Skip to content

Author

Ziqi Zhou

We have 7 of 46 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Preprint Sep 2026

UBA-ORL: Unlearning-Activated Backdoor Attacks on Offline Reinforcement Learning

Offline reinforcement learning (offline RL) enables policy learning from pre-collected static datasets without online exploration, and is increasingly deployed not only in safety-critical domains such as autonomous driving and robotic control but also in data-mining applications such as recommendation and behavior anal...

Feng-Yi Wang, Cong Li, Lulu Xue et al. · 0 citations
Preprint Sep 2026

Universal Cross-Prompt Adversarial Attacks on Promptable Concept Segmentation

The Segment Anything Model (SAM) achieves remarkable performance in visual segmentation. The latest SAM3 extends promptable segmentation to concept-level prediction, broadening the scope of segmentation foundation models. While recent works reveal that SAM and SAM2 are vulnerable to adversarial examples, the robustness...

Zi-Qi Zhou, Yi-Fan Hu, Yu-Fei Song et al. · 0 citations
Open access Sep 2026

FakeMark: gradient-guided false watermark claims via robust feature fusion

FakeMark is presented, a gradient-guided false-claim attack for image classifiers that uses a white-box surrogate but never queries or accesses the victim model during attack construction, to motivate provenance-aware, multi-factor ownership protocols.

Yu-Tong Wu, Wen-Yue Li, He-Wang Nie et al. · 0 citations
Preprint Aug 2026

Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification

TCF (Targeted Counterfactual Fingerprinting), a black-box LLM fingerprinting framework that converts open-ended generation comparison into constrained-answer targeted counterfactual transfer, and introduces the source-model counterfactual margin (SCM), a protected-model-only quantity that certifies the target is unlike...

Yu-Tong Wu, Xiao-Fan Bai, Shixin Li et al. · 1 citation
Jul 2026

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models

This paper introduces the concept of instruction-dense visual jailbreaks, in which image-generation models produce detailed, readable, and actionable harmful instructions within images, and proposes TYPO, a black-box framework that exploits this safety gap by automatically generating adversarial TYPOgraphy prompts.

Meng Xie, Li Zeng, Hang Zhang et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.