arXiv Science⌕ Search

arXiv subjects

Yang Xu

Publications and source records attributed to Yang Xu.

At least 199 records · Page 11Linked to original sources
arXiv2025

Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring

Large language model (LLM) safety is a critical issue, with numerous studies employing red team testing to enhance model security. Among these, jailbreak methods explore potential vulnerabilities by crafting malicious prompts that induce model outputs contrary to safety alignments. Existing black-box jailbreak methods often rely on model feedback, repeatedly submitting queries with detectable malicious instructions during the attack search process. Although these approaches are effective, the attacks may be intercepted by content moderators during the search process. We propose an improved transfer attack method that guides malicious prompt construction by locally training a mirror model of the target black-box model through benign data distillation. This method offers enhanced stealth, as it does not involve submitting identifiable malicious instructions to the target model during the search phase. Our approach achieved a maximum attack success rate of 92%, or a balanced value of 80% with an average of 1.5 detectable jailbreak queries per sample against GPT-3.5 Turbo on a subset of AdvBench. These results underscore the need for more robust defense mechanisms.

cs.CL↗
arXiv2025

Programmable Electric Tweezers

The interaction mechanism between a single microscopic object like a cell, a particle, a molecule, or an atom and its interacting electromagnetic field is fundamental in single-object manipulation such as optical trap and magnetic trap. Function-on-demand, single-object manipulation relies on a high degree of freedom control of electromagnetic field at localized scales, which remains challenging. Here we propose a manipulation concept: programmable single-object manipulation, based on programming the electromagnetic field in a multi-bit electrode system. This concept is materialized on a Programmable Electric Tweezer (PET) with four individually addressed electrodes, marking a transition from function-fixed single-object manipulation to function-programmable single-object manipulation. By programming the localized electric field, our PET can provide various manipulation functions for achieving precise trapping, movement and rotation of multiscale single microscopic objects, including single proteins, nucleic acids, microparticles and bacteria. Implementing these functions, we are able not only to manipulate the object of interest on demand but also quantitatively measure the charge to mass ratio of a single microparticle via the Paul trap and the electrical properties of an individual bacterial cell by the rotation analysis. Finally, with superposed single-particle trapping and rotation, we demonstrate the spontaneous relaxation of DNA supercoiling and observe an unexpected pause phenomenon in the relaxation process, highlighting the versatility and the potential of PET in uncovering stochastic biophysical phenomena at the single-molecule level.

physics.bio-ph↗
arXiv2025

Pressure Tuning of Layer-hybridized Excitons in Trilayer WSe2

We demonstrate dynamic pressure tuning (0-6.6 GPa) of layer-hybridized excitons in AB-stacked trilayer WSe$_2$ via diamond-anvil-cell-integrated reflectance spectroscopy. Pressure-controlled interlayer coupling manifests in enhanced energy-level anti-crossings and oscillator strength redistribution, with Stark shift analysis revealing a characteristic dipole moment reduction of 11%. Notably, the hybridization strength between the intra- and interlayer excitons triples from $\sim$10 meV to above $\sim$30 meV, exhibiting a near-linear scaling of 3.5$\pm$0.2 meV/GPa. Spectral density simulations resolve four distinct components, i.e., intralayer ground/excited and interlayer ground/excited excitons, with their relative weights transitioning from one component dominant to strongly hybridized at higher pressures. Our findings highlight the potential for controlling excitonic properties and engineering novel optoelectronic devices through interlayer compression.

cond-mat.mtrl-sci↗
arXiv2025

A Review of Causal Decision Making

To make effective decisions, it is important to have a thorough understanding of the causal relationships among actions, environments, and outcomes. This review aims to surface three crucial aspects of decision-making through a causal lens: 1) the discovery of causal relationships through causal structure learning, 2) understanding the impacts of these relationships through causal effect learning, and 3) applying the knowledge gained from the first two aspects to support decision making via causal policy learning. Moreover, we identify challenges that hinder the broader utilization of causal decision-making and discuss recent advances in overcoming these challenges. Finally, we provide future research directions to address these challenges and to further enhance the implementation of causal decision-making in practice, with real-world applications illustrated based on the proposed causal decision-making. We aim to offer a comprehensive methodology and practical implementation framework by consolidating various methods in this area into a Python-based collection. URL: https://causaldm.github.io/Causal-Decision-Making.

