activity
20162023
most citedTextBugger: Generating Adversarial Text Against Real-world Applications

333 citations · 649 across the 28 of their papers we have counts for

collaborators

29 papers

cs.CR2023★ 5 cited

FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases

Chong Fu, Xuhong Zhang, Shouling Ji +4

Trojan attack on deep neural networks, also known as backdoor attack, is a typical threat to artificial intelligence. A trojaned neural network behaves normally with clean inputs.…

cs.CR2022★ 28 cited

HashVFL: Defending Against Data Reconstruction Attacks in Vertical Federated Learning

Pengyu Qiu, Xuhong Zhang, Shouling Ji +3

Vertical Federated Learning (VFL) is a trending collaborative machine learning model training solution. Existing industrial frameworks employ secure multi-party computation techniq…

cs.CR2022

Neural Architectural Backdoors

Ren Pang, Changjiang Li, Zhaohan Xi +2

This paper asks the intriguing question: is it possible to exploit neural architecture search (NAS) as a new attack vector to launch previously improbable attacks? Specifically, we…

cs.CR2022★ 3 cited

An Embarrassingly Simple Backdoor Attack on Self-supervised Learning

Changjiang Li, Ren Pang, Zhaohan Xi +4

As a new paradigm in machine learning, self-supervised learning (SSL) is capable of learning high-quality representations of complex data without relying on labels. In addition to…

cs.AI2022★ 1 cited

"Is your explanation stable?": A Robustness Evaluation Framework for Feature Attribution

Yuyou Gan, Yuhao Mao, Xuhong Zhang +5

Understanding the decision process of neural networks is hard. One vital method for explanation is to attribute its decision to pivotal features. Although many algorithms are propo…

cs.CV2022

Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings

Yuhao Mao, Chong Fu, Saizhuo Wang +7

One intriguing property of adversarial attacks is their "transferability" -- an adversarial example crafted with respect to one deep neural network (DNN) model is often found effec…