11 papers
ARES: Scalable and Practical Gradient Inversion Attack in Federated Learning through Activation Recovery
Zirui Gong, Leo Yu Zhang, Yanjun Zhang +4
Federated Learning (FL) enables collaborative model training by sharing model updates instead of raw data, aiming to protect user privacy. However, recent studies reveal that these…
Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation
Shuyu Chang, Haiping Huang, Yanjun Zhang +3
Code models are increasingly adopted in software development but remain vulnerable to backdoor attacks via poisoned training data. Existing backdoor attacks on code models face a f…
Less Is More -- Until It Breaks: Security Pitfalls of Vision Token Compression in Large Vision-Language Models
Xiaomei Zhang, Zhaoxi Zhang, Leo Yu Zhang +3
Visual token compression is widely adopted to improve the inference efficiency of Large Vision-Language Models (LVLMs), enabling their deployment in latency-sensitive and resource-…
Character-Level Perturbations Disrupt LLM Watermarks
Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang +5
Large Language Model (LLM) watermarking embeds detectable signals into generated text for copyright protection, misuse prevention, and content detection. While prior studies evalua…
Backdoor Attacks and Defenses in Computer Vision Domain: A Survey
Bilal Hussain Abbasi, Yanjun Zhang, Leo Zhang +1
Backdoor (trojan) attacks embed hidden, controllable behaviors into machine-learning models so that models behave normally on benign inputs but produce attacker-chosen outputs when…
ConSeg: Contextual Backdoor Attack Against Semantic Segmentation
Bilal Hussain Abbasi, Zirui Gong, Yanjun Zhang +3
Despite significant advancements in computer vision, semantic segmentation models may be susceptible to backdoor attacks. These attacks, involving hidden triggers, aim to cause the…
When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning
Ruining Sun, Hongsheng Hu, Wei Luo +4
With the rapid advancement of deep learning technology, pre-trained encoder models have demonstrated exceptional feature extraction capabilities, playing a pivotal role in the rese…
BiMark: Unbiased Multilayer Watermarking for Large Language Models
Xiaoyan Feng, He Zhang, Yanjun Zhang +2
Recent advances in Large Language Models (LLMs) have raised urgent concerns about LLM-generated text authenticity, prompting regulatory demands for reliable identification mechanis…
Performance Guaranteed Poisoning Attacks in Federated Learning: A Sliding Mode Approach
Huazi Pan, Yanjun Zhang, Leo Yu Zhang +3
Manipulation of local training data and local updates, i.e., the poisoning attack, is the main threat arising from the collaborative nature of the federated learning (FL) paradigm.…
Not All Edges are Equally Robust: Evaluating the Robustness of Ranking-Based Federated Learning
Zirui Gong, Yanjun Zhang, Leo Yu Zhang +3
Federated Ranking Learning (FRL) is a state-of-the-art FL framework that stands out for its communication efficiency and resilience to poisoning attacks. It diverges from the tradi…
Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks
Xiaomei Zhang, Zhaoxi Zhang, Yanjun Zhang +4
Textual adversarial examples pose serious threats to the reliability of natural language processing systems. Recent studies suggest that adversarial examples tend to deviate from t…