Searcharxiv⌕ Search

arXiv subjects

Ping Chen

Publications and source records attributed to Ping Chen.

At least 19 recordsLinked to original sources

On the Fundamental Limits of Bistatic ISAC Over Vector Channels

This paper studies the fundamental limits of bistatic integrated sensing and communications (ISAC) systems over vector channels. We first consider a class of parallel channels in which, on each component channel, the channel from the transmitter (Tx) to the communication receiver (Rx) is degraded with respect to the channel from the Tx to the sensing Rx, or vice versa, where the direction of degradation may vary across component channels. For this class of channels, we establish matching achievability and converse results, which yield a single-letter characterization of the capacity-distortion function $C(D)$. For parallel Gaussian channels with additive Gaussian states, the evaluation of the capacity-distortion-power function $C(D,P)$ under the squared error distortion measure reduces to a joint power and distortion allocation problem across the component channels. We then extend the analysis to general vector channels and derive single-letter lower and upper bounds on $C(D)$. In particular, for vector Gaussian channels with additive Gaussian states, we prove the optimality of Gaussian superposition coding without requiring a global degradation order between the communication and sensing channels, by combining the channel enhancement technique with a matrix extremal inequality based on Fisher information. This leads to an exact characterization of $C(D,P)$.

cs.IT↗

Constraints on the Progenitor of SN 2023bee from its Nebular-Phase Spectra

We present late-time photometry (~100-400 days after peak) and nebular-phase optical/NIR spectroscopy (100-360 days) of the Type Ia supernova (SN Ia) SN 2023bee. This SN Ia was observed TESS immediately before and after explosion and showed a relatively weak early excess light-curve feature detected in multiple UV and optical bands. Possible explanations for this early excess feature include interaction between the SN ejecta and a non-degenerate companion, or the decay of radioactive isotopes synthesized near the ejecta surface in a sub-$\text{M}_\text{Ch}$ double-detonation scenario. However, the degeneracies and incompleteness of existing models have so far prevented a definitive conclusion about its progenitor system. Nebular-phase spectra provide a complementary probe of SN Ia progenitors by constraining stripped H/He-rich material and iron-group abundances sensitive to the progenitor white dwarf density. We report the non-detection of narrow H/He features in nebular phase optical/NIR spectra of SN 2023bee, placing upper limits of $m^{\text{stripped}}_\text{H}\lesssim5.0\times10^{-3}\text{ M}_\odot$ and $m_\text{He}^{\text{stripped}}\lesssim1.2\times10^{-4}\text{ M}_\odot$. These limits strongly disfavor a non-degenerate companion and suggest that companion interaction is unlikely to explain the early excess of SN 2023bee. We also performed line-diagnostic measurements on the 7200 Åcomplex using multi-Gaussian fitting and continuum estimation, with the inferred velocities validated against NIR spectrum at the similar phase. The resulting low Ni-to-Fe mass ratio, $m_\text{Ni}/m_\text{Fe}\lesssim 0.06$, is broadly consistent with a sub-$M_{\text{Ch}}$ double-detonation progenitor system.

astro-ph.HE↗

Dual-Scale Condition-Shift Editing for Robust Real-World Image Demoiréing

Robust demoiréing of screen-recaptured images remains challenging: moiré varies in frequency, color, and spatial support across display-camera pairs and capture conditions. Dedicated restoration networks trained on finite paired data struggle with this diversity, especially when low-frequency color banding and high-frequency stripes co-occur. We present DemoiréEdit, a content-preserving editing framework that adapts the natural-image prior of a pretrained flow-matching editor to demoiréing. First, an endpoint-supervised training objective supplements velocity matching with pixel, perceptual, and frequency-domain restoration losses. Second, a dual-scale condition-shift strategy performs global correction at low resolution, then refines the image at full resolution by shifting the denoising condition from the first-stage output to the original input for detail recovery. We also introduce DailyMoiré130, a benchmark of challenging moiré in everyday screen photography, comprising 130 smartphone captures across diverse displays with low-frequency color banding, fine high-frequency stripes, and mixed-frequency interference. On the challenging DailyMoiré130 benchmark, our method achieves the lowest residual moiré area and receives 71.3% overall-quality preference in a blind Best-of-7 study with 31 participants. We also evaluate on paired FHDMi/UHDM, reducing residual moiré confidence by 47.1%/9.3% and increasing MUSIQ by 4.3%/2.0% over the best baseline for each metric.

