2026
arXiv preprint
Visualizing Distribution Coverage in Generative Diffusion Models
Pass@k reveals how distribution-matching distillation trades broad coverage of valid outputs for stronger single-sample quality in image and video generation.
Research
I study generative models, with a focus on long-horizon generation, representation learning, and reasoning. My earlier work explores privacy and copyright protection in generative models.
Google Scholar* Equal contribution
2026
arXiv preprint
Scaling Video Generation for Reasoning: At What Cost?
A controlled Rubik's Cube benchmark reveals the compute cost of hidden-state reasoning and why lower generation loss does not guarantee better reasoning.
2026
arXiv preprint
Representation by Design in Generation: Cross-View Class-Token Alignment in Diffusion Transformers
Cross-view class-token alignment improves ImageNet linear-probe accuracy by 9.4 percentage points while preserving comparable generation quality.
2026
arXiv preprint
Compress to Remember: Learning Compact Memory via On-Policy Distillation for Long Video Generation
PACC learns compact memory from a frozen video generator, retaining earlier events and improving consistency in long video generation.
2026
arXiv preprint
Taming Outlier Tokens in Diffusion Transformers
Dual-Stage Registers reduce harmful outlier tokens in both vision encoders and diffusion transformers, improving generation quality across ImageNet and text-to-image settings.
2026
TMLR 2026 (Featured Certification)
Accelerating Inference of Discrete Autoregressive Normalizing Flows by Selective Jacobi Decoding
Selective Jacobi decoding speeds up autoregressive normalizing-flow inference by up to 4.7 times while preserving generation quality, without additional training.
2026
KDD 2026
Exploring Diffusion Models' Corruption Stage in Few-Shot Fine-tuning and Mitigating with Bayesian Neural Networks
We identify a corruption stage during few-shot diffusion fine-tuning and use Bayesian neural networks to improve fidelity, quality, and diversity without extra inference cost.
2025
ICCV 2025
Stealthy Backdoor Attack in Federated Learning via Adaptive Layer-wise Gradient Alignment
Adaptive layer-wise gradient alignment exposes weaknesses in federated-learning defenses by preserving backdoor effectiveness while making malicious updates harder to detect.
2025
NeurIPS 2025
Unlearned but Not Forgotten: Data Extraction after Exact Unlearning in LLM
Exact unlearning can still leak removed examples when pre- and post-unlearning models are exposed; our guided attack doubles extraction success in some settings.
2025
TPDP 2025
Winning the MIDST Challenge: New Membership Inference Attacks on Diffusion Models for Tabular Data Synthesis
A lightweight learned membership inference attack reveals privacy leakage in diffusion-based tabular synthesis and won all four tracks of the MIDST Challenge.
2025
ICML 2025
Leveraging Model Guidance to Extract Training Data from Personalized Diffusion Models
FineXtract uses the distribution shift between pretrained and personalized diffusion models to recover about 20% of fine-tuning data from real-world checkpoints.
2025
ICLR 2025 (Spotlight)
Targeted Attack Improves Protection against Unauthorized Diffusion Customization
Carefully selected targeted attacks provide stronger protection against unauthorized diffusion customization than untargeted adversarial watermarks.
2024
CVPR 2024
CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversion
CGI-DM visualizes conceptual differences between pretrained and fine-tuned diffusion models to provide evidence for copyright authentication.
2024
ICLR 2024
Toward Effective Protection against Diffusion-Based Mimicry through Score Distillation
Score distillation makes protective image perturbations faster and more memory-efficient while strengthening defenses against unauthorized diffusion-based mimicry.
2023
ICML 2023 (Oral)
Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples
AdvDM uses adversarial examples as protective watermarks that prevent diffusion models from learning an artist's style from unauthorized images.
2023
arXiv preprint
Mist: Towards Improved Adversarial Examples for Diffusion Models
Mist improves the transferability and robustness of adversarial watermarks designed to protect artwork from unauthorized diffusion-model imitation.