5 papers
A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learning
Ding Chen, Xinwen Cheng, Xuyang Zhong +3
While Membership Inference Attacks (MIAs) are the prevailing method for identifying training data, their application has expanded into privacy auditing and machine unlearning. Neve…
DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Models
Xuyang Zhong, Qizhang Li, Yiwen Guo +1
We propose DualOptim+, a novel optimization framework for improving machine unlearning in large language models. It introduces a base state to capture common representations shared…
DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers
Xuyang Zhong, Haochen Luo, Chen Liu
Existing machine unlearning (MU) approaches exhibit significant sensitivity to hyperparameters, requiring meticulous tuning that limits practical deployment. In this work, we first…
Fast Adversarial Training against Sparse Attacks Requires Loss Smoothing
Xuyang Zhong, Yixiao Huang, Chen Liu
This paper studies fast adversarial training against sparse adversarial perturbations bounded by norm. We demonstrate the challenges of employing -step attacks on bo…
Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation
Xuyang Zhong, Chen Liu
This work studies sparse adversarial perturbations, including both unstructured and structured ones. We propose a framework based on a white-box PGD-like attack method named Sparse…