Bowen Peng

dblp:299/2191 · DBLP profile ↗
← Back
17ranked-venue papers
5as first author
17since 2021 · last 2026
—ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 8 · 2 first-author · 8 since 2021Applied, interdisciplinary, general and emerging computing · 5 · 3 first-author · 5 since 2021Systems, architecture and hardware · 2 · 2 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 2 since 2021Security and privacy · 1 · 1 since 2021
YearPublicationVenuePosition
2026 DABF-Net : Dynamic adaptive basis fusion network for breast ultrasound image segmentation
Bowen Peng, En Mou, Jiashun Mao, Zhangyong Li, Kangle Yong, Biao Qu, Yamei Luo
Expert Syst. Appl.2
2026 ATRNet-STAR: A Large Dataset and Benchmark Toward Remote Sensing Object Recognition in the Wild
abstract
The absence of publicly available, large-scale, high-quality datasets for Synthetic Aperture Radar Automatic Target Recognition (SAR ATR) has significantly hindered the application of rapidly advancing deep learning techniques, which hold huge potential to unlock new capabilities in this field. This is primarily because collecting large volumes of diverse target samples from SAR images is prohibitively expensive, largely due to privacy concerns, the characteristics of microwave radar imagery perception, and the need for specialized expertise in data annotation. Throughout the history of SAR ATR research, there have been only a number of small datasets, mainly including targets like ships, airplanes, buildings, etc. There is only one vehicle dataset MSTAR collected in the 1990 s, which has been a valuable source for SAR ATR. To fill this gap, this paper introduces a large-scale, new dataset named ATRNet-STAR with 40 different vehicle categories collected under various realistic imaging conditions and scenes. It marks a substantial advancement in dataset scale and diversity, comprising over 190,000 well-annotated samples-$10\times$ larger than its predecessor, the famous MSTAR. Building such a large dataset is a challenging task, and the data collection scheme will be detailed. Secondly, we illustrate the value of ATRNet-STAR via extensively evaluating the performance of 15 representative methods with 7 different experimental settings on challenging classification and detection benchmarks derived from the dataset. Finally, based on our extensive experiments, we identify valuable insights for SAR ATR and discuss potential future research directions in this field. We hope that the scale, diversity, and benchmark of ATRNet-STAR can significantly facilitate the advancement of SAR ATR.
Yongxiang Liu, Li Liu 0002, Jie Zhou 0031, Bowen Peng, Xuying Xiong, Wei Yang 0046, Tianpeng Liu, Zhen Liu 0004, Xiang Li 0014
IEEE Trans. Pattern Anal. Mach. Intell.5
2026 S4ST: A Strong, Self-Transferable, faSt, and Simple Scale Transformation for Data-Free Transferable Targeted Attack
Yongxiang Liu, Bowen Peng, Li Liu 0002, Xiang Li 0014
IEEE Trans. Pattern Anal. Mach. Intell.2
2025 When Pixel Difference Patterns Meet ViT: PiDiViT for Few-Shot Object Detection
Yongxiang Liu, Canyu Mo, Bowen Peng, Li Liu 0002
ICCV5
2025 MaDiNet: Mamba Diffusion Network for SAR Target Detection
abstract
The fundamental challenge in SAR target detection lies in developing discriminative, efficient, and robust representations of target characteristics within intricate non-cooperative environments. However, accurate target detection is impeded by factors including the sparse distribution and discrete features of the targets, as well as complex background interference. In this study, we propose a Gamma Diffusion Model Network with MambaSAR module (MaDiNet) for SAR target detection. Specifically, MaDiNet leverages the Gamma distribution to model the statistical characteristics of SAR images, and conceptulizes SAR target detection as the task of generating target bounding boxes in the image space. Furthermore, we design a MambaSAR module to capture intricate spatial structural information of targets and enhance the capability of the model to differentiate between targets and complex backgrounds. The experimental results on multi-class target detection datasets have all achieved SOTA, with a particularly notable improvement of 6.7% in mAP50 on the ODSOG-1.0 dataset, proving the effectiveness of the proposed network. Code is available at https://github.com/JoyeZLearning/MaDiNet.
Jie Zhou 0031, Yongxiang Liu, Bowen Peng, Li Liu 0002, Xiang Li 0014
IEEE Trans. Circuits Syst. Video Technol.3
2025 Output-Based Decentralized Adaptive Event-Triggered Control of Interconnected Systems With Sensor/Actuator Failures
abstract
This article presents a double-channel (sensor-to-controller channel and controller-to-actuator channel) event triggered control method for nonlinear interconnected systems subject to sensor and actuator faults via the backstepping technique. It should be emphasized that the utilization of triggering mechanism at the sensor side poses a challenge to the design of backstepping control, as it leads to nondifferentiable virtual control signals due to the discontinuous nature of the state/output signals received at the controller side. In contrast to existing methods, the proposed event triggering mechanism eliminates the need for computing virtual control signals at the sensor side before transmitting them to the controller side. By establishing the relationships of the corresponding variables in two communication scenarios (namely, without and with event triggering) and introducing dynamic filtering technique, the problem of nondifferentiable virtual control signals in backstepping design is solved. We present a numerical case study to validate the effectiveness and advantages of the proposed decentralized event triggered control approach.