cs.CV↗

SN 2023iop: An Extreme 1987A-like Supernova and the Death of Very Massive Stars

Supernova (SN) 1987A showed that some hydrogen-rich core-collapse supernovae (SNe) rise slowly to peak, defining a distinct subclass. Wide-field surveys have uncovered more extreme members, such as OGLE-2014-SN-73, SN 2020faa, and SN 2023vbw, that challenge neutrino-driven explosion models. We present ultraviolet-to-infrared, radio, X-ray, and spectropolarimetric observations of SN 2023iop at $z = 0.1020$, the most extreme 87A-like event to date. It rose for $\gtrsim88$ rest-frame days to $M_r \approx -20.1$ mag, also placing it among the hydrogen-rich superluminous SNe, and radiated $\gtrsim4\times10^{50}$ erg. Its spectra resemble those of typical Type II SNe and remain photospheric at $\sim330$ days post-maximum. Continuum polarization of 0.8-1.0% indicates an aspherical system. Hydrogen-rich pair-instability supernova (PISN) models of a $190~M_\odot$ star reproduce the light-curve up to 150 days after peak, but not the late-time emission. A late-time spectrum shows a feature near 7300 Å, tentatively identified as [Ni II] $λ$7378. The implied $\approx0.02~M_\odot$ of stable $^{58}$Ni is reached only in the most massive PISN models. The low-mass host galaxy ($\sim10^{8.2}~M_\odot$) is consistent with a metal-poor progenitor as required by the PISN channel. Fallback accretion reproduces the light-curve morphology, but not the colors. We consider a pair-instability explosion the most plausible scenario, with the late-time light-curve excess powered by circumstellar interaction, which shows no signatures in the spectra. SN 2023iop shows that the most luminous 87A-like events occupy an underexplored region of massive-star evolution.

astro-ph.HE↗

HiMPO: Hindsight-Informed Memory Policy Optimization for Less-Entangled Credit in Long-Horizon Agents

Long-horizon agents compress interaction histories into memory, but final outcomes entangle memory-writing credit with tool failures and reasoning errors. We propose HiMPO, a Hindsight-Informed Memory Policy Optimization framework that supplements trajectory-level reinforcement learning with memory-specific credit. For each update, HiMPO compares the target answer's log-likelihood under the previous and updated memories while holding the remaining pre-write context fixed. A soft gate based on group-relative hindsight relevance then weights the local utility advantage. Trajectory-level credit applies to all generated tokens; memory tokens additionally receive the auxiliary advantage. Across judge-based open-domain tasks and objective compressive-memory QA, HiMPO improves task performance while preserving compressed-context efficiency. On Local Wiki Search, it improves average F1 and exact match over MemPO by 2.6 and 2.2 percentage points, respectively. Controlled interventions and live memory-reversion studies provide evidence of reduced blame leakage and alignment between memory credit and behavioral effects. With the policy fixed, the credit estimator remains robust to the tested forms of target noise.

cs.CL↗

LoopREG: Representation Supervision Enables Test-Time Recurrent Depth in Diffusion Transformers

Reusing Transformer blocks offers a way to increase diffusion-model computation at test time, but naive recurrence can degrade generation beyond its training depth. We introduce LoopREG, a representation-supervised recurrent diffusion Transformer that repeatedly applies a shared block at the state supervised by a pretrained visual encoder. Alignment is applied after the final recurrent visit during training; inference extends the same learned operator to additional visits. On ImageNet 256 x 256, LoopREG reduces SiT-B/2 FID from the local REG baseline's 15.08 to 4.91 at 400K training steps, a 67.41% reduction. Within a checkpoint trained with two visits, one extra inference visit improves FID from 14.71 to 5.34 with unchanged weights. The benefit persists on SiT-L/2 and SiT-XL/2. Controlled interventions show that useful recurrence follows the location of representation supervision, while REPA alignment produces a smaller extrapolation benefit. These results make representation-supervised recurrence a practical route to improving diffusion generation through additional inference depth.

