arXiv Science⌕ Search

arXiv subjects

Ting Yu

Publications and source records attributed to Ting Yu.

At least 19 recordsLinked to original sources
arXiv2026

Distributed and Private Textual Data Synthesis from Embeddings

We revisit differentially private (DP) text synthesis in the realistic setting of distributed users, where privacy concerns preclude a trusted curator with access to raw user texts. Existing DP text synthesis pipelines are designed for a trusted, centralized curator and often cannot be deployed in distributed settings due to unrealistic trust and access assumptions; when adapted naively, they require repeated, tightly synchronized user participation and incur significant overhead. To address this gap, we propose a DP--cryptography co-design for textual data synthesis that requires no trusted curator and requires only lightweight user participation. Our approach has two optimized components. First, we design a distributed-friendly DP synthesis algorithm that releases a one-time DP summary in an embedding space: it identifies frequent semantic regions and releases their DP centroids, enabling training-free, non-iterative offline text synthesis. We further introduce semantic support protection, which ensures the released summary avoids semantic neighborhoods of infrequent texts, reducing the risk of exposing rare user data. Second, we develop a custom secure protocol that implements this algorithm over distributed user data, enforcing end-to-end DP guarantees without requiring a trusted curator. On four benchmarks, we achieve utility comparable to the state-of-the-art centralized DP synthesis method.

cs.CR↗
arXiv2026

Low-ASR Backdoors: Exploiting Attack Success Rate Reduction and Attacker-Defender Asymmetry

Backdoor attacks are among the most effective and stealthy attacks in deep learning. Existing attacks and defenses are largely designed and evaluated under the assumption that successful backdoors exhibit high Attack Success Rates (ASRs). In this paper, we show that this assumption creates a fundamental weakness in existing defense paradigms. ASR is not an intrinsic property of a backdoor; rather, it is an attacker-controlled variable that can be deliberately reduced without eliminating the underlying backdoor behavior. We introduce a reverse-training framework that weakens the trigger-target association, producing low-ASR backdoor models while preserving clean-input performance. Through extensive evaluation across multiple datasets, diverse attack families, and multiple architectures, we show that state-of-the-art defenses fail consistently under low-ASR conditions, exposing a fundamental attacker-defender asymmetry.

cs.CR↗
arXiv2026

PhyCheck: Fine-Grained Evidence-Grounded Dataset for Physical Law Understanding in Video-LLMs

Embodied intelligence and world models require video understanding systems to go beyond recognizing objects and actions and develop an understanding of physical regularities. However, despite their strong performance on general video understanding tasks, current video-language models still struggle to reliably determine whether an observed event conforms to specific physical laws. Existing benchmarks primarily assess the physical quality of generated videos, providing limited support for systematically evaluating and improving the physical-law understanding of Video Large Language Models (VideoLLMs). To address this gap, we introduce PhyCheck, a video question answering dataset organized at two complementary levels of granularity. The coarse-grained subset asks models to determine whether the phenomenon shown in a video conforms to or violates physical laws, while the fine-grained subset further examines whether models can capture physical details responsible for the violation or compliance. We use these subsets as structured supervision to improve physical understanding. In addition, the dataset contains a diagnostic subset with external causal context that reveal hidden factors affecting physical plausibility, assessing whether models can recalibrate their judgments accordingly. Experiments with Fine-tune Qwen2.5-VL show that training with the proposed data substantially improves the understanding of physical-consistency, while evaluations in the diagnostic subset reveal that current models still have difficulty incorporating additional causal conditions into their decisions. These findings highlight the gap between recognizing surface-level inconsistencies and understanding underlying physical mechanisms, and provide a foundation for evaluating and improving physical understanding in Video-LLMs.

cs.CV↗
arXiv2026

Spin-canting-induced Giant Nonlinear Optical Magnetochirality in a 2D Ferrotoroid

