Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yichao Gao

dblp:136/4505 · DBLP profile ↗
← Back
8ranked-venue papers
4as first author
8since 2021 · last 2026
0009-0007-3109-1135ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Computer networks · 3 · 1 first-author · 3 since 2021Artificial intelligence and machine learning · 2 · 1 first-author · 2 since 2021Systems, architecture and hardware · 2 · 2 first-author · 2 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 1 first-author · 2 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
2 papers
3D vision · 50% Segmentation and scene understanding · 33% Language models and text generation · 17%
Network and information security
2 papers
Security and privacy of machine learning · 80% Systems and software security · 20%

Topics — the 9 heaviest of 9, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › large language model security
LLM agent security
2.022026
Beyond Detection: Autonomous Anomaly Remediation for MCP Against Tool Poisoning Attacks · WWW 2026
MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers · AAAI 2026
Security and privacy of machine learning › prompt injection
tool poisoning attack
2.022026
Beyond Detection: Autonomous Anomaly Remediation for MCP Against Tool Poisoning Attacks · WWW 2026
MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers · AAAI 2026
Computer vision › 3D vision › neural rendering
3d gaussian splatting
1.012026
IQGS: Instance Query-based Gaussian Segmentation · AAAI 2026
Computer vision › Segmentation and scene understanding › 3d segmentation › 3d scene segmentation
3d gaussian splatting segmentation
1.012026
IQGS: Instance Query-based Gaussian Segmentation · AAAI 2026
Computer vision › 3D vision
3d reconstruction
1.012026
IQGS: Instance Query-based Gaussian Segmentation · AAAI 2026
Computer vision › 3D vision
3d scene understanding
1.012026
IQGS: Instance Query-based Gaussian Segmentation · AAAI 2026
Computer vision › Segmentation and scene understanding
instance segmentation
1.012026
IQGS: Instance Query-based Gaussian Segmentation · AAAI 2026
Natural language and speech › Language models and text generation
LLM agents
1.012026
Beyond Detection: Autonomous Anomaly Remediation for MCP Against Tool Poisoning Attacks · WWW 2026
Systems and software security
vulnerability discovery
1.012026
MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers · AAAI 2026

Methods — techniques the papers use, named apart from their topics

autonomous remediation · 2.0anomaly detection · 2.0relaxed object-level supervision · 1.0instance query · 1.0few-shot learning · 1.0benchmark construction · 1.0
YearPublicationVenuePosition
2026 IQGS: Instance Query-based Gaussian Segmentation
abstract
In recent years, Gaussian scene representations have achieved a series of promising results in 3D reconstruction. Compared to the previous 3DGS paradigm, the latest reconstruction approach 2DGS can achieve more accurate geometric representation using fewer Gaussian points. Accordingly, developing a panoramic segmentation algorithm suitable for 2DGS-reconstructed scenes is of significant importance. However, existing segmentation methods are primarily designed for 3DGS. They either fail to account for all objects in complex segmentation scenes or suffer from significant performance degradation when applied to 2D Gaussian scenes. Moreover, these methods consistently exhibit poor cross-dataset generalization. To address these issues, we propose IQGS, a segmentation framework applicable to 2DGS representations. Specifically, IQGS employs per-instance query and relaxed object-level supervision instead of strict pixel-level ID supervision, effectively mitigating the segmentation performance degradation that occurs when applied to 2DGS. At the same time, by learning features independent of specific object ID assignments, IQGS enhances its ability to generalize across diverse datasets. Our method achieves impressive panoramic segmentation results across multiple datasets, with an average mIoU of 66.6%, surpassing the state-of-the-art method Gaussian Grouping, which achieves 57.17%.
