Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yanhao Jia

dblp:374/5327 · DBLP profile ↗
← Back
10ranked-venue papers
2as first author
10since 2021 · last 2026
0009-0002-6966-1512ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 8 · 2 first-author · 8 since 2021Security and privacy · 2 · 2 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
4 papers
Efficient and distributed learning · 28% Deep learning architectures and training · 23% Language models and text generation · 20%
Databases, data mining, and information retrieval
2 papers
Information retrieval · 100%
Network and information security
2 papers
Security and privacy of machine learning · 100%
Computer graphics and multimedia
1 paper
Audio and music processing · 100%

Topics — the 18 heaviest of 19, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › robustness
backdoor defense
1.012026
UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models · IEEE Trans. Dependable Secur. Comput. 2026
Natural language and speech › Language models and text generation
large language model
1.012026
UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models · IEEE Trans. Dependable Secur. Comput. 2026
Machine learning › Efficient and distributed learning › parameter-efficient fine-tuning
low-rank adaptation
1.012026
UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models · IEEE Trans. Dependable Secur. Comput. 2026
Machine learning › Efficient and distributed learning
parameter-efficient fine-tuning
1.012026
UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models · IEEE Trans. Dependable Secur. Comput. 2026
Security and privacy of machine learning › adversarial attack › backdoor attack
backdoor defense
1.012026
DUP: Detection-guided Unlearning for Backdoor Purification in Language Models · AAAI 2026
Computer vision › 3D vision
multimodal perception
0.912025
Seeing Sound, Hearing Sight: Uncovering Modality Bias and Conflict of AI models in Sound Localization · NeurIPS 2025
Robotics › Robot navigation and mapping
sound source localization
0.912025
Seeing Sound, Hearing Sight: Uncovering Modality Bias and Conflict of AI models in Sound Localization · NeurIPS 2025
Information retrieval
cross-modal retrieval
0.912025
Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education · ACL (1) 2025
Information retrieval › web search
educational search
0.912025
Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education · ACL (1) 2025
Information retrieval
retrieval models
0.912025
Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education · ACL (1) 2025
Information retrieval › cross-modal retrieval
vision-language retrieval
0.912025
Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education · ACL (1) 2025
Audio and music processing
sound source localization
0.912025
Seeing Sound, Hearing Sight: Uncovering Modality Bias and Conflict of AI models in Sound Localization · NeurIPS 2025
Machine learning › Efficient and distributed learning › adaptive computation
conditional computation
0.812024
Spiking Transformer with Experts Mixture · NeurIPS 2024
Machine learning › Deep learning architectures and training
mixture of experts
0.812024
Spiking Transformer with Experts Mixture · NeurIPS 2024
Machine learning › Deep learning architectures and training
spiking neural network
0.812024
Spiking Transformer with Experts Mixture · NeurIPS 2024
Machine learning › Deep learning architectures and training › spiking neural network
spiking transformer
0.812024
Spiking Transformer with Experts Mixture · NeurIPS 2024
Information retrieval
image retrieval
0.812024
FreestyleRet: Retrieving Images from Style-Diversified Queries · ECCV (23) 2024
Security and privacy of machine learning › adversarial attack
backdoor attack
0.312026
UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models · IEEE Trans. Dependable Secur. Comput. 2026

Methods — techniques the papers use, named apart from their topics

unlearning · 2.0knowledge distillation · 2.0diversity regularization · 2.0LoRA expert fusion · 2.0psychophysics experiment · 1.7cochleagram representation · 1.7HRTF rendering · 1.7vision-language model · 0.9prompt tuning · 0.9sparse spiking activation · 0.8neuromorphic computing · 0.8expert routing · 0.8
YearPublicationVenuePosition
2026 DUP: Detection-guided Unlearning for Backdoor Purification in Language Models
abstract
As backdoor attacks become more stealthy and robust, they reveal critical weaknesses in current defense strategies: detection methods often rely on coarse-grained feature statistics, and purification methods typically require full retraining or additional clean models. To address these challenges, we propose DUP (Detection-guided Unlearning for Purification), a unified framework that integrates backdoor detection with unlearning-based purification. The detector captures feature-level anomalies by jointly leveraging class-agnostic distances and inter-layer transitions. These deviations are integrated through a weighted scheme to identify poisoned inputs, enabling more fine-grained analysis. Based on the detection results, we purify the model through a parameter-efficient unlearning mechanism that avoids full retraining and does not require any external clean model. Specifically, we innovatively repurpose knowledge distillation to guide the student model toward increasing its output divergence from the teacher on detected poisoned samples, effectively forcing it to unlearn the backdoor behavior. Extensive experiments across diverse attack methods and language model architectures demonstrate that DUP achieves superior defense performance in detection accuracy and purification efficacy.
