Papers by Xiaoya Lu
LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts (2025.acl-long)
Copied to clipboard
Qibing Ren, Hao Li, Dongrui Liu, Zhanxu Xie, Xiaoya Lu, Yu Qiao, Lei Sha, Junchi Yan, Lizhuang Ma, Jing Shao
| Challenge: | Current safety training focuses on teaching models to reject harmful queries, but recent research shows that adversarial attacks or jailbreak methods bypass these safety mechanisms. |
| Approach: | They propose to use a new attack method to craft multi-turn toxic prompts that gradually lead LLMs to reveal unsafe content. |
| Outcome: | The proposed method outperforms existing methods in diversity, effectiveness, and efficiency across aligned LLMs. |
X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Jailbreak Attacks without Compromising Usability (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Existing methods for enhancing LLM security compromise usability, study finds . boundary-safe representations close to harmful representations are disrupted, resulting in usability decline . |
| Approach: | They propose a method to push harmful representations away from boundary-safe representations and obtain an exact distinction boundary. |
| Outcome: | The proposed method reduces over-refusal rate and maintains general capability . it pushes harmful representations away from boundary-safe representations, thereby reducing usability. |
LLMs Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactions (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing studies have shown that LLMs finetuned on incorrect completions can exhibit harmful behaviors, which is called emergent misalignment. |
| Approach: | They investigate whether LLMs finetuned on incorrect completions can exhibit harmful behaviors . they find that 1% of misalignment data is sufficient to decrease honest behavior . |
| Outcome: | The proposed model can be misaligned on errors within narrow domains to exhibit harmful behaviors . the proposed model is able to exhibit dishonest behavior with only 10% biased user population . |
Towards Interpretable Clinical Diagnosis with Bayesian Network Ensembles Stacked on Entity-Aware CNNs (2020.acl-main)
Copied to clipboard
| Challenge: | a novel framework for text-based diagnosis of diseases requires appropriate balance between accuracy and interpretability. |
| Approach: | They propose a framework that stacks Bayesian Network Ensembles on top of CNN to build an accurate yet interpretable diagnosis system. |
| Outcome: | The proposed framework outperforms the previous automatic diagnosis methods in accuracy performance and the diagnosis explanation of the framework is reasonable. |