Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Guiyao Tie

dblp:353/6772 · DBLP profile ↗
← Back
7ranked-venue papers
2as first author
7since 2021 · last 2026
0009-0000-4702-266XORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 4 · 1 first-author · 4 since 2021Systems, architecture and hardware · 1 · 1 first-author · 1 since 2021Security and privacy · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Security and privacy of machine learning · 51% Digital forensics and information hiding · 32% Privacy and data protection · 16%
Artificial intelligence
5 papers
Language models and text generation · 66% Knowledge representation and reasoning · 18% Robot manipulation · 16%
Human-computer interaction and pervasive computing
1 paper
Learning and educational technologies · 100%

Topics — the 14 heaviest of 15, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Natural language and speech › Language models and text generation › retrieval-augmented generation
graph-based RAG
1.012026
LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026
Knowledge, reasoning and agents › Knowledge representation and reasoning
knowledge graph
1.012026
LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026
Learning and educational technologies
intelligent tutoring systems
1.012026
LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026
Privacy and data protection
data masking
1.012026
Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026
Security and privacy of machine learning › large language model safety
LLM agent safety
1.012026
SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator · ACL (1) 2026
Security and privacy of machine learning
prompt injection
1.012026
Prompt Injection Attack to Tool Selection in LLM Agents · NDSS 2026
Digital forensics and information hiding › watermarking
text watermarking
1.012026
Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026
Digital forensics and information hiding
watermarking
1.012026
Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026
Natural language and speech › Language models and text generation › large language model reasoning
self-correction
0.912025
Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMs · NeurIPS 2025
Robotics › Robot manipulation › embodied foundation models
vision-language-action model
0.912025
BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization · NeurIPS 2025
Security and privacy of machine learning › adversarial attack
backdoor attack
0.912025
BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization · NeurIPS 2025
Natural language and speech › Language models and text generation
LLM agents
0.622026
Prompt Injection Attack to Tool Selection in LLM Agents · NDSS 2026
SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator · ACL (1) 2026
Natural language and speech › Language models and text generation
large language model reasoning
0.312026
LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning · ACL (1) 2026
Security and privacy of machine learning
adversarial robustness
0.312026
Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing · IEEE Trans. Computers 2026