Yichao Gao, Xinyuan Liu 0003, Yike Ma
AAAI1
2026 MCPTox: A Benchmark for Tool Poisoning on Real-World MCP Servers
abstract
By providing a standardized interface for LLM agents to interact with external tools, the Model Context Protocol (MCP) is quickly becoming a cornerstone of the modern autonomous agent ecosystem. However, it creates novel attack surfaces due to untrusted external tools. While prior work has focused on attacks injected through external tool outputs, we investigate a more fundamental vulnerability: Tool Poisoning, where malicious instructions are embedded within a tool's metadata at the registration stage. To date, this threat has been primarily demonstrated through isolated cases, lacking a systematic, large-scale evaluation. We introduce MCPTox, the first benchmark to systematically evaluate agent robustness against Tool Poisoning in realistic MCP settings. MCPTox is constructed upon 45 live, real-world MCP servers and 353 authentic tools. To achieve this, we design three distinct attack templates to generate a comprehensive suite of 1348 malicious test cases by few-shot learning, covering 10 categories of potential risks. Our evaluation on 20 prominent LLM agents setting reveals a widespread vulnerability to Tool Poisoning, with GPT-o1-mini, achieving an attack success rate of 72.8%. We find that more capable models are often more susceptible, as the attack exploits their superior instruction-following abilities. Finally, the failure case analysis reveals that agents rarely refuse these attacks, with the highest refused rate (Claude-3.7-Sonnet) less than 3%, demonstrating that existing safety alignment is ineffective against malicious actions that use legitimate tools for unauthorized operation. Our findings create a crucial empirical baseline for understanding and mitigating this widespread threat, and we release MCPTox for the development of verifiably safer AI agents.
Yichao Gao, Suyuan Liu, Haifeng Sun 0005, Guanquan Shi, Haohua Du, Xiang-Yang Li 0001
AAAI2
2026 Tremerity-Fi: Non-Contact Daily-Life Tremor Severity Assessment by Commercial mmWave Radar
abstract
Tremor is a common symptom of neurological diseases. The regular assessment of daily tremors facilitates the evaluation of disease progression and assists clinicians in optimizing treatment strategies. However, current home monitoring solutions have difficulty in dealing with user cooperation, privacy concerns, environmental interference, and system generalization, leading to feasibility concerns in activities of daily living (ADL). To this end, we propose Tremerity-Fi, a non-contact and privacy-friendly tremor severity assessment system based on mmWave radar. To realize Tremerity-Fi, we first design an adaptive beamforming algorithm to accurately identify useful but weak signals from numerous reflections captured in the environment. Second, unlike primary reflections commonly used in mmWave sensing, we leverage multipath reflections that carry useful information about the target's motion, even though they are generally considered harmful, to help reconstruct hand signals and improve sensing performance. Furthermore, we propose an unsupervised domain adaptation algorithm to improve the ability to adapt to unseen environments and users. We collect a diverse dataset of 5 patients and 25 healthy subjects in 3 scenarios, such as offices, homes, and hospitals. Extensive experiments show that our system achieves 94.51% accuracy in tremor detection, about 5 higher than the SOTA mmWave radar method, and 89.13% in tremor severity assessment, demonstrating its sufficient potential as a tremor monitoring assistant for patients with neurological diseases.
Jingyang Hu, Yichao Gao, Yiyu Xin, Xiang-Yang Li 0001
IWQoS4
2026 Beyond Detection: Autonomous Anomaly Remediation for MCP Against Tool Poisoning Attacks
abstract
LLM-powered agents are evolving from passive recommenders into autonomous executors, leveraging tools via the Model Context Protocol (MCP) for web automation. However, this paradigm introduces a new vulnerability: tool poisoning attacks that manipulate the MCP context can corrupt an agent's reasoning. Existing methods focus on anomaly detection and lack autonomous correction mechanisms, hindering their real-world deployment.
