arXiv Science⌕ Search

arXiv subjects

Yan Liu

Publications and source records attributed to Yan Liu.

At least 91 records · Page 5Linked to original sources

"Someone Hid It": Query-Agnostic Black-Box Attacks on LLM-Based Retrieval

Large language models (LLMs) have been serving as effective backbones for retrieval systems, including Retrieval-Augmentation-Generation (RAG), Dense Information Retriever (IR), and Agent Memory Retrieval. Recent studies have demonstrated that such LLM-based Retrieval (LLMR) is vulnerable to adversarial attacks, which manipulates documents by token-level injections and enables adversaries to either boost or diminish these documents in retrieval tasks. However, existing attack studies mainly (1) presume a known query is given to the attacker, and (2) highly rely on access to the victim model's parameters or interactions, which are hardly accessible in real-world scenarios, leading to limited validity. To further explore the secure risks of LLMR, we propose a practical black-box attack method that generates transferable injection tokens based on zero-shot surrogate LLMs without need of victim queries or victim models knowledge. The effectiveness of our attack raises such a robustness issue that similar effects may arise from benign or unintended document edits in the real world. To achieve our attack, we first establish a theoretical framework of LLMR and empirically verify it. Under the framework, we simulate the transferable attack as a min-max problem, and propose an adversarial learning mechanism that finds optimal adversarial tokens with learnable query samples. Our attack is validated to be effective on benchmark datasets across popular LLM retrievers.

cs.CR↗

PG-LRF: Physiology-Guided Latent Rectified Flow for Electro-Hemodynamic PPG-to-ECG Generation

Electrocardiography (ECG) is the clinical standard for cardiac assessment but requires dedicated hardware that does not scale to daily-life monitoring. Photoplethysmography (PPG) is ubiquitous in wearables but lacks ECG-specific diagnostic morphology and is corrupted by motion and sensor noise. PPG-to-ECG generation aims to bridge this gap by recovering electrical morphology and timing from peripheral pulse signals. However, existing methods largely rely on statistical alignment and data-driven generation. They fail to explicitly structure the latent space around physiology-aware electro-hemodynamic factors and lack constraints from forward physiological dynamics. To address these challenges, we propose PG-LRF, a physiology-guided latent rectified flow framework. PG-LRF introduces an electro-hemodynamic simulator that co-models ECG and PPG through shared cardiac phase dynamics. Guided by this simulator, a Physiology-Aware AutoEncoder learns a structured electro-hemodynamic latent space. Then we integrate this simulator guidance into a PPG-conditioned latent rectified flow, enforcing ECG-side morphology consistency and ECG-to-PPG forward hemodynamic consistency during generative transport. Experiments on the large-scale MC-MED dataset demonstrate that PG-LRF significantly improves PPG-to-ECG generation and downstream cardiovascular disease classification, proving its ability to generate ECGs that are both signal-faithful and physiologically plausible under the ECG-to-PPG hemodynamic pathway

eess.SP↗

A ferroelectric junction transistor memory made from switchable van der Waals p-n heterojunctions

Van der Waals (vdW) p-n heterojunctions are important building blocks for advanced electronics and optoelectronics, in which high-quality heterojunctions essentially determine device performances or functionalities. Creating tunable depletion regions with substantially suppressed leakage currents presents huge challenges, but is crucial for heterojunction applications. Here, by using band-aligned p-type SnSe and n-type ferroelectric α-In2Se3 as a model, we report near-ideal multifunctional vdW p-n heterojunctions with small reverse leakage currents (0.1 pA) and a desired diode ideality factor (1.95). We realize ferroelectric-tuned band alignment with a giant barrier modulation of 900 meV. Based on such tunable heterojunctions, we propose and demonstrate a fundamental different memory device termed ferroelectric junction field-effect transistor memory, which shows large memory windows (1.8 V), ultrafast speed (100 ns), high operation temperature (393 K), and low cycle-to-cycle variation (2%). Additionally, the reliable synaptic characteristics of these memory devices promise low-power neuromorphic computing. Our work provides a new device platform with switchable memory heterojunctions, applicable to high performance brain-inspired electronics and optoelectronics.

cond-mat.mtrl-sci↗

Extending Precipitation Nowcasting Horizons via Spectral Fusion of Radar Observations and Foundation Model Priors

