activity
20212025
most citedDetecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain

6 citations · 7 across the 8 of their papers we have counts for

collaborators

10 papers

cs.LG2025

LLM Unlearning with LLM Beliefs

Kemou Li, Qizhou Wang, Yue Wang +4

Large language models trained on vast corpora inherently risk memorizing sensitive or harmful content, which may later resurface in their outputs. Prevailing unlearning methods gen…

cs.LG2024

Deferred Poisoning: Making the Model More Vulnerable via Hessian Singularization

Yuhao He, Jinyu Tian, Xianwei Zheng +3

Recent studies have shown that deep learning models are very vulnerable to poisoning attacks. Many defense methods have been proposed to address this issue. However, traditional po…

cs.LG2024

DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain

Fengpeng Li, Kemou Li, Haiwei Wu +2

To protect deep neural networks (DNNs) from adversarial attacks, adversarial training (AT) is developed by incorporating adversarial examples (AEs) into model training. Recent stud…

cs.CV2024

DifAttack++: Query-Efficient Black-Box Adversarial Attack via Hierarchical Disentangled Feature Space in Cross-Domain

Jun Liu, Jiantao Zhou, Jiandian Zeng +2

This work investigates efficient score-based black-box adversarial attacks that achieve a high Attack Success Rate (ASR) and good generalization ability. We propose a novel attack…

cs.LG2023★ 1 cited

Regroup Median Loss for Combating Label Noise

Fengpeng Li, Kemou Li, Jinyu Tian +1

The deep model training procedure requires large-scale datasets of annotated data. Due to the difficulty of annotating a large number of samples, label noise caused by incorrect an…

cs.CV2023

DifAttack: Query-Efficient Black-Box Attack via Disentangled Feature Space

Liu Jun, Zhou Jiantao, Zeng Jiandian +1

This work investigates efficient score-based black-box adversarial attacks with a high Attack Success Rate (ASR) and good generalizability. We design a novel attack method based on…

cs.CR2023

Effective Ambiguity Attack Against Passport-based DNN Intellectual Property Protection Schemes through Fully Connected Layer Substitution

Yiming Chen, Jinyu Tian, Xiangyu Chen +1

Since training a deep neural network (DNN) is costly, the well-trained deep models can be regarded as valuable intellectual property (IP) assets. The IP protection associated with…

cs.CR2021

Probabilistic Selective Encryption of Convolutional Neural Networks for Hierarchical Services

Jinyu Tian, Jiantao Zhou, Jia Duan

Model protection is vital when deploying Convolutional Neural Networks (CNNs) for commercial services, due to the massive costs of training them. In this work, we propose a selecti…

cs.CV2021

Self-Supervised Adversarial Example Detection by Disentangled Representation

Zhaoxi Zhang, Leo Yu Zhang, Xufei Zheng +2

Deep learning models are known to be vulnerable to adversarial examples that are elaborately designed for malicious purposes and are imperceptible to the human perceptual system. A…

cs.LG2021★ 6 cited

Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain

Jinyu Tian, Jiantao Zhou, Yuanman Li +1

Deep neural networks (DNNs) have been shown to be vulnerable against adversarial examples (AEs), which are maliciously designed to cause dramatic model output errors. In this work,…