Changyun Wen, Long Chen 0001, Yongduan Song 0001, Bowen Peng, Gang Feng 0001
IEEE Trans. Cybern.5
2025 ARBiBench: Benchmarking and Analyzing Adversarial Robustness of Binarized Convolutional Neural Networks
abstract
Binarized convolutional neural networks (BCNNs), which restrict the weights and activations of the model to +1 or −1, provide notable reductions in memory requirements and enhanced model inference speed during deployment. Current research on BCNNs primarily revolves around addressing the performance degradation resulting from binarization. However, the investigation of the effects of extreme discretization on the robustness of BCNNs has been largely overlooked, despite its critical relevance to real-world applications. To this end, we propose ARBiBench, a comprehensive benchmark for evaluating the adversarial robustness of BCNNs in the image classification task. The key contributions of ARBiBench include: 1) systematically evaluating the robustness of seven influential BCNN methods across various architectures; 2) rigorous validation of diverse adversarial attack methods; and 3) novel empirical findings showing that BCNNs exhibit weaker robustness than full-precision networks on small datasets but surprisingly stronger robustness on large-scale datasets. Leveraging Information Bottleneck theory, we further demonstrate how data scale and model capacity collectively determine BCNNs’ adversarial robustness. These findings not only challenge conventional assumptions about BCNN security, but also provide new insights for developing robust yet efficient neural network architectures.
Li Liu 0002, Bowen Peng, Zhen Liu 0004, Longguang Wang, Yingmei Wei
IEEE Trans. Inf. Forensics Secur.4
2024 YaRN: Efficient Context Window Extension of Large Language Models
abstract
Rotary Position Embeddings (RoPE) have been shown to effectively encode positional information in transformer-based language models. However, these models fail to generalize past the sequence length they were trained on. We present YaRN (Yet another RoPE extensioN method), a compute-efficient method to extend the context window of such models, requiring 10x less tokens and 2.5x less training steps than previous methods. Using YaRN, we show that LLaMA models can effectively utilize and extrapolate to context lengths much longer than their original pre-training would allow, while also surpassing previous the state-of-the-art at context window extension. In addition, we demonstrate that YaRN exhibits the capability to extrapolate beyond the limited context of a fine-tuning dataset. The models fine-tuned using YaRN has been made available and reproduced online up to 128k context length.
Bowen Peng, Jeffrey Quesnelle, Honglu Fan, Enrico Shippole
ICLR1
2024 Conditional Random Field-Based Adversarial Attack Against SAR Target Detection
abstract
The existence of adversarial examples causes serious security risks when deep neural networks are applied to synthetic aperture radar (SAR) target detection. In SAR image processing, the added small disturbances can cause the model to output incorrect predictions. Due to the multipath effect in the propagation of detection signals, there are complex interactions between targets and their surroundings serving as supportive clues for target detection. The interactions are manifested as tight correlations between pixels and contextual information in the SAR image (where context refers to various relationships, e.g., target-to-target co-occurrence relationships). In this letter, we proposed a novel conditional random field-based adversarial attack (CRFA) method, which disturbs the intrinsic interactions between the target and its surroundings. To the best of our knowledge, we are the first to exploit the contextual information for attacking the SAR target detector. We formulate the attack as an optimization problem and design the context information loss to calculate the energy differences in local feature patterns before and after perturbation. By maximizing the energy differences, the context area information around the target is destroyed, and the detector outputs the candidate box with a slight shift, even ignoring the ground truth and missing targets. Extensive experimental results on the SAR Ship Detection dataset (SSDD) demonstrate that our proposed algorithm reduces mAP by 4.29% on existing object detection models, validating the effectiveness of the method.
