AAAI 2026

4,920 papers

MSAT-LDM: Toward Transferable High-Fidelity Watermarking for Latent Diffusion Model via Modular Self-Augmented Training

Lu Zhang, Liang Zeng

T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Model

Chenyu Zhang, Tairen Zhang, Lanjun Wang, Ruidong Chen, Wenhui Li

Reason2Attack: Jailbreaking Text-to-Image Models via LLM Reasoning

Chenyu Zhang, Lanjun Wang, Yiwen Ma, Wenhui Li, Guoqing Jin

Causally-Grounded Dual-Path Attention Intervention for Object Hallucination Mitigation in LVLMs

Liu Yu, Zhonghao Chen, Ping Kuang, Zhikun Feng, Fan Zhou

SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge

Adeel Yousaf, Joseph Fioresi, James Beetham, Amrit Singh Bedi, Mubarak Shah

MacPrompt: Maraconic-Guided Jailbreak Against Text-to-Image Models

Xi Ye, Yiwen Liu, Lina Wang, Run Wang, Geying Yang

Hashed Watermark as a Filter: A Unified Defense Against Forging and Overwriting Attacks in Neural Network Watermarking

Yuan Yao, Jin Song, Jian Jin

BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewards

Yiran Yang, Zhaowei Liu, Yuan Yuan, Yukun Song, Xiong Ma

The Emotional Baby Is Truly Deadly: Does Your Multimodal Large Reasoning Model Have Emotional Flattery Towards Humans?

Yuan Xun, Xiaojun Jia, Xinwei Liu, Simeng Qin, Hua Zhang

Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack

Jing Xue, Zhishen Sun, Haishan Ye, Luo Luo, Xiangyu Chang

When Privacy Meets Recovery: The Overlooked Half of Surrogate-Driven Privacy Preservation for MLLM Editing

Siyuan Xu, Yibing Liu, Peilin Chen, Yung-Hui Li, Shiqi Wang

Bridging the Copyright Gap: Do Large Vision-Language Models Recognize and Respect Copyrighted Content?

Naen Xu, Jinghuai Zhang, Changjiang Li, Hengyu An, Chunyi Zhou

iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification

Zixun Xiong, Gaoyi Wu, Qingyang Yu, Mingyu Derek Ma, Lingfeng Yao

HealSplit: Towards Self-Healing Through Adversarial Distillation in Split Federated Learning

Yuhan Xie, Chen Lyu

Detect All-Type Deepfake Audio: Wavelet Prompt Tuning for Enhanced Auditory Perception

Yuankun Xie, Ruibo Fu, Xiaopeng Wang, Zhiyong Wang, Songjun Cao

LexChain: Modeling Legal Reasoning Chains for Chinese Tort Case Analysis

Huiyuan Xie, Chenyang Li, Huining Zhu, Chubin Zhang, Yuxiao Ye

Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks

Yaxin Xiao, Qingqing Ye, Zi Liang, Haoyang Li, Ronghua Li

CL-Guard: Defending DNNs Against Backdoors via Fine-Grained Neuron Analysis and Collaborative Dual-Network Learning

Jie Xiao, Yuhao Huang, Yanjiao Gao, Aizhu Liu, Zhezhao Yang

A Content-Preserving Secure Linguistic Steganography

Lingyun Xiang, Chengfu Ou, Xu He, Zhongliang Yang, Yuling Liu

BeDKD: Backdoor Defense Based on Directional Mapping Module and Adversarial Knowledge Distillation

ZhengXian Wu, Juan Wen, Wanli Peng, Yinghan Zhou, Changtong Dou

ARIW-Framework: Adaptive Robust Iterative Watermarking Framework

Shaowu Wu, Liting Zeng, Wei Lu

Efficiently Computing Compact Formal Explanations

Min Wu, Xiaofu Li, Haoze Wu, Clark Barrett

Robust Learning from Noisily Labeled Long-Tailed Data via Fairness Regularizer

Jiaheng Wei, Zhaowei Zhu, Gang Niu, Tongliang Liu, Sijia Liu

MPMA: Preference Manipulation Attack Against Model Context Protocol

Zihan Wang, Rui Zhang, Yu Liu, Wenshu Fan, Wenbo Jiang

ConfGuard: A Simple and Effective Backdoor Detection for Large Language Models

Zihan Wang, Rui Zhang, Hongwei Li, Wenshu Fan, Wenbo Jiang

GUIC: Certified Graph Unlearning with Individual Fairness Guarantees

Zichong Wang, Tongliang Liu, Wenbin Zhang

MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers

Zhiqiang Wang, Yichao Gao, Yanting Wang, Suyuan Liu, Haifeng Sun

Enhancing All-to-X Backdoor Attacks with Optimized Target Class Mapping

Lei Wang, Yulong Tian, Hao Han, Fengyuan Xu

Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems

Haowei Wang, Rupeng Zhang, Junjie Wang, Mingyang Li, Yuekai Huang

RAIN: Redundancy-Aware Latent Injection for Quality-Preserving Image Watermarking

