Demo Data from VLDB 2026 / reviewers in the wild / expert
Guiyao Tie
dblp:353/6772
· DBLP profile ↗
7ranked-venue papers
2as first author
7since 2021 · last 2026
0009-0000-4702-266XORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 4 · 1 first-author · 4 since 2021Systems, architecture and hardware · 1 · 1 first-author · 1 since 2021Security and privacy · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
4 papers |
Security and privacy of machine learning · 51% Digital forensics and information hiding · 32% Privacy and data protection · 16% | |
| Artificial intelligence
5 papers |
Language models and text generation · 66% Knowledge representation and reasoning · 18% Robot manipulation · 16% | |
| Human-computer interaction and pervasive computing
1 paper |
Learning and educational technologies · 100% |
Topics — the 14 heaviest of 15, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Natural language and speech › Language models and text generation › retrieval-augmented generation
graph-based RAG |
1.0 | 1 | 2026 | LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026 |
Knowledge, reasoning and agents › Knowledge representation and reasoning
knowledge graph |
1.0 | 1 | 2026 | LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026 |
Learning and educational technologies
intelligent tutoring systems |
1.0 | 1 | 2026 | LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026 |
Privacy and data protection
data masking |
1.0 | 1 | 2026 | Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026 |
Security and privacy of machine learning › large language model safety
LLM agent safety |
1.0 | 1 | 2026 | SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator · ACL (1) 2026 |
Security and privacy of machine learning
prompt injection |
1.0 | 1 | 2026 | Prompt Injection Attack to Tool Selection in LLM Agents · NDSS 2026 |
Digital forensics and information hiding › watermarking
text watermarking |
1.0 | 1 | 2026 | Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026 |
Digital forensics and information hiding
watermarking |
1.0 | 1 | 2026 | Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026 |
Natural language and speech › Language models and text generation › large language model reasoning
self-correction |
0.9 | 1 | 2025 | Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMs · NeurIPS 2025 |
Robotics › Robot manipulation › embodied foundation models
vision-language-action model |
0.9 | 1 | 2025 | BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization · NeurIPS 2025 |
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.9 | 1 | 2025 | BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization · NeurIPS 2025 |
Natural language and speech › Language models and text generation
LLM agents |
0.6 | 2 | 2026 | Prompt Injection Attack to Tool Selection in LLM Agents · NDSS 2026 SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator · ACL (1) 2026 |
Natural language and speech › Language models and text generation
large language model reasoning |
0.3 | 1 | 2026 | LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026 |
Security and privacy of machine learning
adversarial robustness |
0.3 | 1 | 2026 | Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026 |
Methods — techniques the papers use, named apart from their topics
risk simulation · 2.0prompt injection · 2.0multi-model path planning · 2.0graph-RAG · 2.0cognitive diagnosis · 2.0objective-decoupled optimization · 1.7feature-space separation · 1.7variational autoencoder · 1.0transformer · 1.0red-teaming · 1.0red teaming · 1.0dual discriminator · 1.0fine-tuning · 0.9chain-of-thought · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path PlanningabstractExisting adaptive learning systems struggle to simultaneously achieve deep personalization, dynamic adaptability, and content trustworthiness, particularly in logically rigorous STEM fields where Large Language Models (LLMs) are prone to "hallucination".This paper introduces LEARNERCOMPASS (Cognitive Multimodel Planning & Adaptive System), an integrated, end-to-end framework for adaptive learning.At its core, the framework features a novel multi-model path planning algorithm that orchestrates and fuses the outputs of heterogeneous LLM experts to generate and optimize learning sequences.To enable deep personalization, we design a dynamic cognitive diagnosis module that employs an innovative encoderdecoder architecture to generate precise, multidimensional cognitive state vectors for learners.To ensure trustworthiness, the system leverages an adaptively constructed dynamic knowledge graph and a Graph-RAG mechanism to provide factual anchors and logical constraints for LLM reasoning, thereby mitigating hallucinations.Extensive experiments demonstrate that LEARNERCOMPASS significantly outperforms state-of-the-art baselines in generating high-quality personalized learning paths.Furthermore, ablation studies validate the critical contributions of our dynamic cognitive diagnosis and multi-model planning components. Ziji Sheng, Guiyao Tie, Pan Zhou 0001, Daizong Liu |
ACL (1) | 2 |
| 2026 | SafeAgent: Safeguarding LLM Agents via an Automated Risk SimulatorabstractXueyang Zhou, Weidong Wang, Lin Lu, Jiawen Shi, Guiyao Tie, Xu Yongtian, Lixing Chen, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun. Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 2026. Xueyang Zhou, Lin Lu 0003, Guiyao Tie, Yongtian Xu, Lixing Chen, Pan Zhou 0001, Neil Zhenqiang Gong, Lichao Sun 0001 |
