arXiv subjects

Yulin Chen

Publications and source records attributed to Yulin Chen.

At least 73 records · Page 4Linked to original sources

arXiv2025

Orbital Hybridization-Induced Ising-Type Superconductivity in a Confined Gallium Layer

In low-dimensional superconductors, the interplay between quantum confinement and interfacial hybridization effects can reshape Cooper pair wavefunctions and induce novel forms of unconventional superconductivity. In this work, we employ a plasma-free, carbon buffer layer-assisted confinement epitaxy method to synthesize trilayer gallium (Ga) sandwiched between a graphene layer and a 6H-SiC(0001) substrate, forming an air-stable graphene/trilayer Ga/SiC heterostructure. In this confined light-element Ga layer, we demonstrate interfacial Ising-type superconductivity driven by atomic orbital hybridization between the Ga layer and the SiC substrate. Electrical transport measurements reveal that the in-plane upper critical magnetic field u0Hc2,|| reaches ~21.98T at T=400 mK, approximately 3.38 times the Pauli paramagnetic limit (~6.51T). Angle-resolved photoemission spectroscopy (ARPES) measurements combined with theoretical calculations confirm the presence of split Fermi surfaces with Ising-type spin textures at the K and K' valleys of the confined Ga layer strongly hybridized with SiC. Moreover, by incorporating finite relaxation time induced by impurity scattering into an Ising-type superconductivity model, we reproduce the entire temperature-dependent u0Hc2,|| phase diagram. This work establishes a new strategy to realize unconventional pairing wavefunctions by combining quantum confinement and interfacial hybridization effects in superconducting thin films. It also opens new avenues for designing scalable superconducting quantum electronic and spintronic devices through interfacial engineering.

cond-mat.mes-hall↗

arXiv2025

Defense Against Prompt Injection Attack by Leveraging Attack Techniques

With the advancement of technology, large language models (LLMs) have achieved remarkable performance across various natural language processing (NLP) tasks, powering LLM-integrated applications like Microsoft Copilot. However, as LLMs continue to evolve, new vulnerabilities, especially prompt injection attacks arise. These attacks trick LLMs into deviating from the original input instructions and executing the attacker's instructions injected in data content, such as retrieved results. Recent attack methods leverage LLMs' instruction-following abilities and their inabilities to distinguish instructions injected in the data content, and achieve a high attack success rate (ASR). When comparing the attack and defense methods, we interestingly find that they share similar design goals, of inducing the model to ignore unwanted instructions and instead to execute wanted instructions. Therefore, we raise an intuitive question: Could these attack techniques be utilized for defensive purposes? In this paper, we invert the intention of prompt injection methods to develop novel defense methods based on previous training-free attack methods, by repeating the attack process but with the original input instruction rather than the injected instruction. Our comprehensive experiments demonstrate that our defense techniques outperform existing training-free defense approaches, achieving state-of-the-art results.

cs.CR↗

arXiv2025

Sliding two-dimensional superconductivity and charge-density-wave state in a bulk crystal

Superconductivity in the two-dimensional (2D) limit is a fertile ground for exotic quantum phenomena-many of which remain elusive in their 3D counterparts. While studies of 2D superconductivity have predominantly focused on mono- or few-layer systems, we demonstrate an alternative route-interlayer sliding in bulk crystals. Through a precisely controlled growth strategy, we engineer interlayer sliding in bulk 3R-NbSe2, deliberately disrupting [001] mirror symmetry and drastically suppressing interlayer coupling. Remarkably, this structural manipulation stabilizes Ising-type superconductivity coexisting with an unconventional charge-density-wave (CDW) state akin to that of monolayer 2H-NbSe2. The sliding phase exhibits a pronounced suppression of the upper critical field at low temperatures, revealing a delicate competition between Ising and Rashba spin-orbit coupling (SOC) in the globally noncentrosymmetric lattice. Intriguingly, the superconducting state displays two-fold symmetry, a signature that may arise from asymmetric SOC or a multi-component pairing order parameter. Our work establishes interlayer sliding as a symmetry-breaking tool to promote 2D superconductivity in bulk materials-without resorting to extrinsic intercalation or doping. More broadly, this approach sets a paradigm for unlocking hidden quantum states in layered materials, offering a new dimension in design of quantum matter.

cond-mat.supr-con↗

arXiv2025

Giant plateau-like topological Hall effect controlled by tailoring the magnetic exchange stiffness in a kagome magnet

