Demo Data from VLDB 2026 / reviewers in the wild / expert
Qianli Shen
dblp:22/10357
· DBLP profile ↗
8ranked-venue papers
3as first author
7since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 8 · 3 first-author · 7 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
7 papers |
Trustworthy machine learning · 22% Generative modeling · 20% Efficient and distributed learning · 17% | |
| Network and information security
2 papers |
Digital forensics and information hiding · 46% Security and privacy of machine learning · 46% Cryptographic protocols and secure computation · 7% | |
| Interdisciplinary, comprehensive, and emerging computing
1 paper |
Computational science and engineering · 100% |
Topics — the 23 heaviest of 24, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Digital forensics and information hiding
copyright protection |
1.5 | 2 | 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024 VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024 |
Machine learning › Representation and self-supervised learning › pre-training
data mixture optimization |
0.9 | 1 | 2025 | Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025 |
Machine learning › Efficient and distributed learning
data selection |
0.9 | 1 | 2025 | Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025 |
Natural language and speech › Language models and text generation
large language model fine-tuning |
0.9 | 1 | 2025 | Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025 |
Machine learning › Trustworthy machine learning › robustness
adversarial attack |
0.8 | 1 | 2024 | VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024 |
Machine learning › Optimization for machine learning
bilevel optimization |
0.8 | 1 | 2024 | Memory-Efficient Gradient Unrolling for Large-Scale Bi-level Optimization · NeurIPS 2024 |
Machine learning › Generative modeling
diffusion model |
0.8 | 1 | 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024 |
Machine learning › Efficient and distributed learning › distributed training
large-scale training |
0.8 | 1 | 2024 | Memory-Efficient Gradient Unrolling for Large-Scale Bi-level Optimization · NeurIPS 2024 |
Machine learning › Generative modeling › diffusion model › text-to-image generation
text-to-image diffusion model |
0.8 | 1 | 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024 |
Machine learning › Generative modeling › diffusion model
text-to-image generation |
0.8 | 1 | 2024 | VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024 |
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.8 | 1 | 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024 |
Security and privacy of machine learning
poisoning attack |
0.8 | 1 | 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024 |
Machine learning › Probabilistic and Bayesian machine learning › statistical inference
bayesian inference |
0.7 | 1 | 2023 | GFlowOut: Dropout with Generative Flow Networks · ICML 2023 |
Machine learning › Trustworthy machine learning › uncertainty estimation › confidence estimation
confidence interval estimation |
0.7 | 1 | 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023 |
Machine learning › Deep learning architectures and training › regularization
dropout |
0.7 | 1 | 2023 | GFlowOut: Dropout with Generative Flow Networks · ICML 2023 |
Machine learning › Trustworthy machine learning
uncertainty estimation |
0.7 | 1 | 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023 |
Computational science and engineering › scientific machine learning
physics-informed machine learning |
0.7 | 1 | 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023 |
Computational science and engineering
uncertainty quantification |
0.7 | 1 | 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023 |
Machine learning › Reinforcement learning › robust reinforcement learning
distributionally robust reinforcement learning |
0.4 | 1 | 2020 | Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020 |
Machine learning › Reinforcement learning
policy optimization |
0.4 | 1 | 2020 | Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020 |
Machine learning › Trustworthy machine learning
robustness |
0.4 | 1 | 2020 | Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020 |
Machine learning › Efficient and distributed learning
data-efficient learning |
0.3 | 1 | 2025 | Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025 |
Mathematical optimization
bilevel optimization |
0.2 | 1 | 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023 |
Methods — techniques the papers use, named apart from their topics
probabilistic analysis · 1.5online amplification attack · 1.5data poisoning · 1.5backdoor attack · 1.5physics-informed neural networks · 1.3confidence propagation · 1.3reward modeling · 0.9reinforcement learning · 0.9zeroth-order optimization · 0.8stochastic approximation · 0.8gradient unrolling · 0.8generative flow networks · 0.7bilevel optimization · 0.7bi-level optimization · 0.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | State-space models are accurate and efficient neural operators for dynamical systems
Zheyuan Hu 0002, Nazanin Ahmadi Daryakenari, Qianli Shen, Kenji Kawaguchi, George Em Karniadakis |
Neural Networks | 3 |
| 2025 | Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined DataabstractFine-tuning large language models (LLMs) using diverse datasets is crucial for enhancing their overall performance across various domains.