Yehan Sun, Rongrong Ni, Chuangchuang Tan, Huan Liu, Wenhao Ni

Probing Semantic Insensitivity for Inference-Time Backdoor Defense in Multimodal Large Language Model

Xuankun Rong, Wenke Huang, Wenzheng Jiang, Yiming Li, Wenxuan Wang

Efficient Verification and Falsification of ReLU Neural Barrier Certificates

Dejin Ren, Yiling Xue, Taoran Wu, Bai Xue

MartDE: A Privacy-Preserving and Cost-Efficient Evaluation Framework for Data Marketplaces

Xinyuan Qian, Haoyong Wang, Hangcheng Cao, Shuai Yuan, Senkang Hu

Estimating the True Distribution of Data Collected with Randomized Response

Carlos Antonio Pinzón, Ehab ElSalamouny, Lucas Massot, Alexis Miller, Héber Hwang Arcolezi

Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs

Doniyorkhon Obidov, Honggang Yu, Xiaolong Guo, Kaichen Yang

Beyond Binary Classification: A Semi-supervised Approach to Generalized AI-generated Image Detection

Hong-Hanh Nguyen-Le, Van-Tuan Tran, Thuc D. Nguyen, Nhien-An Le-Khac

An Epistemic Perspective on Agent Awareness

Pavel Naumov, Alexandra Pavlova

SPAN: Benchmarking and Improving Cross-Calendar Temporal Reasoning of Large Language Models

Zhongjian Miao, Hao Fu, CHEN WEI

On the Probabilistic Learnability of Compact Neural Network Preimage Bounds

Luca Marzari, Manuele Bicego, Ferdinando Cicalese, Alessandro Farinelli

Learning Vision-Based Neural Network Controllers with Semi-Probabilistic Safety Guarantees

Xinhang Ma, Junlin Wu, Hussein Sibai, Yiannis Kantaros, Yevgeniy Vorobeychik

Phantom Menace: Exploring and Enhancing the Robustness of VLA Models Against Physical Sensor Attacks

Xuancun Lu, Jiaxiang Chen, Shilin Xiao, Zizhi Jin, Zhangrui Chen

IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks

Xiaoya Lu, Zeren Chen, Xuhao Hu, Yijin Zhou, Weichen Zhang

Faithful in Steps: Improving Generalization and Citation in RAG via Query Decomposition

Yue Liu, Zhongying Ru, Shimin DI, Jipeng Zhang, Ruiyuan Zhang

Generic Adversarial Attack Framework Against Graph-based Vertical Federated Learning

Yimin Liu, Peng Jiang, Qi Liu, Liehuang Zhu

GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations

Xinwei Liu, Xiaojun Jia, Yuan Xun, Simeng Qin, Xiaochun Cao

Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimization

Tiantian Liu, Hongwei Yao, Feng Lin, Tong Wu, Zhan Qin

EchoBat: Echo-Vision Enhancement and Echo-Layered Sampling for Video LLMs Hallucination Mitigation

Shuai Liu, Da Chen, Yiheng Pan, Chenwei Tian, Qian Li

Mind the Third Eye! Benchmarking Privacy Awareness in MLLM-powered Smartphone Agents

Zhixin Lin, Jungang Li, Shidong Pan, Yibo Shi, Yue Yao

SAVER: Mitigating Hallucinations in Large Vision-Language Models via Style-Aware Visual Early Revision

Zhaoxu Li, Chenqi Kong, Yi Yu, Qiangqiang Wu, Xinghao Jiang

Model-Agnostic Sentiment Distribution Stability Analysis for Robust LLM-Generated Texts Detection

Siyuan Li, Xi Lin, Guangyan Li, Zehao Liu, Aodu Wulianghai

The Other Mind: How Language Models Exhibit Human Temporal Cognition

Lingyu Li, Yang Yao, Yixu Wang, Chunbo Li, Yan Teng

Cross-Modal Unlearning via Influential Neuron Path Editing in Multimodal Large Language Models