Guanquan Shi, Yichao Gao, Hongsen Lang, Yunhao Yao, Haohua Du, Xiang-Yang Li 0001
WWW4
2024 WowSense: A High-Accuracy Real-Time Grip-State Sensing on Commodity Smartphones
abstract
Smart-devices' grip-state has shown great potential to enable various intelligent applications, including virtual keyboard and automatic UI adaption. However, smartphones nowadays often lack the capability to detect the grip-state, resulting in a poor experience of human-computer interaction. To implement an effective and efficient grip-state detection, we need to tackle a number of technical challenges such as effective features extraction and fusion from multimodal data, nonalignment of different modal data, and limited labeled data availability. In this work, to address these challenges, we design a two-stage grip-state detecting system, named WowSense, for high-accuracy, real-time detection of phone's grip-states using IMU (Inertial Measurement Unit) and CS (Capacitivc Screen) data. Our system WowSense consists of the multimodal alignment stage and the grip-state classification stage. In the first stage, we employ a novel augmentation method to capture subtle features from IMU and CS data. Additionally, we utilize contrastive learning to extract consistent information across these two modalities using a large amount of unlabeled data. In the second stage, we design an attention-based classifier to capture complementary information using only a small amount of labeled data. We implement our system in OpenHarmony and our extensive experimental results demonstrate the superiority of our system, which achieves 95 % accuracy with only 40 % of the data labeled on a self-collected dataset and 92.5 % accuracy with a latency of only around 10ms when running in real-time on a phone,
Yichao Gao, Chuanzi Zhang, Yiyu Xin, Feiyu Han, Haohua Du, Xiang-Yang Li 0001
MSN1
2024 InOut: Lightweight Transferable Multimodal Indoor-Outdoor Detection System with Smartphones
abstract
Location awareness in mobile devices, particularly the detection of indoor and outdoor transitions, empowers devices to ascertain their own or user's position and offer pertinent intelligent services accordingly. In this paper, we present InOut, a robust and realistic indoor-outdoor detection system characterized by high precision, low latency, and cross-device transferability. Regarding effectiveness, considering that a singular sensor signal is inadequate in providing comprehensive environmental information for detection, we employ a multimodal fusion approach. Concerning efficiency, we optimize the model by pruning non-essential features through the calculation of Shapley values for importance assessment. Furthermore, given the heterogeneity of data from different devices, we implement an unsupervised domain adaptation method that enables effective model transfer across devices with limited unlabeled target domain data. Experimental results demonstrate that our InOut system achieves over 96% accuracy on the test dataset, with detection latency consistently maintained to be within 3.1 seconds (including 3 seconds of interface latency and less than 0.1 seconds of inference latency). Moreover, utilizing unlabeled data from a disparate mobile phone model, amounting to one-sixth the size of the original dataset, we enhance the model's accuracy from 83% before transfer to over 91%.
Yiyu Xin, Chuanzi Zhang, Yichao Gao, Haohua Du, Xiang-Yang Li 0001
MSN4
2024 Dual experience replay-based TD3 for single intersection signal control
Yichao Gao, Dake Zhou, Yaqi Shen, Xin Yang 0002
J. Supercomput.1
2023 Optimal Station Placement and Assignment for Electric Vehicle Battery Swapping
abstract
Considering the long charging time and limitation of available charging stations in the traditional battery recharging facilities, the construction of battery swapping station (BSS) has become a new paradigm to satisfy the energy demand timely and sufficiently. Previous solutions lack a joint consideration of battery swapping station establishment and request assignment with the long distance subsidy. In this paper, we study the Station Placement and Assignment (SPA) problem to minimize the overall operation cost. Unfortunately, it shows great difficulty due to the infinite candidate locations and the complex coupling relation for request assignments. To address these challenges, we first devise the bundle generation strategy to reduce the infinite candidate location to finite, then propose an efficient algorithm based on the greedy strategy to assign the battery swapping requests. Extensive evaluations are carried out to show the outstanding performance of our proposed algorithms.
Yichao Gao, Tao Wu 0001, Xiaochen Fan, Xianrui Pan, Panlong Yang
ICPADS1