Xiangyu Zhang

发表

Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches

Guanhong Tao, Hongjun Choi, Zhiyuan Cheng, 2022, ECCV.

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning

Pin-Yu Chen, Shiqing Ma, Guanhong Tao, 2022, ArXiv.

RULER: discriminative and iterative adversarial training for deep neural network fairness

Guanhong Tao, Chunrong Fang, Tingxu Han, 2022, ESEC/SIGSOFT FSE.

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense

Shiqing Ma, Guanhong Tao, Siyuan Cheng, 2023, NDSS.

Daedalus: Breaking Non-Maximum Suppression in Object Detection via Adversarial Examples

Surya Nepal, Chaoran Li, Yang Xiang, 2019, ArXiv.

Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attacks

Guanhong Tao, Zhiyuan Cheng, James Liang, 2023, ICLR.

Backdoor Vulnerabilities in Normally Trained Deep Learning Models

Shiqing Ma, Guanhong Tao, Zhuo Zhang, 2022, ArXiv.

DECK: Model Hardening for Defending Pervasive Backdoors

Guanhong Tao, Zhuo Zhang, Siyuan Cheng, 2022, ArXiv.

Bounded Adversarial Attack on Deep Content Features

Guanhong Tao, Xiangyu Zhang, Qiuling Xu, 2022, 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR).

Detecting Backdoors in Pre-trained Encoders

Shiqing Ma, Guanhong Tao, Siyuan Cheng, 2023, ArXiv.

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning

Pin-Yu Chen, Shiqing Ma, Guanhong Tao, 2022, ICLR.

Towards Feature Space Adversarial Attack by Style Perturbation

Siyuan Cheng, Guanhong Tao, Qiuling Xu, 2021, AAAI.

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis

Guanhong Tao, Qingkai Shi, Yapeng Ye, 2023, ISSTA.

FIRM: DETECTING ADVERSARIAL AUDIOS

Yunhan Jia, Shiqing Ma, Guanhong Tao, 2021 .

2017 Trojaning Attack on Neural Networks

X. Zhang, Yousra Aafer, Shiqing Ma, 2018 .

POSIT: Promotion of Semantic Item Tail via Adversarial Learning

Pannagadatta K. Shivaswamy, Xiangyu Zhang, Qiuling Xu, 2023, ArXiv.

PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In Binary Code Analysis

Guanhong Tao, Yapeng Ye, Xiangyu Zhang, 2023, USENIX Security Symposium.

Hard-label Black-box Universal Adversarial Patch Attack

Guanhong Tao, Siyuan Cheng, Xiangyu Zhang, 2023, USENIX Security Symposium.

Backdooring Neural Code Search

Guanhong Tao, Chunrong Fang, Quanjun Zhang, 2023, ACL.

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes

Y. Yao, Shiqing Ma, Guanhong Tao, 2023, 2023 IEEE Symposium on Security and Privacy (SP).

Distribution Preserving Backdoor Attack in Self-supervised Learning

Shiqing Ma, Guanhong Tao, Zhenting Wang, 2022 .

Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs

Guanhong Tao, Siyuan Cheng, Xiangyu Zhang, 2023, 2312.04782.

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift

Guanhong Tao, Tsung-Yi Ho, Siyuan Cheng, 2023, AAAI.

PEM: Representing Binary Program Semantics for Similarity Analysis via a Probabilistic Execution Model

Guanhong Tao, Qingkai Shi, Yapeng Ye, 2023, ESEC/SIGSOFT FSE.

Trojaning Attack on Neural Networks

Yousra Aafer, Shiqing Ma, Wen-Chuan Lee, 2018 .

This paper is included in the Proceedings of the 32nd USENIX Security Symposium.

Guanhong Tao, Siyuan Cheng, Xiangyu Zhang, 2022 .

D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack pdf

Xiangyu Zhang, Guanhong Tao, Qiuling Xu, 2020, ArXiv.