activity
20112026
most citedPoisoning Attacks to Graph-Based Recommender Systems

217 citations · 1.8k across the 154 of their papers we have counts for

collaborators
Showing 2020Show all

13 papers · 1 filter

cs.LG2020★ 2 cited

Semi-Supervised Node Classification on Graphs: Markov Random Fields vs. Graph Neural Networks

Binghui Wang, Jinyuan Jia, Neil Zhenqiang Gong

Semi-supervised node classification on graph-structured data has many applications such as fraud detection, fake account and review detection, user's private attribute inference in…

cs.CR2020★ 35 cited

FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping

Xiaoyu Cao, Minghong Fang, Jia Liu +1

Byzantine-robust federated learning aims to enable a service provider to learn an accurate global model when a bounded number of clients are malicious. The key idea of existing Byz…

cs.CR2020★ 2 cited

Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks

Jinyuan Jia, Yupei Liu, Xiaoyu Cao +1

Data poisoning attacks and backdoor attacks aim to corrupt a machine learning classifier via modifying, adding, and/or removing some carefully selected training examples, such that…

cs.CR2020★ 5 cited

Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations

Jinyuan Jia, Binghui Wang, Xiaoyu Cao +2

Top-k predictions are used in many real-world applications such as machine learning as a service, recommender systems, and web searches. -norm adversarial perturbation char…

cs.CR2020

Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes

Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong

In the era of deep learning, a user often leverages a third-party machine learning tool to train a deep neural network (DNN) classifier and then deploys the classifier as an end-us…

cs.CR2020★ 1 cited

On the Intrinsic Differential Privacy of Bagging

Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong

Differentially private machine learning trains models while protecting privacy of the sensitive training data. The key to obtain differentially private models is to introduce noise…