stat.ML↗
arXiv2025

Electrothermal manipulation of current-induced phase transitions in ferrimagnetic Mn$_3$Si$_2$Te$_6$

Phase transitions driven by external stimuli are central to condensed matter physics, providing critical insights into symmetry breaking and emergent phenomena. Recently, ferrimagnetic (FiM) Mn$_3$Si$_2$Te$_6$ has attracted considerable attention for its magnetic-field-induced insulator-metal transitions (IMTs) and unconventional current-driven phase transitions, yet the role of applied currents in the magnetic phase remains poorly understood. Here, by combining local magnetization probes and time-resolved transport measurements, we uncover an electrothermal origin for the current-induced first-order-like phase transitions, characterized by abrupt voltage jumps and distinct magnetic domain evolution. Current-voltage (I-V) characteristics measured under triangular waveforms exhibit strong non-reciprocal and hysteretic behaviors, which are significantly suppressed at frequencies ~1000 Hz. Time-resolved studies using rectangular pulsed currents demonstrate that the resistance dynamics closely mirror the equilibrium resistance-temperature profile, directly implicating Joule heating as the driving mechanism. Furthermore, we reveal that the intrinsic I-V response adheres to Ohm's law, displaying linearity across various magnetic fields and temperatures. Our work advocates for a cautious approach in distinguishing between genuine current-induced nonequilibrium quantum states and thermal effects.

cond-mat.mtrl-sci↗
arXiv2025

Fundamental Computational Limits in Pursuing Invariant Causal Prediction and Invariance-Guided Regularization

Pursuing invariant prediction from heterogeneous environments opens the door to learning causality in a purely data-driven way and has several applications in causal discovery and robust transfer learning. However, existing methods such as ICP [Peters et al., 2016] and EILLS [Fan et al., 2024] that can attain sample-efficient estimation are based on exponential time algorithms. In this paper, we show that such a problem is intrinsically hard in computation: the decision problem, testing whether a non-trivial prediction-invariant solution exists across two environments, is NP-hard even for the linear causal relationship. In the world where P$\neq$NP, our results imply that the estimation error rate can be arbitrarily slow using any computationally efficient algorithm. This suggests that pursuing causality is fundamentally harder than detecting associations when no prior assumption is pre-offered. Given there is almost no hope of computational improvement under the worst case, this paper proposes a method capable of attaining both computationally and statistically efficient estimation under additional conditions. Furthermore, our estimator is a distributionally robust estimator with an ellipse-shaped uncertain set where more uncertainty is placed on spurious directions than invariant directions, resulting in a smooth interpolation between the most predictive solution and the causal solution by varying the invariance hyper-parameter. Non-asymptotic results and empirical applications support the claim.

math.ST↗
arXiv2025

Dynamic Hypergraph Representation for Bone Metastasis Cancer Analysis

Bone metastasis analysis is a significant challenge in pathology and plays a critical role in determining patient quality of life and treatment strategies. The microenvironment and specific tissue structures are essential for pathologists to predict the primary bone cancer origins and primary bone cancer subtyping. By digitizing bone tissue sections into whole slide images (WSIs) and leveraging deep learning to model slide embeddings, this analysis can be enhanced. However, tumor metastasis involves complex multivariate interactions with diverse bone tissue structures, which traditional WSI analysis methods such as multiple instance learning (MIL) fail to capture. Moreover, graph neural networks (GNNs), limited to modeling pairwise relationships, are hard to represent high-order biological associations. To address these challenges, we propose a dynamic hypergraph neural network (DyHG) that overcomes the edge construction limitations of traditional graph representations by connecting multiple nodes via hyperedges. A low-rank strategy is used to reduce the complexity of parameters in learning hypergraph structures, while a Gumbel-Softmax-based sampling strategy optimizes the patch distribution across hyperedges. An MIL aggregator is then used to derive a graph-level embedding for comprehensive WSI analysis. To evaluate the effectiveness of DyHG, we construct two large-scale datasets for primary bone cancer origins and subtyping classification based on real-world bone metastasis scenarios. Extensive experiments demonstrate that DyHG significantly outperforms state-of-the-art (SOTA) baselines, showcasing its ability to model complex biological interactions and improve the accuracy of bone metastasis analysis.

