Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yuzhou Nie

dblp:331/3170 · DBLP profile ↗
← Back
4ranked-venue papers
1as first author
4since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 4 · 1 first-author · 4 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Multi-agent systems · 56% Reinforcement learning · 28% Language models and text generation · 17%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 8 heaviest of 8, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Knowledge, reasoning and agents › Multi-agent systems › agent architecture
hierarchical multi-agent framework
0.912025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation · NeurIPS 2025
Knowledge, reasoning and agents › Multi-agent systems
LLM-based multi-agent systems
0.912025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation · NeurIPS 2025
Machine learning › Reinforcement learning
multi-agent reinforcement learning
0.912025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation · NeurIPS 2025
Security and privacy of machine learning › large language model security
adversarial attacks on language models
0.812024
When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search · NeurIPS 2024
Security and privacy of machine learning › large language model safety
black-box jailbreak
0.812024
When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search · NeurIPS 2024
Security and privacy of machine learning › adversarial attack
jailbreak attack
0.812024
When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search · NeurIPS 2024
Natural language and speech › Language models and text generation
LLM agents
0.312025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation · NeurIPS 2025
Natural language and speech › Language models and text generation › LLM agents › tool use
tool-calling agents
0.312025
OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation · NeurIPS 2025

Methods — techniques the papers use, named apart from their topics

reinforcement learning · 0.9modular architecture · 0.9hierarchical planning · 0.9proximal policy optimization · 0.8genetic algorithm · 0.8deep reinforcement learning · 0.8
YearPublicationVenuePosition
2025 OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation
abstract
Large Language Model (LLM)-based multi-agent systems show promise for automating real-world tasks but struggle to transfer across domains due to their domain-specific nature. Current approaches face two critical shortcomings: they require complete architectural redesign and full retraining of all components when applied to new domains. We introduce **Workforce**, a hierarchical multi-agent framework that decouples strategic planning from specialized execution through a modular architecture comprising: *(i)* a *domain-agnostic* **Planner** for task decomposition, *(ii)* a **Coordinator** for subtask management, and *(iii)* specialized **Workers** with *domain-specific* tool-calling capabilities. This decoupling enables cross-domain transferability during both inference and training phases: During inference, Workforce seamlessly adapts to new domains by adding or modifying worker agents; For training, we introduce **Optimized Workforce Learning (OWL)**, which improves generalization across domains by optimizing a domain-agnostic planner with reinforcement learning from real-world feedback. To validate our approach, we evaluate Workforce on the GAIA benchmark, covering various realistic, multi-domain agentic tasks. Experimental results demonstrate Workforce achieves open-source state-of-the-art performance (**69.70%**), outperforming commercial systems like OpenAI's Deep Research by **2.34%**. More notably, our OWL-trained 32B model achieves **52.73%** accuracy (**+16.37%**) and demonstrates performance comparable to GPT-4o on challenging tasks. To summarize, by enabling scalable generalization and modular domain transfer, our work establishes a foundation for the next generation of general-purpose AI assistants. *Our code is available at [Anonymous URL](https://anonymous.4open.science/r/annonymous-owl/), and our data is available at [Anonymous URL](https://huggingface.co/anonymous21016).*
Mengkang Hu, Wendong Fan, Yuzhou Nie, Ziyu Ye, Bowei Xia, Zhaoxuan Jin, Yingru Li, Qianshuo Ye, Bernard Ghanem, Ping Luo 0002, Guohao Li 0001
NeurIPS4
2025 SECODEPLT: A Unified Benchmark for Evaluating the Security Risks and Capabilities of Code GenAI
abstract
