Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Qianli Shen

dblp:22/10357 · DBLP profile ↗
← Back
8ranked-venue papers
3as first author
7since 2021 · last 2026
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 8 · 3 first-author · 7 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
7 papers
Trustworthy machine learning · 22% Generative modeling · 20% Efficient and distributed learning · 17%
Network and information security
2 papers
Digital forensics and information hiding · 46% Security and privacy of machine learning · 46% Cryptographic protocols and secure computation · 7%
Interdisciplinary, comprehensive, and emerging computing
1 paper
Computational science and engineering · 100%

Topics — the 23 heaviest of 24, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Digital forensics and information hiding
copyright protection
1.522024
The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024
VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024
Machine learning › Representation and self-supervised learning › pre-training
data mixture optimization
0.912025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Machine learning › Efficient and distributed learning
data selection
0.912025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Natural language and speech › Language models and text generation
large language model fine-tuning
0.912025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Machine learning › Trustworthy machine learning › robustness
adversarial attack
0.812024
VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024
Machine learning › Optimization for machine learning
bilevel optimization
0.812024
Memory-Efficient Gradient Unrolling for Large-Scale Bi-level Optimization · NeurIPS 2024
Machine learning › Generative modeling
diffusion model
0.812024
The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024
Machine learning › Efficient and distributed learning › distributed training
large-scale training
0.812024
Memory-Efficient Gradient Unrolling for Large-Scale Bi-level Optimization · NeurIPS 2024
Machine learning › Generative modeling › diffusion model › text-to-image generation
text-to-image diffusion model
0.812024
The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024
Machine learning › Generative modeling › diffusion model
text-to-image generation
0.812024
VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models · CVPR 2024
Security and privacy of machine learning › adversarial attack
backdoor attack
0.812024
The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024
Security and privacy of machine learning
poisoning attack
0.812024
The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline · ICML 2024
Machine learning › Probabilistic and Bayesian machine learning › statistical inference
bayesian inference
0.712023
GFlowOut: Dropout with Generative Flow Networks · ICML 2023
Machine learning › Trustworthy machine learning › uncertainty estimation › confidence estimation
confidence interval estimation
0.712023
PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023
Machine learning › Deep learning architectures and training › regularization
dropout
0.712023
GFlowOut: Dropout with Generative Flow Networks · ICML 2023
Machine learning › Trustworthy machine learning
uncertainty estimation
0.712023
PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023
Computational science and engineering › scientific machine learning
physics-informed machine learning
0.712023
PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023
Computational science and engineering
uncertainty quantification
0.712023
PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023
Machine learning › Reinforcement learning › robust reinforcement learning
distributionally robust reinforcement learning
0.412020
Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020
Machine learning › Reinforcement learning
policy optimization
0.412020
Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020
Machine learning › Trustworthy machine learning
robustness
0.412020
Deep Reinforcement Learning with Robust and Smooth Policy · ICML 2020
Machine learning › Efficient and distributed learning
data-efficient learning
0.312025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Mathematical optimization
bilevel optimization
0.212023
PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification · NeurIPS 2023

Methods — techniques the papers use, named apart from their topics

probabilistic analysis · 1.5online amplification attack · 1.5data poisoning · 1.5backdoor attack · 1.5physics-informed neural networks · 1.3confidence propagation · 1.3reward modeling · 0.9reinforcement learning · 0.9zeroth-order optimization · 0.8stochastic approximation · 0.8gradient unrolling · 0.8generative flow networks · 0.7bilevel optimization · 0.7bi-level optimization · 0.7
YearPublicationVenuePosition
2026 State-space models are accurate and efficient neural operators for dynamical systems
Zheyuan Hu 0002, Nazanin Ahmadi Daryakenari, Qianli Shen, Kenji Kawaguchi, George Em Karniadakis
Neural Networks3
2025 Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data
abstract
Fine-tuning large language models (LLMs) using diverse datasets is crucial for enhancing their overall performance across various domains. In practical scenarios, existing methods based on modeling the mixture proportions of data composition often struggle with data whose domain labels are missing, imprecise or non-normalized, while methods based on data selection usually encounter difficulties in balancing multi-domain performance. To address these challenges, in this work, we investigate the role of data diversity in enhancing the overall abilities of LLMs by empirically constructing contrastive data pools and theoretically deriving explanations. Building upon the insights gained, we propose a new method that gives the LLM a dual identity: an output model to cognitively probe and select data based on diversity reward, as well as an input model to be tuned with the selected data. Extensive experiments show that the proposed method notably boosts performance across domain-undetermined data and a series of foundational downstream tasks when applied to various advanced LLMs. We release our code and hope this study can shed light on the understanding of data diversity and advance feedback-driven data-model co-design for LLMs.
