activity
20102024
most citedEvading Classifiers by Morphing in the Dark

78 citations · 274 across the 28 of their papers we have counts for

collaborators

28 papers

cs.CR2024

Towards Automated Generation of Smart Grid Cyber Range for Cybersecurity Experiments and Training

Daisuke Mashima, Muhammad M. Roomi, Bennet Ng +3

Assurance of cybersecurity is crucial to ensure dependability and resilience of smart power grid systems. In order to evaluate the impact of potential cyber attacks, to assess depl…

cs.AI2023★ 8 cited

Using Large Language Models for Cybersecurity Capture-The-Flag Challenges and Certification Questions

Wesley Tann, Yuancheng Liu, Jun Heng Sim +2

The assessment of cybersecurity Capture-The-Flag (CTF) exercises involves participants finding text strings or ``flags'' by exploiting system vulnerabilities. Large Language Models…

cs.LG2023

Adaptive Attractors: A Defense Strategy against ML Adversarial Collusion Attacks

Jiyi Zhang, Han Fang, Ee-Chien Chang

In the seller-buyer setting on machine learning models, the seller generates different copies based on the original model and distributes them to different buyers, such that advers…

cs.LG2023

Finding Meaningful Distributions of ML Black-boxes under Forensic Investigation

Jiyi Zhang, Han Fang, Hwee Kuan Lee +1

Given a poorly documented neural network model, we take the perspective of a forensic investigator who wants to find out the model's data domain (e.g. whether on face images or tra…

cs.CR2022

Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence

Han Fang, Jiyi Zhang, Yupeng Qiu +3

Deep neural networks are vulnerable to adversarial attacks. In this paper, we take the role of investigators who want to trace the attack and identify the source, that is, the part…

cs.LG2022★ 2 cited

Purifier: Defending Data Inference Attacks via Transforming Confidence Scores

Ziqi Yang, Lijin Wang, Da Yang +5

Neural networks are susceptible to data inference attacks such as the membership inference attack, the adversarial model inversion attack and the attribute inference attack, where…