Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Fei Kong

dblp:19/2168 · DBLP profile ↗
← Back
9ranked-venue papers
3as first author
8since 2021 · last 2025
—ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 5 · 2 first-author · 5 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 1 first-author · 2 since 2021Applied, interdisciplinary, general and emerging computing · 2 · 1 first-author · 2 since 2021Systems, architecture and hardware · 1 · 1 since 2021Human-computer interaction and ubiquitous computing · 1

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
3 papers
Generative modeling · 34% Vision and language · 27% Trustworthy machine learning · 14%
Network and information security
2 papers
Security and privacy of machine learning · 100%

Topics — the 10 heaviest of 10, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Generative modeling
diffusion model
1.422024
ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024
Are Diffusion Models Vulnerable to Membership Inference Attacks? · ICML 2023
Security and privacy of machine learning
membership inference
1.422024
An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024
Are Diffusion Models Vulnerable to Membership Inference Attacks? · ICML 2023
Natural language and speech › Language models and text generation
hallucination detection
0.912025
TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025
Machine learning › Trustworthy machine learning
interpretability
0.912025
TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025
Computer vision › Vision and language › vision-language model
multimodal large language model
0.912025
TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025
Computer vision › Vision and language › multimodal hallucination
object hallucination
0.912025
TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention · ICCV 2025
Machine learning › Deep learning architectures and training › regularization
consistency training
0.812024
ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024
Machine learning › Generative modeling › diffusion model › few-step generation
one-step diffusion
0.812024
ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models · CVPR 2024
Security and privacy of machine learning › membership inference
diffusion model membership inference
0.812024
An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024
Security and privacy of machine learning › generative model security
privacy of generative models
0.812024
An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization · ICLR 2024

