19 citations · 66 across the 11 of their papers we have counts for
12 papers
Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand
Junfeng Guo, Yiming Li, Lixu Wang +4
The prosperity of deep neural networks (DNNs) is largely benefited from open-source datasets, based on which users can evaluate and improve their methods. In this paper, we revisit…
Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition
Zexin Li, Bangjie Yin, Taiping Yao +4
A hard challenge in developing practical face recognition (FR) attacks is due to the black-box nature of the target FR model, i.e., inaccessible gradient and parameter information…
SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency
Junfeng Guo, Yiming Li, Xun Chen +3
Deep neural networks (DNNs) are vulnerable to backdoor attacks, where adversaries embed a hidden backdoor trigger during the training process for malicious prediction manipulation.…
PolicyCleanse: Backdoor Detection and Mitigation in Reinforcement Learning
Junfeng Guo, Ang Li, Cong Liu
While real-world applications of reinforcement learning are becoming popular, the security and robustness of RL systems are worthy of more attention and exploration. In particular,…
AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis
Junfeng Guo, Ang Li, Cong Liu
Deep neural networks (DNNs) are proved to be vulnerable against backdoor attacks. A backdoor is often embedded in the target DNNs through injecting a backdoor trigger into training…
Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition
Bangjie Yin, Wenxuan Wang, Taiping Yao +5
Deep neural networks, particularly face recognition models, have been shown to be vulnerable to both digital and physical adversarial examples. However, existing adversarial exampl…