Demo Data from VLDB 2026 / reviewers in the wild / expert
Fei Kong
dblp:19/2168
· DBLP profile ↗
9ranked-venue papers
3as first author
8since 2021 · last 2025
—ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 5 · 2 first-author · 5 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 1 first-author · 2 since 2021Applied, interdisciplinary, general and emerging computing · 2 · 1 first-author · 2 since 2021Systems, architecture and hardware · 1 · 1 since 2021Human-computer interaction and ubiquitous computing · 1
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
3 papers |
Generative modeling · 34% Vision and language · 27% Trustworthy machine learning · 14% | |
| Network and information security
2 papers |
Security and privacy of machine learning · 100% |
Topics — the 10 heaviest of 10, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Generative modeling
diffusion model |
1.4 | 2 | 2024 | ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024 Are Diffusion Models Vulnerable to Membership Inference Attacks? · ICML 2023 |
Security and privacy of machine learning
membership inference |
1.4 | 2 | 2024 | An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024 Are Diffusion Models Vulnerable to Membership Inference Attacks? · ICML 2023 |
Natural language and speech › Language models and text generation
hallucination detection |
0.9 | 1 | 2025 | TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025 |
Machine learning › Trustworthy machine learning
interpretability |
0.9 | 1 | 2025 | TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025 |
Computer vision › Vision and language › vision-language model
multimodal large language model |
0.9 | 1 | 2025 | TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025 |
Computer vision › Vision and language › multimodal hallucination
object hallucination |
0.9 | 1 | 2025 | TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025 |
Machine learning › Deep learning architectures and training › regularization
consistency training |
0.8 | 1 | 2024 | ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024 |
Machine learning › Generative modeling › diffusion model › few-step generation
one-step diffusion |
0.8 | 1 | 2024 | ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024 |
Security and privacy of machine learning › membership inference
diffusion model membership inference |
0.8 | 1 | 2024 | An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024 |
Security and privacy of machine learning › generative model security
privacy of generative models |
0.8 | 1 | 2024 | An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024 |
Methods — techniques the papers use, named apart from their topics
step-wise error comparing · 1.3query-based membership inference · 1.3truthful direction · 0.9latent subspace alignment · 0.9inference-time intervention · 0.9query-based attack · 0.8proximal initialization · 0.8jensen-shannon divergence · 0.8discriminator · 0.8consistency training · 0.8adversarial training · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-InterventionabstractObject Hallucination (OH) has been acknowledged as one of the major trustworthy challenges in Large Vision-Language Models (LVLMs). Recent advancements in Large Language Models (LLMs) indicate that internal states, such as hidden states, encode the "overall truthfulness" of generated responses. However, it remains under-explored how internal states in LVLMs function and whether they could serve as "per-token" hallucination indicators, which is essential for mitigating OH. In this paper, we first conduct an in-depth exploration of LVLM internal states with OH issues and discover that (1) LVLM internal states are high-specificity per-token indicators of hallucination behaviors. Moreover, (2) different LVLMs encode universal patterns of hallucinations in common latent subspaces, indicating that there exist "generic truthful directions" shared by various LVLMs. Based on these discoveries, we propose Truthful-Guided Pre-Intervention (TruthPrInt) that first learns the truthful direction of LVLM decoding and then applies truthful-guided inference-time intervention during LVLM decoding. We further propose TruthPrInt to enhance both cross-LVLM and cross-data hallucination detection transferability by constructing and aligning hallucination latent subspaces. We evaluate TruthPrInt in extensive experimental settings, including in-domain and out-of-domain scenarios, over popular LVLMs and OH benchmarks. Experimental results indicate that TruthPrInt significantly outperforms state-of-the-art methods. Codes will be available at https://github.com/jinhaoduan/TruthPrInt. Jinhao Duan, Fei Kong, Hao Cheng 0015, James Diffenderfer, Bhavya Kailkhura, Lichao Sun 0001, Xiaofeng Zhu 0001, Xiaoshuang Shi, Kaidi Xu |
ICCV | 2 |
