activity
20182020
most citedAttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning

95 citations · 298 across the 14 of their papers we have counts for

collaborators

14 papers

cs.LG2020★ 2 cited

Semi-Supervised Node Classification on Graphs: Markov Random Fields vs. Graph Neural Networks

Binghui Wang, Jinyuan Jia, Neil Zhenqiang Gong

Semi-supervised node classification on graph-structured data has many applications such as fraud detection, fake account and review detection, user's private attribute inference in…

cs.CR2020

Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes

Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong

In the era of deep learning, a user often leverages a third-party machine learning tool to train a deep neural network (DNN) classifier and then deploys the classifier as an end-us…

cs.CR2020★ 1 cited

On the Intrinsic Differential Privacy of Bagging

Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong

Differentially private machine learning trains models while protecting privacy of the sensitive training data. The key to obtain differentially private models is to introduce noise…

cs.CR2020★ 12 cited

Backdoor Attacks to Graph Neural Networks

Zaixi Zhang, Jinyuan Jia, Binghui Wang +1

In this work, we propose the first backdoor attack to graph neural networks (GNN). Specifically, we propose a \emph{subgraph based backdoor attack} to GNN for graph classification.…

cs.CR2020★ 38 cited

Stealing Links from Graph Neural Networks

Xinlei He, Jinyuan Jia, Michael Backes +2

Graph data, such as chemical networks and social networks, may be deemed confidential/private because the data owner often spends lots of resources collecting the data or the data…

cs.CR2020★ 59 cited

On Certifying Robustness against Backdoor Attacks via Randomized Smoothing

Binghui Wang, Xiaoyu Cao, Jinyuan jia +1

Backdoor attack is a severe security threat to deep neural networks (DNNs). We envision that, like adversarial examples, there will be a cat-and-mouse game for backdoor attacks, i.…

cs.CR2019★ 19 cited

IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary

Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong

A deep neural network (DNN) classifier represents a model owner's intellectual property as training a DNN classifier often requires lots of resource. Watermarking was recently prop…

cs.CR2019★ 7 cited

Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges

Jinyuan Jia, Neil Zhenqiang Gong

As machine learning (ML) becomes more and more powerful and easily accessible, attackers increasingly leverage ML to perform automated large-scale inference attacks in various doma…

cs.CR2019★ 34 cited

MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples

Jinyuan Jia, Ahmed Salem, Michael Backes +2

In a membership inference attack, an attacker aims to infer whether a data sample is in a target classifier's training dataset or not. Specifically, given a black-box access to the…

cs.GR2019★ 18 cited

Statistical Analysis and Modeling of the Geometry and Topology of Plant Roots

Guan Wang, Hamid Laga, Jinyuan Jia +2

The root is an important organ of a plant since it is responsible for water and nutrient uptake. Analyzing and modelling variabilities in the geometry and topology of roots can hel…

cs.CR2018★ 5 cited

Calibrate: Frequency Estimation and Heavy Hitter Identification with Local Differential Privacy via Incorporating Prior Knowledge

Jinyuan Jia, Neil Zhenqiang Gong

Estimating frequencies of certain items among a population is a basic step in data analytics, which enables more advanced data analytics (e.g., heavy hitter identification, frequen…

cs.CR2018★ 1 cited

Graph-based Security and Privacy Analytics via Collective Classification with Joint Weight Learning and Propagation

Binghui Wang, Jinyuan Jia, Neil Zhenqiang Gong

Many security and privacy problems can be modeled as a graph classification problem, where nodes in the graph are classified by collective classification simultaneously. State-of-t…

cs.CR2018★ 95 cited

AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning

Jinyuan Jia, Neil Zhenqiang Gong

Users in various web and mobile applications are vulnerable to attribute inference attacks, in which an attacker leverages a machine learning classifier to infer a target user's pr…

cs.CR2018★ 7 cited

Structure-based Sybil Detection in Social Networks via Local Rule-based Propagation

Binghui Wang, Jinyuan Jia, Le Zhang +1

Sybil detection in social networks is a basic security research problem. Structure-based methods have been shown to be promising at detecting Sybils. Existing structure-based metho…