Man Hu 0001, Yahui Ding, Yatao Yang 0001, Yanhao Jia, Shuai Zhao 0007
AAAI5
2026 Spatially-enhanced Spiking neural network for efficient point cloud analysis
Yijie Lu, Zhiyi Pan 0001, Renrui Zhang, Yanhao Jia, Kaiwei Che, Zhaokun Zhou
Neural Networks4
2026 Backdoor defense for large language models with weak-to-strong knowledge distillation
Zhongliang Guo 0001, Luwei Xiao, Yanhao Jia, Shuai Zhao 0007
Pattern Recognit.5
2026 UniFLE: Uniform Fusion of Multiple LoRA Experts for Backdoor Defense in Large Language Models
abstract
Large language models (LLMs), which serve as a bridge between pre-training and task-specific adaptation, achieve state-of-the-art performance across several downstream tasks through full-parameter fine-tuning (FPFT). However, with the continuous growth of model parameter scales, FPFT requires substantial computational resources, which limits its practicality. Consequently, there is a growing shift toward parameter-efficient fine-tuning (PEFT) methods that update only a limited subset of model parameters, markedly reducing resource consumption. Although this paradigm fosters accelerated research advancements, it also introduces security risks. Empirical studies demonstrate that if LLM weights are backdoored, the backdoors can still be activated even after fine-tuning leveraging PEFT algorithms. To address the aforementioned issue, in this paper, we introduce a novel Uniform Fusion of multiple LoRA Experts algorithm, named UniFLE, designed to defend against backdoor attacks. Specifically, the UniFLE algorithm pioneers the insertion of multiple LoRA experts into the MLP blocks to expand the updatable feature subspace during fine-tuning, and fuses all experts to decouple backdoor features. Additionally, to enhance the diversity of LoRA experts, we introduce a diversity regularization loss that constrains correlations between different experts and encourages them to learn more novel features. The theoretical analysis demonstrates that the UniFLE algorithm effectively decreases the mutual information between the model's intermediate representations and the backdoor representations. To validate the effectiveness of the UniFLE algorithm, we conduct experiments across four tasks, four state-of-the-art LLMs, and three backdoor attack methods. The results consistently demonstrate that our UniFLE algorithm effectively defends against backdoor attacks while preserving model performance. We aspire for our method to enhance model security and contribute to the advancement of the LLM community.
Shuai Zhao 0007, Qika Lin, Yanhao Jia, Anh Tuan Luu
IEEE Trans. Dependable Secur. Comput.3
2026 Protecting Your Customized LLM Systems From Backdoored Instructions With Metacognitive Probing
Shuai Zhao 0007, Zhongliang Guo 0001, Xiaobao Wu, Yanhao Jia, Luwei Xiao, Anh Tuan Luu
IEEE Trans. Inf. Forensics Secur.5
2025 Uni-Retrieval: A Multi-Style Retrieval Framework for STEM's Education
abstract
In AI-facilitated teaching, leveraging various query styles to interpret abstract text descriptions is crucial for ensuring high-quality teaching. However, current retrieval models primarily focus on natural text-image retrieval, making them insufficiently tailored to educational scenarios due to the ambiguities in the retrieval process. In this paper, we propose a diverse expression retrieval task tailored to educational scenarios, supporting retrieval based on multiple query styles and expressions. We introduce the STEM Education Retrieval Dataset (SER), which contains over 24,000 query pairs of different styles, and the Uni-Retrieval, an efficient and style-diversified retrieval vision-language model based on prompt tuning. Uni-Retrieval extracts query style features as prototypes and builds a continuously updated Prompt Bank containing prompt tokens for diverse queries. This bank can updated during test time to represent domain-specific knowledge for different subject retrieval scenarios. Our framework demonstrates scalability and robustness by dynamically retrieving prompt tokens based on prototype similarity, effectively facilitating learning for unknown queries. Experimental results indicate that Uni-Retrieval outperforms existing retrieval models in most retrieval tasks.
