About Me

My research interests center on the safety and trustworthiness of AI systems. Specifically, I focus on uncertainty learning, adversarial robustness, machine unlearning, and formal verification. I am open to any form of academic cooperation, please feel free to email me at [thuang[at]bjtu[dot]edu[dot]cn].

I received my B.S. degree from the School of Mathematics and Statistics, Beijing Jiaotong University (BJTU), and was directly admitted to the Ph.D. program at the School of Computer Science and Technology, BJTU, advised by Prof. Liping Jing (景丽萍). Meanwhile, I am a joint Ph.D. student at the National University of Singapore (NUS), advised by Prof. Jin Song Dong I also collaborate with Prof. Rui Wang (王睿) and Prof. Huafeng Liu (刘华锋).

I have published several papers at top-tier international AI conferences such as ICLR, CVPR, ICCV, ACM MM.

For more details on my research and academic experience, please refer to my Curriculum Vitae.

🔥 News

  • 2026.10: 🎓 Started my Joint Ph.D. at National University of Singapore (NUS).
  • 2026.07: 🎉 Our paper on MLLM Jailbreak was accepted to ACM MM 2026.
  • 2026.02: 🎉 Our paper on Uncertainty Quantification was accepted to ICLR 2026.
  • 2025.12: 🚀 Our dataset PRE-HAL reached 13k+ downloads on Hugging Face!
  • 2025.07: 🎉 Our paper on SAM Safety was accepted to ICCV 2025.
  • 2025.06: 🎉 Our paper on Hallucination Detection was accepted for publication in IJAR.
  • 2024.02: 🎉 Our paper on Adversarial Attack was accepted to CVPR 2024.
  • 2023.09: 🎓 Started my Ph.D. at Beijing Jiaotong University (BJTU).

📚 Publications

📄 Paper List

📊 Uncertainty Quantification

🛡️ Adversarial Learning

⭐ Selected Publications

ACM MM 2026
图片描述

Learning Universal Semantic Simplex for Jailbreaking Large Vision-Language Models

Tao Huang, Rui Wang, Xiaofei Liu, Xiaomeng Li, Yi Qin, Tong Xiao, Zhekun Liu, Liping Jing; | 📦Code | 🤗Huggingface (Coming Soon)

  • Continuous Paradigm: Introduces Learning Universal Semantic Simplex (LUSS), shifting the jailbreak optimization from point-wise perturbations to continuous adversarial simplices.

  • Overfitting Mitigation: Leverages a sharpness-aware penalty and a simplex-based update to capture broad adversarial semantics within a convex hull.

  • Superior Improvement: Outperforms state-of-the-art baselines, achieving up to a 60.8% relative improvement in ASR and a 44.7% gain in Malicious Intent Fulfillment Rate.

ICLR 2026
EUQ Framework Illustration

Detecting Misbehaviors of Large Vision-Language Models by Evidential Uncertainty Quantification

Tao Huang, Rui Wang, Xiaofei Liu, Yi Qin, Li Duan, Liping Jing; | 📦Code | 🤗Huggingface

Efficient Framework: A training-free method that quantifies uncertainty using pre-logits features in a single forward pass.

Novel Insight: Layer-wise dynamic analysis reveals that hallucinations correspond to high internal conflict, while OOD failures correspond to high ignorance.

Superior Performance: Outperforms strong baselines on four state-of-the-art LVLMs, improving AUROC by 10.4% and AUPR by 5.3% on average.

📖 Education

  • 2026.10 – 2027.09 (Expected), Joint Ph.D. Student, School of Computing, National University of Singapore, Singapore
  • 2023.09 – 2028.06 (Expected), Ph.D. Student in Computer Science and Technology, Beijing Jiaotong University, Beijing, China
  • 2019.09 – 2023.06, B.S. in Mathematics and Statistics, Beijing Jiaotong University, Beijing, China