Zhenqing Ling, Daoyuan Chen, Liuyi Yao, Qianli Shen, Yaliang Li, Ying Shen 0001
NeurIPS4
2024 VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models
abstract
The booming use of text-to-image generative models has raised concerns about their high risk of producing copyright-infringing content. While probabilistic copyright protection methods provide a probabilistic guarantee against such infringement, in this paper, we introduce Virtually Assured Amplification Attack (VA3), a novel online attack framework that exposes the vulnerabilities of these protection mechanisms. The proposed framework significantly amplifies the probability of generating infringing content on the sustained interactions with generative models and a non-trivial lower-bound on the success probability of each engagement. Our theoretical and experimental results demonstrate the effectiveness of our approach under various scenarios. These findings highlight the potential risk of implementing probabilistic copyright protection in practical applications of text-to-image generative models. Code is available at https://github.com/South7X/VA3.
Xiang Li 0118, Qianli Shen, Kenji Kawaguchi
CVPR2
2024 The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright BreachesWithout Adjusting Finetuning Pipeline
abstract
The commercialization of text-to-image diffusion models (DMs) brings forth potential copyright concerns. Despite numerous attempts to protect DMs from copyright issues, the vulnerabilities of these solutions are underexplored. In this study, we formalized the Copyright Infringement Attack on generative AI models and proposed a backdoor attack method, SilentBadDiffusion, to induce copyright infringement without requiring access to or control over training processes. Our method strategically embeds connections between pieces of copyrighted information and text references in poisoning data while carefully dispersing that information, making the poisoning data inconspicuous when integrated into a clean dataset. Our experiments show the stealth and efficacy of the poisoning data. When given specific text prompts, DMs trained with a poisoning ratio of 0.20% can produce copyrighted images. Additionally, the results reveal that the more sophisticated the DMs are, the easier the success of the attack becomes. These findings underline potential pitfalls in the prevailing copyright protection strategies and underscore the necessity for increased scrutiny to prevent the misuse of DMs.
Qianli Shen, Kenji Kawaguchi
ICML2
2024 Memory-Efficient Gradient Unrolling for Large-Scale Bi-level Optimization
abstract
Bi-level optimizaiton (BO) has become a fundamental mathematical framework for addressing hierarchical machine learning problems. As deep learning models continue to grow in size, the demand for scalable bi-level optimization has become increasingly critical. Traditional gradient-based bi-level optimizaiton algorithms, due to their inherent characteristics, are ill-suited to meet the demands of large-scale applications. In this paper, we introduce **F**orward **G**radient **U**nrolling with **F**orward **G**radient, abbreviated as **$($FG$)^2$U**, which achieves an unbiased stochastic approximation of the meta gradient for bi-level optimizaiton. $($FG$)^2$U circumvents the memory and approximation issues associated with classical bi-level optimizaiton approaches, and delivers significantly more accurate gradient estimates than existing large-scale bi-level optimizaiton approaches. Additionally, $($FG$)^2$U is inherently designed to support parallel computing, enabling it to effectively leverage large-scale distributed computing systems to achieve significant computational efficiency. In practice, $($FG$)^2$U and other methods can be strategically placed at different stages of the training process to achieve a more cost-effective two-phase paradigm. Further, $($FG$)^2$U is easy to implement within popular deep learning frameworks, and can be conveniently adapted to address more challenging zeroth-order bi-level optimizaiton scenarios. We provide a thorough convergence analysis and a comprehensive practical discussion for $($FG$)^2$U, complemented by extensive empirical evaluations, showcasing its superior performance in diverse large-scale bi-level optimizaiton tasks.
