9 papers
Dual-View Inference Attack: Machine Unlearning Amplifies Privacy Exposure
Lulu Xue, Shengshan Hu, Linqiang Qian +6
Machine unlearning is a newly popularized technique for removing specific training data from a trained model, enabling it to comply with data deletion requests. While it protects t…
Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability
Yechao Zhang, Shengshan Hu, Leo Yu Zhang +5
Adversarial examples (AEs) for DNNs have been shown to be transferable: AEs that successfully fool white-box surrogate models can also deceive other black-box models with different…
Towards Real-World Deepfake Detection: A Diverse In-the-wild Dataset of Forgery Faces
Junyu Shi, Minghui Li, Junguo Zuo +8
Deepfakes, leveraging advanced AIGC (Artificial Intelligence-Generated Content) techniques, create hyper-realistic synthetic images and videos of human faces, posing a significant…
MARS: A Malignity-Aware Backdoor Defense in Federated Learning
Wei Wan, Yuxuan Ning, Zhicong Huang +7
Federated Learning (FL) is a distributed paradigm aimed at protecting participant data privacy by exchanging model parameters to achieve high-quality model training. However, this…
Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling
Minghui Li, Hao Zhang, Yechao Zhang +4
Direct Prompt Injection (DPI) attacks pose a critical security threat to Large Language Models (LLMs) due to their low barrier of execution and high potential damage. To address th…
Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM
Lei Yu, Yechao Zhang, Ziqi Zhou +6
With the rapid development of the Vision-Language Model (VLM), significant progress has been made in Visual Question Answering (VQA) tasks. However, existing VLM often generate ina…