---
title: "Chaowei Xiao — author profile and papers — Elamur Research"
description: "Chaowei Xiao, University of Southern California: 3 papers on Elamur Research (2023–2025), h-index 32 — affiliations, topics, co-authors and…"
canonical: "https://research.elamur.ai/free/en/authors/chaowei-xiao/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/chaowei-xiao/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / Chaowei Xiao

# Chaowei Xiao

Chaowei Xiao has 3 papers in our library, in 2023–2025, most of them on [Bias, fairness & safety](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/), [Language models & pretraining](https://md.research.elamur.ai/free/en/topics/language-models/); often with [Xiaogeng Liu](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/), [Muhao Chen](https://md.research.elamur.ai/free/en/authors/muhao-chen/), [Hao Li](https://md.research.elamur.ai/free/en/authors/hao-li/).

3 papers in our library · 2023–2025

[OpenAlex](https://openalex.org/A5005843046) · [ORCID](https://orcid.org/0000-0002-7043-4926) · [Wikidata](https://www.wikidata.org/wiki/Q130971774) · [**h-index 32**](https://openalex.org/authors/A5005843046) · [171 works](https://openalex.org/works?filter=author.id:A5005843046) · [7,316 citations](https://openalex.org/works?filter=author.id:A5005843046&sort=cited_by_count:desc) OpenAlex, 2026-10-14

[📄 3 works in our library](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/#papers) · [🔗 Cited 1,203 times in our library](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/cited-by/) · [17 more in our library without a page yet](#also) · [⭐ Paper Stars ranking: #4433](https://md.research.elamur.ai/free/en/paper-stars/page/45/#star-4433)

The profile is the library's match of the name; two people with one name are not always told apart.

Elsewhere: [Google Scholar](https://scholar.google.com/citations?view_op=search_authors&mauthors=Chaowei+Xiao) · [Semantic Scholar](https://www.semanticscholar.org/search?q=Chaowei+Xiao) · [dblp](https://dblp.org/search?q=Chaowei+Xiao) · [ACL Anthology](https://aclanthology.org/search/?q=Chaowei+Xiao)

## Affiliations

[🏢**Nvidia** Santa Clara · United States 2018–2026 · 29 papersEmployment*current*](https://md.research.elamur.ai/free/en/companies/nvidia/) · [🎓**Johns Hopkins University** Baltimore · United States 2025–2026 · 21 papersEmployment*current*](https://md.research.elamur.ai/free/en/universities/johns-hopkins-university/) · [🏢**Nvidia** Reading · United Kingdom 2018–2026 · 18 papers*current*](https://md.research.elamur.ai/free/en/companies/nvidia-united-kingdom/) · [🔬**Johns Hopkins University Applied Physics Laboratory** North Laurel · United States 2026 · 1 paper*current*](https://ror.org/029pp9z10) · [🎓**University of Southern California** Los Angeles · United States 2026 · 1 paper*current*](https://md.research.elamur.ai/free/en/universities/university-of-southern-california/) · [🎓**University of Wisconsin–Madison** Madison · United States 2023–2025 · 44 papers](https://md.research.elamur.ai/free/en/universities/university-of-wisconsin-madison/) · [🎓**Arizona State University** Tempe · United States 2021–2023 · 20 papersEmployment](https://md.research.elamur.ai/free/en/universities/arizona-state-university/) · [🎓**University of Michigan** Ann Arbor · United States 2015–2021 · 16 papersEducation since 2015 · Computer Science and Engineering](https://md.research.elamur.ai/free/en/universities/university-of-michigan/) · [🎓**University of California, Davis** Davis · United States 2023–2025 · 4 papers](https://md.research.elamur.ai/free/en/universities/university-of-california-davis/) · [🎓**Washington University in St. Louis** St Louis · United States 2017–2024 · 2 papers](https://md.research.elamur.ai/free/en/universities/washington-university-in-st-louis/)

From the bylines of their papers (OpenAlex, 2026-10-14), ORCID and Wikidata; institutions on papers are matched by machine. 7 more institutions on single bylines are not listed.

## Fields, topics and concepts

Of its works in our library, with the number of works on each.