In practical scenarios, existing methods based on modeling the mixture proportions of data composition often struggle with data whose domain labels are missing, imprecise or non-normalized, while methods based on data selection usually encounter difficulties in balancing multi-domain performance.
To address these challenges, in this work, we investigate the role of data diversity in enhancing the overall abilities of LLMs by empirically constructing contrastive data pools and theoretically deriving explanations.
Building upon the insights gained, we propose a new method that gives the LLM a dual identity: an output model to cognitively probe and select data based on diversity reward, as well as an input model to be tuned with the selected data.
Extensive experiments show that the proposed method notably boosts performance across domain-undetermined data and a series of foundational downstream tasks when applied to various advanced LLMs. We release our code and hope this study can shed light on the understanding of data diversity and advance feedback-driven data-model co-design for LLMs. Zhenqing Ling, Daoyuan Chen, Liuyi Yao, Qianli Shen, Yaliang Li, Ying Shen 0001 |
NeurIPS | 4 |
| 2024 | VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative ModelsabstractThe booming use of text-to-image generative models has raised concerns about their high risk of producing copyright-infringing content. While probabilistic copyright protection methods provide a probabilistic guarantee against such infringement, in this paper, we introduce Virtually Assured Amplification Attack (VA3), a novel online attack framework that exposes the vulnerabilities of these protection mechanisms. The proposed framework significantly amplifies the probability of generating infringing content on the sustained interactions with generative models and a non-trivial lower-bound on the success probability of each engagement. Our theoretical and experimental results demonstrate the effectiveness of our approach under various scenarios. These findings highlight the potential risk of implementing probabilistic copyright protection in practical applications of text-to-image generative models. Code is available at https://github.com/South7X/VA3. Xiang Li 0118, Qianli Shen, Kenji Kawaguchi |
CVPR | 2 |
| 2024 | The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning PipelineabstractThe commercialization of text-to-image diffusion models (DMs) brings forth potential copyright concerns. Despite numerous attempts to protect DMs from copyright issues, the vulnerabilities of these solutions are underexplored. In this study, we formalized the Copyright Infringement Attack on generative AI models and proposed a backdoor attack method, SilentBadDiffusion, to induce copyright infringement without requiring access to or control over training processes. Our method strategically embeds connections between pieces of copyrighted information and text references in poisoning data while carefully dispersing that information, making the poisoning data inconspicuous when integrated into a clean dataset. Our experiments show the stealth and efficacy of the poisoning data. When given specific text prompts, DMs trained with a poisoning ratio of 0.20% can produce copyrighted images. Additionally, the results reveal that the more sophisticated the DMs are, the easier the success of the attack becomes. These findings underline potential pitfalls in the prevailing copyright protection strategies and underscore the necessity for increased scrutiny to prevent the misuse of DMs. Qianli Shen, Kenji Kawaguchi |
ICML | 2 |
| 2024 | Memory-Efficient Gradient Unrolling for Large-Scale Bi-level OptimizationabstractBi-level optimizaiton (BO) has become a fundamental mathematical framework for addressing hierarchical machine learning problems.
As deep learning models continue to grow in size, the demand for scalable bi-level optimization has become increasingly critical.
Traditional gradient-based bi-level optimizaiton algorithms, due to their inherent characteristics, are ill-suited to meet the demands of large-scale applications.
In this paper, we introduce **F**orward **G**radient **U**nrolling with **F**orward **G**radient, abbreviated as **$($FG$)^2$U**, which achieves an unbiased stochastic approximation of the meta gradient for bi-level optimizaiton.
$($FG$)^2$U circumvents the memory and approximation issues associated with classical bi-level optimizaiton approaches, and delivers significantly more accurate gradient estimates than existing large-scale bi-level optimizaiton approaches.
Additionally, $($FG$)^2$U is inherently designed to support parallel computing, enabling it to effectively leverage large-scale distributed computing systems to achieve significant computational efficiency.
In practice, $($FG$)^2$U and other methods can be strategically placed at different stages of the training process to achieve a more cost-effective two-phase paradigm.
