Demo Data from EDBT 2026 / reviewers in the wild / expert
Xinyan Gao
dblp:85/4246
· DBLP profile ↗
5ranked-venue papers
1as first author
3since 2021 · last 2026
—ORCID · unresolved
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 2 · 2 since 2021Computer networks · 2 · 1 first-authorSecurity and privacy · 1 · 1 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 100% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › AI safety
jailbreak detection |
0.9 | 1 | 2025 | HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025 |
Machine learning › Trustworthy machine learning
robustness |
0.9 | 1 | 2025 | HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025 |
Security and privacy of machine learning
adversarial attack |
0.9 | 1 | 2025 | HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025 |
Security and privacy of machine learning › adversarial attack
jailbreak attack |
0.9 | 1 | 2025 | HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025 |
Methods — techniques the papers use, named apart from their topics
hidden state monitoring · 1.7activation analysis · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | TeSLIA: A Practical Label Inference Attack in Two-Party Split Learning for Text Classification
Xinyan Gao, Song Bian 0001, Zhenyu Guan 0002 |
KSEM (2) | 3 |
| 2025 | HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden StatesabstractThe integration of additional modalities increases the susceptibility of large vision-language models (LVLMs) to safety risks, such as jailbreak attacks, compared to their language-only counterparts. While existing research primarily focuses on post-hoc alignment techniques, the underlying safety mechanisms within LVLMs remain largely unexplored. In this work , we investigate whether LVLMs inherently encode safety-relevant signals within their internal activations during inference. Our findings reveal that LVLMs exhibit distinct activation patterns when processing unsafe prompts, which can be leveraged to detect and mitigate adversarial inputs without requiring extensive fine-tuning. Building on this insight, we introduce HiddenDetect, a novel tuning-free framework that harnesses internal model activations to enhance safety. Experimental results show that HiddenDetect surpasses state-of-the-art methods in detecting jailbreak attacks against LVLMs. By utilizing intrinsic safety-aware patterns, our method provides an efficient and scalable solution for strengthening LVLM robustness against multimodal threats. Our code and data will be released publicly. Yilei Jiang, Xinyan Gao, Tianshuo Peng, Yingshui Tan, Xiaoyong Zhu, Bo Zheng 0007, Xiangyu Yue 0001 |
ACL (1) | 2 |
| 2025 | GRAMSSAT: An efficient label inference attack against two-party split learning based on gradient matching and semi-supervised learning
Xinyan Gao, Bihe Zhao, Zhenyu Guan 0002, Song Bian 0001 |
J. Inf. Secur. Appl. | 2 |
| 2008 | Theory framework for event structure slicingabstractNon-classical computation slicing is an abstraction mechanism for pruning state space and it plays an important role in tackling state explosion problem in predicate detection. This paper shows that the slicing technique based on prime event structures can improve the expressiveness of that abstract method and extend its application scope greatly. We introduce the slicing idea into the area of event structure and develop a complete theory framework with related techniques for event structure slicing. This slicing technique can serve as a useful supplement and high level extension to the existent computation slicing which can not handle the situations with conflicts or execution choices. Xinyan Gao, Rui Qiao 0003 |
ISCC | 1 |
| 2008 | Operational semantics of probabilistic Kleene algebra with testsabstractKleene algebra with tests (KAT) is a prominent specification language used for formalizing the behavior of non-deterministic structured programs generally called regular programs. Regular programs with probabilistic information have richer and more powerful expressiveness than normal regular programs. However, KAT is incapable of specifying such recently widely used programs. We construct a complete theory of probabilistic Kleene algebra with tests (PKAT) for reasoning about regular programs with probability. We offer a model termed probabilistic configuration transition systems, whose states are configurations composed of a pair of a PKAT expression and a data-state. To determine the transition relation in the model, we define an operational semantics for PKAT, and establish a probabilistic bisimulation equivalence relation in PKAT. The soundness of the equations of PKAT is validated with respect to the bisimulation, to find equivalences without calculating the actual bisimulation relation. Rui Qiao 0003, Xinyan Gao |
ISCC | 3 |