Papers by Ziqi Ding
Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection (2025.emnlp-main)
Copied to clipboard
| Challenge: | Recent studies have shown that visual encoders can induce harmful behavior in multimodal large language models. |
| Approach: | They propose a vision-centric jailbreak attack that uses visual information to create a jailbreak context. |
| Outcome: | The proposed attack outperforms baseline attacks on MM-SafetyBench and GPT-4o. |
NewsSense: Reference-free Verification via Cross-document Comparison (2023.emnlp-demo)
Copied to clipboard
| Challenge: | Various solutions have been proposed to assist with news reading, including media bias charts, which treat each news source as a whole, without digging into specific articles or topics. |
| Approach: | They propose a novel sensemaking tool to integrate news articles on a central topic. |
| Outcome: | The novel reading interface can help users identify key information, verify the credibility of news articles, explore different perspectives, and understand what content is supported, contradicted, or missing. |
Debiasing LLMs by Masking Unfairness-Driving Attention Heads (2026.findings-acl)
Copied to clipboard
Tingxu Han, Wei Song, Ziqi Ding, Ziming Li, Chunrong Fang, Yuekang Li, Dongfang Liu, Zhenyu Chen, Zhenting Wang
| Challenge: | Existing work probes when biased outputs appear, but gives little insight into the mechanisms that generate them, leaving existing mitigations largely fragile. |
| Approach: | They propose a lightweight debiasing framework that detects bias heads and selectively masks only those heads that activate under DA and CoT. |
| Outcome: | The proposed framework reduces unfairness by 391.9%- 534.5% in both one- and two-turn dialogues. |
TombRaider: Entering the Vault of History to Jailbreak Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Existing jailbreak techniques focus on prompt manipulation or intent obfuscation to bypass safety filters. |
| Approach: | They propose a jailbreak technique that exploits the ability to store, retrieve, and use historical knowledge of Large Language Models (LLMs) they use an inspector agent to extract historical information and an attacker agent to generate adversarial prompts, enabling effective bypassing of safety filters. |
| Outcome: | The proposed jailbreak technique outperforms state-of-the-art jailbreak techniques on six popular models and maintains over 55.4% ASR against defence mechanisms. |