Kunhao Li, Wenhao Li, Di Wu, Lei Yang, Jun Bai

Machine Pareidolia: Protecting Facial Image with Emotional Editing

Binh M. Le, Simon S. Woo

DySy-Det: A Synergistic Framework with Dynamic Reconstruction-Path Consistency for AI-Generated Image Detection

Fanli Jin, Feng Lin, Gaojian Wang, Tong Wu, Zhisheng Yan

PurMM: Attention-Guided Test-Time Backdoor Purification in Multimodal Large Language Models

Wenzheng Jiang, Ke Liang, Xuankun Rong, Jingxuan Zhou, Zhengyi Zhong

SceneJailEval: A Scenario-Adaptive Multi-Dimensional Framework for Jailbreak Evaluation

Lai Jiang, Yuekang Li, Xiaohan Zhang, Youtao Ding, Li Pan

Higher-Order Responsibility

Junli Jiang, Pavel Naumov

MedOmni-45°: A Safety–Performance Benchmark for Reasoning-Oriented LLMs in Medicine

Kaiyuan Ji, Yijin Guo, Zicheng Zhang, Xiangyang Zhu, Yuan Tian

Efficient LLM-Jailbreaking via Multimodal-LLM Jailbreak

Haoxuan Ji, Zheng Lin, Zhenxing Niu, Xinbo Gao, Gang Hua

Private Frequency Estimation via Residue Number Systems

Héber Hwang Arcolezi

Any2Critical: Safety-Critical Scenario Generation from Arbitrary Real-World Driving Contexts

Yao Huang, Yubo Chen, Ruochen Zhang, Yitong Sun, Shouwei Ruan

Parameterized Abstract Interpretation for Transformer Verification

Pei Huang, Dennis Wei, Omri Isac, Haoze Wu, Min Wu

FILTER: A Framework for Defending Against Backdoor Attacks in Vertical Federated Learning

Zhanyi Hu, Cen Chen, Yanhao Wang

Activation Manipulation Attack: Penetrating and Harmful Jailbreak Attack Against Large Vision-Language Models

Haojie Hao, Jiakai Wang, Aishan Liu, Yuqing Ma, Haotong Qin

Beyond World Models: Rethinking Understanding in AI Models

Tarun Gupta, Danish Pruthi

The Silent Amplifier: In-Context Examples Fuel Bias in Large Language Models

Xinwei Guo, Jiashi Gao, Junlei Zhou, Jiaxin Zhang, Quanying Liu

6DAttack: Backdoor Attacks in the 6DoF Pose Estimation

Jihui Guo, Zongmin Zhang, Zhen Sun, Yuhao Yang, Jinlin Wu

RSA-CR: Resisting Shilling Attacks in Citation Recommendation via Dumbbell Inductive Learning

Xiyue Gao, Yukai Liu, Zhuoqi Ma, Xiaotian Qiao, Hui Li

Runtime Safety and Reach-avoid Prediction of Stochastic Systems via Observation-aware Barrier Functions

Shenghua Feng, Jie An, Fanjiang Xu

Efficient, Secure, Differentially Private Deep Learning in the Two-Server Model

Jun Feng, Hong Sun, Pengfei Zhang, Bocheng Ren, Shunli Zhang

One for All: Synthesis-Free Fingerprint Learning for Attribution of In-the-Wild Synthetic Images

Jianwei Fei, Yunshu Dai, Peipeng Yu, Zhihua Xia, Dasara Shullani

Stability-Aware Reinforcement Learning for Robust Class Integration Test Order Generation

Yanru Ding, Yanmei Zhang, Guan Yuan, Shujuan Jiang, Wei Dai

Time Shuffle: A Transferability-Booster for Multiple Audio Adversarial Tasks

Jiacheng Deng, Dengpan Ye, Yuhong Liu, Zhaolin Wei, Ziyi Liu

Fairness Perceptions of Large Language Models

Benjamin Cookson, Soroush Ebadian, Nisarg Shah

Feature Integration Spaces: Joint Training Reveals Dual Encoding in Neural Network Representations

Omar Claflin

Reference Recommendation Based Membership Inference Attack Against Hybrid-Based Recommender Systems

Xiaoxiao Chi, Xuyun Zhang, Yan Wang, Hongsheng Hu, Wanchun Dou

ALTER: Asymmetric LoRA for Token-Entropy-Guided Unlearning of LLMs

Xunlei Chen, Jinyu Guo, Yuang Li, Zhaokun Wang, Yi Gong

Amplifying Discrepancies: Exploiting Macro and Micro Inconsistencies for Image Manipulation Localization

