Demo Data from EDBT 2026 / reviewers in the wild / expert
Xinpeng Ti
dblp:423/7460
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Privacy and data protection · 100% | |
| Artificial intelligence
1 paper |
Representation and self-supervised learning · 100% |
Topics — the 2 heaviest of 2, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Privacy and data protection › information leakage
prompt recovery |
1.0 | 1 | 2026 | An Invariant Latent Space Perspective on Language Model Inversion · AAAI 2026 |
Machine learning › Representation and self-supervised learning
latent space |
0.3 | 1 | 2026 | An Invariant Latent Space Perspective on Language Model Inversion · AAAI 2026 |
Methods — techniques the papers use, named apart from their topics
reinforcement learning · 2.0neighborhood search · 2.0contrastive learning · 2.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | An Invariant Latent Space Perspective on Language Model InversionabstractLanguage model inversion (LMI), i.e., recovering hidden prompts from outputs, emerges as a concrete threat to user privacy and system security. We recast LMI as reusing the LLM's own latent space and propose the Invariant Latent Space Hypothesis (ILSH): (1) diverse outputs from the same source prompt should preserve consistent semantics (source invariance), and (2) inputoutput cyclic mappings should be self-consistent within a shared latent space (cyclic invariance). Accordingly, we present Inv2A, which treats the LLM as an invariant decoder and learns only a lightweight inverse encoder that maps outputs to a denoised pseudo-representation. When multiple outputs are available, they are sparsely concatenated at the representation layer to increase information density. Training proceeds in two stages: contrastive alignment (source invariance) and supervised reinforcement (cyclic invariance). An optional training-free neighborhood search can refine local performance. Across 9 datasets covering user and system prompt scenarios, Inv2A outperforms baselines by an average of 4.77% BLEU score while reducing dependence on large inverse corpora. Our analysis further shows that prevalent defenses provide limited protection, underscoring the need for stronger strategies. Wentao Ye, Haobo Wang 0001, Xinpeng Ti, Zhiqing Xiao, Hao Chen 0081, Liyao Li, Lei Feng 0006, Sai Wu, Junbo Zhao 0002 |
AAAI | 4 |