activity
20172023
most citedImproving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features

19 citations · 52 across the 9 of their papers we have counts for

collaborators

9 papers

cs.LG2023★ 6 cited

Hierarchical Graph Neural Networks for Causal Discovery and Root Cause Localization

Dongjie Wang, Zhengzhang Chen, Jingchao Ni +4

In this paper, we propose REASON, a novel framework that enables the automatic discovery of both intra-level (i.e., within-network) and inter-level (i.e., across-network) causal re…

cs.LG2022

Personalized Federated Learning via Heterogeneous Modular Networks

Tianchun Wang, Wei Cheng, Dongsheng Luo +5

Personalized Federated Learning (PFL) which collaboratively trains a federated model while considering local clients under privacy constraints has attracted much attention. Despite…

cs.LG2022★ 1 cited

FocusedCleaner: Sanitizing Poisoned Graphs for Robust GNN-based Node Classification

Yulin Zhu, Liang Tong, Gaolei Li +2

Graph Neural Networks (GNNs) are vulnerable to data poisoning attacks, which will generate a poisoned graph as the input to the GNN models. We present FocusedCleaner as a poisoned…

cs.CV2021

FACESEC: A Fine-grained Robustness Evaluation Framework for Face Recognition Systems

Liang Tong, Zhengzhang Chen, Jingchao Ni +4

We present FACESEC, a framework for fine-grained robustness evaluation of face recognition systems. FACESEC evaluation is performed along four dimensions of adversarial modeling: t…

cs.LG2020

Towards Robustness against Unsuspicious Adversarial Examples

Liang Tong, Minzhe Guo, Atul Prakash +1

Despite the remarkable success of deep neural networks, significant concerns have emerged about their robustness to adversarial perturbations to inputs. While most attacks aim to e…

cs.LG2019★ 12 cited

Defending Against Physically Realizable Attacks on Image Classification

Tong Wu, Liang Tong, Yevgeniy Vorobeychik

We study the problem of defending deep neural network approaches for image classification from physically realizable attacks. First, we demonstrate that the two most scalable and e…

cs.CR2019★ 3 cited

Finding Needles in a Moving Haystack: Prioritizing Alerts with Adversarial Reinforcement Learning

Liang Tong, Aron Laszka, Chao Yan +2

Detection of malicious behavior is a fundamental problem in security. One of the major challenges in using detection systems in practice is in dealing with an overwhelming number o…

cs.LG2018★ 11 cited

Adversarial Regression with Multiple Learners

Liang Tong, Sixie Yu, Scott Alfeld +1

Despite the considerable success enjoyed by machine learning techniques in practice, numerous studies demonstrated that many approaches are vulnerable to attacks. An important clas…

cs.CR2017★ 19 cited

Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features

Liang Tong, Bo Li, Chen Hajaj +3

Machine learning (ML) techniques are increasingly common in security applications, such as malware and intrusion detection. However, ML models are often susceptible to evasion atta…