Papers by Xiaogeng Liu
AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection (2025.acl-long)
Copied to clipboard
| Challenge: | Existing defense agencies fail to adaptively and effectively mitigate these risks. |
| Approach: | They propose a lifelong agent guardrail that enhances LLM agent safety by enabling adaptive safety check generation, effective safety check optimization, and tool compatibility & flexibility. |
| Outcome: | The proposed agent guardrail achieves strong performance against task-specific and systemic risks and is transferable across different LLM agents’ tasks. |
PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free (2025.acl-long)
Copied to clipboard
| Challenge: | Prompt injection attacks pose a critical threat to large language models, enabling goal hijacking and data leakage. |
| Approach: | They propose a prompt guard model that incorporates a new training strategy to mitigate over-defense for free . PIGuard significantly reduces the bias on trigger words, enabling fine-grained evaluation . |
| Outcome: | The proposed model outperforms the existing model on diverse benchmarks by 30.4%. |
RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process (2025.findings-naacl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) are still susceptible to jailbreak exploits despite rigorous pre-training and fine-tuning focused on ethical alignment . |
| Approach: | They propose a Retrieval-based attack Retriest-based Prompt Decomposition framework that decomposes harmful queries embedded within user prompts into a one-shot learning example to effectively teach the LLM to discern and separate malicious components. |
| Outcome: | The proposed framework is capable of decomposing harmful queries from the original query and enhancing the resilience of large language models against jailbreak attacks without compromising their performance. |
CVE-Bench: Benchmarking LLM-based Software Engineering Agent’s Ability to Repair Real-World CVE Vulnerabilities (2025.naacl-long)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) and LLM agents have demonstrated significant potential in this domain by understanding descriptions in natural language and generating corresponding formal code. |
| Approach: | They propose an evaluation framework that provides LLM agents with a test environment that simulates the real-world vulnerability repair process. |
| Outcome: | The proposed framework can repair 21% of vulnerabilities at its best, but lacks expert knowledge . the evaluation framework can only repair 29% of vulnerabilities, but it can be used in real-world scenarios . |