I am a second-year PhD student at University of Illinois Urbana-Champaign (UIUC) advised by Professor Olgica Milenkovic (IEEE Fellow). I graduated from Shanghai Jiao Tong University (SJTU) with a bachelorβs degree, advised by Professor Siheng Chen. My research interests focus on Trustworthy AI, Large Language Models (LLMs), and LLM Agents, with particular emphasis on adversarial robustness, machine unlearning, and privacy-preserving techniques for foundation models and facilitate LLM agents to master real-world, diverse and scaling MCP (Model Context Protocol) tools.
My research interest includes trustworthy AI, large language models, and LLM agents. I have published papers at top-tier conferences including NeurIPS, CAV. Please check my Google Scholar profile for more details ().
If you are seeking any form of academic cooperation, please feel free to email me at peizhin2@illinois.edu.
π₯ News
- 2025: Β ππ Two papers accepted to NeurIPS 2025!
- 2024: Β ππ Started PhD program at University of Illinois Urbana-Champaign!
- 2024: Β ππ Graduated from Shanghai Jiao Tong University as Outstanding Graduates in the City of Shanghai !
π Publications

A Wolf in Sheepβs Clothing: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search
R. Wei*, P. Niu*, X. Shen*, T. Tu, Y. Li, R. Wu, E. Chien, K. Chaudhuri, P.-Y. Chen, O. Milenkovic, and P. Li
- Developed CKA-Agent achieving 95-98% attack success rates on commercial LLMs, outperforming SOTA by 20-50%. [To be uploaded to arXiv soon]
Code

MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Tools
W. Wang, P. Niu, Z. Xu, Z. Chen, J. Du, Y. Du, X. Pang, K. Huang, Y. Wang, Q. Yan, and S. Chen
- A web-agent-driven framework for large-scale MCP tool integration and model training, facilitating LLM agents to master real-world, diverse and scaling MCP tools.
Code

GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Models
P. Niu*, E. Ma*, H. Zhou, D. Zhou, H. Zhang, S. R. Etesami, and O. Milenkovic
- A framework for LLM unlearning with adaptive data attribution, maintaining model utility while ensuring effective forgetting.

Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness
R. Wei*, P. Niu*, H. Hao-Hsun Hsu, R. Wu, H. Yin, M. Ghassemi, Y. Li, V. K. Potluru, E. Chien, K. Chaudhuri, O. Milenkovic, and P. Li
- An evaluation framework revealing that current unlearning strategies overestimate effectiveness by 20-30% through knowledge correlation and confidence awareness.
Code

DMol: A Highly Efficient and Chemical Motif-Preserving Molecule Generation Platform
P. Niu, Y. Wang, V. Rana, C. Rupakheti, A. Pandey, and O. Milenkovic
- A highly efficient molecule generation platform that reduces diffusion steps by 10-fold and runtime by half while preserving chemical motifs.
Code

ModelVerification.jl: A Comprehensive Toolbox for Formally Verifying Deep Neural Networks
T. Wei, L. Marzari*, K. S. Yun*, H. Hu*, P. Niu*, X. Luo, and C. Liu
- A unified Julia-based framework integrating mainstream verification algorithms for deep neural networks.
Code

T. Wei, Z. Wang, P. Niu, A. Abuduweili, W. Zhao, C. Hutchison, E. Sample, and C. Liu
- Extended Signal-to-Noise Ratio into robustness domain, addressing over-regularization in certified training.
*Equal contribution
π Honors and Awards
- 2025 NeurIPS 2025 Travel Award
- 2024 Outstanding Graduates in the City of Shanghai
- 2022 National Scholarship of China (Top 1% nationwide)
- 2022 First-class Scholarship of SJTU
- 2022 Excellent Student Cadre of SJTU
π Educations
- Sep 2024 - Present, PhD in Electrical and Computer Engineering, University of Illinois Urbana-Champaign (UIUC), USA
- GPA: 4.0/4.0
- Advisor: Olgica Milenkovic (IEEE Fellow)
- Research Direction: Trustworthy AI, LLMs, LLM Agent
- Sep 2020 - Jun 2024, Bachelor of Electronic Science and Technology, Shanghai Jiao Tong University (SJTU), China
- GPA: 90.52/100 (Major: 90.93/100)
- Advisor: Siheng Chen
- Ranking: Top 1 of 65 in department
π¬ Research Experience
University of Illinois Urbana-Champaign (Sep 2024 - Present)
Research Assistant | Advisor: Professor Olgica Milenkovic (IEEE Fellow)
- Developed CKA-Agent achieving 95-98% attack success rates on commercial LLMs, outperforming SOTA by 20-50% [To be uploaded to arXiv soon]
- Proposed GUARD framework for LLM unlearning with adaptive data attribution, maintaining model utility while ensuring effective forgetting [Submitted to ICLR 2026]
- Designed evaluation framework revealing current unlearning strategies overestimate effectiveness by 20-30% [NeurIPS 2025]
- Created DMol molecule generation model reducing diffusion steps by 10-fold and runtime by half [NeurIPS 2025]
Shanghai Jiao Tong University (Jul 2025 - Present)
Research on MCP Tools and LLM Agents | Advisor: Professor Siheng Chen
- Built automated pipeline collecting data from 1,166 MCP servers and 11,536 tools, producing 68,733 instruction pairs
- Developed MCP-Flow, a web-agent-driven framework for large-scale MCP tool integration and model training, facilitating LLM agents to master real-world, diverse and scaling MCP tools [Submitted to ICLR 2026]
Carnegie Mellon University (Jun 2023 - Jan 2024)
Research Assistant | Advisor: Professor Changliu Liu
- Extended Signal-to-Noise Ratio into robustness domain, addressing over-regularization in certified training [TMLR 2024]
- Developed unified Julia-based framework integrating mainstream verification algorithms [CAV 2024]
π¬ Services
- Program Committee or Reviewer: NeurIPS, ICML, ICLR
- Leadership: Student Union of School of Electronic Information and Electrical Engineering, Department Secretary