cs.CV↗
arXiv2025

Lightweight and Post-Training Structured Pruning for On-Device Large Lanaguage Models

Considering the hardware-friendly characteristics and broad applicability, structured pruning has emerged as an efficient solution to reduce the resource demands of large language models (LLMs) on resource-constrained devices. Traditional structured pruning methods often need fine-tuning to recover performance loss, which incurs high memory overhead and substantial data requirements, rendering them unsuitable for on-device applications. Additionally, post-training structured pruning techniques typically necessitate specific activation functions or architectural modifications, thereby limiting their scope of applications. Herein, we introduce COMP, a lightweight post-training structured pruning method that employs a hybrid-granularity pruning strategy. COMP initially prunes selected model layers based on their importance at a coarse granularity, followed by fine-grained neuron pruning within the dense layers of each remaining model layer. To more accurately evaluate neuron importance, COMP introduces a new matrix condition-based metric. Subsequently, COMP utilizes mask tuning to recover accuracy without the need for fine-tuning, significantly reducing memory consumption. Experimental results demonstrate that COMP improves performance by 6.13\% on the LLaMA-2-7B model with a 20\% pruning ratio compared to LLM-Pruner, while simultaneously reducing memory overhead by 80\%.

cs.LG↗
arXiv2025

High-Precision Fabric Defect Detection via Adaptive Shape Convolutions and Large Kernel Spatial Modeling

Detecting fabric defects in the textile industry remains a challenging task due to the diverse and complex nature of defect patterns. Traditional methods often suffer from slow inference speeds, limited accuracy, and inadequate recognition rates, particularly in scenarios involving intricate or subtle defects. To overcome these limitations, we introduce Fab-ASLKS, an advanced fabric defect detection framework built upon the YOLOv8s architecture. Fab-ASLKS incorporates two key modules: (1) the Adaptive Shape Convolution Module (ASCM), which leverages adaptive shape convolution within the Neck to enhance feature fusion and improve efficiency by extending the capabilities of the standard C2f structure, and (2) the Large Kernel Shift Convolution Module (LKSCM), designed to emulate large kernel effects within the Backbone, enabling superior spatial information extraction. These modules collaboratively optimize feature extraction and information integration across the network. Extensive experiments conducted on the Tianchi fabric defect detection dataset demonstrate that Fab-ASLKS achieves a 5% improvement in mAP@50 over the baseline, showcasing its capability to deliver high precision and efficiency.

cs.CV↗
arXiv2025

Improving Performance of Automatic Keyword Extraction (AKE) Methods Using PoS-Tagging and Enhanced Semantic-Awareness

Automatic keyword extraction (AKE) has gained more importance with the increasing amount of digital textual data that modern computing systems process. It has various applications in information retrieval (IR) and natural language processing (NLP), including text summarisation, topic analysis and document indexing. This paper proposes a simple but effective post-processing-based universal approach to improve the performance of any AKE methods, via an enhanced level of semantic-awareness supported by PoS-tagging. To demonstrate the performance of the proposed approach, we considered word types retrieved from a PoS-tagging step and two representative sources of semantic information - specialised terms defined in one or more context-dependent thesauri, and named entities in Wikipedia. The above three steps can be simply added to the end of any AKE methods as part of a post-processor, which simply re-evaluate all candidate keywords following some context-specific and semantic-aware criteria. For five state-of-the-art (SOTA) AKE methods, our experimental results with 17 selected datasets showed that the proposed approach improved their performances both consistently (up to 100% in terms of improved cases) and significantly (between 10.2% and 53.8%, with an average of 25.8%, in terms of F1-score and across all five methods), especially when all the three enhancement steps are used. Our results have profound implications considering the ease to apply our proposed approach to any AKE methods and to further extend it.