The ferrimagnet TbMn6Sn6 has attracted vast attention, because its pristine Mn kagome lattice with strong spin-orbit coupling and out-of-plane Tb-Mn exchange supports quantum-limit Chern topological magnetism which can be described by the simple spinless Haldane model. We unveil herein that engineering the kagome lattice through partial substitution of Mn with nonmagnetic Cr induces a striking structural reorganization-Cr preferentially concentrates within a single Mn layer per unit cell, reducing the crystal symmetry from the D6h point group to the C2. This tailored structure configuration gives rise to a plateau-like topological Hall effect (THE), achieving a record-breaking resistivity of 19.1 ohm cm among bulk systems. Complementary magnetic force microscopy measurements unveil a magnetic domain transition near 1 T at 180 K, aligning with the field-dependent phase diagram of the THE. Our direct visualization of the magnetic domain structure underscores the critical role of broken kagome lattice symmetry in generating distinct exchange stiffness between the two Mn layers. These findings establish a new paradigm for exploring exotic states in kagome topological magnets and provide a proof-of-principle strategy for unraveling the interplay between magnetism and emergent topological properties in kagome systems.

cond-mat.str-el↗

arXiv2025

Spectroscopic evidence of symmetry breaking in the superconducting vortices of UTe2

The recently discovered heavy-fermion superconductor, UTe2, is an excellent candidate for spin-triplet superconductors where electrons form spin-triplet Cooper pairs with spin S = 1 and odd parity. Unconventional superconductivity often hosts unconventional vortices. Yet, the vortex core and lattice in UTe2 have not been directly visualized and characterized. Here, by using ultralow-temperature scanning tunneling microscopy and spectroscopy, we study the superconducting vortices on the (0-11) surface termination of UTe2 with an out-of-plane external magnetic field. At the center of the vortex core, we observe a robust zero-energy vortex-core state which exhibits a cigar-shaped spatial distribution and extends to ~30 nm along the [100] direction (crystallographic a axis) of UTe2. Along the direction perpendicular to [100], the superconducting gap is deeper and the coherence peak on one side of the vortex core is stronger than on the opposite side, and they are even enhanced in comparison with those under zero field. Due to the anisotropy of magnetic susceptibility in UTe2, the asymmetric dI/dV spectra on the two sides of the vortex core result from the interplay between the magnetization-induced bound current and supercurrent around the vortex core. Our work reveals the important role of magnetization in the vortex behaviors of UTe2 and provides essential microscopic information for understanding its superconducting properties in magnetic field.

cond-mat.supr-con↗

arXiv2025

CeCo$_2$P$_2$: a unique Co-antiferromagnetic topological heavy-fermion system with $P\cdot T$-protected Kondo effect and nodal-line excitations

Based on high-throughput screening and experimental data, we find that CeCo$_2$P$_2$ is unique in heavy-fermion materials: it has a Kondo effect at a high temperature which is nonetheless below a Co-antiferromagnetic ordering temperature. This begs the question: how is the Kondo singlet formed? \emph{All} other magnetic Kondo materials do not first form magnetism on the atoms whose electrons are supposed to screen the local moments. We theoretically explain these observations and show the multifaceted uniqueness of CeCo$_2$P$_2$: a playground for Kondo, magnetism, flat band, and topological physics. At high temperatures, the itinerant Co $c$ electrons of the system form non-atomic bands with a narrow bandwidth, leading to a high antiferromagnetic transition temperature. We show that the quantum geometry of the bands promotes in-plane ferromagnetism, while the weak dispersion along the $z$ direction facilitates out-of-plane antiferromagnetism. At low temperatures, we uncover a novel phase that manifests the coexistence of Co-antiferromagnetism and the Kondo effect, linked to the $P\cdot T$-protected Kramers' doublets and the filling-enforced metallic nature of $c$ electrons in the antiferromagnetic phase. Subsequently, the emergence of the Kondo effect, in cooperation with glide-mirror-$z$ symmetry, creates nodal-line excitation near the Fermi energy. Our results emphasize the importance of lattice symmetry and quantum geometry, Kondo physics, and magnetism in the understanding of the correlation physics of this unique compound. We also test our theory on the structurally similar compound LaCo$_2$P$_2$ and show how we are able to understand its vastly different phase diagram.

