activity
20112020
most citedEvaluating the Robustness of Neural Networks: An Extreme Value Theory Approach

158 citations · 280 across the 11 of their papers we have counts for

collaborators

11 papers

cs.CR2020★ 3 cited

Continuous Release of Data Streams under both Centralized and Local Differential Privacy

Tianhao Wang, Joann Qiongna Chen, Zhikun Zhang +5

In this paper, we study the problem of publishing a stream of real-valued data satisfying differential privacy (DP). One major challenge is that the maximal possible value can be q…

cs.CR2018★ 2 cited

Reaching Data Confidentiality and Model Accountability on the CalTrain

Zhongshu Gu, Hani Jamjoom, Dong Su +5

Distributed collaborative learning (DCL) paradigms enable building joint machine learning models from distrusting multi-party participants. Data confidentiality is guaranteed by re…

cs.CV2018★ 7 cited

Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models

Dong Su, Huan Zhang, Hongge Chen +3

The prediction accuracy has been the long-lasting and sole standard for comparing the performance of different image classification models, including the ImageNet competition. Howe…

cs.CR2018★ 16 cited

Confidential Inference via Ternary Model Partitioning

Zhongshu Gu, Heqing Huang, Jialong Zhang +5

Today's cloud vendors are competing to provide various offerings to simplify and accelerate AI service deployment. However, cloud users always have concerns about the confidentiali…

cs.LG2018★ 31 cited

Defending Against Machine Learning Model Stealing Attacks Using Deceptive Perturbations

Taesung Lee, Benjamin Edwards, Ian Molloy +1

Machine learning models are vulnerable to simple model stealing attacks if the adversary can obtain output labels for chosen inputs. To protect against these attacks, it has been p…

stat.ML2018★ 158 cited

Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach

Tsui-Wei Weng, Huan Zhang, Pin-Yu Chen +5

The robustness of neural networks to adversarial examples has received great attention due to security implications. Despite various attack approaches to crafting visually impercep…