Yanhao Jia, Shuai Zhao 0007, Wenqi Fan
ACL (1)1
2025 Seeing Sound, Hearing Sight: Uncovering Modality Bias and Conflict of AI models in Sound Localization
abstract
Imagine hearing a dog bark and instinctively turning toward the sound—only to find a parked car, while a silent dog sits nearby. Such moments of sensory conflict challenge perception, yet humans flexibly resolve these discrepancies, prioritizing auditory cues over misleading visuals to accurately localize sounds. Despite the rapid advancement of multimodal AI models that integrate vision and sound, little is known about how these systems handle cross-modal conflicts or whether they favor one modality over another. Here, we systematically and quantitatively examine modality bias and conflict resolution in AI models for Sound Source Localization (SSL). We evaluate a wide range of state-of-the-art multimodal models and compare them against human performance in psychophysics experiments spanning six audiovisual conditions, including congruent, conflicting, and absent visual and audio cues. Our results reveal that humans consistently outperform AI in SSL and exhibit greater robustness to conflicting or absent visual information by effectively prioritizing auditory signals. In contrast, AI shows a pronounced bias toward vision, often failing to suppress irrelevant or conflicting visual input, leading to chance-level performance. To bridge this gap, we present EchoPin, a neuroscience-inspired multimodal model for SSL that emulates human auditory perception. The model is trained on our carefully curated AudioCOCO dataset, in which stereo audio signals are first rendered using a physics-based 3D simulator, then filtered with Head-Related Transfer Functions (HRTFs) to capture pinnae, head, and torso effects, and finally transformed into cochleagram representations that mimic cochlear processing. To eliminate existing biases in standard benchmark datasets, we carefully controlled the vocal object sizes, semantics, and spatial locations in the corresponding images of AudioCOCO. EchoPin outperforms existing models trained on standard audio-visual datasets. Remarkably, consistent with neuroscience findings, it exhibits a human-like localization bias, favoring horizontal (left–right) precision over vertical (up–down) precision. This asymmetry likely arises from HRTF-shaped and cochlear-modulated stereo audio and the lateral placement of human ears, highlighting how sensory input quality and physical structure jointly shape precision of multimodal representations. All code, data, and models are available \href{https://github.com/CuriseJia/SSHS}{here}.
Yanhao Jia, Ji Xie, S. Jivaganesh, Mengmi Zhang
NeurIPS1
2025 Exploring Cognitive and Aesthetic Causality for Multimodal Aspect-Based Sentiment Analysis
abstract
Multimodal aspect-based sentiment classification (MASC) is an emerging task due to an increase in user-generated multimodal content on social platforms, aimed at predicting sentiment polarity toward specific aspect targets (i.e., entities or attributes explicitly mentioned in text-image pairs). Despite extensive efforts and significant achievements in existing MASC, substantial gaps remain in understanding fine-grained visual content and the cognitive rationales derived from semantic content and impressions (cognitive interpretations of emotions evoked by image content). In this study, we present Chimera: acognitive and aesthetic sentiment causality understanding framework to derive fine-grained holistic features of aspects and infer the fundamental drivers of sentiment expression from both semantic perspectives and affective-cognitive resonance (the synergistic effect between emotional responses and cognitive interpretations). The framework aligns visual patches with words, extracts coarse and fine-grained visual features, translates them into textual descriptions, and uses LLM-generated sentimental causes and impressions to boost sensitivity to affective cues. Experiments on MASC datasets show the model's effectiveness and greater flexibility compared to LLMs like GPT-4o. We have publicly released the complete implementation and dataset athttps://github.com/Xillv/Chimera
Luwei Xiao, Rui Mao 0010, Shuai Zhao 0007, Qika Lin, Yanhao Jia, Liang He 0001, Erik Cambria
IEEE Trans. Affect. Comput.5
2024 FreestyleRet: Retrieving Images from Style-Diversified Queries
Hao Li 0073, Yanhao Jia, Peng Jin 0001, Zesen Cheng, Kehan Li 0002, Jialu Sui, Chang Liu 0047, Li Yuan 0007
ECCV (23)2
2024 Spiking Transformer with Experts Mixture
abstract
Spiking Neural Networks (SNNs) provide a sparse spike-driven mechanism which is believed to be critical for energy-efficient deep learning. Mixture-of-Experts (MoE), on the other side, aligns with the brain mechanism of distributed and sparse processing, resulting in an efficient way of enhancing model capacity and conditional computation. In this work, we consider how to incorporate SNNs’ spike-driven and MoE’s conditional computation into a unified framework. However, MoE uses softmax to get the dense conditional weights for each expert and TopK to hard-sparsify the network, which does not fit the properties of SNNs. To address this issue, we reformulate MoE in SNNs and introduce the Spiking Experts Mixture Mechanism (SEMM) from the perspective of sparse spiking activation. Both the experts and the router output spiking sequences, and their element-wise operation makes SEMM computation spike-driven and dynamic sparse-conditional. By developing SEMM into Spiking Transformer, the Experts Mixture Spiking Attention (EMSA) and the Experts Mixture Spiking Perceptron (EMSP) are proposed, which performs routing allocation for head-wise and channel-wise spiking experts, respectively. Experiments show that SEMM realizes sparse conditional computation and obtains a stable improvement on neuromorphic and static datasets with approximate computational overhead based on the Spiking Transformer baselines.
Zhaokun Zhou, Yijie Lu, Yanhao Jia, Kaiwei Che, Liwei Huang, Yuesheng Zhu, Guoqi Li 0002, Zhaofei Yu, Li Yuan 0007
NeurIPS3