activity
20172025
most citedPrivacy Risks of Securing Machine Learning Models against Adversarial Examples

178 citations · 392 across the 10 of their papers we have counts for

collaborators

10 papers

cs.LG2025

BestServe: Serving Strategies with Optimal Goodput in Collocation and Disaggregation Architectures

Xiannan Hu, Tianyou Zeng, Xiaoming Yuan +3

Serving large language models (LLMs) to millions of users requires efficient resource allocation and parallelism strategies. It is a labor intensive trial-and-error process to find…

cs.CR2021★ 22 cited

Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture

Xinyu Tang, Saeed Mahloujifar, Liwei Song +4

Membership inference attacks are a key measure to evaluate privacy leakage in machine learning (ML) models. These attacks aim to distinguish training members from non-members by ex…

cs.LG2020★ 8 cited

A Critical Evaluation of Open-World Machine Learning

Liwei Song, Vikash Sehwag, Arjun Nitin Bhagoji +1

Open-world machine learning (ML) combines closed-world models trained on in-distribution data with out-of-distribution (OOD) detectors, which aim to detect and reject OOD inputs. P…

cs.CL2020★ 11 cited

Universal Adversarial Attacks with Natural Triggers for Text Classification

Liwei Song, Xinwei Yu, Hsuan-Tung Peng +1

Recent work has demonstrated the vulnerability of modern text classifiers to universal adversarial attacks, which are input-agnostic sequences of words added to text processed by c…

cs.CR2020★ 84 cited

Systematic Evaluation of Privacy Risks of Machine Learning Models

Liwei Song, Prateek Mittal

Machine learning models are prone to memorizing sensitive data, making them vulnerable to membership inference attacks in which an adversary aims to guess if an input sample was us…

cs.CR2020★ 37 cited

Towards Probabilistic Verification of Machine Unlearning

David Marco Sommer, Liwei Song, Sameer Wagh +1

The right to be forgotten, also known as the right to erasure, is the right of individuals to have their data erased from an entity storing it. The status of this long held notion…

cs.LG2019★ 7 cited

Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples

Vikash Sehwag, Arjun Nitin Bhagoji, Liwei Song +4

A large body of recent work has investigated the phenomenon of evasion attacks using adversarial examples for deep learning systems, where the addition of norm-bounded perturbation…

stat.ML2019★ 178 cited

Privacy Risks of Securing Machine Learning Models against Adversarial Examples

Liwei Song, Reza Shokri, Prateek Mittal

The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, o…

cs.CR2017★ 8 cited

Acoustic Denial of Service Attacks on HDDs

Mohammad Shahrad, Arsalan Mosenia, Liwei Song +3

Among storage components, hard disk drives (HDDs) have become the most commonly-used type of non-volatile storage due to their recent technological advances, including, enhanced en…

cs.CR2017★ 37 cited

Inaudible Voice Commands

Liwei Song, Prateek Mittal

Voice assistants like Siri enable us to control IoT devices conveniently with voice commands, however, they also provide new attack opportunities for adversaries. Previous papers a…