arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Chris L. Lin

34 papers · 2011–2026

2011: 12012: 02013: 02014: 02015: 52016: 22017: 02018: 42019: 22020: 32021: 12022: 12023: 12024: 22025: 62026: 6
2011peak 6 in 20252026

Frequent co-authors

Papers

showing 1–25 of 34 RSS

What makes service employees and customers smile

Jiun‐Sheng Chris Lin, Cheng‐Yu Lin

Sociology and Political Science · Journal of service management · · cited 82× · DOI ↗ · more like this ·

Purpose The purpose of this paper is to examine the phenomenon of emotional contagion in service encounters by proposing and testing an empirical model of the antecedents and consequences of affective service delivery by employees. Design/methodology/approach A theoretical framework of the antecedents and outcomes of employee affective delivery in service interactions is developed on the basis of relevant studies in marketing, psychology, and organization. In total, nine hypothesized relationships between the constructs in the conceptual model are proposed and tested by structural equation modeling using data collected from 217 employee‐customer pairs in ten service industries. Findings Results showed that employee inner emotion, work group mood, and service environment all have a positive influence on employee affective delivery, which, in turn, positively influences customer emotion…

QPRAC: Towards Secure and Practical PRAC-based Rowhammer Mitigation using Priority Queues

Jeonghyun Woo, Chris S. Lin, Prashant J. Nair +2 more

cs.CR · · cited 32× · arXiv ↗ · more like this ·

JEDEC has introduced the Per Row Activation Counting (PRAC) framework for DDR5 and future DRAMs to enable precise counting of DRAM row activations. PRAC enables a holistic mitigation of Rowhammer attacks even at ultra-low Rowhammer thresholds. PRAC uses an Alert Back-Off (ABO) protocol to request the memory controller to issue Rowhammer mitigation requests. However, recent PRAC implementations are either insecure or impractical. For example, Panopticon, the inspiration for PRAC, is rendered insecure if implemented per JEDEC's PRAC specification. On the other hand, the recent UPRAC proposal is impractical since it needs oracular knowledge of the `top-N' activated DRAM rows that require mitigation. This paper provides the first secure, scalable, and practical RowHammer solution using the PRAC framework. The crux of our proposal is the design of a priority-based service queue (PSQ) for…

Graph Neural Networks Including Sparse Interpretability

Chris Lin, Gerald J. Sun, Krishna C. Bulusu +2 more

cs.LG · · cited 3× · arXiv ↗ · more like this ·

Graph Neural Networks (GNNs) are versatile, powerful machine learning methods that enable graph structure and feature representation learning, and have applications across many domains. For applications critically requiring interpretation, attention-based GNNs have been leveraged. However, these approaches either rely on specific model architectures or lack a joint consideration of graph structure and node features in their interpretation. Here we present a model-agnostic framework for interpreting important graph structure and node features, Graph neural networks Including SparSe inTerpretability (GISST). With any GNN model, GISST combines an attention mechanism and sparsity regularization to yield an important subgraph and node feature subset related to any graph-based task. Through a single self-attention layer, a GISST model learns an importance probability for each node feature and…

Predicting Inpatient Discharge Prioritization With Electronic Health Records

Anand Avati, Stephen Pfohl, Chris Lin +7 more

cs.LG · · cited 3× · arXiv ↗ · more like this ·

Identifying patients who will be discharged within 24 hours can improve hospital resource management and quality of care. We studied this problem using eight years of Electronic Health Records (EHR) data from Stanford Hospital. We fit models to predict 24 hour discharge across the entire inpatient population. The best performing models achieved an area under the receiver-operator characteristic curve (AUROC) of 0.85 and an AUPRC of 0.53 on a held out test set. This model was also well calibrated. Finally, we analyzed the utility of this model in a decision theoretic framework to identify regions of ROC space in which using the model increases expected utility compared to the trivial always negative or always positive classifiers.

