3 papers
cs.CR2026
Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation
Baogang Song, Changtian Song, Jian Chen +4
Backdoor repair aims to suppress malicious behavior in compromised models while preserving benign task performance. Existing studies typically evaluate these objectives using Attac…
cs.CR2026
Discard the Dross and Select the Essential: Pre-query Sample Selection for Black-box Membership Inference Attacks
Dongdong Zhao, Jinrong Hu, Changtian Song +3
Black-box membership inference attacks (MIAs) rely on target-model queries to infer whether candidate samples were used for training. However, membership signals are highly non-uni…
cs.CV2025
Known Meets Unknown: Mitigating Overconfidence in Open Set Recognition
Dongdong Zhao, Ranxin Fang, Changtian Song +2
Open Set Recognition (OSR) requires models not only to accurately classify known classes but also to effectively reject unknown samples. However, when unknown samples are semantica…