cs.CV↗

LoopFM: Learning frOm HistOrical RePresentations of Foundation Model for Recommendation

Knowledge distillation (KD) transfers a single scalar prediction from a large foundation model (FM) to compact vertical models (VMs), suffering from diminishing transfer ratio -- the fraction of FM improvement captured by the VM -- as a single scalar cannot convey the rich intermediate knowledge that larger FMs learn. To address this bottleneck, we propose LoopFM (Learning frOm HistOrical RePresentations of FM), a framework that opens a high-bandwidth transfer channel by structuring FM intermediate embeddings as input features (e.g., user history sequence) for downstream VMs, without requiring real-time FM inference at serving and architectural coupling between FM and VM. We provide a theoretical framework for LoopFM with a gain decomposition and transfer-ratio analysis. On three public benchmarks, LoopFM demonstrates strong AUC improvements (e.g., 6%+ on TaobaoAd) and complementary knowledge transfer capability with KD. On industrial-scale systems (billions of examples, trillion-parameter FMs), LoopFM approximately doubles the knowledge transfer ratio on top of KD, delivering a +0.5% conversion improvement in the first half after its initial launch, and +1.03% and +1.22% conversion improvement from two individual launches in the subsequent half. Through systematic experiments, LoopFM demonstrates a scaling law in sequence length, embedding dimension, and upstream FM size.

cs.LG↗

EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and threats motivate benchmark evolution. We introduce EvoRiskBench, an evolving benchmark organized around the EP-Path-EF framework, which links an initial risk entry point to a one-hop technical effect through an agent-mediated risk path. The framework defines nine entry-point categories and five effect categories; a 20-participant study supports their interpretability and classification consistency on representative cases. Guided by this framework, an automated end-to-end workflow constructs and executes risk cases in isolated environments and independently verifies outcomes using runtime traces and environment states. The benchmark provides a reproducible dataset of 450 adversarial tasks across six scenarios. We evaluate nine model-harness configurations spanning three models (GPT-5.6 Sol, DeepSeek-V4-Pro-0813, and Claude Opus 5) and three harnesses (Claude Code, Codex, and OpenClaw). Our results reveal substantial vulnerabilities across systems. The most vulnerable configuration, Codex with DeepSeek-V4-Pro-0813, reaches a 68.44% attack success rate (ASR), indicating that configuration of workspace agent is insufficient to ensure secure autonomous execution. ASR varies more across models than harnesses, and harness differences depend on the model. The benchmark cases and evaluation platform will be released after completion of artifact safety and reproducibility checks.

cs.CR↗

Tomography analysis of the intermediate-luminosity Type Iax SN 2024pxl

We present an abundance tomography analysis of SN 2024pxl, an intermediate luminosity Type Iax supernova ($M_{r}=-16.82 \pm 0.19$ mag), with the most-detailed follow-up in the Type Iax subclass to-date. As one of the few intermediate luminosity Type Iax objects, SN 2024pxl may link the two extremes of the peculiar thermonuclear supernova subclass. To test this hypothesis, we analyze its spectral evolution through the first 100 days after the explosion and aim to probe the structure of its ejecta. We conduct an abundance tomography analysis using synthetic spectra produced with the one dimensional radiative transfer code TARDIS. The fit of the spectral time series provides a radial scan of physical properties and probes the stratification of chemical elements throughout most of the SN ejecta. The observed spectral evolution is well fit with the final model, similar to the general predictions of the pure deflagration scenarios, but significant modifications are required in the density function of the inner ejecta and in the chemical profiles of the outermost regions. The constrained physical characteristics, such as the photospheric velocities and the time of maximum light, are also consistent with other SNe~Iax. Despite their small number, intermediate luminosity Type Iax SNe are not outliers in the subclass but demonstrate the continuous nature of SNe Iax through their luminosity range. Following this observation, we argue that all SNe~Iax share the same progenitor and explosion origin.

