Zongyang Ma
Author directoryOther people with similar names: Zongyang Ma
Unverified author pages with similar names: Zongyang Ma
2026
Making MLLMs Blind: Adversarial Smuggling Attacks in MLLM Content Moderation
Zhiheng Li | Zongyang Ma | Yuntong Pan | Ziqi Zhang | Xiaolei Lv | Bo Li | Jun Gao | Jianing Zhang | Chunfeng Yuan | Bing Li | Weiming Hu
Findings of the Association for Computational Linguistics: ACL 2026
Zhiheng Li | Zongyang Ma | Yuntong Pan | Ziqi Zhang | Xiaolei Lv | Bo Li | Jun Gao | Jianing Zhang | Chunfeng Yuan | Bing Li | Weiming Hu
Findings of the Association for Computational Linguistics: ACL 2026
Multimodal Large Language Models (MLLMs) are increasingly being deployed as automated content moderators. Within this landscape, we uncover a critical threat: Adversarial Smuggling Attacks. Unlike adversarial perturbations (for misclassification) and adversarial jailbreaks (for harmful output generation), adversarial smuggling exploits the Human-AI capability gap. It encodes harmful content into human-readable visual formats that remain AI-unreadable, thereby evading automated detection and enabling the dissemination of harmful content. We classify smuggling attacks into two pathways: (1) Perceptual Blindness, disrupting text recognition; and (2) Reasoning Blockade, inhibiting semantic understanding despite successful text recognition. To evaluate this threat, we constructed SmuggleBench, the first comprehensive benchmark comprising 1,700 adversarial smuggling attack instances. Evaluations on SmuggleBench reveal that both proprietary (e.g., GPT-5) and open-source (e.g., Qwen3-VL) SOTA models are vulnerable to this threat, producing Attack Success Rates (ASR) exceeding 90%. By analyzing the vulnerability through the lenses of perception and reasoning, we identify three root causes: the limited capabilities of vision encoders, the robustness gap in OCR, and the scarcity of domain-specific adversarial examples. We conduct a preliminary exploration of mitigation strategies, investigating the potential of test-time scaling (via CoT) and adversarial training (via SFT) to mitigate this threat.
2025
iMOVE : Instance-Motion-Aware Video Understanding
Jiaze Li | Yaya Shi | Zongyang Ma | Haoran Xu | Feng cheng | Huihui Xiao | Ruiwen Kang | Fan Yang | Tingting Gao | Di Zhang
Findings of the Association for Computational Linguistics: ACL 2025
Jiaze Li | Yaya Shi | Zongyang Ma | Haoran Xu | Feng cheng | Huihui Xiao | Ruiwen Kang | Fan Yang | Tingting Gao | Di Zhang
Findings of the Association for Computational Linguistics: ACL 2025
Enhancing the fine-grained instance spatiotemporal motion perception capabilities of Video Large Language Models is crucial for improving their temporal and general video understanding. However, current models struggle to perceive detailed and complex instance motions. To address these challenges, we have made improvements from both data and model perspectives. In terms of data, we have meticulously curated iMOVE-IT, the first large-scale instance-motion-aware video instruction-tuning dataset. This dataset is enriched with comprehensive instance motion annotations and spatiotemporal mutual-supervision tasks, providing extensive training for the model’s instance-motion-awareness. Building on this foundation, we introduce iMOVE, an instance-motion-aware video foundation model that utilizes Event-aware Spatiotemporal Efficient Modeling to retain informative instance spatiotemporal motion details while maintaining computational efficiency. It also incorporates Relative Spatiotemporal Position Tokens to ensure awareness of instance spatiotemporal positions. Evaluations indicate that iMOVE excels not only in video temporal understanding and general video understanding but also demonstrates significant advantages in long-term video understanding. We will release the data, code, and model weights after acceptance.