activity
20202026
most citedBackdoor Scanning for Deep Neural Networks through K-Arm Optimization

48 citations · 108 across the 14 of their papers we have counts for

collaborators

15 papers

cs.IR2026

Personalized LLM Recommendation with Semantic IDs: Autoregressive Beam Search vs. Multi-Token Prediction

Sejoon Oh, Fernando Amat Gil, Evan Smothers +11

Large-scale personalization is shifting from embedding-table retrieval to LLM-based recommenders that generate the Semantic ID (SID) of the item to recommend, where each SID is a s…

cs.IR2026

Exponential Reward Weighting for Fine-Tuning Generative Recommenders under Sparse and Noisy Feedback

Keertana Chidambaram, Sanath Kumar Krishnamurthy, Qiuling Xu +2

In recommendation systems, users interact with only a small fraction of a vast item catalog, producing feedback that is both sparse and noisy. This challenges post-training generat…

cs.IR2026

Towards Generalizable and Efficient Large-Scale Generative Recommenders

Qiuling Xu, Ko-Jen Hsiao, Moumita Bhattacharya

Generative recommendation models can model user behavior as sequences of events and provide a shared backbone for multiple recommendation tasks. In production, however, pre-trainin…

cs.LG2026

Robust Post-Training for Generative Recommenders: Why Exponential Reward-Weighted SFT Outperforms RLHF

Keertana Chidambaram, Sanath Kumar Krishnamurthy, Qiuling Xu +2

Aligning generative recommender systems to user preferences via post-training is critical for closing the gap between next-item prediction and actual recommendation quality. Existi…

cs.CR2023★ 2 cited

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift

Shengwei An, Sheng-Yen Chou, Kaiyuan Zhang +8

Diffusion models (DM) have become state-of-the-art generative models because of their capability to generate high-quality images from noises without adversarial training. However,…

cs.IR2023

POSIT: Promotion of Semantic Item Tail via Adversarial Learning

Qiuling Xu, Pannaga Shivaswamy, Xiangyu Zhang

In many recommendations, a handful of popular items (e.g., movies / television shows, news, etc.) can be dominant in recommendations for many users. However, we know that in a larg…

cs.CR2023★ 4 cited

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense

Siyuan Cheng, Guanhong Tao, Yingqi Liu +8

Deep Learning backdoor attacks have a threat model similar to traditional cyber attacks. Attack forensics, a critical counter-measure for traditional cyber attacks, is hence of imp…

cs.CR2022★ 17 cited

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning

Kaiyuan Zhang, Guanhong Tao, Qiuling Xu +8

Federated Learning (FL) is a distributed learning paradigm that enables different parties to train a model together for high quality and strong privacy protection. In this scenario…

cs.CR2022★ 3 cited

DECK: Model Hardening for Defending Pervasive Backdoors

Guanhong Tao, Yingqi Liu, Siyuan Cheng +5

Pervasive backdoors are triggered by dynamic and pervasive input perturbations. They can be intentionally injected by attackers or naturally exist in normally trained models. They…

cs.CL2022★ 11 cited

Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense

Guangyu Shen, Yingqi Liu, Guanhong Tao +5

We develop a novel optimization method for NLPbackdoor inversion. We leverage a dynamically reducing temperature coefficient in the softmax function to provide changing loss landsc…

eess.SY2021

Scheduler-Pointed False Data Injection Attack for Event-Based Remote State Estimation

Qiulin Xu, Junlin Xiong

In this paper, an attack problem is investigated for event-based remote state estimation in cyber-physical systems. Our objective is to degrade the effect of the event-based schedu…

cs.LG2021★ 48 cited

Backdoor Scanning for Deep Neural Networks through K-Arm Optimization

Guangyu Shen, Yingqi Liu, Guanhong Tao +5

Back-door attack poses a severe threat to deep learning systems. It injects hidden malicious behaviors to a model such that any input stamped with a special pattern can trigger suc…

stat.ML2020

A Le Cam Type Bound for Adversarial Learning and Applications

Qiuling Xu, Kevin Bello, Jean Honorio

Robustness of machine learning methods is essential for modern practical applications. Given the arms race between attack and defense methods, one may be curious regarding the fund…

cs.LG2020★ 2 cited

D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack

Qiuling Xu, Guanhong Tao, Xiangyu Zhang

We propose a novel technique that can generate natural-looking adversarial examples by bounding the variations induced for internal activation values in some deep layer(s), through…

cs.LG2020★ 21 cited

Towards Feature Space Adversarial Attack

Qiuling Xu, Guanhong Tao, Siyuan Cheng +1

We propose a new adversarial attack to Deep Neural Networks for image classification. Different from most existing attacks that directly perturb input pixels, our attack focuses on…