Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Haitao Su

dblp:03/8546 · DBLP profile ↗
← Back
3ranked-venue papers
2as first author
2since 2021 · last 2025
—ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 first-author · 1 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 first-author

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 67% Privacy and data protection · 33%
Computer architecture, parallel and distributed computing, and storage systems
1 paper
Cloud and datacenter computing · 77% Memory systems · 23%
Artificial intelligence
1 paper
Language models and text generation · 100%

Topics — the 6 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › model privacy
language model privacy
0.912025
Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025
Security and privacy of machine learning
membership inference
0.912025
Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025
Privacy and data protection
privacy risk assessment
0.912025
Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025
Cloud and datacenter computing
virtualization
0.812024
vSoC: Efficient Virtual System-on-Chip on Heterogeneous Hardware · SOSP 2024
Natural language and speech › Language models and text generation
in-context learning
0.312025
Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025
Memory systems › virtual memory management
shared virtual memory
0.212024
vSoC: Efficient Virtual System-on-Chip on Heterogeneous Hardware · SOSP 2024

Methods — techniques the papers use, named apart from their topics

text obfuscation · 1.7black-box attack · 1.7
YearPublicationVenuePosition
2025 Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning
abstract
Membership inference attacks (MIAs) against in-context learning (ICL) serve as essential tools for privacy risk assessment and intellectual property safeguarding due to the use of small, private datasets for adaptation. However, most MIAs against language models require unrealistic, internal access or risk triggering built-in security mechanisms. In this paper, we propose Falcon (Flexible Attack on Language Context via ObfuscatioN), the first task-aware MIA framework against text-only model APIs. Falcon fully exploits the complexity of text obfuscation techniques and leverages the model’s discrepancies in reconstructing obfuscated texts from seen versus unseen data as a strong membership signal, successfully bypassing application constraints and LLM safeguarding mechanisms. Through extensive experiments on six widely used LLMs, including four open-source models (Llama-2, Llama-3, Qwen-2.5, Ministral) and two commercial models (GPT-3.5, and GPT-4o-mini), five datasets from various domains for tasks including question answering, text classification and summarization, Falcon generally achieves over 95% attack success rates, significantly outperforming existing methods. An in-depth analysis of the impact of model scale shows that Falcon exploits a capacity-induced vulnerability, indicating that models with higher capabilities are more susceptible to our attack. Additionally, we explore three defense methods, highlighting role validation as a potential mechanism for safeguarding LLM privacy. We have open-sourced Falcon’s modular, extensible codebase to support future research.
Haitao Su, Zhenhua Li 0001, Yuan Zhou 0007
IEEE Trans. Inf. Forensics Secur.1
2024 vSoC: Efficient Virtual System-on-Chip on Heterogeneous Hardware
abstract
Emerging mobile apps such as UHD video and AR/VR access diverse high-throughput hardware devices, e.g., video codecs, cameras, and image processors. However, today's mobile emulators exhibit poor performance when emulating these devices. We pinpoint the major reason to be the discrepancy between the guest's and host's memory architectures for hardware devices, i.e., the mobile guest's centralized memory on a system-on-chip (SoC) versus the PC/server's separated memory modules on individual hardware. Such a discrepancy makes the shared virtual memory (SVM) architecture of mobile emulators highly inefficient.
Jiaxing Qiu, Yang Li 0092, Zhenhua Li 0001, Feng Qian 0001, Hao Lin 0005, Haitao Su, Yunhao Liu 0001, Tianyin Xu
SOSP8
2010 Research on Production-Oriented Virtual Enterprise Quality Information Management
abstract
Production-oriented virtual enterprise is a more important form in the virtual enterprise, quality information management plays an irreplaceable role in production-oriented virtual enterprise. According to life-cycle theory of the virtual enterprise and the condition of information technology, combing with quality assurance model and started with customer relations, quality information management system of production-oriented virtual enterprise was built. It is conducive to identify, acquire and deal with quality information, in order to provide quality information management guarantee for production-oriented virtual enterprise.
Haitao Su, Junxia Ma
ICSS1