📚 Shelves 6 The field of science this work belongs to (OpenAlex fields).[Artificial Intelligence · 3 works](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · [Arts and Humanities · 3 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/) · [Computer Science · 3 works](https://md.research.elamur.ai/free/en/shelves/computer-science/) · [Language and Linguistics · 3 works](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/language-and-linguistics/) · [Safety Research · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/safety-research/) · [Social Sciences · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/)

🧭 Topics 2 Research subjects and languages the work is about.[Bias, fairness & safety · 2 works](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/) · [Language models & pretraining · 1 work](https://md.research.elamur.ai/free/en/topics/language-models/)

## Works by year

### 2020s

[**2025** 2 papers](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/year/2025/) · [**2023** 1 paper](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/year/2023/)

## Papers

The most cited first (OpenAlex and our library).

1. **[AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/)** *(2023 · 350 citations)* Jailbreak attacks push safety-aligned LLMs into answering requests they should refuse. Earlier approaches fall into two camps. Hand-written prompts, such as the "Do-Anything-Now (DAN)" family, scale poorly and lose effectiveness as models are updated. Gradient-guided token search, such as GCG, produces gibberish…
2. **[AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection](https://md.research.elamur.ai/free/en/papers/luo-2025-agrail-lifelong-agent-guardrail-effective/)** *(2025 · 20 citations)* LLM-based agents that run shell commands, browse websites or query databases can cause harm in two ways. Task-specific risks break rules that an administrator sets for a given job, such as access restrictions on medical records. Systemic risks threaten confidentiality, integrity or availability, for example through…
3. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/)** *(2025 · 16 citations)* Lightweight prompt guard classifiers screen LLM inputs for prompt injection, but they often learn a shortcut.

## All works

20 works of theirs in our library, the most cited first; 3 with a page here, the others link their original until we summarise them.