On the Robustness of Removal-Based Feature Attributions

Chris Lin, Ian Covert, Su-In Lee

cs.LG · · cited 2× · arXiv ↗ · more like this ·

To explain predictions made by complex machine learning models, many feature attribution methods have been developed that assign importance scores to input features. Some recent work challenges the robustness of these methods by showing that they are sensitive to input and model perturbations, while other work addresses this issue by proposing robust attribution methods. However, previous work on attribution robustness has focused primarily on gradient-based feature attributions, whereas the robustness of removal-based attribution methods is not currently well understood. To bridge this gap, we theoretically characterize the robustness properties of removal-based feature attributions. Specifically, we provide a unified analysis of such methods and derive upper bounds for the difference between intact and perturbed attributions, under settings of both input and model perturbations. Our…

Contrastive Corpus Attribution for Explaining Representations

Chris Lin, Hugh Chen, Chanwoo Kim +1 more

cs.LG · · cited 2× · arXiv ↗ · more like this ·

Despite the widespread use of unsupervised models, very few methods are designed to explain them. Most explanation methods explain a scalar model output. However, unsupervised models output representation vectors, the elements of which are not good candidates to explain because they lack semantic meaning. To bridge this gap, recent works defined a scalar explanation output: a dot product-based similarity in the representation space to the sample being explained (i.e., an explicand). Although this enabled explanations of unsupervised models, the interpretation of this approach can still be opaque because similarity to the explicand's representation may not be meaningful to humans. To address this, we propose contrastive corpus similarity, a novel and semantically meaningful scalar explanation output based on a reference corpus and a contrasting foil set of samples. We demonstrate that…

GPUThor: Amplifying Rowhammer Attacks via Non-Uniform Patterns to Exploit ECC-Protected GPUs

Chris S. Lin, Joyce Qu, Aditya Rajeev +1 more

cs.CR · · cited 1× · arXiv ↗ · more like this ·

GDDR memory in GPUs is vulnerable to Rowhammer attacks, where rapid memory accesses induce bit flips in adjacent cells, enabling data tampering and privilege escalation. However, prior GPU Rowhammer attacks trigger only tens to hundreds of bit flips, orders of magnitude fewer than CPU attacks, severely limiting their practical impact. This gap stems from the reliance of existing GPU Rowhammer attacks on uniform hammering patterns that activate aggressor and decoy rows equally, which results in low hammering intensity for aggressor rows. We present GPUThor, a high-intensity Rowhammer attack on NVIDIA GPUs leveraging non-uniform hammering. GPUThor reverse engineers GPU memory-access coalescing behavior to enable non-uniform hammering patterns on GPUs, that activate aggressor rows more intensely than decoy rows. Additionally, by identifying refresh instances when in-DRAM mitigations are…

Random pattern generation for post-silicon validation of DDR3 SDRAM

Haoyu Yang, Shih-Hua Kuo, Tzu‐Hsuan Huang +3 more

Hardware and Architecture · · cited 1× · DOI ↗ · more like this ·

Due to the demand of pursuing a main memory with larger data bandwidth, higher data density, and lower power, the specification of DRAM has been constantly evolved in the past decade. The new DRAM specifications support multiple operating modes with multiple timing settings. It then becomes computationally infeasible to exhaustively validate all the combinations of different operating modes, timing settings and address/data with pure simulation before silicon. In this paper, we propose a framework to generate proper random patterns for validating a newly designed DDR3 SDRAM based on its first silicon chips. The proposed framework needs to not only guarantee the correctness of the generated patterns according to the state diagram and timing constraints defined in the specification but also provide the flexibility of exploring various design corners for the targeted DDR3 SDRAM. We will…

GPUHammer: Rowhammer Attacks on GPU Memories are Practical

Chris S. Lin, Joyce Qu, Gururaj Saileshwar

cs.CR · · cited 0× · arXiv ↗ · more like this ·

Rowhammer is a read disturbance vulnerability in modern DRAM that causes bit-flips, compromising security and reliability. While extensively studied on Intel and AMD CPUs with DDR and LPDDR memories, its impact on GPUs using GDDR memories, critical for emerging machine learning applications, remains unexplored. Rowhammer attacks on GPUs face unique challenges: (1) proprietary mapping of physical memory to GDDR banks and rows, (2) high memory latency and faster refresh rates that hinder effective hammering, and (3) proprietary mitigations in GDDR memories, difficult to reverse-engineer without FPGA-based test platforms. We introduce GPUHammer, the first Rowhammer attack on NVIDIA GPUs with GDDR6 DRAM. GPUHammer proposes novel techniques to reverse-engineer GDDR DRAM row mappings, and employs GPU-specific memory access optimizations to amplify hammering intensity and bypass mitigations.…

