Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Xinyan Gao

dblp:85/4246 · DBLP profile ↗
← Back
5ranked-venue papers
1as first author
3since 2021 · last 2026
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 2 · 2 since 2021Computer networks · 2 · 1 first-authorSecurity and privacy · 1 · 1 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Trustworthy machine learning · 100%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › AI safety
jailbreak detection
0.912025
HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025
Machine learning › Trustworthy machine learning
robustness
0.912025
HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025
Security and privacy of machine learning
adversarial attack
0.912025
HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025
Security and privacy of machine learning › adversarial attack
jailbreak attack
0.912025
HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States · ACL (1) 2025

Methods — techniques the papers use, named apart from their topics

hidden state monitoring · 1.7activation analysis · 1.7
YearPublicationVenuePosition
2026 TeSLIA: A Practical Label Inference Attack in Two-Party Split Learning for Text Classification
Xinyan Gao, Song Bian 0001, Zhenyu Guan 0002
KSEM (2)3
2025 HiddenDetect: Detecting Jailbreak Attacks against Multimodal Large Language Models via Monitoring Hidden States
abstract
The integration of additional modalities increases the susceptibility of large vision-language models (LVLMs) to safety risks, such as jailbreak attacks, compared to their language-only counterparts. While existing research primarily focuses on post-hoc alignment techniques, the underlying safety mechanisms within LVLMs remain largely unexplored. In this work , we investigate whether LVLMs inherently encode safety-relevant signals within their internal activations during inference. Our findings reveal that LVLMs exhibit distinct activation patterns when processing unsafe prompts, which can be leveraged to detect and mitigate adversarial inputs without requiring extensive fine-tuning. Building on this insight, we introduce HiddenDetect, a novel tuning-free framework that harnesses internal model activations to enhance safety. Experimental results show that HiddenDetect surpasses state-of-the-art methods in detecting jailbreak attacks against LVLMs. By utilizing intrinsic safety-aware patterns, our method provides an efficient and scalable solution for strengthening LVLM robustness against multimodal threats. Our code and data will be released publicly.
Yilei Jiang, Xinyan Gao, Tianshuo Peng, Yingshui Tan, Xiaoyong Zhu, Bo Zheng 0007, Xiangyu Yue 0001
ACL (1)2
2025 GRAMSSAT: An efficient label inference attack against two-party split learning based on gradient matching and semi-supervised learning
Xinyan Gao, Bihe Zhao, Zhenyu Guan 0002, Song Bian 0001
J. Inf. Secur. Appl.2
2008 Theory framework for event structure slicing
abstract
Non-classical computation slicing is an abstraction mechanism for pruning state space and it plays an important role in tackling state explosion problem in predicate detection. This paper shows that the slicing technique based on prime event structures can improve the expressiveness of that abstract method and extend its application scope greatly. We introduce the slicing idea into the area of event structure and develop a complete theory framework with related techniques for event structure slicing. This slicing technique can serve as a useful supplement and high level extension to the existent computation slicing which can not handle the situations with conflicts or execution choices.
Xinyan Gao, Rui Qiao 0003
ISCC1
2008 Operational semantics of probabilistic Kleene algebra with tests
abstract
Kleene algebra with tests (KAT) is a prominent specification language used for formalizing the behavior of non-deterministic structured programs generally called regular programs. Regular programs with probabilistic information have richer and more powerful expressiveness than normal regular programs. However, KAT is incapable of specifying such recently widely used programs. We construct a complete theory of probabilistic Kleene algebra with tests (PKAT) for reasoning about regular programs with probability. We offer a model termed probabilistic configuration transition systems, whose states are configurations composed of a pair of a PKAT expression and a data-state. To determine the transition relation in the model, we define an operational semantics for PKAT, and establish a probabilistic bisimulation equivalence relation in PKAT. The soundness of the equations of PKAT is validated with respect to the bisimulation, to find equivalences without calculating the actual bisimulation relation.
Rui Qiao 0003, Xinyan Gao
ISCC3