cond-mat.str-el↗

arXiv2025

Monitoring Decomposition Attacks in LLMs with Lightweight Sequential Monitors

Current LLM safety defenses fail under decomposition attacks, where a malicious goal is decomposed into benign subtasks that circumvent refusals. The challenge lies in the existing shallow safety alignment techniques: they only detect harm in the immediate prompt and do not reason about long-range intent, leaving them blind to malicious intent that emerges over a sequence of seemingly benign instructions. We therefore propose adding an external monitor that observes the conversation at a higher granularity. To facilitate our study of monitoring decomposition attacks, we curate the largest and most diverse dataset to date, including question-answering, text-to-image, and agentic tasks. We verify our datasets by testing them on frontier LLMs and show an 87% attack success rate on average on GPT-4o. This confirms that decomposition attack is broadly effective. Additionally, we find that random tasks can be injected into the decomposed subtasks to further obfuscate malicious intents. To defend in real time, we propose a lightweight sequential monitoring framework that cumulatively evaluates each subtask. We show that a carefully prompt engineered lightweight monitor achieves a 93% defense success rate, beating reasoning models like o3 mini as a monitor. Moreover, it remains robust against random task injection and cuts cost by 90% and latency by 50%. Our findings suggest that lightweight sequential monitors are highly effective in mitigating decomposition attacks and are viable in deployment.

cs.CR↗

arXiv2025

Efficient Reasoning via Chain of Unconscious Thought

Large Reasoning Models (LRMs) achieve promising performance but compromise token efficiency due to verbose reasoning processes. Unconscious Thought Theory (UTT) posits that complex problems can be solved more efficiently through internalized cognitive processes. Inspired by UTT, we propose a new reasoning paradigm, termed Chain of Unconscious Thought (CoUT), to improve the token efficiency of LRMs by guiding them to mimic human unconscious thought and internalize reasoning processes. Concretely, we first prompt the model to internalize the reasoning by thinking in the hidden layer. Then, we design a bag of token-efficient strategies to further help models reduce unnecessary tokens yet preserve the performance. Our work reveals that models may possess beneficial unconscious thought, enabling improved efficiency without sacrificing performance. Extensive experiments demonstrate the effectiveness of CoUT. Remarkably, it surpasses CoT by reducing token usage by 47.62% while maintaining comparable accuracy, as shown in Figure 1. The code of CoUT is available at this link: https://github.com/Rohan-GRH/CoUT

cs.CL↗

arXiv2025

PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance

Recent advancements in generative large language models (LLMs) have enabled wider applicability, accessibility, and flexibility. However, their reliability and trustworthiness are still in doubt, especially for concerns regarding individuals' data privacy. Great efforts have been made on privacy by building various evaluation benchmarks to study LLMs' privacy awareness and robustness from their generated outputs to their hidden representations. Unfortunately, most of these works adopt a narrow formulation of privacy and only investigate personally identifiable information (PII). In this paper, we follow the merit of the Contextual Integrity (CI) theory, which posits that privacy evaluation should not only cover the transmitted attributes but also encompass the whole relevant social context through private information flows. We present PrivaCI-Bench, a comprehensive contextual privacy evaluation benchmark targeted at legal compliance to cover well-annotated privacy and safety regulations, real court cases, privacy policies, and synthetic data built from the official toolkit to study LLMs' privacy and safety compliance. We evaluate the latest LLMs, including the recent reasoner models QwQ-32B and Deepseek R1. Our experimental results suggest that though LLMs can effectively capture key CI parameters inside a given context, they still require further advancements for privacy compliance.

cs.CL↗

arXiv2025

GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning

To enhance the safety of VLMs, this paper introduces a novel reasoning-based VLM guard model dubbed GuardReasoner-VL. The core idea is to incentivize the guard model to deliberatively reason before making moderation decisions via online RL. First, we construct GuardReasoner-VLTrain, a reasoning corpus with 123K samples and 631K reasoning steps, spanning text, image, and text-image inputs. Then, based on it, we cold-start our model's reasoning ability via SFT. In addition, we further enhance reasoning regarding moderation through online RL. Concretely, to enhance diversity and difficulty of samples, we conduct rejection sampling followed by data augmentation via the proposed safety-aware data concatenation. Besides, we use a dynamic clipping parameter to encourage exploration in early stages and exploitation in later stages. To balance performance and token efficiency, we design a length-aware safety reward that integrates accuracy, format, and token cost. Extensive experiments demonstrate the superiority of our model. Remarkably, it surpasses the runner-up by 19.27% F1 score on average. We release data, code, and models (3B/7B) of GuardReasoner-VL at https://github.com/yueliu1999/GuardReasoner-VL/