| 2024 | ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion ModelsabstractThough diffusion models excel in image generation, their step-by-step denoising leads to slow generation speeds. Consistency training addresses this issue with single-step sampling but often produces lower-quality generations and requires high training costs. In this paper, we show that optimizing consistency training loss minimizes the Wasserstein distance between target and generated distributions. As timestep increases, the upper bound accumulates previous consistency training losses. Therefore, larger batch sizes are needed to reduce both current and accumulated losses. We propose Adversarial Consistency Training (ACT), which directly minimizes the Jensen-Shannon (JS) divergence between distributions at each timestep using a discriminator. Theoretically, ACT enhances generation quality, and convergence. By incorporating a discriminator into the consistency training framework, our method achieves improved FID scores on CIFAR10 and ImageNet 64×64 and LSUN Cat 256 ×256 datasets, retains zero-shot image inpainting capabilities, and uses less than 1/6 of the original batch size and fewer than 1/2 of the model parameters and training steps compared to the baseline method, this leads to a substantial reduction in resource consumption. Our code is available: https://github.com/kong13661/ACT Fei Kong, Jinhao Duan, Lichao Sun 0001, Hao Cheng 0015, Renjing Xu, Heng Tao Shen, Xiaofeng Zhu 0001, Xiaoshuang Shi, Kaidi Xu |
CVPR | 1 |
| 2024 | An Efficient Membership Inference Attack for the Diffusion Model by Proximal InitializationabstractRecently, diffusion models have achieved remarkable success in generating tasks, including image and audio generation. However, like other generative models, diffusion models are prone to privacy issues. In this paper, we propose an efficient query-based membership inference attack (MIA), namely Proximal Initialization Attack (PIA), which utilizes groundtruth trajectory obtained by $\epsilon$ initialized in $t=0$ and predicted point to infer memberships. Experimental results indicate that the proposed method can achieve competitive performance with only two queries that achieve at least 6$\times$ efficiency than the previous SOTA baseline on both discrete-time and continuous-time diffusion models. Moreover, previous works on the privacy of diffusion models have focused on vision tasks without considering audio tasks. Therefore, we also explore the robustness of diffusion models to MIA in the text-to-speech (TTS) task, which is an audio generation task. To the best of our knowledge, this work is the first to study the robustness of diffusion models to MIA in the TTS task. Experimental results indicate that models with mel-spectrogram (image-like) output are vulnerable to MIA, while models with audio output are relatively robust to MIA. Code is available at https://github.com/kong13661/PIA. Fei Kong, Jinhao Duan, Ruipeng Ma, Heng Tao Shen, Xiaoshuang Shi, Xiaofeng Zhu 0001, Kaidi Xu |
ICLR | 1 |
| 2024 | Reverse Graph Learning for Graph Neural NetworkabstractGraph neural networks (GNNs) conduct feature learning by taking into account the local structure preservation of the data to produce discriminative features, but need to address the following issues, i.e., 1) the initial graph containing faulty and missing edges often affect feature learning and 2) most GNN methods suffer from the issue of out-of-example since their training processes do not directly generate a prediction model to predict unseen data points. In this work, we propose a reverse GNN model to learn the graph from the intrinsic space of the original data points as well as to investigate a new out-of-sample extension method. As a result, the proposed method can output a high-quality graph to improve the quality of feature learning, while the new method of out-of-sample extension makes our reverse GNN method available for conducting supervised learning and semi-supervised learning. Experimental results on real-world datasets show that our method outputs competitive classification performance, compared to state-of-the-art methods, in terms of semi-supervised node classification, out-of-sample extension, random edge attack, link prediction, and image retrieval. Rongyao Hu, Fei Kong, Jiangzhang Gan, Yujie Mo, Xiaoshuang Shi, Xiaofeng Zhu 0001 |
IEEE Trans. Neural Networks Learn. Syst. | 3 |
| 2023 | Are Diffusion Models Vulnerable to Membership Inference Attacks?abstractDiffusion-based generative models have shown great potential for image synthesis, but there is a lack of research on the security and privacy risks they may pose. In this paper, we investigate the vulnerability of diffusion models to Membership Inference Attacks (MIAs), a common privacy concern. Our results indicate that existing MIAs designed for GANs or VAE are largely ineffective on diffusion models, either due to inapplicable scenarios (e.g., requiring the discriminator of GANs) or inappropriate assumptions (e.g., closer distances between synthetic samples and member samples). To address this gap, we propose Step-wise Error Comparing Membership Inference (SecMI), a query-based MIA that infers memberships by assessing the matching of forward process posterior estimation at each timestep. SecMI follows the common overfitting assumption in MIA where member samples normally have smaller estimation errors, compared with hold-out samples. We consider both the standard diffusion models, e.g., DDPM, and the text-to-image diffusion models, e.g., Latent Diffusion Models and Stable Diffusion. Experimental results demonstrate that our methods precisely infer the membership with high confidence on both of the two scenarios across multiple different datasets. Code is available at https://github.com/jinhaoduan/SecMI. Jinhao Duan, Fei Kong, Shiqi Wang 0002, Xiaoshuang Shi, Kaidi Xu |