astro-ph.HE↗

LoRango: It Takes Two LoRAs to Unlock Hidden Behaviors in Diffusion Models

Users commonly combine multiple Low-Rank Adaptation (LoRA) adapters to personalize images with different subjects, styles, and visual attributes. Yet inspecting adapters individually does not establish the safety of their composition. We identify and characterize a pair-conditioned attack in text-to-image diffusion: individually useful and benign-appearing adapters redirect image generation when co-loaded with a specifically matched partner, whose identity serves as the trigger. We introduce LoRango to realize this attack through complementary Signature and Payload adapters. The Signature writes a pair-specific code into intermediate carrier representations, while the Payload uses code-selective responses and opposing signal/reference branches. These branches approximately cancel for standalone adapters and mismatched pairs; matched code-reader alignment breaks cancellation within native GEGLU blocks and releases the programmed action. Both adapters are exported as ordinary static LoRA files compatible with standard loaders, requiring no prompt trigger or base-pipeline modification. LoRango achieves matched-pair attack success rates of 97.9\% on SD v1.5 and 98.7\% on SDXL, compared with 2.8--4.6\% when implanted adapters are loaded individually. Further experiments evaluate pair selectivity, standalone fidelity, robustness to deployment variations, and applicability across denoiser architectures. These findings show that individual-adapter inspection is insufficient to assess the security of multi-LoRA personalization and motivate auditing adapter compositions.

cs.CR↗

A 32-day Quasi-periodic Modulation in the Post-peak Light Curve of the Superluminous Supernova SN 2018bsz

Recurrent structure in supernova (SN) light curves may reveal physical clocks associated with central-engine dynamics, binary orbital motion, or interaction with structured circumstellar material (CSM). We present a multiband photometric reanalysis of the nearby hydrogen-poor superluminous SN (SLSN-I) 2018bsz (z=0.0267), using Swift/UVOT and GROND observations spanning approximately 110 rest-frame days after maximum light. After independently modelling and subtracting the smooth decline in each band, Generalized Lomb-Scargle periodograms reveal recurrent residual variations at broadly consistent phases across ten bands from u to Ks. The strongest individual-band detections, in the g, r, i, z, and J bands, yield periods of 31.5-31.8 days, while the joint multiband analysis gives a rest-frame period of P=31.61 (+/-0.03) days. The modulation is traced over approximately three cycles and is therefore described as quasi-periodic. The signal is robust to the adopted detrending procedure, while comparison-star and lunar-cycle tests disfavour an observational systematic. The modulation is broadly phase-coherent from the optical to the near-infrared, but its amplitude increases towards shorter wavelengths; lower-significance bands also show possible wavelength-dependent shifts in the best-fitting period. The present observations do not uniquely determine the physical origin. Lense-Thirring precession, interaction with CSM structured before the explosion, and post-SN interaction with a surviving companion remain possible. SN 2018bsz provides one of the clearest examples of coherent, month-scale photometric modulation in an SLSN-I.

astro-ph.HE↗

ViTeGate: Visual-Textual Triggered Knowledge Poisoning for Vision-Language Retrieval-Augmented Generation

