Papers by Haibo Hu
From Domains to Instances: Dual-Granularity Data Synthesis for LLM Unlearning (2026.findings-acl)
Copied to clipboard
Xiaoyu Xu, Minxin Du, Zitong LI, Zi Liang, Zhibiao Guo, Zhang Shiyu, Peizhao Hu, Qingqing Ye, Haibo Hu
| Challenge: | Currently, the evaluation of unlearning is limited due to the lack of granularity in the model. |
| Approach: | They propose a framework for synthesizing high-quality forget sets that exploits the target model per se to elicit data that matches its internal knowledge distribution through seed-guided and adversarial prompting. |
| Outcome: | The proposed framework achieves a superior balance of relevance, diversity, and efficiency across benchmarks. |
OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Large language models (LLMs) trained over corpora risk memorizing sensitive, copyrighted, or toxic content. |
| Approach: | They propose a framework that removes targeted data while preserving model utility. |
| Outcome: | The proposed framework resists membership inference attacks, minimizes impact on retained data, and maintains robustness across diverse scenarios. |
“Yes, My LoRD.” Guiding Language Model Extraction with Locality Reinforced Distillation (2025.acl-long)
Copied to clipboard
| Challenge: | Existing methods for model extraction attacks on large language models are inadequate . existing methods neglect the inconsistency between training tasks and LLM alignment . |
| Approach: | They propose a model extraction algorithm that uses a policy-gradient-style training task to guide the crafting of preference for the local model. |
| Outcome: | The proposed algorithm reduces query complexity while mitigating watermark protection . it can extract various state-of-the-art commercial LLMs while minimizing query complexity . |
AudioStealer: Extracting Audio Prompts via Shapley Value-Guided Query Search (2026.findings-acl)
Copied to clipboard
| Challenge: | prompt stealing is a new form of attack that aims to reconstruct high-value prompts that guide music generation. |
| Approach: | They propose a method to steal music prompts from audio domains using a black-box attack framework. |
| Outcome: | The proposed method recovers prompts with high textual consistency to the ground truth while maintaining strong perceptual similarity to the target recordings. |