VLDB 2026 Research / reviewers in the wild / expert
Yibing Lan
dblp:314/6807
· DBLP profile ↗
2ranked-venue papers
0as first author
2since 2021 · last 2024
0000-0002-5172-9497ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Systems, architecture and hardware · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Generative modeling · 77% Trustworthy machine learning · 23% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 5 heaviest of 5, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Generative modeling › diffusion model
diffusion-based purification |
0.8 | 1 | 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models · AAAI 2024 |
Machine learning › Generative modeling
diffusion model |
0.8 | 1 | 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models · AAAI 2024 |
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.8 | 1 | 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models · AAAI 2024 |
Machine learning › Trustworthy machine learning › robustness
poisoning attack defense |
0.2 | 1 | 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models · AAAI 2024 |
Machine learning › Trustworthy machine learning
robustness |
0.2 | 1 | 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models · AAAI 2024 |
Methods — techniques the papers use, named apart from their topics
diffusion model · 1.5anomaly detection · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion ModelsabstractDataset sanitization is a widely adopted proactive defense against poisoning-based backdoor attacks, aimed at filtering out and removing poisoned samples from training datasets. However, existing methods have shown limited efficacy in countering the ever-evolving trigger functions, and often leading to considerable degradation of benign accuracy. In this paper, we propose DataElixir, a novel sanitization approach tailored to purify poisoned datasets. We leverage diffusion models to eliminate trigger features and restore benign features, thereby turning the poisoned samples into benign ones. Specifically, with multiple iterations of the forward and reverse process, we extract intermediary images and their predicted labels for each sample in the original dataset. Then, we identify anomalous samples in terms of the presence of label transition of the intermediary images, detect the target label by quantifying distribution discrepancy, select their purified images considering pixel and feature distance, and determine their ground-truth labels by training a benign model. Experiments conducted on 9 popular attacks demonstrates that DataElixir effectively mitigates various complex attacks while exerting minimal impact on benign accuracy, surpassing the performance of baseline defense methods. Jiachen Zhou 0001, Peizhuo Lv, Yibing Lan, Guozhu Meng, Kai Chen 0012, Hualong Ma |
AAAI | 3 |
| 2021 | Why is Your Trojan NOT Responding? A Quantitative Analysis of Failures in Backdoor Attacks of Neural Networks
Xingbo Hu, Yibing Lan, Ruimin Gao, Guozhu Meng, Kai Chen 0012 |
ICA3PP (3) | 2 |