activity
20212023
most citedBoosting Fast Adversarial Training with Learnable Adversarial Initialization

69 citations · 160 across the 16 of their papers we have counts for

collaborators

16 papers

cs.LG2023★ 4 cited

Improving Fast Adversarial Training with Prior-Guided Knowledge

Xiaojun Jia, Yong Zhang, Xingxing Wei +4

Fast adversarial training (FAT) is an efficient method to improve robustness. However, the original FAT suffers from catastrophic overfitting, which dramatically and suddenly reduc…

cs.CV2022

VideoReTalking: Audio-based Lip Synchronization for Talking Head Video Editing In the Wild

Kun Cheng, Xiaodong Cun, Yong Zhang +6

We present VideoReTalking, a new system to edit the faces of a real-world talking head video according to input audio, producing a high-quality and lip-syncing output video even wi…

cs.LG2022★ 9 cited

Stability Analysis and Generalization Bounds of Adversarial Training

Jiancong Xiao, Yanbo Fan, Ruoyu Sun +2

In adversarial machine learning, deep neural networks can fit the adversarial examples on the training dataset but have poor generalization ability on the test set. This phenomenon…

cs.CV2022★ 22 cited

Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation

Zeyu Qin, Yanbo Fan, Yi Liu +4

Deep neural networks (DNNs) have been shown to be vulnerable to adversarial examples, which can produce erroneous predictions by injecting imperceptible perturbations. In this work…

cs.LG2022★ 3 cited

Adaptive Smoothness-weighted Adversarial Training for Multiple Perturbations with Its Stability Analysis

Jiancong Xiao, Zeyu Qin, Yanbo Fan +3

Adversarial Training (AT) has been demonstrated as one of the most effective methods against adversarial examples. While most existing works focus on AT with a single type of pertu…

cs.LG2022★ 3 cited

Understanding Adversarial Robustness Against On-manifold Adversarial Examples

Jiancong Xiao, Liusha Yang, Yanbo Fan +2

Deep neural networks (DNNs) are shown to be vulnerable to adversarial examples. A well-trained model can be easily attacked by adding small perturbations to the original data. One…

cs.CV2022

Towards Real-World Video Deblurring by Exploring Blur Formation Process

Mingdeng Cao, Zhihang Zhong, Yanbo Fan +5

This paper aims at exploring how to synthesize close-to-real blurs that existing video deblurring models trained on them can generalize well to real-world blurry videos. In recent…

cs.CV2022★ 5 cited

Prior-Guided Adversarial Initialization for Fast Adversarial Training

Xiaojun Jia, Yong Zhang, Xingxing Wei +4

Fast adversarial training (FAT) effectively improves the efficiency of standard adversarial training (SAT). However, initial FAT encounters catastrophic overfitting, i.e.,the robus…

cs.LG2022

Fast Adversarial Training with Adaptive Step Size

Zhichao Huang, Yanbo Fan, Chen Liu +5

While adversarial training and its variants have shown to be the most effective algorithms to defend against adversarial attacks, their extremely slow training process makes it har…

cs.CV2022

VDTR: Video Deblurring with Transformer

Mingdeng Cao, Yanbo Fan, Yong Zhang +2

Video deblurring is still an unsolved problem due to the challenging spatio-temporal modeling process. While existing convolutional neural network-based methods show a limited capa…

cs.CV2022★ 14 cited

Self-supervised Learning of Adversarial Example: Towards Good Generalizations for Deepfake Detection

Liang Chen, Yong Zhang, Yibing Song +2

Recent studies in deepfake detection have yielded promising results when the training and testing face forgeries are from the same dataset. However, the problem remains challenging…

cs.CV2022★ 4 cited

StyleHEAT: One-Shot High-Resolution Editable Talking Face Generation via Pre-trained StyleGAN

Fei Yin, Yong Zhang, Xiaodong Cun +7

One-shot talking face generation aims at synthesizing a high-quality talking face video from an arbitrary portrait image, driven by a video or an audio segment. One challenging qua…

cs.CV2022★ 8 cited

LAS-AT: Adversarial Training with Learnable Attack Strategy

Xiaojun Jia, Yong Zhang, Baoyuan Wu +3

Adversarial training (AT) is always formulated as a minimax problem, of which the performance depends on the inner optimization that involves the generation of adversarial examples…

cs.CV2021★ 69 cited

Boosting Fast Adversarial Training with Learnable Adversarial Initialization

Xiaojun Jia, Yong Zhang, Baoyuan Wu +2

Adversarial training (AT) has been demonstrated to be effective in improving model robustness by leveraging adversarial examples for training. However, most AT methods are in face…

cs.CV2021★ 1 cited

Robust Physical-World Attacks on Face Recognition

Xin Zheng, Yanbo Fan, Baoyuan Wu +3

Face recognition has been greatly facilitated by the development of deep neural networks (DNNs) and has been widely applied to many safety-critical applications. However, recent st…

cs.CV2021★ 18 cited

High-Fidelity GAN Inversion for Image Attribute Editing

Tengfei Wang, Yong Zhang, Yanbo Fan +2

We present a novel high-fidelity generative adversarial network (GAN) inversion framework that enables attribute editing with image-specific details well-preserved (e.g., backgroun…