Existing benchmarks for evaluating the security risks and capabilities (e.g., vulnerability detection) of code-generating large language models (LLMs) face several key limitations:(1) limited coverage of risk and capabilities;(2) reliance on static evaluation metrics such as LLM judgments or rule-based detection, which lack the precision of dynamic analysis; and(3) a trade-off between data quality and benchmark scale.To address these challenges, we introduce a general and scalable benchmark construction framework that begins with manually validated, high-quality seed examples and expands them via targeted mutations.Each mutated sample retains the seed’s security semantics while providing diverse, unseen instances. The resulting benchmark bundles every artifact required for dynamic evaluation, including prompts, vulnerable and patched code, test cases, and ground-truth proofs of concept, enabling rigorous measurement of insecure coding, vulnerability detection, and patch generation. Applying this framework to Python, C/C++, and Java, we build SECODEPLT, a dataset of more than 5.9k samples spanning 44 CWE-based risk categories and three security capabilities. Compared with state-of-the-art benchmarks, SECODEPLT offers broader coverage, higher data fidelity, and substantially greater scale. We use SECODEPLT to evaluate leading code-generation LLMs and agents, revealing their strengths and weaknesses in both generating secure code and identifying or fixing vulnerabilities.We provide our code in \url{https://github.com/ucsb-mlsec/SeCodePLT}, data in \url{https://huggingface.co/datasets/UCSB-SURFI/SeCodePLT}
Yuzhou Nie, Zhun Wang, Yu Yang 0007, Ruizhe Jiang, Yuheng Tang, Xander Davies, Yarin Gal, Bo Li 0026, Wenbo Guo 0002, Dawn Song
NeurIPS1
2024 When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search
abstract
Recent studies developed jailbreaking attacks, which construct jailbreaking prompts to "fool" LLMs into responding to harmful questions. Early-stage jailbreaking attacks require access to model internals or significant human efforts. More advanced attacks utilize genetic algorithms for automatic and black-box attacks. However, the random nature of genetic algorithms significantly limits the effectiveness of these attacks. In this paper, we propose RLbreaker, a black-box jailbreaking attack driven by deep reinforcement learning (DRL). We model jailbreaking as a search problem and design an RL agent to guide the search, which is more effective and has less randomness than stochastic search, such as genetic algorithms. Specifically, we design a customized DRL system for the jailbreaking problem, including a novel reward function and a customized proximal policy optimization (PPO) algorithm. Through extensive experiments, we demonstrate that RLbreaker is much more effective than existing jailbreaking attacks against six state-of-the-art (SOTA) LLMs. We also show that RLbreaker is robust against three SOTA defenses and its trained agents can transfer across different LLMs. We further validate the key design choices of RLbreaker via a comprehensive ablation study.
Xuan Chen 0003, Yuzhou Nie, Wenbo Guo 0002, Xiangyu Zhang 0001
NeurIPS2
2022 Gromov-Wasserstein Multi-modal Alignment and Clustering
abstract
Multi-modal clustering aims at finding a clustering structure shared by the data of different modalities in an unsupervised way. Currently, solving this problem often relies on two assumptions: i) the multi-modal data own the same latent distribution, and ii) the observed multi-modal data are well-aligned and without any missing modalities. Unfortunately, these two assumptions are often questionable in practice and thus limit the feasibility of many multi-modal clustering methods. In this work, we develop a new multi-modal clustering method based on the Gromovization of optimal transport distance, which relaxes the dependence on the above two assumptions. In particular, given the data of different modalities, whose correspondence is unknown, our method learns the Gromov-Wasserstein (GW) barycenter of their kernel matrices. Driven by the modularity maximization principle, the GW barycenter helps to explore the clustering structure shared by different modalities. Moreover, the GW barycenter is associated with the GW distances between the different modalities to the clusters, and the optimal transport plans corresponding to the GW distances help to achieve the alignment and the clustering of the multi-modal data jointly. Experimental results show that our method outperforms state-of-the-art multi-modal clustering methods, especially when the data are (partially or completely) unaligned. The code is available at https://github.com/rucnyz/GWMAC.
Fengjiao Gong, Yuzhou Nie, Hongteng Xu
CIKM2