Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.

Junyi Zhu 0002

dblp:192/6828-2 · DBLP profile ↗
← Back
6ranked-venue papers
4as first author
6since 2021 · last 2026
0000-0002-8980-5336ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 5 · 3 first-author · 5 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 2 first-author · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
4 papers
Generative modeling · 38% Efficient and distributed learning · 22% Probabilistic and Bayesian machine learning · 22%
Network and information security
2 papers
Privacy and data protection · 58% Security and privacy of machine learning · 42%

Topics — the 16 heaviest of 17, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Privacy and data protection › privacy-preserving machine learning
federated learning privacy
1.222023
Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023
R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021
Machine learning › Generative modeling
diffusion model
0.912025
Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models Better · ICLR 2025
Machine learning › Generative modeling
latent space model
0.912025
Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025
Machine learning › Representation and self-supervised learning › representation learning
unsupervised representation learning
0.912025
Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025
Machine learning › Efficient and distributed learning
federated learning
0.712023
Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023
Machine learning › Efficient and distributed learning › federated learning
personalized federated learning
0.712023
Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023
Machine learning › Probabilistic and Bayesian machine learning › probabilistic inference › approximate inference › variational inference › variational learning
variational expectation-maximization
0.712023
Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023
Machine learning › Probabilistic and Bayesian machine learning › probabilistic inference › approximate inference
variational inference
0.712023
Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023
Privacy and data protection › privacy-preserving machine learning › federated learning privacy
gradient inversion attack
0.712023
Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023
Security and privacy of machine learning › privacy attack › data reconstruction attack
gradient leakage attack
0.712023
Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023
Security and privacy of machine learning › privacy attack
gradient-based privacy attack
0.512021
R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021
Security and privacy of machine learning
privacy attack
0.512021
R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021
Privacy and data protection
privacy-preserving data analysis
0.512021
R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021
Machine learning › Generative modeling › diffusion model
consistency model
0.312025
Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models Better · ICLR 2025
Machine learning › Generative modeling
image generation
0.312025
Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025
Machine learning › Trustworthy machine learning
robustness
0.112021
R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021