Achieving magnetically switchable chiral light emission is an important goal for 2D opto-spintronics. However, conventional strategies face a fundamental trade-off between dynamic tunability and polarization contrast. Nonlinear optics, particularly the emerging mechanism of chiral second-harmonic generation (SHG), offers a distinct strategy to bypass this restriction, yet its experimental realization remains elusive due to stringent symmetry requirements. Here, we report giant nonlinear optical magnetochirality in a centrosymmetric 2D ferrotoroid, bilayer (2L) CrSBr. We reveal that a field-induced spin-canting state breaks the parity-time (PT) symmetry of the unperturbed antiferromagnetic (AFM) ground state, activating a spin-chirality-driven i-type susceptibility. The coherent interference between this emergent i-type and intrinsic c-type SHG susceptibilities generates a macroscopic circularly polarized SHG signal whose helicity is magnetically switchable. Leveraging this sensitive mechanism, we uncover remanent magnetic states after field saturation that evade conventional linear probes. By exploiting the non-volatility of these states, we demonstrate magneto-optical memory and logic operations. Our work establishes a general symmetry-driven strategy for tailoring nonlinear magnetochirality, while providing a sensitive optical probe for subtle spin textures in the 2D limit.

physics.optics↗
arXiv2026

The Weighted $\boldsymbol{L}^{\boldsymbol{p}}$ estimates for the fractional Hardy operator and a class of integral operators on the Heisenberg group

In the setting of a Heisenberg group, we first studied the sharp weak estimate for the $n$-dimensional fractional Hardy operator from $L^p$ to $L^{q,\infty}$. Next, we studied the sharp bounds for the $m$-linear $n$-dimensional integral operator with a kernel on weighted Lebesgue spaces. As an application, the sharp bounds for Hardy, Hardy-Littlewood-P\'{o}lya, and Hilbert operators on weighted Lebesgue spaces were obtained. Finally, according to the previous steps, we also found the estimate for the Hausdorff operator on weighted $L^p$ spaces.

math.FA↗
arXiv2026

Electric-field-driven magnetic switching and tightly bound interlayer excitons in bilayer CrSBr

Electric field control of magnetic order in two-dimensional (2D) van der Waals magnets is a central goal for low-power spin-based technologies. In the ambient-stable antiferromagnet CrSBr, strong magnetic anisotropy and robust exciton-spin coupling provide a favorable platform, yet deterministic electric field control of its magnetic phases has not been achieved. Here we demonstrate electric-field-driven reversible switching between antiferromagnetic and ferromagnetic states in dual-gated bilayer CrSBr without intentional carrier doping. In parallel, photoluminescence measurements resolve a tightly bound interlayer exciton with an intrinsic dipole moment of only ~1 e angstrom. The electric field dependence of the magnetic phase transition reveals two coexisting mechanisms: a linear magnetoelectric effect in the antiferromagnetic state and an electric-field-modulated interlayer exchange coupling. Their interplay accounts for the asymmetric evolution of the critical magnetic field. Our results establish bilayer CrSBr as a promising 2D material for electrically controlled spin-optoelectronic functionalities.

cond-mat.mes-hall↗
arXiv2026

Image Prompt Reconstruction Attacks on Distributed MLLM Inference Frameworks

Distributed large language model (LLM) inference frameworks connect isolated consumer-grade devices for large-scale model inference, substantially reducing hardware constraints. However, recent studies show that intermediate embeddings transmitted among participants can leak private prompts. As LLMs evolve into multimodal LLMs (MLLMs), this risk extends beyond text: image prompts contain rich visual and semantic information, making their intermediate embeddings highly privacy-sensitive. Yet, image-prompt leakage in distributed MLLM inference remains largely unexplored. In this paper, we investigate privacy risks to input images caused by intermediate embeddings in distributed MLLM frameworks. We first analyze the information flow from image pixels to intermediate representations. Since image and text embeddings are often intertwined across MLLM layers, we design an image embedding extraction algorithm as a prerequisite for reconstruction attacks, achieving 100% extraction accuracy across almost all MLLM layers in our experiments. Building on this, we develop two passive black-box image reconstruction attacks, MPAA and IEDA, reflecting realistic threats from normal participants with limited knowledge and capability. MPAA performs fine-grained pixel-level reconstruction via patch-wise information extraction and assembly, while IEDA performs coarse-grained semantic reconstruction through embedding-guided diffusion generation. We evaluate our attacks on four representative MLLM families: Gemma 3, Phi 4 Multimodal, Qwen 2.5 VL, and Llama 4 Scout. Results show consistently superior reconstruction performance in various settings. We further analyze the effects of MoE architecture, image preprocessing, model size, and text-image dependency on attack performance. To our knowledge, this is the first study of image reconstruction attacks on MLLMs.

