Red Teaming Dialogue With Hierarchical Reinforcement Learning
NeurIPS 2026
We train LLMs to autonomously discover toxicity vulnerabilities in target LLMs through natural dialogue. We employ a hierarchical setup: one policy suggests a strategy and a second policy generates adversarial text according to the strategy. We achieve SOTA attacks on standard datasets, in addition to providing the first principled RL framework in this domain.
On Minimizing Adversarial Counterfactual Error in Robust Reinforcement Learning (project page)
ICLR 2025
We progress the formulation of observation-adversarial RL by recognizing its true structure—a POMDP. Leveraging this fact, our proposed methods achieve SOTA performance across all adversarial RL benchmarks.
Regret-Based Defense in Adversarial Reinforcement Learning (project page)
AAMAS 2024
By optimizing a novel form of regret, we train RL agents that are more robust than previous robustly trained value-optimizing agents. Our regret notion, CCER, provides a scalable, transferrable way to compute adversarial cumulative regret for actions across time steps.
I am also proud to have participated as reviewer at the following venues: ICLR 2025, AAAI 2026, AAAI 2026: AI for Social Impact Track, ICLR 2026, ACL 2026, ICAPS 2026, NeurIPS 2026, ICLR 2027, AAAI 2027, AAAI 2027: AI for Social Impact Track, IEEE Transactions on Dependable and Secure Computing (Journal).