Methods — techniques the papers use, named apart from their topics

step-wise error comparing · 1.3query-based membership inference · 1.3truthful direction · 0.9latent subspace alignment · 0.9inference-time intervention · 0.9query-based attack · 0.8proximal initialization · 0.8jensen-shannon divergence · 0.8discriminator · 0.8consistency training · 0.8adversarial training · 0.8
YearPublicationVenuePosition
2025 TruthPrInt: Mitigating Large Vision-Language Models Object Hallucination via Latent Truthful-Guided Pre-Intervention
abstract
Object Hallucination (OH) has been acknowledged as one of the major trustworthy challenges in Large Vision-Language Models (LVLMs). Recent advancements in Large Language Models (LLMs) indicate that internal states, such as hidden states, encode the "overall truthfulness" of generated responses. However, it remains under-explored how internal states in LVLMs function and whether they could serve as "per-token" hallucination indicators, which is essential for mitigating OH. In this paper, we first conduct an in-depth exploration of LVLM internal states with OH issues and discover that (1) LVLM internal states are high-specificity per-token indicators of hallucination behaviors. Moreover, (2) different LVLMs encode universal patterns of hallucinations in common latent subspaces, indicating that there exist "generic truthful directions" shared by various LVLMs. Based on these discoveries, we propose Truthful-Guided Pre-Intervention (TruthPrInt) that first learns the truthful direction of LVLM decoding and then applies truthful-guided inference-time intervention during LVLM decoding. We further propose TruthPrInt to enhance both cross-LVLM and cross-data hallucination detection transferability by constructing and aligning hallucination latent subspaces. We evaluate TruthPrInt in extensive experimental settings, including in-domain and out-of-domain scenarios, over popular LVLMs and OH benchmarks. Experimental results indicate that TruthPrInt significantly outperforms state-of-the-art methods. Codes will be available at https://github.com/jinhaoduan/TruthPrInt.
Jinhao Duan, Fei Kong, Hao Cheng 0015, James Diffenderfer, Bhavya Kailkhura, Lichao Sun 0001, Xiaofeng Zhu 0001, Xiaoshuang Shi, Kaidi Xu
ICCV2
2024 ACT-Diffusion: Efficient Adversarial Consistency Training for One-Step Diffusion Models
abstract
Though diffusion models excel in image generation, their step-by-step denoising leads to slow generation speeds. Consistency training addresses this issue with single-step sampling but often produces lower-quality generations and requires high training costs. In this paper, we show that optimizing consistency training loss minimizes the Wasserstein distance between target and generated distributions. As timestep increases, the upper bound accumulates previous consistency training losses. Therefore, larger batch sizes are needed to reduce both current and accumulated losses. We propose Adversarial Consistency Training (ACT), which directly minimizes the Jensen-Shannon (JS) divergence between distributions at each timestep using a discriminator. Theoretically, ACT enhances generation quality, and convergence. By incorporating a discriminator into the consistency training framework, our method achieves improved FID scores on CIFAR10 and ImageNet 64×64 and LSUN Cat 256 ×256 datasets, retains zero-shot image inpainting capabilities, and uses less than 1/6 of the original batch size and fewer than 1/2 of the model parameters and training steps compared to the baseline method, this leads to a substantial reduction in resource consumption. Our code is available: https://github.com/kong13661/ACT
Fei Kong, Jinhao Duan, Lichao Sun 0001, Hao Cheng 0015, Renjing Xu, Heng Tao Shen, Xiaofeng Zhu 0001, Xiaoshuang Shi, Kaidi Xu
CVPR1
2024 An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initialization
abstract
Recently, diffusion models have achieved remarkable success in generating tasks, including image and audio generation. However, like other generative models, diffusion models are prone to privacy issues. In this paper, we propose an efficient query-based membership inference attack (MIA), namely Proximal Initialization Attack (PIA), which utilizes groundtruth trajectory obtained by $\epsilon$ initialized in $t=0$ and predicted point to infer memberships. Experimental results indicate that the proposed method can achieve competitive performance with only two queries that achieve at least 6$\times$ efficiency than the previous SOTA baseline on both discrete-time and continuous-time diffusion models. Moreover, previous works on the privacy of diffusion models have focused on vision tasks without considering audio tasks. Therefore, we also explore the robustness of diffusion models to MIA in the text-to-speech (TTS) task, which is an audio generation task. To the best of our knowledge, this work is the first to study the robustness of diffusion models to MIA in the TTS task. Experimental results indicate that models with mel-spectrogram (image-like) output are vulnerable to MIA, while models with audio output are relatively robust to MIA. Code is available at https://github.com/kong13661/PIA.
Fei Kong, Jinhao Duan, Ruipeng Ma, Heng Tao Shen, Xiaoshuang Shi, Xiaofeng Zhu 0001, Kaidi Xu
ICLR1
2024 Reverse Graph Learning for Graph Neural Network
abstract
Graph neural networks (GNNs) conduct feature learning by taking into account the local structure preservation of the data to produce discriminative features, but need to address the following issues, i.e., 1) the initial graph containing faulty and missing edges often affect feature learning and 2) most GNN methods suffer from the issue of out-of-example since their training processes do not directly generate a prediction model to predict unseen data points. In this work, we propose a reverse GNN model to learn the graph from the intrinsic space of the original data points as well as to investigate a new out-of-sample extension method. As a result, the proposed method can output a high-quality graph to improve the quality of feature learning, while the new method of out-of-sample extension makes our reverse GNN method available for conducting supervised learning and semi-supervised learning. Experimental results on real-world datasets show that our method outputs competitive classification performance, compared to state-of-the-art methods, in terms of semi-supervised node classification, out-of-sample extension, random edge attack, link prediction, and image retrieval.
Rongyao Hu, Fei Kong, Jiangzhang Gan, Yujie Mo, Xiaoshuang Shi, Xiaofeng Zhu 0001