Precipitation nowcasting is critical for disaster mitigation and aviation safety. However, radar-only models frequently suffer from a lack of large-scale atmospheric context, leading to performance degradation at longer lead times. While integrating meteorological variables predicted by weather foundation models offers a potential remedy, existing architectures fail to reconcile the profound representational heterogeneities between radar imagery and meteorological data. To bridge this gap, we propose PW-FouCast, a novel frequency-domain fusion framework that leverages Pangu-Weather forecasts as spectral priors within a Fourier-based backbone. Our architecture introduces three key innovations: (i) Pangu-Weather-guided Frequency Modulation to align spectral magnitudes and phases with meteorological priors; (ii) Frequency Memory to correct phase discrepancies and preserve temporal evolution; and (iii) Inverted Frequency Attention to reconstruct high-frequency details typically lost in spectral filtering. Extensive experiments on the SEVIR and MeteoNet benchmarks demonstrate that PW-FouCast achieves state-of-the-art performance, effectively extending the reliable forecast horizon while maintaining structural fidelity. Our code is available at https://github.com/Onemissed/PW-FouCast.

cs.LG↗

Analytical studies on 3D hairy rotating black hole interiors

We present an analytical study of the interior structure of hairy rotating black holes in three-dimensional Einstein gravity, minimally coupled to a complex scalar field with a super-exponential potential. The interior dynamics of these black holes are characterized by an infinite sequence of Kasner epochs, separated by inversion and transitions, each of which admits an analytical description. We derive an explicit analytical expression for this infinite sequence of epochs. At late interior times, the geometry evolves into a curvature singularity, despite the local resemblance of each Kasner epoch to a regular Milne universe on a circle. These results reveal an interior structure richer and more complex than that of its 4D static black hole counterparts.

hep-th↗

Beyond Compliance: A Resistance-Informed Motivation Reasoning Framework for Challenging Psychological Client Simulation

Psychological client simulators have emerged as a scalable solution for training and evaluating counselor trainees and psychological LLMs. Yet existing simulators exhibit unrealistic over-compliance, leaving counselors underprepared for the challenging behaviors common in real-world practice. To bridge this gap, we present ResistClient, which systematically models challenging client behaviors grounded in Client Resistance Theory by integrating external behaviors with underlying motivational mechanisms. To this end, we propose Resistance-Informed Motivation Reasoning (RIMR), a two-stage training framework. First, RIMR mitigates compliance bias via supervised fine-tuning on RPC, a large-scale resistance-oriented psychological conversation dataset covering diverse client profiles. Second, beyond surface-level response imitation, RIMR models psychologically coherent motivation reasoning before response generation, jointly optimizing motivation authenticity and response consistency via process-supervised reinforcement learning. Extensive automatic and expert evaluations show that ResistClient substantially outperforms existing simulators in challenge fidelity, behavioral plausibility, and reasoning coherence. Moreover, ResistClient facilities evaluation of psychological LLMs under challenging conditions, offering new optimization directions for mental health dialogue systems.

cs.AI↗

TS-Reasoner: Domain-Oriented Time Series Inference Agents for Reasoning and Automated Analysis

Time series analysis is crucial in real-world applications, yet traditional methods focus on isolated tasks only, and recent studies on time series reasoning remain limited to either single-step inference or are constrained to natural language answers. In this work, we introduce TS-Reasoner, a domain-specialized agent designed for multi-step time series inference. By integrating large language model (LLM) reasoning with domain-specific computational tools and an error feedback loop, TS-Reasoner enables domain-informed, constraint-aware analytical workflows that combine symbolic reasoning with precise numerical analysis. We assess the system's capabilities along two axes: (1) fundamental time series understanding assessed by TimeSeriesExam and (2) complex, multi-step inference evaluated by a newly proposed dataset designed to test both compositional reasoning and computational precision in time series analysis. Experiments show that our approach outperforms standalone general-purpose LLMs in both basic time series concept understanding as well as the multi-step time series inference task, highlighting the promise of domain-specialized agents for automating real-world time series reasoning and analysis.

cs.LG↗

Cardinality is Not Enough: Super Host Detection via Segmented Cardinality Estimation