Jie Zhou 0031, Jianyue Xie, Bowen Peng, Li Liu 0002, Xiang Li 0014
IEEE Geosci. Remote. Sens. Lett.4
2023 Low-Frequency Features Optimization for Transferability Enhancement in Radar Target Adversarial Attack
Bowen Peng, Jie Zhou 0031, Xichen Huang, Lingxin Meng, Xunzhang Gao
ICANN (5)2
2023 Learning Invariant Representation Via Contrastive Feature Alignment for Clutter Robust SAR ATR
abstract
The deep neural networks (DNNs) have freed the synthetic aperture radar automatic target recognition (SAR ATR) from expertise-based feature designing and demonstrated superiority over conventional solutions. There has been shown the unique deficiency of ground vehicle benchmarks in shapes of strong background correlation results in DNNs overfitting the clutter and being non-robust to unfamiliar surroundings. However, the gap between fixed background model training and varying background application remains underexplored. This letter proposes a solution called Contrastive Feature Alignment (CFA) aiming to learn invariant representation for robust recognition. The proposed method contributes a mixed clutter variants generation strategy and a new inference branch equipped with channel-weighted mean square error (CWMSE) loss for invariant representation learning. In specific, the generation strategy is delicately designed to better attract clutter-sensitive deviation in feature space. The CWMSE loss is further devised to bettercontrastthis deviation andalignthe deep features activated by the original images and corresponding clutter variants. The proposed CFA combines both classification and CWMSE losses to train the model jointly, which allows for the progressive learning of invariant target representation. Extensive evaluations conducted on the MSTAR dataset and six DNN models prove the effectiveness of our proposal. The results demonstrate that the CFA-trained models are capable of recognizing targets among unfamiliar surroundings that are not included in the dataset, and are robust to varying signal-to-clutter ratios.
Bowen Peng, Jianyue Xie, Li Liu 0002
IEEE Geosci. Remote. Sens. Lett.1
2022 Adversarial Attacks on Radar Target Recognition Based on Deep Learning
abstract
Synthetic aperture radar (SAR) image classification is a challenging problem due to the complex imaging mechanism as well as the random speckle noise, which affects radar image interpretation. Recently, deep neural networks (DNNs) have been shown to outperform previous state-of-the-art techniques in computer vision tasks owing to their ability to learn relevant features from the data. However, the fragility of these models has received far less academic attention in the remote sensing community, which limits our understanding of the security of remote sensing image classification models. To explore the basic characteristic of adversarial examples of SAR images, we compare several mainstream adversarial methods and evaluate the securities of used DNNs from the perspective of attention. We subsequently perform other attempts. The experimental results provide data support and an effective reference for the defense capabilities of various DNNs regarding attack in SAR image classification models.
Jie Zhou 0031, Bowen Peng
IGARSS3
2022 Speckle-Variant Attack: Toward Transferable Adversarial Attack to SAR Target Recognition
abstract
Recent advances of deep neural networks (DNNs) highlight the success on synthetic aperture radar automatic target recognition (SAR ATR) with superiority effectiveness and efficiency. However, the DNNs are known to be vulnerable to the adversarial examples, whose performance will be dramatically reduced when the imperceptible perturbation exists. In optical image processing, invisible perturbations are typically embedded in the way of a full-scaled distribution in purely digital setting. Whereas, it is not feasible to achieve this in SAR ATR tasks due to the inaccessibility of SAR system and unique imaging mechanism. In practical, the subtle perturbations could be produced by physical approaches that change the scattering property of the target. Therefore, the adversarial perturbations for SAR ATR should be of good transferability to achieve effective attack on major DNNs classifiers, as well as accessible additive region in SAR images with respect to the realistic target locations. In this letter, we present a novel approach, namely speckle variant attack (SVA). The proposed SVA is composed of two major modules: an iterative gradient based perturbation generator and a target region extractor. The perturbation generator implements a speckle variant transformation that continuously reconstruct the speckle noise pattern during each of the iterations for strong transferability. The target region extractor ensures the feasibility of the additive adversarial perturbations in practical scenarios through restricting the region of the perturbation. Therefore, the proposed SVA is capable of producing adversarial examples that are more transferable and physically feasible. Extensive evaluations on the MSTAR dataset show that the SVA has achieved the superior transferability and competitive time consumption compared with the SOTA transformation-based techniques, including the diverse inputs method and the scale-invariant method.
Bowen Peng, Jie Zhou 0031, Jingyuan Xia, Li Liu 0002
IEEE Geosci. Remote. Sens. Lett.1
2022 Differential Graphical Games for Constrained Autonomous Vehicles Based on Viability Theory
abstract
This article proposes an optimal-distributed control protocol for multivehicle systems with an unknown switching communication graph. The optimal-distributed control problem is formulated to differential graphical games, and the Pareto optimum to multiplayer games is sought based on the viability theory and reinforcement learning techniques. The viability theory characterizes the controllability of a wide range of constrained nonlinear systems; and the viability kernel and the capture basin are the pillars of the viability theory. The capture basin is the set of all initial states, in which there exist control strategies that enable the states to reach the target in finite time while remaining inside a set before reaching the target. In this regard, the feasible learning region is characterized by the reinforcement learner. In addition, the approximation of the capture basin provides the learner with prior knowledge. Unlike the existing works that employ the viability theory to solve control problems with only one agent and differential games with only two players, the viability theory, in this article, is utilized to solve multiagent control problems and multiplayer differential games. The distributed control law is composed of two parts: 1) the approximation of the capture basin and 2) reinforcement learning, which are computed offline and online, respectively. The convergence properties of the parameters' estimation errors in reinforcement learning are proved, and the convergence of the control policy to the Pareto optimum of the differential graphical game is discussed. The guaranteed approximation results of the capture basin are provided and the simulation results of the differential graphical game are provided for multivehicle systems with the proposed distributed control policy.