cs.AI↗

arXiv2025

BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger

Multimodal Large Language Models (MLLMs) have showcased impressive performance in a variety of multimodal tasks. On the other hand, the integration of additional image modality may allow the malicious users to inject harmful content inside the images for jailbreaking. Unlike text-based LLMs, where adversaries need to select discrete tokens to conceal their malicious intent using specific algorithms, the continuous nature of image signals provides a direct opportunity for adversaries to inject harmful intentions. In this work, we propose $\textbf{BaThe}$ ($\textbf{Ba}$ckdoor $\textbf{T}$rigger S$\textbf{h}$i$\textbf{e}$ld), a simple yet effective jailbreak defense mechanism. Our work is motivated by recent research on jailbreak backdoor attack and virtual prompt backdoor attack in generative language models. Jailbreak backdoor attack uses harmful instructions combined with manually crafted strings as triggers to make the backdoored model generate prohibited responses. We assume that harmful instructions can function as triggers, and if we alternatively set rejection responses as the triggered response, the backdoored model then can defend against jailbreak attacks. We achieve this by utilizing virtual rejection prompt, similar to the virtual prompt backdoor attack. We embed the virtual rejection prompt into the soft text embeddings, which we call ``wedge''. Our comprehensive experiments demonstrate that BaThe effectively mitigates various types of jailbreak attacks and is adaptable to defend against unseen attacks, with minimal impact on MLLMs' performance.

cs.CR↗

arXiv2025

Reasoning Models Know When They're Right: Probing Hidden States for Self-Verification

Reasoning models have achieved remarkable performance on tasks like math and logical reasoning thanks to their ability to search during reasoning. However, they still suffer from overthinking, often performing unnecessary reasoning steps even after reaching the correct answer. This raises the question: can models evaluate the correctness of their intermediate answers during reasoning? In this work, we study whether reasoning models encode information about answer correctness through probing the model's hidden states. The resulting probe can verify intermediate answers with high accuracy and produces highly calibrated scores. Additionally, we find models' hidden states encode correctness of future answers, enabling early prediction of the correctness before the intermediate answer is fully formulated. We then use the probe as a verifier to decide whether to exit reasoning at intermediate answers during inference, reducing the number of inference tokens by 24\% without compromising performance. These findings confirm that reasoning models do encode a notion of correctness yet fail to exploit it, revealing substantial untapped potential to enhance their efficiency.

cs.AI↗

arXiv2025

Superconductivity in trilayer nickelate La4Ni3O10 under pressure

Nickelate superconductors have attracted a great deal of attention over the past few decades due to their similar crystal and electronic structures with high-temperature cuprate superconductors. Here, we report the superconductivity in a pressurized Ruddlesden-Popper phase single crystal, La4Ni3O10 (n = 3), and its interplay with the density wave order in the phase diagram. With increasing pressure, the density wave order as indicated by the anomaly in the resistivity is progressively suppressed, followed by the emergence of the superconductivity around 25 K under I4/mmm space group. The susceptibility measurements confirm bulk superconductivity with a volume fraction exceeding 80%. Moreover, theoretical analysis unveils that antiferromagnetic (AFM) super-exchange interactions can serve as the effective pairing interaction for the emergence of superconductivity (SC) in pressurized La4Ni3O10. Our research provides a new platform for the investigation of the unconventional superconductivity mechanism in Ruddlesden-Popper trilayer perovskite nickelates.

cond-mat.supr-con↗

arXiv2025

Orbital-selective band modifications in a charge-ordered kagome metal LuNb$_6$Sn$_6$

The origin of the charge order in kagome lattice materials has attracted great interest due to the unique electronic structure features connected to kagome networks and the interplay between electron and lattice degrees of freedom. Recently, compounds with composition $Ln$Nb$_6$Sn$_6$ ($Ln$ = Ce-Nd, Sm, Gd-Tm, Lu, Y) appear as a new family of kagome metals, structurally analogous to $R$V$_6$Sn$_6$ ($R$ = Sc, Y, or rare earth) systems. Among them, LuNb$_6$Sn$_6$ emerges as a novel material hosting charge density wave (CDW) with a $\sqrt{3}$ $\times$ $\sqrt{3}$ $\times$ $3$ wave vector, akin to that in ScV$_6$Sn$_6$. Here, we employ high-resolution angle-resolved photoemission spectroscopy, scanning tunneling microscopy, and density functional theory calculations to systematically investigate the electronic properties of LuNb$_6$Sn$_6$. Our observation reveals the characteristic band structures of the "166" kagome system. A charge instability driven by Fermi surface nesting is decisively ruled out through an analysis of the interactions between van Hove singularities. Across the CDW transition, we observe orbital-selective band modifications, with noticeable evolutions of Lu 5$d$ and Sn 5$p$ electrons, while Nb 4$d$ electrons exhibit minimal change, suggesting that the Lu and Sn sites other than the Nb kagome lattice play a key role in the formation of CDW. Our findings substantiate a universal lattice-driven CDW mechanism rather than a charge-instability-driven one in the "166" kagome compounds, making it a distinct material class compared to other charge-ordered kagome systems, such as $A$V$_3$Sb$_5$ ($A$ = K, Rb, Cs) and FeGe.

