arXiv subjects

Haolin Jiang

Publications and source records attributed to Haolin Jiang.

4 recordsLinked to original sources

arXiv2026

Vulnerabilities in Partial TEE-Shielded LLM Inference with Precomputed Noise

The deployment of large language models (LLMs) on third-party devices requires new ways to protect model intellectual property. While Trusted Execution Environments (TEEs) offer a promising solution, their performance limits can lead to a critical compromise: using a precomputed, static secret basis to accelerate cryptographic operations. We demonstrate that this mainstream design pattern introduces a classic cryptographic flaw, the reuse of secret keying material, into the system's protocol. We prove its vulnerability with two distinct attacks: First, our attack on a model confidentiality system achieves a full confidentiality break by recovering its secret permutations and model weights. Second, our integrity attack completely bypasses the integrity checks of systems like Soter and TSQP. We demonstrate the practicality of our attacks against state-of-the-art LLMs, recovering a layer's secrets from a LLaMA-3 8B model in about 6 minutes and showing the attack scales to compromise 405B-parameter LLMs across a variety of configurations.

cs.CR↗

arXiv2025

Refining the Understanding of Operator Size Dynamics in Open Quantum Systems

Information scrambling refers to the phenomenon in which local quantum information in a many-body system becomes dispersed throughout the entire system under unitary evolution. It has been extensively studied in closed quantum systems, where it is quantified by operator size growth, revealing deep connections between condensed matter physics, high-energy physics, and quantum information. However, when extending the study of operator size dynamics to open quantum systems, two different definitions of operator size distributions emerge. These definitions are based on different treatments of the bath. In this work, we aim to establish a unified picture for operator size dynamics in open quantum systems, using the solvable Brownian SYK models at generic system size. In particular, we provide the conditions under which the signature of scrambling transition, discovered using one particular definition, appears in operator size dynamics under the other definition. Additionally, we extend previous studies by exploring finite-size effects that are not captured by the scramblon theory. Our results provide a refined understanding of operator size dynamics in open quantum systems.

quant-ph↗

arXiv2022

SDFE-LV: A Large-Scale, Multi-Source, and Unconstrained Database for Spotting Dynamic Facial Expressions in Long Videos

In this paper, we present a large-scale, multi-source, and unconstrained database called SDFE-LV for spotting the onset and offset frames of a complete dynamic facial expression from long videos, which is known as the topic of dynamic facial expression spotting (DFES) and a vital prior step for lots of facial expression analysis tasks. Specifically, SDFE-LV consists of 1,191 long videos, each of which contains one or more complete dynamic facial expressions. Moreover, each complete dynamic facial expression in its corresponding long video was independently labeled for five times by 10 well-trained annotators. To the best of our knowledge, SDFE-LV is the first unconstrained large-scale database for the DFES task whose long videos are collected from multiple real-world/closely real-world media sources, e.g., TV interviews, documentaries, movies, and we-media short videos. Therefore, DFES tasks on SDFE-LV database will encounter numerous difficulties in practice such as head posture changes, occlusions, and illumination. We also provided a comprehensive benchmark evaluation from different angles by using lots of recent state-of-the-art deep spotting methods and hence researchers interested in DFES can quickly and easily get started. Finally, with the deep discussions on the experimental evaluation results, we attempt to point out several meaningful directions to deal with DFES tasks and hope that DFES can be better advanced in the future. In addition, SDFE-LV will be freely released for academic use only as soon as possible.

cs.CV↗

arXiv2019

Bending sound around sharp corners without using topological edge states

Routing and guiding acoustic waves around sharp corners without backscattering losses is of great interest in the acoustics community. Sonic crystals have been primarily utilized to design backscattering-immune waveguides. While conventional approaches use defects to guide waves, a considerably more sophisticated and robust approach was recently developed based on topological edge states. In this paper, we propose a radically different theoretical framework based on extremely anisotropic metamaterials for engineering backscattering-immune waveguides. We theoretically derived the exact condition for one-way wave propagation in zigzag paths, and identified a number of key advantages of the current design over topologically protected waveguides. While the theoretical underpinning is universal and is applicable to acoustic and electromagnetic waves, the experimental validation was conducted using spoof surface acoustic waves. The proposed metamaterial could open up new possibilities for wave manipulation and lead to applications in on-chip devices and noise control.

physics.app-ph↗