Sicong Han

dblp:301/9801 · DBLP profile ↗
← Back
3ranked-venue papers
2as first author
3since 2021 · last 2026
0000-0002-8459-4701ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 2 first-author · 2 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021
YearPublicationVenuePosition
2026 Quantitative Frequency-Based Framework for Interpreting Adversarial Examples
abstract
Deep neural networks are known to be susceptible to imperceptible adversarial perturbations. Many studies aim to interpret adversarial examples in the frequency domain. However, existing research often relies on a limited number of datasets, models, and adversarial attacks, leading to incomplete conclusions. Moreover, a quantitative interpretation of adversarial examples remains lacking. This paper proposes a quantitative frequency-based framework to comprehensively investigate adversarial examples, where six kinds of attacks against naturally and adversarially trained models across three datasets are adopted. Initially, our framework visualizes the distributions of successful adversarial perturbations in the frequency domain to locate their target regions. Subsequently, we characterize the importance of perturbations contained in different frequency bands and define adversarially effective frequency bands (AEFBs). Furthermore, we leverage the identified AEFBs to enhance two query-based black-box adversarial attacks. Our experimental results uncover the varying characteristics of adversarial perturbations, which are analyzed from dataset-level, model-level, and attack-level perspectives. After reordering frequency bands and identifying AEFBs, we further demonstrate that adversarial attacks guided by AEFBs can achieve superior performance, verifying their effectiveness and generalization. These significant findings contribute to a deeper understanding of adversarial examples and provide valuable insights for future research.
Sicong Han, Chenhao Lin, Chao Shen 0001, Zhengyu Zhao 0001, Qian Li 0024, Qian Wang 0002
IEEE Trans. Dependable Secur. Comput.1
2023 Sensitive region-aware black-box adversarial attacks
Chenhao Lin, Sicong Han, Jiongli Zhu, Qian Li 0024, Chao Shen 0001, Xiaohong Guan
Inf. Sci.2
2021 Rethinking Adversarial Examples Exploiting Frequency-Based Analysis
Sicong Han, Chenhao Lin, Chao Shen 0001, Qian Wang 0002
ICICS (2)1