Shenghao Chen, Yibo Zhao, Tianyi Wang, Chunjie Ma, Weili Guan

StyleSentinel: Reliable Artistic Copyright Verification via Stylistic Fingerprints

Lingxiao Chen, Liqin Wang, Wei Lu

MOBA: A Material-Oriented Backdoor Attack Against LiDAR-Based 3D Object Detection Systems

Saket Sanjeev Chaturvedi, Gaurav Bagwe, Lan Emily Zhang, Pan He, Xiaoyong Yuan

Failures to Surface Harmful Contents in Video Large Language Models

Yuxin Cao, Wei Song, Derui Wang, Jingling Xue, Jin Song Dong

When Safe Unimodal Inputs Collide: Optimizing Reasoning Chains for Cross-Modal Safety in Multimodal Large Language Models

Wei Cai, Shujuan Liu, Jian Zhao, Ziyan Shi, Yusheng Zhao

Your Prompts Are Not Safe: Output-Free Membership Inference via Prompt Vectors in Vision-Language Tuning

Yuran Bian, Xiaohan Zhang, Zhiyuan Yu, Changqing Li, Li Pan

Privacy Preserving In-Context-Learning Framework for Large Language Models

Bishnu Bhusal, Manoj Acharya, Ramneet Kaur, Colin Samplawski, Anirban Roy

Ellipsoid-Based Decision Boundaries for Open Intent Classification

Yuetian Zou, Hanlei Zhang, Hua Xu, Songze Li, Long Xiao

Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models

Miao Ziqi, Lijun Li, Yuan Xiong, Zhenhua Liu, Pengyu Zhu

CMID: Towards Medical Visual Question Answering via Contrastive Mutual Information Decoding

Zhihong Zhu, Yunyan Zhang, Fan Zhang, Bowen Xing, Xian Wu

S³-MSD: Large Vision-Language Model for Explainable and Generalizable Multi-modal Sarcasm Detection

Zhihong Zhu, Fan Zhang, Yunyan Zhang, Jinghan Sun, Guimin Hu

ExtendAttack: Attacking Servers of LRMs via Extending Reasoning

Zhenhao Zhu, Yue Liu, Zhiwei Xu, Yingwei Ma, Hongcheng Gao

Unsupervised Semantic Discovery via Global and Local Semantic Alignment in Multimodal Clustering

Zhengzhong Zhu, Pei Zhou, Weihong Du, Shiquan Min, Jiangping Zhu

Why Do Open-Source LLMs Struggle with Data Analysis? A Systematic Empirical Study

YUQI ZHU, Yi Zhong, Jintian Zhang, Ziheng Zhang, Shuofei Qiao

REAP: Enhancing RAG with Recursive Evaluation and Adaptive Planning for Multi-Hop Question Answering

Yijie Zhu, Haojie Zhou, Wanting Hong, Tailin Liu, Ning Wang

Beyond Chains: Bridging Large Language Models and Knowledge Bases in Complex Question Answering

Yihua Zhu, Qianying Liu, Akiko Aizawa, Hidetoshi Shimodaira

Outlier Matters: Efficient Long-to-Short Reasoning via Outlier-Guided Model Merging

Qiyuan Zhu, Dezhi Li, Lujun Li, Xiaoyu Qin, Wei Li

SubGCache: Accelerating Graph-based RAG with Subgraph-level KV Cache

Qiuyu Zhu, Liang Zhang, Qianxiong Xu, Cheng Long, Jie Zhang

In-Token Rationality Optimization: Towards Accurate and Concise LLM Reasoning via Self-Feedback

Mingye Zhu, Yi Liu, Zheren Fu, Quan Wang, Yongdong Zhang

Evaluating, Synthesizing, and Enhancing for Customer Support Conversation

Jie Zhu, Huaixia Dou, Junhui Li, Lifan Guo, Feng Chen

ResMAS: Resilience Optimization in LLM-based Multi-agent Systems

Zhilun Zhou, Zihan Liu, Jiahe Liu, Qingyu Shao, Yihan Wang

AncientBench: Towards Comprehensive Evaluation on Excavated and Transmitted Chinese Corpora

Zhihan Zhou, Daqian Shi, Rui Song, Lida Shi, Xiaolei Diao

Do Retrieval Augmented Language Models Know When They Don’t Know?

Youchao Zhou, Heyan Huang, Yicheng Liu, Rui Dai, Xinglin Wang