbations. To address this challenge, we propose a robust text-to-SQL solution, called Solid-SQL, designed to integrate with various LLMs. We focus on the pre-processing stage, training a robust schema-linking model enhanced by LLM-based data augmentation. Additionally, we design a two-round, structural similarity-based example retrieval strategy for in-context learning. Our method achieves SOTA SQL execution accuracy levels of 82.1% and 58.9% on the general Spider and Bird benchmarks, respectively. Furthermore, experimental results show that Solid-SQL delivers an average improvement of 11.6% compared to baselines on the perturbed Spider-Syn, Spider-Realistic, and Dr. Spider benchmarks.

cs.CL↗

arXiv2024

Automatic Left Ventricular Cavity Segmentation via Deep Spatial Sequential Network in 4D Computed Tomography Studies

Automated segmentation of left ventricular cavity (LVC) in temporal cardiac image sequences (multiple time points) is a fundamental requirement for quantitative analysis of its structural and functional changes. Deep learning based methods for the segmentation of LVC are the state of the art; however, these methods are generally formulated to work on single time points, and fails to exploit the complementary information from the temporal image sequences that can aid in segmentation accuracy and consistency among the images across the time points. Furthermore, these segmentation methods perform poorly in segmenting the end-systole (ES) phase images, where the left ventricle deforms to the smallest irregular shape, and the boundary between the blood chamber and myocardium becomes inconspicuous. To overcome these limitations, we propose a new method to automatically segment temporal cardiac images where we introduce a spatial sequential (SS) network to learn the deformation and motion characteristics of the LVC in an unsupervised manner; these characteristics were then integrated with sequential context information derived from bi-directional learning (BL) where both chronological and reverse-chronological directions of the image sequence were used. Our experimental results on a cardiac computed tomography (CT) dataset demonstrated that our spatial-sequential network with bi-directional learning (SS-BL) method outperformed existing methods for LVC segmentation. Our method was also applied to MRI cardiac dataset and the results demonstrated the generalizability of our method.

eess.IV↗

arXiv2024

The production and decay of $X_0(2900)$ state with different interpretation

The observation of $X_0(2900)$ in $B^+\rightarrow D^+D^-K^+$ decay process indicates the existence of open flavor tetraquark states. We study the production and decay of $X_0(2900)$ state with final state interaction mechanism, where we calculate the strong vertices such as $g_{\bar{D}KX_0}$, $g_{\bar{D}^\ast K^\ast X_0}$, $g_{D_s^{\ast}\bar{D}K}$ and $g_{D_{s1}\bar{D} K^\ast}$ in the framework of QCD sum rules method. We find that for the interpretation of the $\bar{D}^\ast K^\ast$ molecule of $X_0(2900)$, the branching fraction of the production process and the decay width are consistent with the experimental results, indicating that the observed $X_0(2900)$ could be interpreted as the $\bar{D}^\ast K^\ast$ molecule. However, we cannot exclude the possibility of a compact tetraquark interpretation within the uncertainty. Further experimental and theoretical efforts should be made to fully understand the nature of the $X_0(2900)$ state.

hep-ph↗

arXiv2024

OmniDrag: Enabling Motion Control for Omnidirectional Image-to-Video Generation

As virtual reality gains popularity, the demand for controllable creation of immersive and dynamic omnidirectional videos (ODVs) is increasing. While previous text-to-ODV generation methods achieve impressive results, they struggle with content inaccuracies and inconsistencies due to reliance solely on textual inputs. Although recent motion control techniques provide fine-grained control for video generation, directly applying these methods to ODVs often results in spatial distortion and unsatisfactory performance, especially with complex spherical motions. To tackle these challenges, we propose OmniDrag, the first approach enabling both scene- and object-level motion control for accurate, high-quality omnidirectional image-to-video generation. Building on pretrained video diffusion models, we introduce an omnidirectional control module, which is jointly fine-tuned with temporal attention layers to effectively handle complex spherical motion. In addition, we develop a novel spherical motion estimator that accurately extracts motion-control signals and allows users to perform drag-style ODV generation by simply drawing handle and target points. We also present a new dataset, named Move360, addressing the scarcity of ODV data with large scene and object motions. Experiments demonstrate the significant superiority of OmniDrag in achieving holistic scene-level and fine-grained object-level control for ODV generation. The project page is available at https://lwq20020127.github.io/OmniDrag.

cs.CV↗

arXiv2024

An Effective and Resilient Backdoor Attack Framework against Deep Neural Networks and Vision Transformers

Recent studies have revealed the vulnerability of Deep Neural Network (DNN) models to backdoor attacks. However, existing backdoor attacks arbitrarily set the trigger mask or use a randomly selected trigger, which restricts the effectiveness and robustness of the generated backdoor triggers. In this paper, we propose a novel attention-based mask generation methodology that searches for the optimal trigger shape and location. We also introduce a Quality-of-Experience (QoE) term into the loss function and carefully adjust the transparency value of the trigger in order to make the backdoored samples to be more natural. To further improve the prediction accuracy of the victim model, we propose an alternating retraining algorithm in the backdoor injection process. The victim model is retrained with mixed poisoned datasets in even iterations and with only benign samples in odd iterations. Besides, we launch the backdoor attack under a co-optimized attack framework that alternately optimizes the backdoor trigger and backdoored model to further improve the attack performance. Apart from DNN models, we also extend our proposed attack method against vision transformers. We evaluate our proposed method with extensive experiments on VGG-Flower, CIFAR-10, GTSRB, CIFAR-100, and ImageNette datasets. It is shown that we can increase the attack success rate by as much as 82\% over baselines when the poison ratio is low and achieve a high QoE of the backdoored samples. Our proposed backdoor attack framework also showcases robustness against state-of-the-art backdoor defenses.

cs.CV↗