Ensembling Sparse Autoencoders

Soham Gadgil, Chris Lin, Su-In Lee

cs.LG · · cited 0× · arXiv ↗ · more like this ·

Sparse autoencoders (SAEs) are used to decompose neural network activations into human-interpretable features. Typically, features learned by a single SAE are used for downstream applications. However, it has recently been shown that a single SAE captures only a limited subset of features that can be extracted from the activation space. Motivated by this limitation, we introduce and formalize SAE ensembles. Furthermore, we propose to ensemble multiple SAEs through naive bagging and boosting. In naive bagging, SAEs trained with different weight initializations are ensembled, whereas in boosting SAEs sequentially trained to minimize the residual error are ensembled. Theoretically, naive bagging and boosting are justified as approaches to reduce reconstruction error. Empirically, we evaluate our ensemble approaches with three settings of language models and SAE architectures. Our empirical…

PrisonBreak: Jailbreaking Large Language Models with at Most Twenty-Five Targeted Bit-flips

Zachary Coalson, Jeonghyun Woo, Chris S. Lin +8 more

cs.CR · · cited 0× · arXiv ↗ · more like this ·

We study a new vulnerability in commercial-scale safety-aligned large language models (LLMs): their refusal to generate harmful responses can be broken by flipping only a few bits in model parameters. Our attack jailbreaks billion-parameter language models with just 5 to 25 bit-flips, requiring up to 40$\times$ fewer bit flips than prior attacks on much smaller computer vision models. Unlike prompt-based jailbreaks, our method directly uncensors models in memory at runtime, enabling harmful outputs without requiring input-level modifications. Our key innovation is an efficient bit-selection algorithm that identifies critical bits for language model jailbreaks up to 20$\times$ faster than prior methods. We evaluate our attack on 10 open-source LLMs, achieving high attack success rates (ASRs) of 80-98% with minimal impact on model utility. We further demonstrate an end-to-end exploit via…

An Efficient Framework for Crediting Data Contributors of Diffusion Models

Chris Lin, Mingyu Lu, Chanwoo Kim +1 more

cs.LG · · cited 0× · arXiv ↗ · more like this ·

As diffusion models are deployed in real-world settings, and their performance is driven by training data, appraising the contribution of data contributors is crucial to creating incentives for sharing quality data and to implementing policies for data compensation. Depending on the use case, model performance corresponds to various global properties of the distribution learned by a diffusion model (e.g., overall aesthetic quality). Hence, here we address the problem of attributing global properties of diffusion models to data contributors. The Shapley value provides a principled approach to valuation by uniquely satisfying game-theoretic axioms of fairness. However, estimating Shapley values for diffusion models is computationally impractical because it requires retraining on many training data subsets corresponding to different contributors and rerunning inference. We introduce a…

Relationship between Fujikawa's Method and the Background Field Method for the Scale Anomaly

Chris L. Lin, Carlos R. Ordonez

hep-th · · cited 0× · arXiv ↗ · more like this ·

We show the equivalence between Fujikawa's method for calculating the scale anomaly and the diagrammatic approach to calculating the effective potential via the background field method, for an $O(N)$ symmetric scalar field theory. Fujikawa's method leads to a sum of terms, each one superficially in one-to-one correspondence with a vacuum diagram of the 1-loop expansion. From the viewpoint of the classical action, the anomaly results in a breakdown of the Ward identities due to a scale-dependence of the couplings, whereas in terms of the effective action, the anomaly is the result of the breakdown of Noether's theorem due to explicit symmetry breaking terms of the effective potential.

A Geometric View for Understanding Concept Learning and Neuron Interpretation in Sparse Autoencoders

Chenhao Zhang, Chris Lin, Su-In Lee

cs.LG · · arXiv ↗ · more like this ·

We propose a unified mathematical framework for a geometric understanding of concept learning and neuron interpretation in sparse autoencoders (SAEs). While SAEs improve interpretability of neural networks by learning sparse feature representations, a principled definition of ''concept'' and ''learning'' remains unclear. We formalize concepts as sets of data points and cast concept learning as a set-alignment problem between human-defined and model-induced concepts. This formulation distinguishes three increasingly strong notions of learning -- detection, separation, and approximation -- and yields geometric conditions, error bounds, and capacity constraints for when concepts can be represented by individual neurons or multi-neuron units. It also provides a set-theoretic account for common SAE phenomena, including feature splitting, feature absorption, feature families, and hierarchical…