ACL (1) | 5 |
| 2026 | Prompt Injection Attack to Tool Selection in LLM Agents
Zenghui Yuan, Guiyao Tie, Pan Zhou 0001, Neil Zhenqiang Gong, Lichao Sun 0001 |
NDSS | 3 |
| 2026 | Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and SharingabstractIn recent years, the frequent leakage of sensitive information in natural language texts has presented significant challenges in text distribution, sharing, and migration. Existing methods for text protection and watermarking are limited, capable of either hide sensitive data or prevent unauthorized copying and tampering, but not both simultaneously. To address these limitations, this paper proposes a masking-watermarking cooperative framework designed to hide text-sensitive information, prevent unintentional data leakage, and ensure content ownership verification and tampering prevention. The framework introduces three novel techniques: a variable autoencoder to ensure diverse watermark generation, an improved transformer to enhance the adaptability of dynamic masks, and a dual discriminator for joint verification of text and watermarks. A comprehensive evaluation was conducted, covering text similarity, masking flexibility, and the imperceptibility of text masking, as well as watermark classification recognition and robustness against various attacks. The proposed framework achieved a score of 0.98 on the SBERT metric, demonstrating its effectiveness in achieving imperceptible text masking and robust watermark embedding. Guiyao Tie, Devki Nandan Jha, Mutaz Barika, Jun Song 0003 |
IEEE Trans. Computers | 1 |
| 2025 | Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMsabstractSelf-correction of large language models (LLMs) emerges as a critical component for enhancing their reasoning performance. Although various self-correction methods have been proposed, a comprehensive evaluation of these methods remains largely unexplored, and the question of whether LLMs can truly correct themselves is a matter of significant interest and concern. In this study, we introduce CorrectBench, a benchmark developed to evaluate the effectiveness of self-correction strategies, including intrinsic, external, and fine-tuned approaches, across three tasks: commonsense reasoning, mathematical reasoning, and code generation. Our findings reveal that: 1) Self-correction methods can improve accuracy, especially for complex reasoning tasks; 2) Mixing different self-correction strategies yields further improvements, though it reduces efficiency; 3) Reasoning LLMs (e.g., DeepSeek-V3) have limited optimization under additional self-correction methods and have high time costs. Interestingly, a comparatively simple chain-of-thought (CoT) baseline demonstrates competitive accuracy and efficiency. These results underscore the potential of self-correction to enhance LLM's reasoning performance while highlighting the ongoing challenge of improving their efficiency. Consequently, we advocate for further research focused on optimizing the balance between reasoning capabilities and operational efficiency. Guiyao Tie, Zenghui Yuan, Zeli Zhao, Chaoran Hu, Tianhe Gu, Ruihang Zhang, Sizhe Zhang, Junran Wu, Xiaoyue Tu, Ming Jin 0005, Qingsong Wen, Lixing Chen, Pan Zhou 0001, Lichao Sun 0001 |
NeurIPS | 1 |
| 2025 | BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled OptimizationabstractVision-Language-Action (VLA) models have advanced robotic control by enabling end-to-end decision-making directly from multimodal inputs. However, their tightly coupled architectures expose novel security vulnerabilities. Unlike traditional adversarial perturbations, backdoor attacks represent a stealthier, persistent, and practically significant threat—particularly under the emerging Training-as-a-Service paradigm—but remain largely unexplored in the context of VLA models. To address this gap, we propose **BadVLA**, a backdoor attack method based on Objective-Decoupled Optimization, which for the first time exposes the backdoor vulnerabilities of VLA models. Specifically, it consists of a two-stage process: (1) explicit feature-space separation to isolate trigger representations from benign inputs, and (2) conditional control deviations that activate only in the presence of the trigger, while preserving clean-task performance. Empirical results on multiple VLA benchmarks demonstrate that BadVLA consistently achieves near-100\% attack success rates with minimal impact on clean task accuracy. Further analyses confirm its robustness against common input perturbations, task transfers, and model fine-tuning, underscoring critical security vulnerabilities in current VLA deployments. Our work offers the first systematic investigation of backdoor vulnerabilities in VLA models, highlighting an urgent need for secure and trustworthy embodied model design practices. Xueyang Zhou, Guiyao Tie, Guowen Zhang, Hecheng Wang, Pan Zhou 0001, Lichao Sun 0001 |
NeurIPS | 2 |
| 2023 | EBSS: A secure blockchain-based sharing scheme for real estate financial credentials
Yadi Wu, Guiyao Tie, Jianxin Li 0001, Jun Song 0003 |
World Wide Web (WWW) | 2 |