Papers by Lihai Nie
CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning (2026.acl-long)
Copied to clipboard
| Challenge: | Fine-tuning-as-a-service exposes models to harmful fine-tuneing attacks . however, inherent general adaptability of LLMs allows them to bypass selective unlearning by rapidly relearning or repurposing their general capabilities for harmful tasks. |
| Approach: | They propose a paradigm shift that inducing model collapse instead of selective removal by relearning or repurposing general capabilities for harmful tasks. |
| Outcome: | The proposed model collapse mechanism neutralizes the very general capabilities that attackers exploit, tackling the core issue unaddressed by selective unlearning. |
Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Embedding-as-a-Service (EaaS) is a successful business pattern but faces significant challenges related to various forms of copyright infringement. |
| Approach: | They propose a semantic-independent watermarking scheme that exploits semantic perturbation tests to bypass verification. |
| Outcome: | The proposed watermarking schemes possess semantic-independent characteristics and exploit semantic perturbation tests to bypass verification. |