Agents that Matter: Optimizing Multi-Agent LLMs via Removal-Based Attribution

Mingyu Lu, Yushan Huang, Chris Lin +1 more

cs.MA · · arXiv ↗ · more like this ·

As multi-agent systems (MAS) become increasingly complex, identifying the contributions of individual agents is critical for system optimization. However, existing approaches lack a rigorous, unified framework for credit assignment. In this work, we formalize agent attribution as a cooperative game, parameterized by the coalition distribution, removal protocol, and target metric. Using this framework, we show that Leave-One-Out (LOO) identifies bottleneck agents as effectively as combinatorial methods, but at a fraction of the computational cost. We also demonstrate that removal protocols induce distinct games: Agent ablation isolates structural bottlenecks, whereas introspective LLM judges fail to faithfully approximate this behavior. Furthermore, to evaluate the utility of specific agent backbones, we introduce attribution via model replacement. By substituting underlying models of…

GPUBreach: Privilege Escalation Attacks on GPUs using Rowhammer

Chris S. Lin, Yuqin Yan, Guozhen Ding +4 more

cs.CR · · arXiv ↗ · more like this ·

NVIDIA GPUs with GDDR memories have been shown susceptible to Rowhammer-based bit-flips, similar to CPUs. However, Rowhammer exploits on GPUs have been limited to injecting untargeted bit-flips in victim data like weights of machine learning models, to degrade model accuracy, unlike CPU exploits shown capable of privilege escalation. In this paper, we demonstrate that GPU Rowhammer exploits can be as potent as CPU Rowhammer attacks. By exploiting the GPU page table management to identify when and where new page tables are allocated, we enable an unprivileged user CUDA kernel of one process to use RowHammer bit-flips to gain access to the GPU memory of other processes or co-tenants via targeted tampering of such page-tables resident on the GPU memory. Using this newly found primitive, we demonstrate the first GPU-side privilege escalation attacks, leaking secret data such as…

Where to Steer: Input-Dependent Layer Selection for Steering Improves LLM Alignment

Soham Gadgil, Chris Lin, Su-In Lee

cs.LG · · arXiv ↗ · more like this ·

Steering vectors have emerged as a lightweight and effective approach for aligning large language models (LLMs) at inference time, enabling modulation of model behaviors by shifting intermediate representations toward a target behavior. Many existing steering methods apply interventions at globally fixed locations in an LLM, effectively treating the optimal intervention location as input-invariant. However, representations relevant to a target behavior can be encoded at different LLM layers depending on the input. Theoretically, we show that different inputs may require steering at different layers to achieve alignment with a given behavior. Empirically, we observe that the most effective layer for steering varies substantially between inputs. Motivated by these observations, we introduce \textit{Where to Steer} (W2S), a general framework that adaptively selects intervention layers…

SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Models

Mingyu Lu, Soham Gadgil, Chris Lin +2 more

cs.LG · · arXiv ↗ · more like this ·

As Text-to-Image (T2I) diffusion models are increasingly used in real-world creative workflows, a principled framework for valuing contributors who provide a collection of data is essential for fair compensation and sustainable data marketplaces. While the Shapley value offers a theoretically grounded approach to attribution, it faces a dual computational bottleneck: (i) the prohibitive cost of exhaustive model retraining for each sampled subset of players (i.e., data contributors) and (ii) the combinatorial number of subsets needed to estimate marginal contributions due to contributor interactions. To this end, we propose SurrogateSHAP, a retraining-free framework that approximates the expensive retraining game through inference from a pretrained model. To further improve efficiency, we employ a gradient-boosted tree to approximate the utility function and derive Shapley values…

A Common Pipeline for Harmonizing Electronic Health Record Data for Translational Research

Jessica Gronsbell, Vidul Ayakulangara Panickan, Doudou Zhou +11 more

stat.ML · · arXiv ↗ · more like this ·

Despite the growing availability of Electronic Health Record (EHR) data, researchers often face substantial barriers in effectively using these data for translational research due to their complexity, heterogeneity, and lack of standardized tools and documentation. To address this critical gap, we introduce PEHRT, a common pipeline for harmonizing EHR data for translational research. PEHRT is a comprehensive, ready-to-use resource that includes open-source code, visualization tools, and detailed documentation to streamline the process of preparing EHR data for analysis. The pipeline provides tools to harmonize structured and unstructured EHR data to standardized ontologies to ensure consistency across diverse coding systems. In the presence of unmapped or heterogeneous local codes, PEHRT further leverages representation learning and pre-trained language models to generate robust…

