activity
20182023
most citedStructured Adversarial Attack: Towards General Implementation and Better Interpretability

114 citations · 848 across the 42 of their papers we have counts for

collaborators

43 papers

cs.NE2023

Gaining the Sparse Rewards by Exploring Lottery Tickets in Spiking Neural Network

Hao Cheng, Jiahang Cao, Erjia Xiao +2

Deploying energy-efficient deep learning algorithms on computational-limited devices, such as robots, is still a pressing issue for real-world applications. Spiking Neural Networks…

cs.CR2023★ 2 cited

Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack

Ningfei Wang, Yunpeng Luo, Takami Sato +2

In autonomous driving (AD), accurate perception is indispensable to achieving safe and secure driving. Due to its safety-criticality, the security of AD perception has been widely…

cs.CV2023★ 11 cited

Exposing the Fake: Effective Diffusion-Generated Images Detection

Ruipeng Ma, Jinhao Duan, Fei Kong +2

Image synthesis has seen significant advancements with the advent of diffusion-based generative models like Denoising Diffusion Probabilistic Models (DDPM) and text-to-image diffus…

cs.CV2023

Unlearnable Examples Give a False Sense of Data Privacy: Understanding and Relearning

Pucheng Dang, Xing Hu, Kaidi Xu +5

Unlearnable examples are proposed to prevent third parties from exploiting unauthorized data, which generates unlearnable examples by adding imperceptible perturbations to public p…

cs.CV2023★ 8 cited

Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation

Zhengyue Zhao, Jinhao Duan, Xing Hu +6

Diffusion models have demonstrated remarkable performance in image generation tasks, paving the way for powerful AIGC applications. However, these widely-used generative models can…

cs.CV2023

Improve Video Representation with Temporal Adversarial Augmentation

Jinhao Duan, Quanfu Fan, Hao Cheng +2

Recent works reveal that adversarial augmentation benefits the generalization of neural networks (NNs) if used in an appropriate manner. In this paper, we introduce Temporal Advers…

cs.SD2023★ 10 cited

An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization

Fei Kong, Jinhao Duan, RuiPeng Ma +4

Recently, diffusion models have achieved remarkable success in generating tasks, including image and audio generation. However, like other generative models, diffusion models are p…

cs.CV2023

Caterpillar: A Pure-MLP Architecture with Shifted-Pillars-Concatenation

Jin Sun, Xiaoshuang Shi, Zhiyuan Wang +3

Modeling in Computer Vision has evolved to MLPs. Vision MLPs naturally lack local modeling capability, to which the simplest treatment is combined with convolutional layers. Convol…

cs.CV2023★ 12 cited

Are Diffusion Models Vulnerable to Membership Inference Attacks?

Jinhao Duan, Fei Kong, Shiqi Wang +2

Diffusion-based generative models have shown great potential for image synthesis, but there is a lack of research on the security and privacy risks they may pose. In this paper, we…

eess.SY2022

Distributed-Training-and-Execution Multi-Agent Reinforcement Learning for Power Control in HetNet

Kaidi Xu, Nguyen Van Huynh, Geoffrey Ye Li

In heterogeneous networks (HetNets), the overlap of small cells and the macro cell causes severe cross-tier interference. Although there exist some approaches to address this probl…

cs.IT2022

Secrecy Rate Maximization of RIS-assisted SWIPT Systems: A Two-Timescale Beamforming Design Approach

Ming-Min Zhao, Kaidi Xu, Yunlong Cai +2

Reconfigurable intelligent surfaces (RISs) achieve high passive beamforming gains for signal enhancement or interference nulling by dynamically adjusting their reflection coefficie…

cs.LG2022

Audit and Improve Robustness of Private Neural Networks on Encrypted Data

Jiaqi Xue, Lei Xu, Lin Chen +3

Performing neural network inference on encrypted data without decryption is one popular method to enable privacy-preserving neural networks (PNet) as a service. Compared with regul…

cs.CV2022★ 2 cited

Real-Time Robust Video Object Detection System Against Physical-World Adversarial Attacks

Husheng Han, Xing Hu, Kaidi Xu +7

DNN-based video object detection (VOD) powers autonomous driving and video surveillance industries with rising importance and promising opportunities. However, adversarial patch at…

cs.LG2022★ 33 cited

General Cutting Planes for Bound-Propagation-Based Neural Network Verification

Huan Zhang, Shiqi Wang, Kaidi Xu +5

Bound propagation methods, when combined with branch and bound, are among the most effective methods to formally verify properties of deep neural networks such as correctness, robu…

cs.NE2022★ 8 cited

Toward Robust Spiking Neural Network Against Adversarial Perturbation

Ling Liang, Kaidi Xu, Xing Hu +2

As spiking neural networks (SNNs) are deployed increasingly in real-world efficiency critical applications, the security concerns in SNNs attract more attention. Currently, researc…

cs.CV2021★ 13 cited

ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers

Husheng Han, Kaidi Xu, Xing Hu +6

Adversarial patch attacks that craft the pixels in a confined region of the input images show their powerful attack effectiveness in physical environments even with noises or defor…

cs.LG2021★ 1 cited

Efficient Micro-Structured Weight Unification and Pruning for Neural Network Compression

Sheng Lin, Wei Jiang, Wei Wang +4

Compressing Deep Neural Network (DNN) models to alleviate the storage and computation requirements is essential for practical applications, especially for resource limited devices.…

cs.LG2021★ 2 cited

Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations

Hao Cheng, Kaidi Xu, Chenan Wang +3

To tackle the susceptibility of deep neural networks to adversarial examples, the adversarial training has been proposed which provides a notion of security through an inner maximi…

cs.LG2021★ 14 cited

Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification

Shiqi Wang, Huan Zhang, Kaidi Xu +4

Bound propagation based incomplete neural network verifiers such as CROWN are very efficient and can significantly accelerate branch-and-bound (BaB) based complete verification of…

cs.LG2021★ 18 cited

On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning

Ren Wang, Kaidi Xu, Sijia Liu +4

Model-agnostic meta-learning (MAML) has emerged as one of the most successful meta-learning techniques in few-shot learning. It enables us to learn a meta-initialization} of model…

stat.ML2020★ 4 cited

Zeroth-Order Hybrid Gradient Descent: Towards A Principled Black-Box Optimization Framework

Pranay Sharma, Kaidi Xu, Sijia Liu +3

In this work, we focus on the study of stochastic zeroth-order (ZO) optimization which does not require first-order gradient information and uses only function evaluations. The pro…

cs.IT2020★ 85 cited

Intelligent Reflecting Surface Aided Full-Duplex Communication: Passive Beamforming and Deployment Design

Yunlong Cai, Ming-Min Zhao, Kaidi Xu +1

This paper investigates the passive beamforming and deployment design for an intelligent reflecting surface (IRS) aided full-duplex (FD) wireless system, where an FD access point (…

cs.AI2020★ 60 cited

Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifiers

Kaidi Xu, Huan Zhang, Shiqi Wang +4

Formal verification of neural networks (NNs) is a challenging and important problem. Existing efficient complete solvers typically require the branch-and-bound (BaB) process, which…

eess.SP2020★ 8 cited

Low-Complexity Joint Power Allocation and Trajectory Design for UAV-Enabled Secure Communications with Power Splitting

Kaidi Xu, Ming-Min Zhao, Yunlong Cai +1

An unmanned aerial vehicle (UAV)-aided secure communication system is conceived and investigated, where the UAV transmits legitimate information to a ground user in the presence of…