activity
20212026
most citedBackdoor Defense via Decoupling the Training Process

42 citations · 139 across the 48 of their papers we have counts for

collaborators
Showing 2023Show all

11 papers · 1 filter

cs.LG2023★ 1 cited

Certified Minimax Unlearning with Generalization Rates and Deletion Capacity

Jiaqi Liu, Jian Lou, Zhan Qin +1

We study the problem of -certified machine unlearning for minimax models. Most of the existing works focus on unlearning from standard statistical learning models that have…

cs.CR2023★ 1 cited

Local Differentially Private Heavy Hitter Detection in Data Streams with Bounded Memory

Xiaochen Li, Weiran Liu, Jian Lou +4

Top- frequent items detection is a fundamental task in data stream mining. Many promising solutions are proposed to improve memory efficiency while still maintaining high accura…

cs.CR2023★ 18 cited

ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach

Yuke Hu, Jian Lou, Jiaqi Liu +4

Over the past years, Machine Learning-as-a-Service (MLaaS) has received a surging demand for supporting Machine Learning-driven services to offer revolutionized user experience acr…

cs.CR2023★ 8 cited

FINER: Enhancing State-of-the-art Classifiers with Feature Attribution to Facilitate Security Analysis

Yiling He, Jian Lou, Zhan Qin +1

Deep learning classifiers achieve state-of-the-art performance in various risk detection applications. They explore rich semantic representations and are supposed to automatically…

cs.CV2023

RemovalNet: DNN Fingerprint Removal Attacks

Hongwei Yao, Zheng Li, Kunzhe Huang +3

With the performance of deep neural networks (DNNs) remarkably improving, DNNs have been widely used in many areas. Consequently, the DNN model has become a valuable asset, and its…

cs.MM2023★ 1 cited

PromptCARE: Prompt Copyright Protection by Watermark Injection and Verification

Hongwei Yao, Jian Lou, Kui Ren +1

Large language models (LLMs) have witnessed a meteoric rise in popularity among the general public users over the past few months, facilitating diverse downstream tasks with human-…

cs.CR2023★ 14 cited

Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks

Xinyu Zhang, Hanbin Hong, Yuan Hong +4

The language models, especially the basic text classification models, have been shown to be susceptible to textual adversarial attacks such as synonym substitution and word inserti…

cs.CR2023★ 4 cited

SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores

Leqian Zheng, Lei Xu, Cong Wang +5

Numerous studies have underscored the significant privacy risks associated with various leakage patterns in encrypted data stores. While many solutions have been proposed to mitiga…

cs.CR2023★ 2 cited

FDINet: Protecting against DNN Model Extraction via Feature Distortion Index

Hongwei Yao, Zheng Li, Haiqin Weng +3

Machine Learning as a Service (MLaaS) platforms have gained popularity due to their accessibility, cost-efficiency, scalability, and rapid development capabilities. However, recent…

cs.CV2023★ 1 cited

ANetQA: A Large-scale Benchmark for Fine-grained Compositional Reasoning over Untrimmed Videos

Zhou Yu, Lixiang Zheng, Zhou Zhao +4

Building benchmarks to systemically analyze different capabilities of video question answering (VideoQA) models is challenging yet crucial. Existing benchmarks often use non-compos…

cs.CR2023★ 4 cited

False Claims against Model Ownership Resolution

Jian Liu, Rui Zhang, Sebastian Szyller +2

Deep neural network (DNN) models are valuable intellectual property of model owners, constituting a competitive advantage. Therefore, it is crucial to develop techniques to protect…