Bowen Peng, Alexandru Stancu, Shuping Dang, Zhengtao Ding
IEEE Trans. Cybern.1
2022 Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense
abstract
Deep Neural Networks (DNNs) based Synthetic Aperture Radar (SAR) Automatic Target Recognition (ATR) systems have shown to be highly vulnerable to adversarial perturbations that are deliberately designed yet almost imperceptible but can bias DNN inference when added to targeted objects. This leads to serious safety concerns when applying DNNs to high-stakes SAR ATR applications. Therefore, enhancing the adversarial robustness of DNNs is essential for applying DNNs to modern real-world SAR ATR systems. Toward building more robust DNN-based SAR ATR models, this article explores the domain knowledge of SAR imaging process and proposes a novel Scattering Model Guided Adversarial Attack (SMGAA) algorithm which can generate adversarial perturbations in the form of electromagnetic scattering response (called adversarial scatterers). The proposed SMGAA consists of two parts: 1) a parametric scattering model and corresponding imaging method and 2) a customized gradient-based optimization algorithm. First, we introduce the effective Attributed Scattering Center Model (ASCM) and a general imaging method to describe the scattering behavior of typical geometric structures in the SAR imaging process. By further devising several strategies to take the domain knowledge of SAR target images into account and relax the greedy search procedure, the proposed method does not need to be prudentially finetuned, and can efficiently find the effective ASCM parameters to fool the SAR classifiers and facilitate the robust model training. Comprehensive evaluations on the MSTAR dataset show that the adversarial scatterers generated by SMGAA are more robust to perturbations and transformations in the SAR processing chain than the currently studied attacks, and are effective to construct a defensive model against the malicious scatterers.
Bowen Peng, Jie Zhou 0031, Jianyue Xie, Li Liu 0002
IEEE Trans. Geosci. Remote. Sens.1
2021 BSDP: A Novel Balanced Spark Data Partitioner
abstract
As a memory-based distributed big data computing framework, Spark has been widely used in big data processing systems. However, during the execution of Spark, due to the imbalance of input data distribution and the shortage of existing data partitioners in Spark, it is easy to cause partition skew problem and reduce the execution efficiency of Spark. Aiming at this problem, this paper proposes a balanced Spark data partitioner called BSDP (Balanced Spark Data Partitioner). By deeply analyzing the partitioning characteristics of Shuffle intermediate data, the Spark Shuffle intermediate data equalization partitioning model is established. The model aims to minimize the partition skew and find a Shuffle intermediate data equalization partitioning strategy. Based on the model, this paper designs and implements a data equalization partitioning algorithm of BSDP. This algorithm transforms the Shuffle intermediate data equalization partitioning problem into a classic List-Scheduling task scheduling problem, effectively realizes the balanced partitioning of Shuffle intermediate data. The experiment verifies that the BSDP can effectively realize the balanced partitioning of the Shuffle intermediate data and improve the execution efficiency of Spark.
Aibo Song, Bowen Peng, Jingyi Qiu, Yingying Xue, Mingyang Du
ICPADS2
2021 TRAN: Task Replication with Guarantee via Multi-armed Bandit
abstract
With the rapid development of edge computing, edge clusters need to deal with a tremendous amount of tasks, making some edge clusters overloaded, which further translates into task completion lag. Previous works usually copy the tasks from overloaded edges to idle edges so as to reduce the task queuing and computing delay. However, the completion delay of tasks copied to different edges cannot be predicted before the replication decision is made, which affects the overall task replication performance. In this paper, we propose an online task replication algorithm based on the predictions derived from multi-armed bandit. Via rigorous proof, the regret is ensured to be sub-linear upon the bandit, measuring the gap between the online decisions and the offline optimum. Extensive simulations are conducted to confirm the superiority of the proposed algorithm over state-of-the-art replication strategies.
Bowen Peng, Jingmian Wang, Weiwei Miao, Zeng Zeng, Yibo Jin 0001, Sheng Zhang 0001, Zhuzhong Qian
ICPADS2