Accurately detecting super host that establishes connections to a large number of distinct peers is significant for mitigating web attacks and ensuring high quality of web service. Existing sketch-based approaches estimate the number of distinct connections called flow cardinality according to full IP addresses, while ignoring the fact that a malicious or victim super host often communicates with hosts within the same subnet, resulting in high false positive rates and low accuracy. Though hierarchical-structure based approaches could capture flow cardinality in subnet, they inherently suffer from high memory usage. To address these limitations, we propose SegSketch, a segmented cardinality estimation approach that employs a lightweight halved-segment hashing strategy to infer common prefix lengths of IP addresses, and estimates cardinality within subnet to enhance detection accuracy under constrained memory size. Experiments driven by real-world traces demonstrate that, SegSketch improves F1-Score by up to 8.04x compared to state-of-the-art solutions, particularly under small memory budgets.

cs.NI↗

Chain of Event-Centric Causal Thought for Physically Plausible Video Generation

Physically Plausible Video Generation (PPVG) has emerged as a promising avenue for modeling real-world physical phenomena. PPVG requires an understanding of commonsense knowledge, which remains a challenge for video diffusion models. Current approaches leverage commonsense reasoning capability of large language models to embed physical concepts into prompts. However, generation models often render physical phenomena as a single moment defined by prompts, due to the lack of conditioning mechanisms for modeling causal progression. In this paper, we view PPVG as generating a sequence of causally connected and dynamically evolving events. To realize this paradigm, we design two key modules: (1) Physics-driven Event Chain Reasoning. This module decomposes the physical phenomena described in prompts into multiple elementary event units, leveraging chain-of-thought reasoning. To mitigate causal ambiguity, we embed physical formulas as constraints to impose deterministic causal dependencies during reasoning. (2) Transition-aware Cross-modal Prompting (TCP). To maintain continuity between events, this module transforms causal event units into temporally aligned vision-language prompts. It summarizes discrete event descriptions to obtain causally consistent narratives, while progressively synthesizing visual keyframes of individual events by interactive editing. Comprehensive experiments on PhyGenBench and VideoPhy benchmarks demonstrate that our framework achieves superior performance in generating physically plausible videos across diverse physical domains. Code is available at https://github.com/ZixuanWang0525/CoECT.

cs.CV↗

Comparing evaluation of quantitative imaging methods using reference standards vs. regression-without-truth-based technique

Clinical translation of quantitative imaging (QI) methods requires objective evaluation of these methods on reliably measuring the underlying true quantitative values. Ideally, such evaluation would be performed using ground truth or gold standards. However, in clinical practice, ground truth is generally unavailable, and obtaining gold standards for large patient cohorts is often impractical or infeasible. In these scenarios, evaluation using well-accepted or commonly used methods for measuring the quantitative values that may have bias and/or measurement error, referred to as reference standards, is a common alternative. However, the error in reference standards might lead to inaccurate results in evaluating the QI methods. To address the challenge of evaluation without a gold standard, a class of regression-without-truth (RWT)-based techniques has also been proposed. These techniques compare QI methods without requiring ground truth and have demonstrated promise across multiple applications. This raises an important question: how does evaluation using reference standards vs. RWT-based techniques compare? Our work, which investigates this question using controlled numerical experiments, showed that when the measurement error of the reference standard exceeded a certain level, evaluation with a RWT-based technique outperformed evaluation with reference standards. This study provides insights for selecting appropriate evaluation strategies when gold standards are unavailable and motivates further investigation in clinically realistic settings.

physics.med-ph↗

Extending Regression Without Truth to Integrate Ground-Truth Measurements for Evaluating Quantitative Imaging Methods with Patient Data

Objective evaluation of quantitative imaging (QI) methods with patient data is often hindered by the lack of gold standards. To address this challenge, a class of regression-without-truth (RWT) techniques have been developed. These techniques assume that the true and measured values are linearly related and estimate the linear-relationship parameters without access to true values. However, reliable estimation of these parameters typically requires many patient samples, which can be expensive and time consuming to obtain, and even impossible in settings such as studies with rare diseases or with new clinical imaging procedures. Thus, there is an important need for strategies to perform evaluation of quantitative imaging methods with a small number of patient samples. In this context, we note that datasets with known ground truth, such as physical phantom studies, could be available. In this manuscript, we propose an approach that integrates information from both patient data without ground truth and known-ground-truth datasets to perform objective evaluation of QI methods. We validated the proposed approach using numerical studies, which showed that the proposed approach yielded improved performance in ranking QI methods compared with RWT technique. The results demonstrate the potential of the proposed approach for evaluating QI methods when patient data are limited and motivate further validation with clinically realistic simulation studies and clinical data.