1. **[Robust Physical-World Attacks on Deep Learning Visual Classification ↗](https://doi.org/10.1109/cvpr.2018.00175) IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · no summary yet**Kevin Eykholt et al.*2018 · 2,112 citations*
2. **[Generating Adversarial Examples with Adversarial Networks ↗](https://doi.org/10.24963/ijcai.2018/543) International Joint Conference on Artificial Intelligence · no summary yet**Chaowei Xiao et al.*2018 · 928 citations*
3. **[Voyager: An Open-Ended Embodied Agent with Large Language Models ↗](https://arxiv.org/abs/2305.16291) arXiv:2305.16291 · no summary yet**Guanzhi Wang et al.*2023 · 639 citations*
4. [**AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models arXiv:2310.04451**Xiaogeng Liu, Nan Xu, Muhao Chen, et al.*2023 · 350 citations*](https://md.research.elamur.ai/free/en/papers/liu-2023-autodan-generating-stealthy-jailbreak-prompts/)
5. **[Spatially Transformed Adversarial Examples ↗](https://arxiv.org/abs/1801.02612) arXiv (Cornell University) · no summary yet**Chaowei Xiao et al.*2018 · 287 citations*
6. **[VoxFormer: Sparse Voxel Transformer for Camera-based 3D Semantic Scene Completion ↗](https://arxiv.org/abs/2302.12251) arXiv:2302.12251 · no summary yet**Yiming Li et al.*2023 · 263 citations*
7. **[Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation ↗](https://doi.org/10.1007/978-3-030-01249-6_14) Lecture notes in computer science · no summary yet**Chaowei Xiao et al.*2018 · 94 citations*
8. **[Test-Time Prompt Tuning for Zero-Shot Generalization in Vision-Language Models ↗](https://doi.org/10.52202/068431-1038) neural information processing systems · no summary yet**Manli Shu et al.*2022 · 85 citations*
9. **[JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks ↗](https://arxiv.org/abs/2404.03027) arXiv:2404.03027 · no summary yet**Weidi Luo et al.*2024 · 66 citations*
10. **[MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding ↗](https://arxiv.org/abs/2406.09411) arXiv (Cornell University) · no summary yet**Fei Wang et al.*2024 · 48 citations*
11. **[Re-ViLM: Retrieval-Augmented Visual Language Model for Zero and Few-Shot Image Captioning ↗](https://aclanthology.org/2023.findings-emnlp.793/) Findings of the Association for Computational Linguistics: EMNLP 2023 · no summary yet**Zhuolin Yang et al.*2023 · 44 citations*
12. **[AdvIT: Adversarial Frames Identifier Based on Temporal Consistency in Videos ↗](https://doi.org/10.1109/iccv.2019.00407) IEEE/CVF International Conference on Computer Vision (ICCV) · no summary yet**Chaowei Xiao et al.*2019 · 44 citations*
13. **[Data Poisoning Attack against Unsupervised Node Embedding Methods ↗](https://arxiv.org/abs/1810.12881) arXiv (Cornell University) · no summary yet**Mingjie Sun et al.*2018 · 39 citations*
14. **[AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection](https://md.research.elamur.ai/free/en/papers/luo-2025-agrail-lifelong-agent-guardrail-effective/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Weidi Luo, Shenghong Dai, Xiaogeng Liu, et al.*2025 · 20 citations*
15. **[DensePure: Understanding Diffusion Models towards Adversarial Robustness ↗](https://arxiv.org/abs/2211.00322) CaltechAUTHORS (California Institute of Technology) · no summary yet**Chaowei Xiao et al.*2022 · 18 citations*
16. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Hao Li, Xiaogeng Liu, Ning Zhang, et al.*2025 · 16 citations*
17. **[When Are Teacher Tokens Reliable? Position-Weighted On-Policy Self-Distillation for Reasoning ↗](https://arxiv.org/abs/2605.21606) arXiv:2605.21606 · no summary yet**Xiaogeng Liu et al.*2026 · 8 citations*
18. **[AI Risk Management Should Incorporate Both Safety and Security ↗](https://arxiv.org/abs/2405.19524) arXiv (Cornell University) · no summary yet**Xiangyu Qi et al.*2024 · 3 citations*
19. **[DecodingTrust-Agent Platform (DTap): A Controllable and Interactive Red-Teaming Platform for AI Agents ↗](https://arxiv.org/abs/2605.04808) arXiv (Cornell University) · no summary yet**Zhaorun Chen et al.*2026*
20. **[ADVM'21 ↗](https://doi.org/10.1145/3474085.3478572) ACM International Conference on Multimedia (ACM MM) · no summary yet**Aishan Liu et al.*2021*

## Co-authors here

8 co-authors with a page, the most papers together first.

- [Xiaogeng Liu](https://md.research.elamur.ai/free/en/authors/xiaogeng-liu/) ×3
- [Muhao Chen](https://md.research.elamur.ai/free/en/authors/muhao-chen/) ×2
- [Hao Li](https://md.research.elamur.ai/free/en/authors/hao-li/)
- [Huan Sun](https://md.research.elamur.ai/free/en/authors/huan-sun/)
- [Nan Xu](https://md.research.elamur.ai/free/en/authors/nan-xu/)
- [Ning Zhang](https://md.research.elamur.ai/free/en/authors/ning-zhang/)
- [Suman Banerjee](https://md.research.elamur.ai/free/en/authors/suman-banerjee/)
- [Weidi Luo](https://md.research.elamur.ai/free/en/authors/weidi-luo/)

## Venues

Where their works here were published, the most works first, with the editions of those that have a page.

- [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/) ×2: [ACL 2025](https://md.research.elamur.ai/free/en/venues/acl/2025/) ×2
- ACM International Conference on Multimedia (ACM MM)
- CaltechAUTHORS (California Institute of Technology)
- Findings of the Association for Computational Linguistics: EMNLP 2023
- IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
- IEEE/CVF International Conference on Computer Vision (ICCV)
- International Joint Conference on Artificial Intelligence
- Lecture notes in computer science
- neural information processing systems

## Cited by

Papers of our library cite their works 1,203 times (of the 149,439 papers whose bibliographies we read); [237 citing papers with a page here →](https://md.research.elamur.ai/free/en/authors/chaowei-xiao/cited-by/).

Updated 30 October 2026