Papers by Litian Zhang
DSG-MCTS: A Dynamic Strategy-Guided Monte Carlo Tree Search for Diversified Reasoning in Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Large language models (LLMs) have shown strong potential in complex reasoning tasks, but their performance often degrades, resulting in hallucinations, errors, and logical inconsistencies. |
| Approach: | They propose a framework that integrates multiple reasoning strategies to expand the reasoning space and a dynamic strategy selection mechanism that adapts to the task context. |
| Outcome: | The proposed framework outperforms existing state-of-the-art methods on a set of reasoning benchmarks. |
Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning (2026.acl-long)
Copied to clipboard
| Challenge: | Existing defenses rely on shallow pattern matching, which struggles to generalize to novel and unseen attack strategies. |
| Approach: | They propose a framework which emulates human cognitive reasoning through a structured reasoning chain. |
| Outcome: | The proposed framework achieves state-of-the-art performance and exhibits strong generalization to unseen attacks. |
BaitAttack: Alleviating Intention Shift in Jailbreak Attacks via Adaptive Bait Crafting (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing attacks focus on meticulously constructing prompts to disguise harmful intentions . however, incorporation of disguising prompts may incur the challenge of "intention shift" |
| Approach: | They propose a jailbreak attack component, BaitAttack, to alleviate the effects of intention shift . Bait provides a response to the query, prompting LLMs to rectify or supplement the knowledge within the bait . |
| Outcome: | The proposed component, BaitAttack, reduces the effects of intention shift within jailbreak attacks. |
Evo-Attacker: Memory-Augmented Reinforcement Learning for Long-Horizon Tool Attacks on LLM-MAS (2026.acl-long)
Copied to clipboard
| Challenge: | Existing tool attacks are limited by domain specificity or fixed and static templates. |
| Approach: | They propose an attack-based memory-augmented reinforcement learning process that constructs a dynamic attack memory and employs deliberative reasoning to retrieve adversarial patterns. |
| Outcome: | Evo-Attacker outperforms baselines in the long-horizon credit assignment challenge. |
MDS: A Fine-Grained Dataset for Multi-Modal Dialogue Summarization (2024.lrec-main)
Copied to clipboard
| Challenge: | Summarizing the dialogue into a short message has drawn much attention due to the explosion of various dialogue scenes. |
| Approach: | They develop a multi-modal dialogue summarization dataset to enhance the variety of data available for this research area. |
| Outcome: | The proposed dataset provides a demanding testbed for multi-modal dialogue summarization. |
LlmFixer: Fix the Helpfulness of Defensive Large Language Models (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Several defense strategies have been introduced to defend against jailbreak attacks, but these strategies weakened the usefulness of large language models. |
| Approach: | They propose a framework that acts on large language models equipped with any defense strategy to recover their usefulness. |
| Outcome: | The proposed framework can be used on large language models to recover their usefulness without updating the parameters of a defensive large language model. |