ICML | 2 |
| 2023 | FastDimeNet++: Training DimeNet++ in 22 minutesabstractRecently, graph neural network (GNN) has shown significant strength in predicting the quantum mechanical properties of molecules. Based on GNN, the DimeNet++ leverages both distance information of atomic pairs and angle information of atomic triplets via message passing mechanism to predict quantum mechanical properties of molecules and has achieved state-of-the-art results. However, there are more than 10 thousand operators in DimeNet++, which results in low GPU utilization and large CPU launch overhead. The extensive time taken for the training of DimeNet++ is a significant drawback. The training period of DimeNet++ exceeds one month on a single NVIDIA A100 GPU. A common method for reducing training time involves employing data parallelism, which equally distributes the global batch across each GPU. However, data-parallel task partitioning, by default, does not consider load imbalance within the batch. This load imbalance leads to considerable synchronization overhead in a multi-GPU setting, reducing the overall efficiency of the parallelism. For the strong-scaling scenario, it results in 32% of the compute resource being wasted. In light of these observations, we propose a novel approach, FastDimeNet++, which delivers high GPU utilization, low CPU overhead, and extensive scalability, achieved through a series of optimization strategies. These include (i) a communication-free load-balancing sampler, (ii) computation graph reconstruction, and (iii) kernel fusion and redundancy bypass. Our experiments demonstrate that FastDimeNet++ achieves a GPU utilization rate of approximately 88% based on a mini-batch size of 4. Furthermore, we scale FastDimeNet++ to 512 GPUs, reaching 2.8 PetaFLOPS. In the MLPerf HPC V1.0, the winning DimeNet++ submission required a total training time of 111.86 minutes, whereas FastDimeNet++ introduced for the MLPerf HPC V2.0 required just 21.93 minutes, demonstrating a significant performance improvement of over 5 ×. Feiwen Zhu, Michal Futrega, Han Bao 0018, Sukru Burc Eryilmaz, Fei Kong, Kefeng Duan, Xinnian Zheng, Nimrod Angel, Matthias Jouanneaux, Maximilian Stadler, Michal Marcinkiewicz, Fung Xie, June Yang, Michael Andersch |
ICPP | 5 |
| 2023 | Why does batch normalization induce the model vulnerability on adversarial images?
Fei Kong, Kaidi Xu, Xiaoshuang Shi |
World Wide Web (WWW) | 1 |
| 2021 | Robust and Dynamic Graph Convolutional Network For Multi-view Data ClassificationabstractAbstract Since graph learning could preserve the structure information of the samples to improve the learning ability, it has been widely applied in both shallow learning and deep learning. However, the current graph learning methods still suffer from the issues such as outlier influence and model robustness. In this paper, we propose a new dynamic graph neural network (DGCN) method to conduct semi-supervised classification on multi-view data by jointly conducting the graph learning and the classification task in a unified framework. Specifically, our method investigates three strategies to improve the quality of the graph before feeding it into the GCN model: (i) employing robust statistics to consider the sample importance for reducing the outlier influence, i.e. assigning every sample with soft weights so that the important samples are with large weights and outliers are with small or even zero weights; (ii) learning the common representation across all views to improve the quality of the graph for every view; and (iii) learning the complementary information from all initial graphs on multi-view data to further improve the learning of the graph for every view. As a result, each of the strategies could improve the robustness of the DGCN model. Moreover, they are complementary for reducing outlier influence from different aspects, i.e. the sample importance reduces the weights of the outliers, both the common representation and the complementary information improve the quality of the graph for every view. Experimental result on real data sets demonstrates the effectiveness of our method, compared to the comparison methods, in terms of multi-class classification performance. Fei Kong, Chongzhi Liu, Ping Kuang |
Comput. J. | 2 |
| 2005 | A conflict resolution methodology based on technology and sociology - a complex-system approachabstractConflicts occur in almost the whole course of any computer supported cooperative system. A conflict resolution strategy based on complex-system theories is presented in this paper, and has been instantiated in our engineering practice. The main contributions of this paper are: (1) applying complex-system theories to the conflict resolution strategy; (2) presenting a general conflict model based on the complex-system theories. This model can overcome the precious model dependant on the global strategy which can not be obtained thoroughly in a complex CSCW system; (3) utilizing the role assignment mechanism so as to reach conflict resolutions in a computer supported cooperative system. Hongwei Jia, Weiqing Tang, Fei Kong |
CSCWD (1) | 4 |