VLDB 2026 Research / reviewers in the wild / expert
Junyi Zhu 0002
dblp:192/6828-2
· DBLP profile ↗
6ranked-venue papers
4as first author
6since 2021 · last 2026
0000-0002-8980-5336ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 5 · 3 first-author · 5 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 2 first-author · 2 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
4 papers |
Generative modeling · 38% Efficient and distributed learning · 22% Probabilistic and Bayesian machine learning · 22% | |
| Network and information security
2 papers |
Privacy and data protection · 58% Security and privacy of machine learning · 42% |
Topics — the 16 heaviest of 17, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Privacy and data protection › privacy-preserving machine learning
federated learning privacy |
1.2 | 2 | 2023 | Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023 R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021 |
Machine learning › Generative modeling
diffusion model |
0.9 | 1 | 2025 | Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models Better · ICLR 2025 |
Machine learning › Generative modeling
latent space model |
0.9 | 1 | 2025 | Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025 |
Machine learning › Representation and self-supervised learning › representation learning
unsupervised representation learning |
0.9 | 1 | 2025 | Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025 |
Machine learning › Efficient and distributed learning
federated learning |
0.7 | 1 | 2023 | Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023 |
Machine learning › Efficient and distributed learning › federated learning
personalized federated learning |
0.7 | 1 | 2023 | Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023 |
Machine learning › Probabilistic and Bayesian machine learning › probabilistic inference › approximate inference › variational inference › variational learning
variational expectation-maximization |
0.7 | 1 | 2023 | Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023 |
Machine learning › Probabilistic and Bayesian machine learning › probabilistic inference › approximate inference
variational inference |
0.7 | 1 | 2023 | Confidence-Aware Personalized Federated Learning via Variational Expectation Maximization · CVPR 2023 |
Privacy and data protection › privacy-preserving machine learning › federated learning privacy
gradient inversion attack |
0.7 | 1 | 2023 | Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023 |
Security and privacy of machine learning › privacy attack › data reconstruction attack
gradient leakage attack |
0.7 | 1 | 2023 | Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning · ICML 2023 |
Security and privacy of machine learning › privacy attack
gradient-based privacy attack |
0.5 | 1 | 2021 | R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021 |
Security and privacy of machine learning
privacy attack |
0.5 | 1 | 2021 | R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021 |
Privacy and data protection
privacy-preserving data analysis |
0.5 | 1 | 2021 | R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021 |
Machine learning › Generative modeling › diffusion model
consistency model |
0.3 | 1 | 2025 | Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models Better · ICLR 2025 |
Machine learning › Generative modeling
image generation |
0.3 | 1 | 2025 | Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and Classification · NeurIPS 2025 |
Machine learning › Trustworthy machine learning
robustness |
0.1 | 1 | 2021 | R-GAP: Recursive Gradient Attack on Privacy · ICLR 2021 |
Methods — techniques the papers use, named apart from their topics
recursive gradient attack · 1.0gradient inversion · 1.0rectified flow · 0.9evolutionary search · 0.9contrastive learning · 0.9checkpoint merging · 0.9variational expectation-maximization · 0.7surrogate model · 0.7low-rank approximation · 0.7hierarchical bayesian modeling · 0.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Guided Model Merging for Hybrid Data Learning: Leveraging Centralized Data to Refine Decentralized ModelsabstractCurrent network training paradigms primarily focus on either centralized or decentralized data regimes. However, in practice, data availability often exhibits a hybrid nature, where both regimes coexist. This hybrid setting presents new opportunities for model training, as the two regimes offer complementary trade-offs: decentralized data is abundant but subject to heterogeneity and communication constraints, while centralized data—though limited in volume and potentially unrepresentative—enables better curation and high-throughput access. Despite its potential, effectively combining these paradigms remains challenging, and few frameworks are tailored to hybrid data regimes. To address this, we propose a novel framework that constructs a model atlas from decentralized models and leverages centralized data to refine a global model within this structured space. The refined model is then used to reinitialize the decentralized models. Our method synergizes federated learning (to exploit decentralized data) and model merging (to utilize centralized data), enabling effective training under hybrid data availability. Theoretically, we show that our approach achieves faster convergence than methods relying solely on decentralized data, due to variance reduction in the merging process. Extensive experiments demonstrate that our framework consistently outperforms purely centralized, purely decentralized, and existing hybrid-adaptable methods. Notably, our method remains robust even when the centralized and decentralized data domains differ or when decentralized data contains noise, significantly broadening its applicability. Junyi Zhu 0002, Ruicong Yao, Taha Ceritli, Savas Özkan, Matthew B. Blaschko, Eunchung Noh, Jeongwon Min, Cho Jung Min, Mete Ozay |
WACV | 1 |