cs.CR↗
arXiv2026

Poison with Style: A Practical Poisoning Attack on Code Large Language Models

Code Large Language Models (CLLMs) serve as the core of modern code agents, enabling developers to automate complex software development tasks. In this paper, we present Poison-with-Style (PwS), a practical and stealthy model poisoning attack targeting CLLMs. Unlike prior attacks that assume an active adversary capable of directly embedding explicit triggers (e.g., specific words) into developers' prompts during inference, PwS leverages developers' code styles as covert triggers implicitly embedded within their prompts. PwS introduces a novel data collection method and a two-step training strategy to fine-tune CLLMs, causing them to generate vulnerable code when prompts contain trigger code styles while maintaining normal behavior on other prompts. Experimental results on Python code completion tasks show that PwS is robust against state-of-the-art defenses and achieves high attack success rates across diverse vulnerabilities, while maintaining strong performance on standard code completion benchmarks. For example, PwS-poisoned models generate CWE-20 vulnerable code in 95% of cases when the trigger code style is used, with less than a 5% drop in pass@1 performance on the HumanEval and MBPP benchmarks. Our implementation and dataset are here: https://github.com/khangtran2020/pws.

cs.CR↗
arXiv2026

Entanglement Dynamics of Separable Squeezed States in Finite Memory Structured Reservoir

Entanglement in continuous-variable Gaussian systems is a key resource, and common reservoirs can both suppress and generate correlations. Existing work focused on pre-entangled states or Markovian baths, leaving open whether separable squeezed inputs entangle in structured environments or under modulation. We study two bosonic modes coupled to a common reservoir, each initialized in a separable squeezed vacuum. Dynamics are analyzed utilizing Gaussian covariance methods, evolved under approximate Non-Markovian quantum state diffusion (QSD), finite-temperature pseudomode embeddings, and Bures-based non-Markovian diagnostics. We identify three mechanisms absent in Markovian dynamics: (1) A detuning condition that freezes entanglement trajectories across reservoir correlation times; (2) birth, death, and revival of entanglement from orthogonal inputs; and (3) integer-locked beating with square-wave oscillations produced by periodic detuning. All mechanisms persist at finite temperature, with deviations bounded within 5% in cryogenic regimes and 20% at moderate occupations. These deviation bounds align with cryogenic cavity, phononic, and optomechanical platforms, where structured spectral densities and detuning modulation are already accessible. Structured reservoirs are shown to emerge as tunable entanglement resources for continuous-variable quantum technologies.

quant-ph↗
arXiv2026

Learning Non-Markovian Noise via Ensemble Optimal Control

We study the estimation of parameters pertaining to non-Markovian quantum open systems, such as the dissipation rate and environmental memory time. A key challenge is identifying the optimal measurement time, which must allow sufficient time to acquire information about the environment, yet be short enough to avoid dissipation that erases the information. Using machine learning approaches, we develop an optimized control scheme trained over a representative ensemble to fix the optimal measurement time at a prescribed runtime. The protocol is robust to errors in the training process, enhances precision by exploiting non-Markovian memory effects, and achieves measurement uncertainties approaching the quantum limits set by the Cram\'{e}r-Rao bound.