Methods — techniques the papers use, named apart from their topics

recursive gradient attack · 1.0gradient inversion · 1.0rectified flow · 0.9evolutionary search · 0.9contrastive learning · 0.9checkpoint merging · 0.9variational expectation-maximization · 0.7surrogate model · 0.7low-rank approximation · 0.7hierarchical bayesian modeling · 0.7
YearPublicationVenuePosition
2026 Guided Model Merging for Hybrid Data Learning: Leveraging Centralized Data to Refine Decentralized Models
abstract
Current network training paradigms primarily focus on either centralized or decentralized data regimes. However, in practice, data availability often exhibits a hybrid nature, where both regimes coexist. This hybrid setting presents new opportunities for model training, as the two regimes offer complementary trade-offs: decentralized data is abundant but subject to heterogeneity and communication constraints, while centralized data—though limited in volume and potentially unrepresentative—enables better curation and high-throughput access. Despite its potential, effectively combining these paradigms remains challenging, and few frameworks are tailored to hybrid data regimes. To address this, we propose a novel framework that constructs a model atlas from decentralized models and leverages centralized data to refine a global model within this structured space. The refined model is then used to reinitialize the decentralized models. Our method synergizes federated learning (to exploit decentralized data) and model merging (to utilize centralized data), enabling effective training under hybrid data availability. Theoretically, we show that our approach achieves faster convergence than methods relying solely on decentralized data, due to variance reduction in the merging process. Extensive experiments demonstrate that our framework consistently outperforms purely centralized, purely decentralized, and existing hybrid-adaptable methods. Notably, our method remains robust even when the centralized and decentralized data domains differ or when decentralized data contains noise, significantly broadening its applicability.
Junyi Zhu 0002, Ruicong Yao, Taha Ceritli, Savas Özkan, Matthew B. Blaschko, Eunchung Noh, Jeongwon Min, Cho Jung Min, Mete Ozay
WACV1
2025 Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models Better
abstract
Diffusion Models (DM) and Consistency Models (CM) are two types of popular generative models with good generation quality on various tasks. When training DM and CM, intermediate weight checkpoints are not fully utilized and only the last converged checkpoint is used. In this work, we find proper checkpoint merging can significantly improve the training convergence and final performance. Specifically, we propose LCSC, a simple but effective and efficient method to enhance the performance of DM and CM, by combining checkpoints along the training trajectory with coefficients deduced from evolutionary search. We demonstrate the value of LCSC through two use cases: (a) Reducing training cost. With LCSC, we only need to train DM/CM with fewer number of iterations and/or lower batch sizes to obtain comparable sample quality with the fully trained model. For example, LCSC achieves considerable training speedups for CM (23$\times$ on CIFAR-10 and 15$\times$ on ImageNet-64). (b) Enhancing pre-trained models. When full training is already done, LCSC can further improve the generation quality or efficiency of the final converged models. For example, LCSC achieves better FID using 1 number of function evaluation (NFE) than the base model with 2 NFE on consistency distillation, and decreases the NFE of DM from 15 to 9 while maintaining the generation quality. Applying LCSC to large text-to-image models, we also observe clearly enhanced generation quality.
Enshu Liu, Junyi Zhu 0002, Zinan Lin 0001, Xuefei Ning, Shuaiqi Wang, Matthew B. Blaschko, Sergey Yekhanin, Shengen Yan, Guohao Dai 0001, Huazhong Yang, Yu Wang 0002
ICLR2
2025 Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification
abstract
Generative modeling, representation learning, and classification are three core problems in machine learning (ML), yet their state-of-the-art (SoTA) solutions remain largely disjoint. In this paper, we ask: Can a unified principle address all three? Such unification could simplify ML pipelines and foster greater synergy across tasks. We introduce Latent Zoning Network (LZN) as a step toward this goal. At its core, LZN creates a shared Gaussian latent space that encodes information across all tasks. Each data type (e.g., images, text, labels) is equipped with an encoder that maps samples to disjoint latent zones, and a decoder that maps latents back to data. ML tasks are expressed as compositions of these encoders and decoders: for example, label-conditional image generation uses a label encoder and image decoder; image embedding uses an image encoder; classification uses an image encoder and label decoder. We demonstrate the promise of LZN in three increasingly complex scenarios: (1) LZN can enhance existing models (image generation): When combined with the SoTA Rectified Flow model, LZN improves FID on CIFAR10 from 2.76 to 2.59—without modifying the training objective. (2) LZN can solve tasks independently (representation learning): LZN can implement unsupervised representation learning without auxiliary loss functions, outperforming the seminal MoCo and SimCLR methods by 9.3% and 0.2%, respectively, on downstream linear classification on ImageNet. (3) LZN can solve multiple tasks simultaneously (joint generation and classification): With image and label encoders/decoders, LZN performs both tasks jointly by design, improving FID and achieving SoTA classification accuracy on CIFAR10. The code and trained models are available at https://github.com/microsoft/latent-zoning-networks. The project website is at https://zinanlin.me/blogs/latent_zoning_networks.html.
Zinan Lin 0001, Enshu Liu, Xuefei Ning, Junyi Zhu 0002, Sergey Yekhanin
NeurIPS4
2023 Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization
abstract
Federated Learning (FL) is a distributed learning scheme to train a shared model across clients. One common and fundamental challenge in FL is that the sets of dnta across clients could be non-identically distributed and have different sizes. Personalized Federated Learning (P FL) attempts to solve this challenge via locally adapted models. In this work, we present a novel framework for PFL based on hierarchical Bayesian modeling and variational inference. A global model is introduced as a latent variable to augment the joint distribution of clients' parameters and capture the common trends of different clients, optimization is derived based on the principle of maximizing the marginal likelihood and conducted using variational expectation maximization. Our algorithm gives rise to a closed-form estimation of a confidence value which comprises the uncertainty of clients' parameters and local model deviations from the global model. The confidence value is used to weigh clients' parameters in the aggregation stage and adjust the regularization effect of the global model. We evaluate our method through extensive empirical studies on multiple datasets. Experimental results show that our approach obtains competitive results under mild heterogeneous circumstances while significantly outperforming state-of-the-art PFL frameworks in highly heterogeneous settings.
Junyi Zhu 0002, Xingchen Ma, Matthew B. Blaschko
CVPR1
2023 Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning
abstract
In Federated Learning (FL) and many other distributed training frameworks, collaborators can hold their private data locally and only share the network weights trained with the local data after multiple iterations. Gradient inversion is a family of privacy attacks that recovers data from its generated gradients. Seemingly, FL can provide a degree of protection against gradient inversion attacks on weight updates, since the gradient of a single step is concealed by the accumulation of gradients over multiple local iterations. In this work, we propose a principled way to extend gradient inversion attacks to weight updates in FL, thereby better exposing weaknesses in the presumed privacy protection inherent in FL. In particular, we propose a surrogate model method based on the characteristic of two-dimensional gradient flow and low-rank property of local updates. Our method largely boosts the ability of gradient inversion attacks on weight updates containing many iterations and achieves state-of-the-art (SOTA) performance. Additionally, our method runs up to $100\times$ faster than the SOTA baseline in the common FL scenario. Our work re-evaluates and highlights the privacy risk of sharing network weights. Our code is available at https://github.com/JunyiZhu-AI/surrogate_model_extension.
Junyi Zhu 0002, Ruicong Yao, Matthew B. Blaschko
ICML1
2021 R-GAP: Recursive Gradient Attack on Privacy
Junyi Zhu 0002, Matthew B. Blaschko
ICLR1