physics.med-ph↗

PiLoT: Neural Pixel-to-3D Registration for UAV-based Ego and Target Geo-localization

We present PiLoT, a unified framework that tackles UAV-based ego and target geo-localization. Conventional approaches rely on decoupled pipelines that fuse GNSS and Visual-Inertial Odometry (VIO) for ego-pose estimation, and active sensors like laser rangefinders for target localization. However, these methods are susceptible to failure in GNSS-denied environments and incur substantial hardware costs and complexity. PiLoT breaks this paradigm by directly registering live video stream against a geo-referenced 3D map. To achieve robust, accurate, and real-time performance, we introduce three key contributions: 1) a Dual-Thread Engine that decouples map rendering from core localization thread, ensuring both low latency while maintaining drift-free accuracy; 2) a large-scale synthetic dataset with precise geometric annotations (camera pose, depth maps). This dataset enables the training of a lightweight network that generalizes in a zero-shot manner from simulation to real data; and 3) a Joint Neural-Guided Stochastic-Gradient Optimizer (JNGO) that achieves robust convergence even under aggressive motion. Evaluations on a comprehensive set of public and newly collected benchmarks show that PiLoT outperforms state-of-the-art methods while running over 25 FPS on NVIDIA Jetson Orin platform. Our code and dataset is available at: https://github.com/Choyaa/PiLoT.

cs.CV↗

Large time asymptotic behavior for the weakly damped Jordan-Moore-Gibson-Thompson equation

This manuscript considers the Jordan-Moore-Gibson-Thompson (JMGT) equation and its linearized equation with an additional weak damping term (proposed by [B. Kaltenbacher, \emph{Inverse Problems} (2025)] firstly) in the whole space $\mathbb{R}^n$. We mainly study the unique existence and large time behavior, including optimal decay estimates and asymptotic profiles, of global in-time Sobolev solutions for any $n\geqslant 1$. This weak damping term leads to diffusion profiles in the sub-critical case $δ>0$ and regularity-loss decay properties in the critical case $δ=0$, which are greatly different from the results for the corresponding classical models without the weak damping term.

math.AP↗

WeakTr: Exploring Plain Vision Transformer for Weakly-supervised Semantic Segmentation

Transformer has been very successful in various computer vision tasks and understanding the working mechanism of transformer is important. As touchstones, weakly-supervised semantic segmentation (WSSS) and class activation map (CAM) are useful tasks for analyzing vision transformers (ViT). Based on the plain ViT pre-trained with ImageNet classification, we find that multi-layer, multi-head self-attention maps can provide rich and diverse information for weakly-supervised semantic segmentation and CAM generation, e.g., different attention heads of ViT focus on different image areas and object categories. Thus we propose a novel method to end-to-end estimate the importance of attention heads, where the self-attention maps are adaptively fused for high-quality CAM results that tend to have more complete objects. Besides, we propose a ViT-based gradient clipping decoder for online retraining with the CAM results efficiently and effectively. Furthermore, the gradient clipping decoder can make good use of the knowledge in large-scale pre-trained ViT and has a scalable ability. The proposed plain Transformer-based Weakly-supervised learning method (WeakTr) obtains the superior WSSS performance on standard benchmarks, i.e., 78.5% mIoU on the val set of PASCAL VOC 2012 and 51.1% mIoU on the val set of COCO 2014. Source code and checkpoints are available at https://github.com/hustvl/WeakTr.

cs.CV↗

Beyond Static Pattern Matching? Rethinking Automatic Cryptographic API Misuse Detection in the Era of LLMs

While the automated detection of cryptographic API misuses has progressed significantly, its precision diminishes for intricate targets due to the reliance on manually defined patterns. Large Language Models (LLMs) offer a promising context-aware understanding to address this shortcoming, yet the stochastic nature and the hallucination issue pose challenges to their applications in precise security analysis. This paper presents the first systematic study to explore LLMs' application in cryptographic API misuse detection. Our findings are noteworthy: The instability of directly applying LLMs results in over half of the initial reports being false positives. Despite this, the reliability of LLM-based detection could be significantly enhanced by aligning detection scopes with realistic scenarios and employing a novel code and analysis validation technique, achieving a nearly 90% detection recall. This improvement substantially surpasses traditional methods and leads to the discovery of previously unknown vulnerabilities in established benchmarks. Nevertheless, we identify recurring failure patterns that illustrate current LLMs' blind spots. Leveraging these findings, we deploy an LLM-based detection system and uncover 63 new vulnerabilities (47 confirmed, 7 already fixed) in open-source Java and Python repositories, including prominent projects like Apache.