Further, $($FG$)^2$U is easy to implement within popular deep learning frameworks, and can be conveniently adapted to address more challenging zeroth-order bi-level optimizaiton scenarios.
We provide a thorough convergence analysis and a comprehensive practical discussion for $($FG$)^2$U, complemented by extensive empirical evaluations, showcasing its superior performance in diverse large-scale bi-level optimizaiton tasks. Qianli Shen, Yezhen Wang, Zhouhao Yang, Jonathan Scarlett, Zhanxing Zhu, Kenji Kawaguchi |
NeurIPS | 1 |
| 2023 | GFlowOut: Dropout with Generative Flow NetworksabstractBayesian inference offers principled tools to tackle many critical problems with modern neural networks such as poor calibration and generalization, and data inefficiency. However, scaling Bayesian inference to large architectures is challenging and requires restrictive approximations. Monte Carlo Dropout has been widely used as a relatively cheap way to approximate inference and estimate uncertainty with deep neural networks. Traditionally, the dropout mask is sampled independently from a fixed distribution. Recent research shows that the dropout mask can be seen as a latent variable, which can be inferred with variational inference. These methods face two important challenges: (a) the posterior distribution over masks can be highly multi-modal which can be difficult to approximate with standard variational inference and (b) it is not trivial to fully utilize sample-dependent information and correlation among dropout masks to improve posterior estimation. In this work, we propose GFlowOut to address these issues. GFlowOut leverages the recently proposed probabilistic framework of Generative Flow Networks (GFlowNets) to learn the posterior distribution over dropout masks. We empirically demonstrate that GFlowOut results in predictive distributions that generalize better to out-of-distribution data and provide uncertainty estimates which lead to better performance in downstream tasks. Dianbo Liu, Moksh Jain, Bonaventure F. P. Dossou, Qianli Shen, Salem Lahlou, Anirudh Goyal, Nikolay Malkin, Chris C. Emezue, Dinghuai Zhang, Nadhir Vincent Hassen, Kenji Kawaguchi, Yoshua Bengio |
ICML | 4 |
| 2023 | PICProp: Physics-Informed Confidence Propagation for Uncertainty QuantificationabstractStandard approaches for uncertainty quantification in deep learning and physics-informed learning have persistent limitations.
Indicatively, strong assumptions regarding the data likelihood are required, the performance highly depends on the selection of priors, and the posterior can be sampled only approximately, which leads to poor approximations because of the associated computational cost.
This paper introduces and studies confidence interval (CI) estimation for deterministic partial differential equations as a novel problem.
That is, to propagate confidence, in the form of CIs, from data locations to the entire domain with probabilistic guarantees.
We propose a method, termed Physics-Informed Confidence Propagation (PICProp), based on bi-level optimization to compute a valid CI without making heavy assumptions.
We provide a theorem regarding the validity of our method, and computational experiments, where the focus is on physics-informed learning. Code is available at https://github.com/ShenQianli/PICProp. Qianli Shen, Wai Hoh Tang, Zhun Deng, Apostolos F. Psaros, Kenji Kawaguchi |
NeurIPS | 1 |
| 2020 | Deep Reinforcement Learning with Robust and Smooth PolicyabstractDeep reinforcement learning (RL) has achieved great empirical successes in various domains. However, the large search space of neural networks requires a large amount of data, which makes the current RL algorithms not sample efficient. Motivated by the fact that many environments with continuous state space have smooth transitions, we propose to learn a smooth policy that behaves smoothly with respect to states. We develop a new framework — \textbf{S}mooth \textbf{R}egularized \textbf{R}einforcement \textbf{L}earning ($\textbf{SR}^2\textbf{L}$), where the policy is trained with smoothness-inducing regularization. Such regularization effectively constrains the search space, and enforces smoothness in the learned policy. Moreover, our proposed framework can also improve the robustness of policy against measurement error in the state space, and can be naturally extended to distribubutionally robust setting. We apply the proposed framework to both on-policy (TRPO) and off-policy algorithm (DDPG). Through extensive experiments, we demonstrate that our method achieves improved sample efficiency and robustness. Qianli Shen, Yan Li 0074, Haoming Jiang, Zhaoran Wang 0001, Tuo Zhao |
ICML | 1 |