cs.CL↗
arXiv2025

Ferroelectricity in undoped HfO2 down to one-unit-cell on Si substrate

Hafnium oxide (HfO2), particularly at low-dimensional scales, exhibits extensive promising applications in ultrahigh density devices like low-power logic and non-volatile memory devices due to its compatibility with current semiconductor technology1-5. However, achieving ferroelectricity (FE) at ultimate scale especially in undoped HfO2 remains challenging as the non-centrosymmetric FE phase, so-called O-III (space group: Pca21) is metastable and FE has a strong tendency of depolarization with the decrease in thickness6. Up to now, this phase has usually stabilized via doping with other elements7-9. But the minimum film thickness is still limited to 1 nm, about 2-unit-cell, to keep FE8. Thinner and undoped films, conducive to further miniature device size and avoid contamination during deposition process, have been a challenge to fabricate on Si substrates. Herein, we report the robust FE observed in undoped HfO2 ultrathin films directly grown on Si substrate via atomic layer deposition (ALD) and post-heat treat in vacuum. The so-fabricated ferroelectric O-III phase contains about 4.48 at% oxygen vacancy, is robust even monoclinic phase (space group: P21/c) coexists. The spontaneous and switchable polarization is remarkably stable, still surviving even in films down to 0.5 nm (one-unit-cell). Our results show the robust FE O-III phase can be obtained in films down to one-unit-cell in thickness on Si, providing a practical way to fabricating this important material in thickness limit.

cond-mat.mtrl-sci↗
arXiv2025

Sample-Independent Federated Learning Backdoor Attack in Speaker Recognition

In federated learning, backdoor attacks embed triggers in the adversarial client's data to inject a backdoor into the model. In order to enhance the stealth, an attack method based on the dropout layer has been proposed, which can implant the backdoor without modifying the sample. However, these methods struggle to covertly utilize dropout in evaluation mode, thus hindering their deployment in real-world scenarios. To address these, this paper introduces GhostB, a novel approach to federated learning backdoor attacks in speaker recognition that neither alters samples nor relies on dropout. This method employs the behavior of neurons producing specific values as triggers. By mapping these neuronal values to categories specified by the adversary, the backdoor is implanted and activated when particular feature values are detected at designated neurons. Our experiments conducted on TIMIT, LibriSpeech, and VoxCeleb2 databases in both Closed Set Identification (CSI) and Open Set Identification (OSI) scenarios demonstrate that GhostB achieves a 100% success rate upon activation in speaker recognition, with this rate maintained across experiments involving 1 to 50 ghost neurons. This paper investigates how the dispersion of neurons and their depth within hidden layers affect the success rate, revealing that increased dispersion and positioning of neurons can significantly decrease effectiveness, potentially rendering the attack unsuccessful.

cs.CR↗
arXiv2025

Efficient Deployment of Large Language Models on Resource-constrained Devices

Deploying Large Language Models (LLMs) on resource-constrained (or weak) devices presents significant challenges due to limited resources and heterogeneous data distribution. To address the data concern, it is necessary to fine-tune LLMs using on-device private data for various downstream tasks. While Federated Learning (FL) offers a promising privacy-preserving solution, existing fine-tuning methods retain the original LLM size, leaving issues of high inference latency and excessive memory demands unresolved. Hence, we design FedSpine, an FL framework that combines Parameter- Efficient Fine-Tuning (PEFT) with structured pruning for efficient deployment of LLMs on resource-constrained devices. Specifically, FedSpine introduces an iterative process to prune and tune the parameters of LLMs. To mitigate the impact of device heterogeneity, an online Multi-Armed Bandit (MAB) algorithm is employed to adaptively determine different pruning ratios and LoRA ranks for heterogeneous devices without any prior knowledge of their computing and communication capabilities. As a result, FedSpine maintains higher inference accuracy while improving fine-tuning efficiency. Experimental results conducted on a physical platform with 80 devices demonstrate that FedSpine can speed up fine-tuning by 1.4$\times$-6.9$\times$ and improve final accuracy by 0.4%-4.5% under the same sparsity level compared to other baselines.