Methods — techniques the papers use, named apart from their topics

risk simulation · 2.0prompt injection · 2.0multi-model path planning · 2.0graph-RAG · 2.0cognitive diagnosis · 2.0objective-decoupled optimization · 1.7feature-space separation · 1.7variational autoencoder · 1.0transformer · 1.0red-teaming · 1.0red teaming · 1.0dual discriminator · 1.0fine-tuning · 0.9chain-of-thought · 0.9
YearPublicationVenuePosition
2026 LearnerCoMPASS: Intelligent Tutoring System with Dynamic Cognitive Diagnosis and Multi-Model Path Planning
abstract
Existing adaptive learning systems struggle to simultaneously achieve deep personalization, dynamic adaptability, and content trustworthiness, particularly in logically rigorous STEM fields where Large Language Models (LLMs) are prone to "hallucination".This paper introduces LEARNERCOMPASS (Cognitive Multimodel Planning & Adaptive System), an integrated, end-to-end framework for adaptive learning.At its core, the framework features a novel multi-model path planning algorithm that orchestrates and fuses the outputs of heterogeneous LLM experts to generate and optimize learning sequences.To enable deep personalization, we design a dynamic cognitive diagnosis module that employs an innovative encoderdecoder architecture to generate precise, multidimensional cognitive state vectors for learners.To ensure trustworthiness, the system leverages an adaptively constructed dynamic knowledge graph and a Graph-RAG mechanism to provide factual anchors and logical constraints for LLM reasoning, thereby mitigating hallucinations.Extensive experiments demonstrate that LEARNERCOMPASS significantly outperforms state-of-the-art baselines in generating high-quality personalized learning paths.Furthermore, ablation studies validate the critical contributions of our dynamic cognitive diagnosis and multi-model planning components.
Ziji Sheng, Guiyao Tie, Pan Zhou 0001, Daizong Liu
ACL (1)2
2026 SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator
abstract
Xueyang Zhou, Weidong Wang, Lin Lu, Jiawen Shi, Guiyao Tie, Xu Yongtian, Lixing Chen, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun. Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 2026.
Xueyang Zhou, Lin Lu 0003, Guiyao Tie, Yongtian Xu, Lixing Chen, Pan Zhou 0001, Neil Zhenqiang Gong, Lichao Sun 0001
ACL (1)5
2026 Prompt Injection Attack to Tool Selection in LLM Agents
Zenghui Yuan, Guiyao Tie, Pan Zhou 0001, Neil Zhenqiang Gong, Lichao Sun 0001
NDSS3
2026 Masking-Watermarking Cooperative: An End-to-End Adversarial Protection Framework for Secure Text Distribution and Sharing
abstract
In recent years, the frequent leakage of sensitive information in natural language texts has presented significant challenges in text distribution, sharing, and migration. Existing methods for text protection and watermarking are limited, capable of either hide sensitive data or prevent unauthorized copying and tampering, but not both simultaneously. To address these limitations, this paper proposes a masking-watermarking cooperative framework designed to hide text-sensitive information, prevent unintentional data leakage, and ensure content ownership verification and tampering prevention. The framework introduces three novel techniques: a variable autoencoder to ensure diverse watermark generation, an improved transformer to enhance the adaptability of dynamic masks, and a dual discriminator for joint verification of text and watermarks. A comprehensive evaluation was conducted, covering text similarity, masking flexibility, and the imperceptibility of text masking, as well as watermark classification recognition and robustness against various attacks. The proposed framework achieved a score of 0.98 on the SBERT metric, demonstrating its effectiveness in achieving imperceptible text masking and robust watermark embedding.
Guiyao Tie, Devki Nandan Jha, Mutaz Barika, Jun Song 0003
IEEE Trans. Computers1
2025 Can LLMs Correct Themselves? A Benchmark of Self-Correction in LLMs
abstract
Self-correction of large language models (LLMs) emerges as a critical component for enhancing their reasoning performance. Although various self-correction methods have been proposed, a comprehensive evaluation of these methods remains largely unexplored, and the question of whether LLMs can truly correct themselves is a matter of significant interest and concern. In this study, we introduce CorrectBench, a benchmark developed to evaluate the effectiveness of self-correction strategies, including intrinsic, external, and fine-tuned approaches, across three tasks: commonsense reasoning, mathematical reasoning, and code generation. Our findings reveal that: 1) Self-correction methods can improve accuracy, especially for complex reasoning tasks; 2) Mixing different self-correction strategies yields further improvements, though it reduces efficiency; 3) Reasoning LLMs (e.g., DeepSeek-V3) have limited optimization under additional self-correction methods and have high time costs. Interestingly, a comparatively simple chain-of-thought (CoT) baseline demonstrates competitive accuracy and efficiency. These results underscore the potential of self-correction to enhance LLM's reasoning performance while highlighting the ongoing challenge of improving their efficiency. Consequently, we advocate for further research focused on optimizing the balance between reasoning capabilities and operational efficiency.
Guiyao Tie, Zenghui Yuan, Zeli Zhao, Chaoran Hu, Tianhe Gu, Ruihang Zhang, Sizhe Zhang, Junran Wu, Xiaoyue Tu, Ming Jin 0005, Qingsong Wen, Lixing Chen, Pan Zhou 0001, Lichao Sun 0001
NeurIPS1
2025 BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization
abstract
Vision-Language-Action (VLA) models have advanced robotic control by enabling end-to-end decision-making directly from multimodal inputs. However, their tightly coupled architectures expose novel security vulnerabilities. Unlike traditional adversarial perturbations, backdoor attacks represent a stealthier, persistent, and practically significant threat—particularly under the emerging Training-as-a-Service paradigm—but remain largely unexplored in the context of VLA models. To address this gap, we propose **BadVLA**, a backdoor attack method based on Objective-Decoupled Optimization, which for the first time exposes the backdoor vulnerabilities of VLA models. Specifically, it consists of a two-stage process: (1) explicit feature-space separation to isolate trigger representations from benign inputs, and (2) conditional control deviations that activate only in the presence of the trigger, while preserving clean-task performance. Empirical results on multiple VLA benchmarks demonstrate that BadVLA consistently achieves near-100\% attack success rates with minimal impact on clean task accuracy. Further analyses confirm its robustness against common input perturbations, task transfers, and model fine-tuning, underscoring critical security vulnerabilities in current VLA deployments. Our work offers the first systematic investigation of backdoor vulnerabilities in VLA models, highlighting an urgent need for secure and trustworthy embodied model design practices.
Xueyang Zhou, Guiyao Tie, Guowen Zhang, Hecheng Wang, Pan Zhou 0001, Lichao Sun 0001
NeurIPS2
2023 EBSS: A secure blockchain-based sharing scheme for real estate financial credentials
Yadi Wu, Guiyao Tie, Jianxin Li 0001, Jun Song 0003
World Wide Web (WWW)2