Modern Vision-Language Retrieval-Augmented Generation (VLRAG) systems augment Large Vision-Language Models (LVLMs) with retrieved visual and textual evidence, enabling responses grounded in external knowledge. However, the retrieval pipeline also creates an attack surface: adversaries can inject poisoned image-text pairs into the knowledge corpus to influence model outputs. Existing knowledge poisoning attacks are typically always-on, allowing poisoned evidence to affect generation whenever it is retrieved. This lack of precise activation control makes it difficult to confine malicious behavior to intended inputs, reducing both attack stealth and effectiveness. In this paper, we propose ViTeGate, a visual-textual triggered knowledge poisoning attack for VLRAG systems. ViTeGate uses a visual trigger to conditionally promote poisoned evidence into retrieval results and a textual trigger to induce an attacker-specified response from the retrieved evidence. By coordinating retrieval and generation, ViTeGate reduces poison exposure when the visual trigger is absent and preserves normal responses when the textual trigger is absent. The two-trigger design enables selective attack activation and reduces unintended single-trigger activation. Experiments across multiple query datasets, retrievers, and LVLMs validate the effectiveness of ViTeGate. On InfoSeek, ViTeGate achieves an attack success rate of up to 0.98 while maintaining a clean answer accuracy of up to 0.93.

cs.CR↗

Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs

Modern large language model (LLM) agents often construct prompts by aggregating retrieved passages, user reviews, and documents from multiple external sources. This paradigm exposes them to segment-level poisoning attacks, in which an adversary controlling only a small subset of sources injects malicious content to manipulate model outputs. Existing defenses mainly rely on textual patterns, external embeddings, or auxiliary detectors and may therefore fail against fluent, semantically plausible poisoned segments. They also provide limited support for locating the responsible segments. We observe that successful corrupted-evidence and adversarial-instruction attacks induce structured shifts in the LLM's internal activations, forming a consistent activation-space pattern that we call the poison direction. Based on this observation, we propose ActProbe, an internal-state-based framework for detecting and localizing poisoned segments in multi-source LLM inputs. ActProbe projects MLP activations onto a learned poison direction and uses a lightweight linear SVM trained on a small calibration set to detect contaminated prompts. It then applies BinRoL, which combines recursive replacement ablation, Mahalanobis-distance-based branch pruning, and MAD-based robust leaf detection to locate poisoned segments. ActProbe requires no modification to the backend LLM and reduces localization overhead from O(n) exhaustive probing to O(k log n) forward passes. Across three datasets, two attacks, and four open-weight LLMs, ActProbe achieves a 0.01 false-positive rate, a 0.05 false-negative rate, 0.94 localization recall, and a 0.90 localization F1-score. It remains effective against defense-aware adaptive attacks and can protect black-box APIs through surrogate-based poisoned-segment removal.

cs.CR↗

IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications

Insecure Direct Object Reference (IDOR), often modeled as Broken Object-Level Authorization (BOLA), remains prevalent in Java database applications because identity and authorization checks at the controller or service layer are disconnected from SQL execution based on resource identifiers. Existing work largely detects these vulnerabilities but offers limited low-intrusion runtime protection for legacy Java-SQL applications. We present IDORacle, a template-guided SQL-sink interception and rewriting framework for preventing horizontal privilege escalation at runtime. IDORacle propagates authenticated identity context across HTTP requests, asynchronous tasks, and data-access boundaries through a server-side trace identifier. At the MyBatis/JDBC boundary, it extracts SQL templates, computes dual fingerprints, and performs one-time template analysis to generate reusable mediation plans. During execution, it combines subject context, SQL ASTs, table metadata, and cached authorization proofs to permit, rewrite, or block operations. Its guard model supports direct ownership predicates, join-derived ownership, probes for group-owned resources, role-sensitive state transitions, and sensitive-column mediation. A Java-SQL benchmark grounded in real-world CVE reports shows that IDORacle prevents the tested horizontal authorization violations with a worst-case guard latency of 0.17 ms. Redundancy-aware optimization reduces average per-instance overhead by more than 90%, to 0.017 ms for hot SQL templates.

cs.CR↗

A Trustworthy Watermarking Framework for LLM-Generated Food Safety Content

Large language models are transforming many industries with their text generation abilities. However, their outputs can be easily tampered with, creating serious risks in critical areas such as food safety reporting. To protect the integrity and traceability of AI-generated content, this paper introduces ToSS (Token Oriented Repartitioning and Strategic Selection), a reliable authentication method using adaptive dual watermarking. The key innovation of ToSS is its dual watermark encoding approach that divides vocabulary tokens into black and white sublists, enabling precise bit-level embedding of traceability information. Additionally, an entropy adaptive mechanism dynamically selects text regions with high prediction uncertainty for watermark insertion, maintaining text fluency and factual accuracy while ensuring reliable traceability. Experiments on multiple datasets, including food domain texts, demonstrate that ToSS achieves leading performance in both watermark capacity and decoding accuracy.