quant-ph↗
arXiv2026

Polariton-mediated binding of anti-aligned dipolar excitons

Interacting bosonic quasiparticles are the cornerstone for exploring many-body physics and nonlinear quantum phenomena in correlated light-matter systems. Strongly interacting dipolar excitons in van der Waals heterostructures have attracted significant interest due to their out-of-plane electric dipole moments and high tunability via the quantum-confined Stark effect (QCSE). However, leveraging these tunable dipolar excitons in strongly coupled exciton-photon systems to explore exotic many-body physics and macroscopic quantum phenomena remains experimentally elusive. Here, we report the strong coupling of dipolar excitons in a gated bilayer MoS2 device integrated with a one-dimensional photonic crystal hosting bound-states-in-continuum (BIC). The resulting polaritons hybridize cavity photons with a coherent superposition of two electrically tunable anti-aligned dipolar excitons, effectively binding them into composite quasiparticle states. By tuning the dipolar excitons into non-degenerate states via the QCSE, we realize in situ reconfiguration of the polariton wavefunction and observe an emergent polariton branch exhibiting non-monotonic Stark shifts. Notably, these tunable polaritons allow for customized control over nonlinear interactions through distinct excitonic hybridization and dipolar configurations. This in situ tunability offers a scalable pathway toward electrically programmable quantum fluids of light and correlated polariton phases in on-chip photonic integrated circuits.

physics.optics↗
arXiv2026

Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems

Large language models (LLMs) increasingly rely on retrieving information from external corpora. This creates a new attack surface: indirect prompt injection (IPI), where hidden instructions are planted in the corpora and hijack model behavior once retrieved. Previous studies have highlighted this risk but often avoid the hardest step: ensuring that malicious content is actually retrieved. In practice, unoptimized IPI is rarely retrieved under natural queries, which leaves its real-world impact unclear. We address this challenge by decomposing the malicious content into a trigger fragment that guarantees retrieval and an attack fragment that encodes arbitrary attack objectives. Based on this idea, we design an efficient and effective black-box attack algorithm that constructs a compact trigger fragment to guarantee retrieval for any attack fragment. Our attack requires only API access to embedding models, is cost-efficient (as little as $0.21 per target user query on OpenAI's embedding models), and achieves near-100% retrieval across 11 benchmarks and 8 embedding models (including both open-source models and proprietary services). Based on this attack, we present the first end-to-end IPI exploits under natural queries and realistic external corpora, spanning both RAG and agentic systems with diverse attack objectives. These results establish IPI as a practical and severe threat: when a user issued a natural query to summarize emails on frequently asked topics, a single poisoned email was sufficient to coerce GPT-4o into exfiltrating SSH keys with over 80% success in a multi-agent workflow. We further evaluate several defenses and find that they are insufficient to prevent the retrieval of malicious text, highlighting retrieval as a critical open vulnerability.

cs.CR↗
arXiv2026

Exposing Hidden Interfaces: LLM-Guided Type Inference for Reverse Engineering macOS Private Frameworks

Private macOS frameworks underpin critical services and daemons but remain undocumented and distributed only as stripped binaries, complicating security analysis. We present MOTIF, an agentic framework that integrates tool-augmented analysis with a finetuned large language model specialized for Objective-C type inference. The agent manages runtime metadata extraction, binary inspection, and constraint checking, while the model generates candidate method signatures that are validated and refined into compilable headers. On MOTIF-Bench, a benchmark built from public frameworks with groundtruth headers, MOTIF improves signature recovery from 15% to 86% compared to baseline static analysis tooling, with consistent gains in tool-use correctness and inference stability. Case studies on private frameworks show that reconstructed headers compile, link, and facilitate downstream security research and vulnerability studies. By transforming opaque binaries into analyzable interfaces, MOTIF establishes a scalable foundation for systematic auditing of macOS internals.

cs.CR↗
arXiv2025

Optimal transfer of entanglement in oscillator chains in non-Markovian open systems

We considered the transfer of continuous-variable entangled states in coupled oscillator chains embedded in a generic environment. We demonstrate high-fidelity transfer via optimal control in two configurations - a linear chain and an X-shaped chain. More specifically, we use the Krotov optimization algorithm to design control fields that achieve the desired state transfer. Under the environmental memory effects, the Krotov algorithm needs to be modified, since the dissipative terms in non-Markovian dynamics are generally governed by the time-dependent system Hamiltonian. Remarkably, we can achieve high-fidelity transfer by simply tuning the frequencies of the oscillators while keeping the coupling strength constant, even in the presence of open-system effects. For the system under consideration, we find that quantum memory effects can aid in the transfer of entanglement and show improvement over the memoryless case. In addition, it is possible to target a range of entangled states, making it unnecessary to know the parameters of the initial state beforehand.