cond-mat.str-el↗

arXiv2025

Hide and Seek in Noise Labels: Noise-Robust Collaborative Active Learning with LLM-Powered Assistance

Learning from noisy labels (LNL) is a challenge that arises in many real-world scenarios where collected training data can contain incorrect or corrupted labels. Most existing solutions identify noisy labels and adopt active learning to query human experts on them for denoising. In the era of large language models (LLMs), although we can reduce the human effort to improve these methods, their performances are still subject to accurately separating the clean and noisy samples from noisy data. In this paper, we propose an innovative collaborative learning framework NoiseAL based on active learning to combine LLMs and small models (SMs) for learning from noisy labels. During collaborative training, we first adopt two SMs to form a co-prediction network and propose a dynamic-enhanced threshold strategy to divide the noisy data into different subsets, then select the clean and noisy samples from these subsets to feed the active annotator LLMs to rectify noisy samples. Finally, we employ different optimization objectives to conquer subsets with different degrees of label noises. Extensive experiments on synthetic and real-world noise datasets further demonstrate the superiority of our framework over state-of-the-art baselines.

cs.LG↗

arXiv2025

Refining Time Series Anomaly Detectors using Large Language Models

Time series anomaly detection (TSAD) is of widespread interest across many industries, including finance, healthcare, and manufacturing. Despite the development of numerous automatic methods for detecting anomalies, human oversight remains necessary to review and act upon detected anomalies, as well as verify their accuracy. We study the use of multimodal large language models (LLMs) to partially automate this process. We find that LLMs can effectively identify false alarms by integrating visual inspection of time series plots with text descriptions of the data-generating process. By leveraging the capabilities of LLMs, we aim to reduce the reliance on human effort required to maintain a TSAD system

cs.CL↗

arXiv2025

High temperature surface state in Kondo insulator U$_3$Bi$_4$Ni$_3$

The resurgence of interest in Kondo insulators has been driven by two major mysteries: the presence of metallic surface states and the observation of quantum oscillations. To further explore these mysteries, it is crucial to investigate another similar system beyond the two existing ones, SmB$_6$ and YbB$_{12}$. Here, we address this by reporting on a Kondo insulator, U$_3$Bi$_4$Ni$_3$. Our transport measurements reveal that a surface state emerges below 250 K and dominates transport properties below 150 K, which is well above the temperature scale of SmB$_6$ and YbB$_{12}$. At low temperatures, the surface conductivity is about one order of magnitude higher than the bulk. The robustness of the surface state indicates that it is inherently protected. The similarities and differences between U$_3$Bi$_4$Ni$_3$ and the other two Kondo insulators will provide valuable insights into the nature of metallic surface states in Kondo insulators and their interplay with strong electron correlations.

cond-mat.str-el↗

arXiv2025

HexPlane Representation for 3D Semantic Scene Understanding

In this paper, we introduce the HexPlane representation for 3D semantic scene understanding. Specifically, we first design the View Projection Module (VPM) to project the 3D point cloud into six planes to maximally retain the original spatial information. Features of six planes are extracted by the 2D encoder and sent to the HexPlane Association Module (HAM) to adaptively fuse the most informative information for each point. The fused point features are further fed to the task head to yield the ultimate predictions. Compared to the popular point and voxel representation, the HexPlane representation is efficient and can utilize highly optimized 2D operations to process sparse and unordered 3D point clouds. It can also leverage off-the-shelf 2D models, network weights, and training recipes to achieve accurate scene understanding in 3D space. On ScanNet and SemanticKITTI benchmarks, our algorithm, dubbed HexNet3D, achieves competitive performance with previous algorithms. In particular, on the ScanNet 3D segmentation task, our method obtains 77.0 mIoU on the validation set, surpassing Point Transformer V2 by 1.6 mIoU. We also observe encouraging results in indoor 3D detection tasks. Note that our method can be seamlessly integrated into existing voxel-based, point-based, and range-based approaches and brings considerable gains without bells and whistles. The codes will be available upon publication.

cs.CV↗