Qianli Shen, Yezhen Wang, Zhouhao Yang, Jonathan Scarlett, Zhanxing Zhu, Kenji Kawaguchi
NeurIPS1
2023 GFlowOut: Dropout with Generative Flow Networks
abstract
Bayesian inference offers principled tools to tackle many critical problems with modern neural networks such as poor calibration and generalization, and data inefficiency. However, scaling Bayesian inference to large architectures is challenging and requires restrictive approximations. Monte Carlo Dropout has been widely used as a relatively cheap way to approximate inference and estimate uncertainty with deep neural networks. Traditionally, the dropout mask is sampled independently from a fixed distribution. Recent research shows that the dropout mask can be seen as a latent variable, which can be inferred with variational inference. These methods face two important challenges: (a) the posterior distribution over masks can be highly multi-modal which can be difficult to approximate with standard variational inference and (b) it is not trivial to fully utilize sample-dependent information and correlation among dropout masks to improve posterior estimation. In this work, we propose GFlowOut to address these issues. GFlowOut leverages the recently proposed probabilistic framework of Generative Flow Networks (GFlowNets) to learn the posterior distribution over dropout masks. We empirically demonstrate that GFlowOut results in predictive distributions that generalize better to out-of-distribution data and provide uncertainty estimates which lead to better performance in downstream tasks.
Dianbo Liu, Moksh Jain, Bonaventure F. P. Dossou, Qianli Shen, Salem Lahlou, Anirudh Goyal, Nikolay Malkin, Chris C. Emezue, Dinghuai Zhang, Nadhir Vincent Hassen, Kenji Kawaguchi, Yoshua Bengio
ICML4
2023 PICProp: Physics-Informed Confidence Propagation for Uncertainty Quantification
abstract
Standard approaches for uncertainty quantification in deep learning and physics-informed learning have persistent limitations. Indicatively, strong assumptions regarding the data likelihood are required, the performance highly depends on the selection of priors, and the posterior can be sampled only approximately, which leads to poor approximations because of the associated computational cost. This paper introduces and studies confidence interval (CI) estimation for deterministic partial differential equations as a novel problem. That is, to propagate confidence, in the form of CIs, from data locations to the entire domain with probabilistic guarantees. We propose a method, termed Physics-Informed Confidence Propagation (PICProp), based on bi-level optimization to compute a valid CI without making heavy assumptions. We provide a theorem regarding the validity of our method, and computational experiments, where the focus is on physics-informed learning. Code is available at https://github.com/ShenQianli/PICProp.
Qianli Shen, Wai Hoh Tang, Zhun Deng, Apostolos F. Psaros, Kenji Kawaguchi
NeurIPS1
2020 Deep Reinforcement Learning with Robust and Smooth Policy
abstract
Deep reinforcement learning (RL) has achieved great empirical successes in various domains. However, the large search space of neural networks requires a large amount of data, which makes the current RL algorithms not sample efficient. Motivated by the fact that many environments with continuous state space have smooth transitions, we propose to learn a smooth policy that behaves smoothly with respect to states. We develop a new framework — \textbf{S}mooth \textbf{R}egularized \textbf{R}einforcement \textbf{L}earning ($\textbf{SR}^2\textbf{L}$), where the policy is trained with smoothness-inducing regularization. Such regularization effectively constrains the search space, and enforces smoothness in the learned policy. Moreover, our proposed framework can also improve the robustness of policy against measurement error in the state space, and can be naturally extended to distribubutionally robust setting. We apply the proposed framework to both on-policy (TRPO) and off-policy algorithm (DDPG). Through extensive experiments, we demonstrate that our method achieves improved sample efficiency and robustness.
Qianli Shen, Yan Li 0074, Haoming Jiang, Zhaoran Wang 0001, Tuo Zhao
ICML1