quant-ph↗
arXiv2025

A study of 80 known pulsars at 185 MHz using MWA incoherent drift-scan observations

A systematic study of 80 known pulsars observed at 185 MHz has been conducted using archival incoherent-sum data from the Murchison Widefield Array (MWA). The dataset comprises 48 drift-scan observations from the MWA Voltage Capture System, covering approximately 30,000 square degrees of sky with sensitivities reaching about 8 mJy in the deepest regions. An optimized PRESTO-based search pipeline was deployed on the China SKA Regional Centre infrastructure. This enabled the detection of 80 known pulsars, representing a 60 percent increase over the previous census. Notably, this includes 30 pulsars with first-time detections at this frequency, of which pulse profiles and flux densities are presented. Spectral, scattering, and pulse-width properties were examined for the sample, providing observational constraints on low-frequency turnover, propagation effects, and width-period relations. This study highlights the value of wide-field, low-frequency time-domain surveys for constraining pulsar emission and propagation, offering empirical insights that may inform future observations with instruments such as SKA-Low.

astro-ph.HE↗
arXiv2025

The Low-Frequency Spectra of Radio Pulsars

Low-frequency spectral studies of radio pulsars represent a key method for uncovering their emission mechanisms, magnetospheric structure, and signal interactions with the surrounding interstellar medium (ISM). In recent years, more next-generation low-frequency radio telescopes (e.g., LOFAR, LWA and MWA) have enriched the observational window below 350 MHz, enabling more detailed explorations of the ISM effects, such as absorption and scattering, resulting in diverse spectral behaviors observed across different pulsars. This paper reviews the morphology of pulsar radio spectra, advances in spectral modeling, and the key physical processes governing the low-frequency emission. Looking ahead, next-generation instruments such as SKA-Low - with their unprecedented sensitivity - are expected to resolve outstanding questions in pulsar emission processes, offering insights into the extreme physical regimes governing these exotic objects.

astro-ph.GA↗
arXiv2025

10-W Sub-100-fs Ultrafast Cr:ZnS/ZnSe MOPA System enabled by doping gradient engineering

We report on a high-power mid-infrared femtosecond master oscillator power amplifier (MOPA) system, employing Cr:ZnS and Cr:ZnSe polycrystals with fine-tuned doping profiles. Based on the soft-aperture Kerr-lens mode-locking in the soliton regime, the seed oscillator generates ~40-fs pulses with a repetition rate ~173 MHz with an average power close to 400 mW. The amplification process of the seed pulse train is investigated in depth in a single-pass configuration for both Cr:ZnS and Cr:ZnSe crystal rods. For further power scaling, a dual-stage MOPA system has been implemented, generating pulse trains with an average power up to 10.4 W, limited only by the pump source, with a re-compressed pulse duration of 78 fs using a dispersion compensator comprising chirped mirrors and sapphire plates. This work paves the way for further power scaling of mid-infrared Cr:ZnS/ZnSe ultrafast laser systems without moving parts for applications in material processing, remote sensing and medicine.

physics.optics↗
arXiv2025

Efficient Multi-Slide Visual-Language Feature Fusion for Placental Disease Classification

Accurate prediction of placental diseases via whole slide images (WSIs) is critical for preventing severe maternal and fetal complications. However, WSI analysis presents significant computational challenges due to the massive data volume. Existing WSI classification methods encounter critical limitations: (1) inadequate patch selection strategies that either compromise performance or fail to sufficiently reduce computational demands, and (2) the loss of global histological context resulting from patch-level processing approaches. To address these challenges, we propose an Efficient multimodal framework for Patient-level placental disease Diagnosis, named EmmPD. Our approach introduces a two-stage patch selection module that combines parameter-free and learnable compression strategies, optimally balancing computational efficiency with critical feature preservation. Additionally, we develop a hybrid multimodal fusion module that leverages adaptive graph learning to enhance pathological feature representation and incorporates textual medical reports to enrich global contextual understanding. Extensive experiments conducted on both a self-constructed patient-level Placental dataset and two public datasets demonstrating that our method achieves state-of-the-art diagnostic performance. The code is available at https://github.com/ECNU-MultiDimLab/EmmPD.

cs.CV↗