Papers by Bochuan Cao
Monitoring Decoding: Mitigating Hallucination via Evaluating the Factuality of Partial Response during Generation (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing methods to mitiga hallucinations rely on sampling multiple full-length generations, which introduces significant response latency and becomes ineffective when the model consistently produces hallucines. |
| Approach: | They propose a framework that dynamically monitors the generation process and selectively applies in-process interventions to revise hallucination-prone tokens. |
| Outcome: | The proposed framework outperforms self-consistency-based approaches in both effectiveness and efficiency, achieving higher factual accuracy while significantly reducing computational overhead. |
Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections (2024.naacl-long)
Copied to clipboard
| Challenge: | Recent advances in Large Language Models have demonstrated significant improvements in their capacity for generalization. |
| Approach: | They propose to conduct stealthy and persistent unalignment on large language models via backdoor injections. |
| Outcome: | The proposed approach passes the safety evaluation while maintaining strong persistence against re-alignment defense. |
Jailbreak Open-Sourced Large Language Models via Enforced Decoding (2024.acl-long)
Copied to clipboard
Hangfan Zhang, Zhimeng Guo, Huaisheng Zhu, Bochuan Cao, Lu Lin, Jinyuan Jia, Jinghui Chen, Dinghao Wu
| Challenge: | Existing studies show that Large Language Models can be misused to generate undesired content. |
| Approach: | They propose to use large language models to manipulate the generation process to generate undesired content without heavy computations or prompt designs. |
| Outcome: | The proposed method shows that open-sourced large language models could be misused to generate undesired content without heavy computations or prompt designs. |
JoPA: Explaining Large Language Model’s Generation via Joint Prompt Attribution (2025.acl-long)
Copied to clipboard
| Challenge: | Existing attempts to explain the entire language generation often treat input prompt texts independently, ignoring their combinatorial effects on the follow-up generation. |
| Approach: | They propose a framework for explaining how a few prompt texts collaboratively influences the LLM's complete generation. |
| Outcome: | The proposed explanations demonstrate faithfulness and efficiency of the proposed framework. |
WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response (2025.findings-naacl)
Copied to clipboard
| Challenge: | Recent advances in large language models have raised concerns about their susceptibility to jailbreaking attacks, which leads to harmful content inadvertently. |
| Approach: | They propose to exploit the safety alignment patterns of LLMs by simultaneous obfuscation in queries and responses to break down adversarial intent of query. |
| Outcome: | The proposed attack breaks down adversarial intent of query and encourages benign content regarding the games to precede anticipated harmful content in the response. |
Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM (2024.acl-long)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) have made significant advancements but can be misused to generate harmful content. |
| Approach: | They propose a Robustly Aligned LLM to defend against alignment-breaking attacks by retraining existing LLMs and using adversarial or handcrafted jailbreaking prompts. |
| Outcome: | The proposed model reduces attack success rates from nearly 100% to around 10% or less. |