IEEE Trans. Neural Networks Learn. Syst.3
2023 Are Diffusion Models Vulnerable to Membership Inference Attacks?
abstract
Diffusion-based generative models have shown great potential for image synthesis, but there is a lack of research on the security and privacy risks they may pose. In this paper, we investigate the vulnerability of diffusion models to Membership Inference Attacks (MIAs), a common privacy concern. Our results indicate that existing MIAs designed for GANs or VAE are largely ineffective on diffusion models, either due to inapplicable scenarios (e.g., requiring the discriminator of GANs) or inappropriate assumptions (e.g., closer distances between synthetic samples and member samples). To address this gap, we propose Step-wise Error Comparing Membership Inference (SecMI), a query-based MIA that infers memberships by assessing the matching of forward process posterior estimation at each timestep. SecMI follows the common overfitting assumption in MIA where member samples normally have smaller estimation errors, compared with hold-out samples. We consider both the standard diffusion models, e.g., DDPM, and the text-to-image diffusion models, e.g., Latent Diffusion Models and Stable Diffusion. Experimental results demonstrate that our methods precisely infer the membership with high confidence on both of the two scenarios across multiple different datasets. Code is available at https://github.com/jinhaoduan/SecMI.
Jinhao Duan, Fei Kong, Shiqi Wang 0002, Xiaoshuang Shi, Kaidi Xu
ICML2
2023 FastDimeNet++: Training DimeNet++ in 22 minutes
abstract
Recently, graph neural network (GNN) has shown significant strength in predicting the quantum mechanical properties of molecules. Based on GNN, the DimeNet++ leverages both distance information of atomic pairs and angle information of atomic triplets via message passing mechanism to predict quantum mechanical properties of molecules and has achieved state-of-the-art results. However, there are more than 10 thousand operators in DimeNet++, which results in low GPU utilization and large CPU launch overhead. The extensive time taken for the training of DimeNet++ is a significant drawback. The training period of DimeNet++ exceeds one month on a single NVIDIA A100 GPU. A common method for reducing training time involves employing data parallelism, which equally distributes the global batch across each GPU. However, data-parallel task partitioning, by default, does not consider load imbalance within the batch. This load imbalance leads to considerable synchronization overhead in a multi-GPU setting, reducing the overall efficiency of the parallelism. For the strong-scaling scenario, it results in 32% of the compute resource being wasted. In light of these observations, we propose a novel approach, FastDimeNet++, which delivers high GPU utilization, low CPU overhead, and extensive scalability, achieved through a series of optimization strategies. These include (i) a communication-free load-balancing sampler, (ii) computation graph reconstruction, and (iii) kernel fusion and redundancy bypass. Our experiments demonstrate that FastDimeNet++ achieves a GPU utilization rate of approximately 88% based on a mini-batch size of 4. Furthermore, we scale FastDimeNet++ to 512 GPUs, reaching 2.8 PetaFLOPS. In the MLPerf HPC V1.0, the winning DimeNet++ submission required a total training time of 111.86 minutes, whereas FastDimeNet++ introduced for the MLPerf HPC V2.0 required just 21.93 minutes, demonstrating a significant performance improvement of over 5 ×.
Feiwen Zhu, Michal Futrega, Han Bao 0018, Sukru Burc Eryilmaz, Fei Kong, Kefeng Duan, Xinnian Zheng, Nimrod Angel, Matthias Jouanneaux, Maximilian Stadler, Michal Marcinkiewicz, Fung Xie, June Yang, Michael Andersch
ICPP5
2023 Why does batch normalization induce the model vulnerability on adversarial images?
Fei Kong, Kaidi Xu, Xiaoshuang Shi
World Wide Web (WWW)1
2021 Robust and Dynamic Graph Convolutional Network For Multi-view Data Classification
abstract
Abstract Since graph learning could preserve the structure information of the samples to improve the learning ability, it has been widely applied in both shallow learning and deep learning. However, the current graph learning methods still suffer from the issues such as outlier influence and model robustness. In this paper, we propose a new dynamic graph neural network (DGCN) method to conduct semi-supervised classification on multi-view data by jointly conducting the graph learning and the classification task in a unified framework. Specifically, our method investigates three strategies to improve the quality of the graph before feeding it into the GCN model: (i) employing robust statistics to consider the sample importance for reducing the outlier influence, i.e. assigning every sample with soft weights so that the important samples are with large weights and outliers are with small or even zero weights; (ii) learning the common representation across all views to improve the quality of the graph for every view; and (iii) learning the complementary information from all initial graphs on multi-view data to further improve the learning of the graph for every view. As a result, each of the strategies could improve the robustness of the DGCN model. Moreover, they are complementary for reducing outlier influence from different aspects, i.e. the sample importance reduces the weights of the outliers, both the common representation and the complementary information improve the quality of the graph for every view. Experimental result on real data sets demonstrates the effectiveness of our method, compared to the comparison methods, in terms of multi-class classification performance.
Fei Kong, Chongzhi Liu, Ping Kuang
Comput. J.2
2005 A conflict resolution methodology based on technology and sociology - a complex-system approach
abstract
Conflicts occur in almost the whole course of any computer supported cooperative system. A conflict resolution strategy based on complex-system theories is presented in this paper, and has been instantiated in our engineering practice. The main contributions of this paper are: (1) applying complex-system theories to the conflict resolution strategy; (2) presenting a general conflict model based on the complex-system theories. This model can overcome the precious model dependant on the global strategy which can not be obtained thoroughly in a complex CSCW system; (3) utilizing the role assignment mechanism so as to reach conflict resolutions in a computer supported cooperative system.
Hongwei Jia, Weiqing Tang, Fei Kong
CSCWD (1)4