cs.LG↗
arXiv2025

Incorporating Point Uncertainty in Radar SLAM

Radar SLAM is robust in challenging conditions, such as fog, dust, and smoke, but suffers from the sparsity and noisiness of radar sensing, including speckle noise and multipath effects. This study provides a performance-enhanced radar SLAM system by incorporating point uncertainty. The basic system is a radar-inertial odometry system that leverages velocity-aided radar points and high-frequency inertial measurements. We first propose to model the uncertainty of radar points in polar coordinates by considering the nature of radar sensing. Then, the proposed uncertainty model is integrated into the data association module and incorporated for back-end state estimation. Real-world experiments on both public and self-collected datasets validate the effectiveness of the proposed models and approaches. The findings highlight the potential of incorporating point uncertainty to improve the radar SLAM system. We make the code and collected dataset publicly available at https://github.com/HKUST-Aerial-Robotics/RIO.

cs.RO↗
arXiv2024

Adaptive Parameter-Efficient Federated Fine-Tuning on Heterogeneous Devices

Federated fine-tuning (FedFT) has been proposed to fine-tune the pre-trained language models in a distributed manner. However, there are two critical challenges for efficient FedFT in practical applications, i.e., resource constraints and system heterogeneity. Existing works rely on parameter-efficient fine-tuning methods, e.g., low-rank adaptation (LoRA), but with major limitations. Herein, based on the inherent characteristics of FedFT, we observe that LoRA layers with higher ranks added close to the output help to save resource consumption while achieving comparable fine-tuning performance. Then we propose a novel LoRA-based FedFT framework, termed LEGEND, which faces the difficulty of determining the number of LoRA layers (called, LoRA depth) and the rank of each LoRA layer (called, rank distribution). We analyze the coupled relationship between LoRA depth and rank distribution, and design an efficient LoRA configuration algorithm for heterogeneous devices, thereby promoting fine-tuning efficiency. Extensive experiments are conducted on a physical platform with 80 commercial devices. The results show that LEGEND can achieve a speedup of 1.5-2.8$\times$ and save communication costs by about 42.3% when achieving the target accuracy, compared to the advanced solutions.

cs.DC↗
arXiv2024

Can Large Language Models Understand You Better? An MBTI Personality Detection Dataset Aligned with Population Traits

The Myers-Briggs Type Indicator (MBTI) is one of the most influential personality theories reflecting individual differences in thinking, feeling, and behaving. MBTI personality detection has garnered considerable research interest and has evolved significantly over the years. However, this task tends to be overly optimistic, as it currently does not align well with the natural distribution of population personality traits. Specifically, (1) the self-reported labels in existing datasets result in incorrect labeling issues, and (2) the hard labels fail to capture the full range of population personality distributions. In this paper, we optimize the task by constructing MBTIBench, the first manually annotated high-quality MBTI personality detection dataset with soft labels, under the guidance of psychologists. As for the first challenge, MBTIBench effectively solves the incorrect labeling issues, which account for 29.58% of the data. As for the second challenge, we estimate soft labels by deriving the polarity tendency of samples. The obtained soft labels confirm that there are more people with non-extreme personality traits. Experimental results not only highlight the polarized predictions and biases in LLMs as key directions for future research, but also confirm that soft labels can provide more benefits to other psychological tasks than hard labels. The code and data are available at https://github.com/Personality-NLP/MbtiBench.

cs.CL↗
arXiv2024

Collaborative Inference for Large Models with Task Offloading and Early Exiting

In 5G smart cities, edge computing is employed to provide nearby computing services for end devices, and the large-scale models (e.g., GPT and LLaMA) can be deployed at the network edge to boost the service quality. However, due to the constraints of memory size and computing capacity, it is difficult to run these large-scale models on a single edge node. To meet the resource constraints, a large-scale model can be partitioned into multiple sub-models and deployed across multiple edge nodes. Then tasks are offloaded to the edge nodes for collaborative inference. Additionally, we incorporate the early exit mechanism to further accelerate inference. However, the heterogeneous system and dynamic environment will significantly affect the inference efficiency. To address these challenges, we theoretically analyze the coupled relationship between task offloading strategy and confidence thresholds, and develop a distributed algorithm, termed DTO-EE, based on the coupled relationship and convex optimization. DTO-EE enables each edge node to jointly optimize its offloading strategy and the confidence threshold, so as to achieve a promising trade-off between response delay and inference accuracy. The experimental results show that DTO-EE can reduce the average response delay by 21%-41% and improve the inference accuracy by 1%-4%, compared to the baselines.

cs.DC↗