| 2025 | Linear Combination of Saved Checkpoints Makes Consistency and Diffusion Models BetterabstractDiffusion Models (DM) and Consistency Models (CM) are two types of popular generative models with good generation quality on various tasks. When training DM and CM, intermediate weight checkpoints are not fully utilized and only the last converged checkpoint is used. In this work, we find proper checkpoint merging can significantly improve the training convergence and final performance. Specifically, we propose LCSC, a simple but effective and efficient method to enhance the performance of DM and CM, by combining checkpoints along the training trajectory with coefficients deduced from evolutionary search. We demonstrate the value of LCSC through two use cases: (a) Reducing training cost. With LCSC, we only need to train DM/CM with fewer number of iterations and/or lower batch sizes to obtain comparable sample quality with the fully trained model. For example, LCSC achieves considerable training speedups for CM (23$\times$ on CIFAR-10 and 15$\times$ on ImageNet-64). (b) Enhancing pre-trained models. When full training is already done, LCSC can further improve the generation quality or efficiency of the final converged models. For example, LCSC achieves better FID using 1 number of function evaluation (NFE) than the base model with 2 NFE on consistency distillation, and decreases the NFE of DM from 15 to 9 while maintaining the generation quality. Applying LCSC to large text-to-image models, we also observe clearly enhanced generation quality. Enshu Liu, Junyi Zhu 0002, Zinan Lin 0001, Xuefei Ning, Shuaiqi Wang, Matthew B. Blaschko, Sergey Yekhanin, Shengen Yan, Guohao Dai 0001, Huazhong Yang, Yu Wang 0002 |
ICLR | 2 |
| 2025 | Latent Zoning Network: A Unified Principle for Generative Modeling, Representation Learning, and ClassificationabstractGenerative modeling, representation learning, and classification are three core problems in machine learning (ML), yet their state-of-the-art (SoTA) solutions remain largely disjoint. In this paper, we ask: Can a unified principle address all three? Such unification could simplify ML pipelines and foster greater synergy across tasks. We introduce Latent Zoning Network (LZN) as a step toward this goal. At its core, LZN creates a shared Gaussian latent space that encodes information across all tasks. Each data type (e.g., images, text, labels) is equipped with an encoder that maps samples to disjoint latent zones, and a decoder that maps latents back to data. ML tasks are expressed as compositions of these encoders and decoders: for example, label-conditional image generation uses a label encoder and image decoder; image embedding uses an image encoder; classification uses an image encoder and label decoder. We demonstrate the promise of LZN in three increasingly complex scenarios: (1) LZN can enhance existing models (image generation): When combined with the SoTA Rectified Flow model, LZN improves FID on CIFAR10 from 2.76 to 2.59—without modifying the training objective. (2) LZN can solve tasks independently (representation learning): LZN can implement unsupervised representation learning without auxiliary loss functions, outperforming the seminal MoCo and SimCLR methods by 9.3% and 0.2%, respectively, on downstream linear classification on ImageNet. (3) LZN can solve multiple tasks simultaneously (joint generation and classification): With image and label encoders/decoders, LZN performs both tasks jointly by design, improving FID and achieving SoTA classification accuracy on CIFAR10. The code and trained models are available at https://github.com/microsoft/latent-zoning-networks. The project website is at https://zinanlin.me/blogs/latent_zoning_networks.html. Zinan Lin 0001, Enshu Liu, Xuefei Ning, Junyi Zhu 0002, Sergey Yekhanin |
NeurIPS | 4 |
| 2023 | Confidence-Aware Personalized Federated Learning via Variational Expectation MaximizationabstractFederated Learning (FL) is a distributed learning scheme to train a shared model across clients. One common and fundamental challenge in FL is that the sets of dnta across clients could be non-identically distributed and have different sizes. Personalized Federated Learning (P FL) attempts to solve this challenge via locally adapted models. In this work, we present a novel framework for PFL based on hierarchical Bayesian modeling and variational inference. A global model is introduced as a latent variable to augment the joint distribution of clients' parameters and capture the common trends of different clients, optimization is derived based on the principle of maximizing the marginal likelihood and conducted using variational expectation maximization. Our algorithm gives rise to a closed-form estimation of a confidence value which comprises the uncertainty of clients' parameters and local model deviations from the global model. The confidence value is used to weigh clients' parameters in the aggregation stage and adjust the regularization effect of the global model. We evaluate our method through extensive empirical studies on multiple datasets. Experimental results show that our approach obtains competitive results under mild heterogeneous circumstances while significantly outperforming state-of-the-art PFL frameworks in highly heterogeneous settings. Junyi Zhu 0002, Xingchen Ma, Matthew B. Blaschko |
CVPR | 1 |
| 2023 | Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated LearningabstractIn Federated Learning (FL) and many other distributed training frameworks, collaborators can hold their private data locally and only share the network weights trained with the local data after multiple iterations. Gradient inversion is a family of privacy attacks that recovers data from its generated gradients. Seemingly, FL can provide a degree of protection against gradient inversion attacks on weight updates, since the gradient of a single step is concealed by the accumulation of gradients over multiple local iterations. In this work, we propose a principled way to extend gradient inversion attacks to weight updates in FL, thereby better exposing weaknesses in the presumed privacy protection inherent in FL. In particular, we propose a surrogate model method based on the characteristic of two-dimensional gradient flow and low-rank property of local updates. Our method largely boosts the ability of gradient inversion attacks on weight updates containing many iterations and achieves state-of-the-art (SOTA) performance. Additionally, our method runs up to $100\times$ faster than the SOTA baseline in the common FL scenario. Our work re-evaluates and highlights the privacy risk of sharing network weights. Our code is available at https://github.com/JunyiZhu-AI/surrogate_model_extension. Junyi Zhu 0002, Ruicong Yao, Matthew B. Blaschko |
ICML | 1 |
| 2021 | R-GAP: Recursive Gradient Attack on Privacy
Junyi Zhu 0002, Matthew B. Blaschko |
ICLR | 1 |