133 citations · 186 across the 19 of their papers we have counts for
20 papers
CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage
Na Li, Yansong Gao, Hongsheng Hu +2
Model compression is crucial for minimizing memory storage and accelerating inference in deep learning (DL) models, including recent foundation models like large language models (L…
Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks
Anmin Fu, Fanyu Meng, Huaibing Peng +5
The proposed UniGuard is the first unified online detection framework capable of simultaneously addressing adversarial examples and backdoor attacks. UniGuard builds upon two key i…
Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects
Na Li, Chunyi Zhou, Yansong Gao +4
Personal digital data is a critical asset, and governments worldwide have enforced laws and regulations to protect data privacy. Data users have been endowed with the right to be f…
Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense
Hua Ma, Shang Wang, Yansong Gao +7
All current backdoor attacks on deep learning (DL) models fall under the category of a vertical class backdoor (VCB) -- class-dependent. In VCB attacks, any sample from a class act…
DeepTheft: Stealing DNN Model Architectures through Power Side Channel
Yansong Gao, Huming Qiu, Zhi Zhang +6
Deep Neural Network (DNN) models are often deployed in resource-sharing clouds as Machine Learning as a Service (MLaaS) to provide inference services.To steal model architectures t…
Vertical Federated Learning: Taxonomies, Threats, and Prospects
Qun Li, Chandra Thapa, Lawrence Ong +5
Federated learning (FL) is the most popular distributed machine learning technique. FL allows machine-learning models to be trained without acquiring raw data to a single point for…
TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World
Hua Ma, Yinshan Li, Yansong Gao +6
Object detection is the foundation of various critical computer-vision tasks such as segmentation, object tracking, and event detection. To train an object detector with satisfacto…
MLMSA: Multi-Label Multi-Side-Channel-Information enabled Deep Learning Attacks on APUF Variants
Yansong Gao, Jianrong Yao, Lihui Pang +4
To improve the modeling resilience of silicon strong physical unclonable functions (PUFs), in particular, the APUFs, that yield a very large number of challenge response pairs (CRP…
CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences
Shang Wang, Yansong Gao, Anmin Fu +4
As a critical threat to deep neural networks (DNNs), backdoor attacks can be categorized into two types, i.e., source-agnostic backdoor attacks (SABAs) and source-specific backdoor…
Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures
Huming Qiu, Hua Ma, Zhi Zhang +4
Since Deep Learning (DL) backdoor attacks have been revealed as one of the most insidious adversarial attacks, a number of countermeasures have been developed with certain assumpti…
Towards Explainable Meta-Learning for DDoS Detection
Qianru Zhou, Rongzhen Li, Lei Xu +3
The Internet is the most complex machine humankind has ever built, and how to defense it from intrusions is even more complex. With the ever increasing of new intrusions, intrusion…
Towards Privacy-Preserving and Verifiable Federated Matrix Factorization
Xicheng Wan, Yifeng Zheng, Qun Li +3
Recent years have witnessed the rapid growth of federated learning (FL), an emerging privacy-aware machine learning paradigm that allows collaborative learning over isolated datase…
Systematically Evaluation of Challenge Obfuscated APUFs
Yansong Gao, Jianrong Yao, Lihui Pang +4
As a well-known physical unclonable function that can provide huge number of challenge response pairs (CRP) with a compact design and fully compatibility with current electronic fa…
PPA: Preference Profiling Attack Against Federated Learning
Chunyi Zhou, Yansong Gao, Anmin Fu +5
Federated learning (FL) trains a global model across a number of decentralized users, each with a local dataset. Compared to traditional centralized learning, FL does not require d…
Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World
Hua Ma, Yinshan Li, Yansong Gao +7
Deep learning models have been shown to be vulnerable to recent backdoor attacks. A backdoored model behaves normally for inputs containing no attacker-secretly-chosen trigger and…
NTD: Non-Transferability Enabled Backdoor Detection
Yinshan Li, Hua Ma, Zhi Zhang +6
A backdoor deep learning (DL) model behaves normally upon clean inputs but misbehaves upon trigger inputs as the backdoor attacker desires, posing severe consequences to DL model d…
Design and Evaluate Recomposited OR-AND-XOR-PUF
Jianrong Yao, Lihui Pang, Zhi Zhang +3
Physical Unclonable Function (PUF) is a hardware security primitive with a desirable feature of low-cost. Based on the space of challenge-response pairs (CRPs), it has two categori…
Quantization Backdoors to Deep Learning Commercial Frameworks
Hua Ma, Huming Qiu, Yansong Gao +7
Currently, there is a burgeoning demand for deploying deep learning (DL) models on ubiquitous edge Internet of Things (IoT) devices attributed to their low latency and high privacy…
RBNN: Memory-Efficient Reconfigurable Deep Binary Neural Network with IP Protection for Internet of Things
Huming Qiu, Hua Ma, Zhi Zhang +6
Though deep neural network models exhibit outstanding performance for various applications, their large model size and extensive floating-point operations render deployment on mobi…
Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review
Yansong Gao, Bao Gia Doan, Zhi Zhang +5
This work provides the community with a timely comprehensive review of backdoor attacks and countermeasures on deep learning. According to the attacker's capability and affected st…