activity
20202026
most citedSelective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models

16 citations · 28 across the 6 of their papers we have counts for

collaborators

6 papers

cs.LG2026

How to Compress KV Cache in RL Post-Training? Shadow Mask Distillation for Memory-Efficient Alignment

Rui Zhu, Weiheng Bai, Qiushi Wu +3

Reinforcement Learning (RL) has emerged as a crucial paradigm for unlocking the advanced reasoning capabilities of Large Language Models (LLMs), encompassing frameworks like RLHF a…

cs.CR2023★ 4 cited

The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Risks

Xiaoyi Chen, Siyuan Tang, Rui Zhu +7

The rapid advancements of large language models (LLMs) have raised public concerns about the privacy leakage of personally identifiable information (PII) within their extensive tra…

cs.CR2023★ 5 cited

Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering

Rui Zhu, Di Tang, Siyuan Tang +4

Most existing methods to detect backdoored machine learning (ML) models take one of the two approaches: trigger inversion (aka. reverse engineer) and weight analysis (aka. model di…

cs.LG2022★ 16 cited

Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models

Rui Zhu, Di Tang, Siyuan Tang +2

In this paper, we present a simple yet surprisingly effective technique to induce "selective amnesia" on a backdoored model. Our approach, called SEAM, has been inspired by the pro…

cs.CR2022★ 2 cited

Understanding Impacts of Task Similarity on Backdoor Attack and Detection

Di Tang, Rui Zhu, XiaoFeng Wang +2

With extensive studies on backdoor attack and detection, still fundamental questions are left unanswered regarding the limits in the adversary's capability to attack and the defend…

cs.LG2020★ 1 cited

Bounding The Number of Linear Regions in Local Area for Neural Networks with ReLU Activations

Rui Zhu, Bo Lin, Haixu Tang

The number of linear regions is one of the distinct properties of the neural networks using piecewise linear activation functions such as ReLU, comparing with those conventional on…