Shufei Zhang

Adversarial purification can be dramatically improved by focusing on patch-level semantics, leading to state-of-the-art performance in defending against adversarial attacks.

A single structural edit can drastically impair LLM performance in molecular tasks, highlighting the fragility of their generalization capabilities.