activity
20192023
most citedNeural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks

139 citations · 492 across the 39 of their papers we have counts for

collaborators
Showing 2023Show all

14 papers · 1 filter

cs.CV2023★ 1 cited

Privacy Assessment on Reconstructed Images: Are Existing Evaluation Metrics Faithful to Human Perception?

Xiaoxiao Sun, Nidham Gazagnadou, Vivek Sharma +3

Hand-crafted image quality metrics, such as PSNR and SSIM, are commonly used to evaluate model privacy risk under reconstruction attacks. Under these metrics, reconstructed images…

cs.CV2023

FROD: Robust Object Detection for Free

Muhammad, Awais, Weiming +5

Object detection is a vital task in computer vision and has become an integral component of numerous critical systems. However, state-of-the-art object detectors, similar to their…

cs.LG2023★ 3 cited

Revisiting Data-Free Knowledge Distillation with Poisoned Teachers

Junyuan Hong, Yi Zeng, Shuyang Yu +3

Data-free knowledge distillation (KD) helps transfer knowledge from a pre-trained model (known as the teacher model) to a smaller model (known as the student model) without access…

cs.CL2023★ 2 cited

Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark

Wenjun Peng, Jingwei Yi, Fangzhao Wu +7

Large language models (LLMs) have demonstrated powerful capabilities in both text understanding and generation. Companies have begun to offer Embedding as a Service (EaaS) based on…

cs.CL2023★ 10 cited

Pushing the Limits of ChatGPT on NLP Tasks

Xiaofei Sun, Linfeng Dong, Xiaoya Li +8

Despite the success of ChatGPT, its performances on most NLP tasks are still well below the supervised baselines. In this work, we looked into the causes, and discovered that its s…

cs.CV2023

Alteration-free and Model-agnostic Origin Attribution of Generated Images

Zhenting Wang, Chen Chen, Yi Zeng +2

Recently, there has been a growing attention in image generation models. However, concerns have emerged regarding potential misuse and intellectual property (IP) infringement assoc…

cs.LG2023★ 2 cited

Reconstructive Neuron Pruning for Backdoor Defense

Yige Li, Xixiang Lyu, Xingjun Ma +4

Deep neural networks (DNNs) have been found to be vulnerable to backdoor attacks, raising security concerns about their deployment in mission-critical applications. While existing…

cs.LG2023★ 2 cited

Towards Adversarially Robust Continual Learning

Tao Bai, Chen Chen, Lingjuan Lyu +2

Recent studies show that models trained by continual learning can achieve the comparable performances as the standard supervised learning and the learning flexibility of continual…

cs.CL2023★ 2 cited

Backdoor Attacks with Input-unique Triggers in NLP

Xukun Zhou, Jiwei Li, Tianwei Zhang +3

Backdoor attack aims at inducing neural models to make incorrect predictions for poison data while keeping predictions on the clean dataset unchanged, which creates a considerable…

cs.AI2023★ 23 cited

A Pathway Towards Responsible AI Generated Content

Chen Chen, Jie Fu, Lingjuan Lyu

AI Generated Content (AIGC) has received tremendous attention within the past few years, with content generated in the format of image, text, audio, video, etc. Meanwhile, AIGC has…

cs.LG2023★ 1 cited

On the Hardness of Robustness Transfer: A Perspective from Rademacher Complexity over Symmetric Difference Hypothesis Space

Yuyang Deng, Nidham Gazagnadou, Junyuan Hong +2

Recent studies demonstrated that the adversarially robust learning under attack is harder to generalize to different domains than standard domain adaptation. How to t…

cs.CV2023★ 1 cited

InOR-Net: Incremental 3D Object Recognition Network for Point Cloud Representation

Jiahua Dong, Yang Cong, Gan Sun +4

3D object recognition has successfully become an appealing research topic in the real-world. However, most existing recognition models unreasonably assume that the categories of 3D…

cs.LG2023★ 4 cited

Delving into the Adversarial Robustness of Federated Learning

Jie Zhang, Bo Li, Chen Chen +4

In Federated Learning (FL), models are as fragile as centrally trained models against adversarial examples. However, the adversarial robustness of federated learning remains largel…

cs.LG2023★ 6 cited

ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms

Minzhou Pan, Yi Zeng, Lingjuan Lyu +2

Backdoor data detection is traditionally studied in an end-to-end supervised learning (SL) setting. However, recent years have seen the proliferating adoption of self-supervised le…