cs.CR↗

Proactive Knowledge Inquiry in Doctor-Patient Dialogue: Stateful Extraction, Belief Updating, and Path-Aware Action Planning

Most automated electronic medical record (EMR) pipelines remain output-oriented: they transcribe, extract, and summarize after the consultation, but they do not explicitly model what is already known, what is still missing, which uncertainty matters most, or what question or recommendation should come next. We formulate doctor-patient dialogue as a proactive knowledge-inquiry problem under partial observability. The proposed framework combines stateful extraction, sequential belief updating, gap-aware state modeling, hybrid retrieval over objectified medical knowledge, and a POMDP-lite action planner. Instead of treating the EMR as the only target artifact, the framework treats documentation as the structured projection of an ongoing inquiry loop. To make the formulation concrete, we report a controlled pilot evaluation on ten standardized multi-turn dialogues together with a 300-query retrieval benchmark aggregated across dialogues. On this pilot protocol, the full framework reaches 83.3% coverage, 80.0% risk recall, 81.4% structural completeness, and lower redundancy than the chunk-only and template-heavy interactive baselines. These pilot results do not establish clinical generalization; rather, they suggest that proactive inquiry may be methodologically interesting under tightly controlled conditions and can be viewed as a conceptually appealing formulation worth further investigation for dialogue-based EMR generation. This work should be read as a pilot concept demonstration under a controlled simulated setting rather than as evidence of clinical deployment readiness. No implication of clinical deployment readiness, clinical safety, or real-world clinical utility should be inferred from this pilot protocol.

cs.AI↗

A Proactive EMR Assistant for Doctor-Patient Dialogue: Streaming ASR, Belief Stabilization, and Preliminary Controlled Evaluation

Most dialogue-based electronic medical record (EMR) systems still behave as passive pipelines: transcribe speech, extract information, and generate the final note after the consultation. That design improves documentation efficiency, but it is insufficient for proactive consultation support because it does not explicitly address streaming speech noise, missing punctuation, unstable diagnostic belief, objectification quality, or measurable next-action gains. We present an end-to-end proactive EMR assistant built around streaming speech recognition, punctuation restoration, stateful extraction, belief stabilization, objectified retrieval, action planning, and replayable report generation. The system is evaluated in a preliminary controlled setting using ten streamed doctor-patient dialogues and a 300-query retrieval benchmark aggregated across dialogues. The full system reaches state-event F1 of 0.84, retrieval Recall@5 of 0.87, and end-to-end pilot scores of 83.3% coverage, 81.4% structural completeness, and 80.0% risk recall. Ablations further suggest that punctuation restoration and belief stabilization may improve downstream extraction, retrieval, and action selection within this pilot. These results were obtained under a controlled simulated pilot setting rather than broad deployment claims, and they should not be read as evidence of clinical deployment readiness, clinical safety, or real-world clinical utility. Instead, they suggest that the proposed online architecture may be technically coherent and directionally supportive under tightly controlled pilot conditions. The present study should be read as a pilot concept demonstration under tightly controlled pilot conditions rather than as evidence of clinical deployment readiness or clinical generalizability.

cs.CL↗

Diving into booklet wormholes

ArXiv:2508.17898 proposed the booklet wormhole as the holographic dual of the GHZ state. This paper extends the investigation into this geometry, particularly focusing on the junction conditions for matter fields. We show that the symmetry of the GHZ state requires the bulk to admit special Killing vector fields that standard manifolds cannot realize. Moreover, these bulk symmetries require unprecedented quantum non-local junction conditions at the multi-way interface: Observers entering from different horizons will perceive different states inside the wormhole, where the junction conditions appear as constraints on the observables of different sets of observers. We finally discuss how to render booklet wormholes traversable via boundary deformations. A localized wave packet injected from one page generally evolves into a non-local mixed state on each remaining page, with the information encoded in the entanglement between different pages.

hep-th↗