cs.CR↗

ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classification

Fraudulent messages sent via Short Message Service (SMS) are increasingly obfuscated to evade cost-conscious classifiers in production systems. In Chinese SMS, attackers can exploit a wide range of carefully crafted obfuscation strategies to hide risk-bearing phrases while preserving human readability, making direct classification brittle under real-world latency and throughput constraints. We propose ReCAST, a Restoration-aware Cascaded Stage-wise Training framework for robust obfuscated Chinese SMS classification. ReCAST distills a large teacher model's de-obfuscation ability into a smaller deployable student model by supervising obfuscated span detection, obfuscation type prediction, and text restoration, and then uses the restoration-aware student for downstream risk classification. Experiments on an internally constructed real-world Chinese SMS benchmark show that ReCAST substantially improves classification performance over directly trained baselines under obfuscation. The results suggest that restoration-aware distillation offers a practical path toward robust SMS risk classification with smaller deployable models under production-oriented constraints.

cs.CR↗

HEAL: Hindsight Entropy-Assisted Learning for Reasoning Distillation

Distilling reasoning capabilities from Large Reasoning Models (LRMs) into smaller models is typically constrained by the limitations of rejection sampling. Standard methods treat the teacher as a static filter, discarding complex "corner-case" problems where the teacher fails to explore valid solutions independently, thereby creating an artificial "Teacher Ceiling" for the student. In this work, we propose Hindsight Entropy-Assisted Learning (HEAL), an RL-free framework designed to bridge this reasoning gap. Drawing on the educational theory of the Zone of Proximal Development (ZPD), HEAL synergizes three core modules: (1) Guided Entropy-Assisted Repair (GEAR), an active intervention mechanism that detects critical reasoning breakpoints via entropy dynamics and injects targeted hindsight hints to repair broken trajectories; (2) Perplexity-Uncertainty Ratio Estimator (PURE), a ratio-based filtering heuristic that reduces high-anomaly shortcut-like rationales; and (3) Progressive Answer-guided Curriculum Evolution (PACE), a three-stage distillation strategy that organizes training from foundational alignment to hard-case adaptation. Extensive experiments on multiple benchmarks demonstrate that HEAL significantly outperforms traditional SFT distillation and other baselines.

cs.AI↗

ELVES-Dwarf. II. A Systematic Search for Satellite Systems of Dwarf Galaxies in the Local Volume

We present the Exploration of Local VolumE Satellites of Dwarf Galaxies (ELVES-Dwarf) survey, a systematic census of satellite systems around dwarf hosts in the Local Volume. Our final sample comprises 39 predominantly isolated hosts with stellar masses $10^{7} 10^5\,M_\odot$ around the 39 hosts. Above our fiducial completeness threshold of $M_\star\gtrsim10^{5.7}\,M_\odot$ and within the projected virial radius, 21 hosts have no confirmed satellites, 10 have one, six have two, and two have four, revealing substantial host-to-host scatter in satellite abundance. Overall, the observed satellite abundances and stellar mass functions are broadly consistent with predictions from the cosmological simulation TNG50 and galaxy formation models calibrated using Milky Way satellites. The projected radial distribution of the satellites is also consistent with theoretical expectations and with satellite populations around Milky Way-mass hosts. In contrast, the quenched fraction of satellites around dwarf hosts is substantially lower than around Milky Way-mass hosts, suggesting that environmental quenching is less efficient in dwarf halos. ELVES-Dwarf provides the first large, homogeneous, distance-confirmed sample of satellites around dwarf hosts and establishes a foundation for understanding galaxy formation and evolution in less-dense environments.

astro-ph.GA↗