CnC-PRAC: Coalesce, not Cache, Per Row Activation Counts for an Efficient in-DRAM Rowhammer Mitigation

Chris S. Lin, Jeonghyun Woo, Prashant J. Nair +1 more

cs.CR · · arXiv ↗ · more like this ·

JEDEC has introduced the Per Row Activation Counting (PRAC) framework for DDR5 and future DRAMs to enable precise counting of DRAM row activations using per-row activation counts. While recent PRAC implementations enable holistic mitigation of Rowhammer attacks, they impose slowdowns of up to 10% due to the increased DRAM timings for performing a read-modify-write of the counter. Alternatively, recent work, Chronus, addresses these slowdowns, but incurs energy overheads due to the additional DRAM activations for counters. In this paper, we propose CnC-PRAC, a PRAC implementation that addresses both performance and energy overheads. Unlike prior works focusing on caching activation counts to reduce their overheads, our key idea is to reorder and coalesce accesses to activation counts located in the same physical row. Our design achieves this by decoupling counter access from the critical…

The Inverse Velocity Force and Automotive Physics

Chris L. Lin

physics.ed-ph · · arXiv ↗ · more like this ·

The inverse velocity force $F(v)=C/v$ is central to the analysis of automotive performance, but is often unmentioned in classical mechanics courses. It represents the maximum force that can be delivered from a power-limited engine over a wide range of speeds. We show how such a force arises from a device called a transmission in internal combustion engines, and more simply from circuit controls in electric vehicles. We also examine how the force needs to be modified and supplemented to describe vehicle acceleration throughout the entire range of speeds, along with the ensuing kinematics. Along the way we compare gasoline vehicles with electric ones and derive the shape of their torque-speed curves.

On the Normalization and Density of 1D Scattering States

Chris L. Lin

quant-ph · · arXiv ↗ · more like this ·

The normalization of scattering states is more than a rote step necessary to calculate expectation values. This normalization actually contains important information regarding the density of the scattering spectrum (along with useful details on the bound states). For many applications, this information is more useful than the wavefunctions themselves. In this paper we show that this correspondence between scattering state normalization and the density of states is a consequence of the completeness relation, and we present formulas for calculating the density of states which are applicable to certain potentials. We then apply these formulas to the delta function potential and the square well. We then illustrate how the density of states can be used to calculate the partition function for a system of two particles with a point-like (delta potential) interaction.

Simple Model of a Standing Vertical Jump

Chris L. Lin

physics.pop-ph · · arXiv ↗ · more like this ·

In this paper we use Newton's 3rd law to deduce the simplest model of an object that can perform a standing vertical jump -- a two-segmented object with an initial constant repulsive force between the segments, followed by an abrupt attractive force. Such an object, when placed on a sturdy ground, will jump, and the motion can be calculated using only the constant acceleration equations, making the example suitable for algebra-based physics. We then proceed to solve for the motion of an n-segmented object, and determine the optimal number of segments for jumping. We then discuss a few similarities and differences of this simple model from jumping robots and jumping humans, and then conclude by arguing the model's pedagogical merits.

Chirality Through Classical Physics

Chris L. Lin

physics.pop-ph · · arXiv ↗ · more like this ·

Chirality, or handedness, is a topic that is common in biology and chemistry, yet is rarely discussed in physics courses. We provide a way of introducing the topic in classical physics, and demonstrate the merits of its inclusion - such as a simple way to visually introduce the concept of symmetries in physical law - along with giving some simple proofs using only basic matrix operations, thereby avoiding the full formalism of the three-dimensional point group.

Time Scale for Velocity to Track a Force

Chris L. Lin

physics.class-ph · · arXiv ↗ · more like this ·

In this paper we derive and discuss the time it takes for a force to turn a velocity. More precisely, we derive the formula for the time $τ$ it takes a constant force that makes an angle $α$ with the initial velocity $\vec{v}(0)$ to have $\vec{v}(τ)$ get within an angle $θ<α$ of the force. We then show how the addition of a viscous force decreases $τ$ logarithmically. The result can be generalized to any vector quantity whose first time derivative is a constant.