Kelvin Yuxiang Huang

Ph.D. Student in Computer Science @ University of Toronto

portrait2.jpg

kelvinhuang[at]cs.toronto.edu

I am a first-year Ph.D. student advised by Prof. Gururaj Saileshwar in the SITH Lab.

Prior to my Ph.D., I completed my undergraduate studies in Computer Science and Statistics at the University of California, Berkeley.

My research primarily focuses on agentic system security, with an emphasis on mitigating system-level security risks in autonomous and tool-using AI agents. I am particularly interested in runtime security, privilege-boundary enforcement, attack-path abstractions, and security monitoring for agentic systems.

Previously, my research spanned trustworthy AI and adversarial robustness. At UC Berkeley, I conducted research on trustworthy agentic AI advised by Prof. Dawn Song, focusing on structured observability for agent systems. I also worked on adversarial robustness for large vision-language models, advised by Prof. Qingyun Wang.

Earlier, I also worked on 3D generation at HKU with Prof. Xihui Liu, and on computational vision at UC Berkeley with Prof. Dennis Levi.

news

Sep 01, 2026 Excited to begin my Ph.D. in Computer Science at the University of Toronto, advised by Prof. Gururaj Saileshwar. 🎓
May 16, 2026 Graduated from UC Berkeley with degrees in Computer Science and Statistics. 🎓
Nov 19, 2025 Thrilled to share that our paper on Trustworthy Agentic AI has been accepted to the AAAI 2026 TrustAgent Workshop! 🎉
Nov 05, 2025 Thrilled to share that our paper on VLM adversarial robustness has been accepted to the AAAI 2026 AIGOV Workshop! 🎉

selected publications

  1. AAAIw
    atlas.png
    ATLAS: Shielding Geolocation in LVLMs with Zero-Query Universal Perturbations
    Kelvin Yuxiang Huang, Yi R. Fung, Yue Xiao, Daniel Runfola, and Qingyun Wang
    In AAAI-26 Workshop on AI for Governance (AIGOV), 2026
    Accepted (Poster, Non-archival)
  2. AAAIw
    agenttrace.png
    AgentTrace: A Structured Logging Framework for Agent System Observability
    Adam ALSayyad*, Kelvin Yuxiang Huang*, and Richik Pal*
    In AAAI-26 Workshop on AI for TrustAgent, 2026
    Accepted (Poster, Non-archival)
    * Equal contribution