Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Hossein Khalili

dblp:358/9658 · DBLP profile ↗
← Back
6ranked-venue papers
2as first author
6since 2021 · last 2026
—ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Computer networks · 4 · 2 first-author · 4 since 2021Security and privacy · 2 · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Security and privacy of machine learning · 47% Hardware security and side channels · 14% Network security · 14%
Computer networks
2 papers
Wireless sensing and localization · 43% Internet of things and sensor networks · 28% Edge and fog computing · 28%
Artificial intelligence
1 paper
Efficient and distributed learning · 100%

Topics — the 14 heaviest of 16, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Wireless sensing and localization
wireless sensing
1.012026
XR Devices Send WiFi Packets When They Should Not: Cross-Building Keylogging Attacks via Non-Cooperative Wireless Sensing · NDSS 2026
Hardware security and side channels
side-channel attack
1.012026
XR Devices Send WiFi Packets When They Should Not: Cross-Building Keylogging Attacks via Non-Cooperative Wireless Sensing · NDSS 2026
Network security › wireless network security
wireless side channel
1.012026
XR Devices Send WiFi Packets When They Should Not: Cross-Building Keylogging Attacks via Non-Cooperative Wireless Sensing · NDSS 2026
Security and privacy of machine learning › adversarial attack › evasion attack
deepfake detection evasion
0.912025
Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors · USENIX Security Symposium 2025
Digital forensics and information hiding › digital forensics › multimedia forensics
image forensics
0.912025
Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors · USENIX Security Symposium 2025
Security and privacy of machine learning
adversarial defense
0.812024
LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models · MobiCom 2024
Security and privacy of machine learning › adversarial defense
diffusion-based purification
0.812024
LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models · MobiCom 2024
Internet of things and sensor networks › AIoT
iot inference
0.712023
Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption · MobiCom 2023
Edge and fog computing
resource-constrained inference
0.712023
Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption · MobiCom 2023
Security and privacy of machine learning
privacy-preserving inference
0.712023
Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption · MobiCom 2023
Privacy and data protection
privacy-preserving machine learning
0.712023
Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption · MobiCom 2023
Security and privacy of machine learning
adversarial example
0.312025
Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors · USENIX Security Symposium 2025
Machine learning › Efficient and distributed learning
model compression
0.212024
LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models · MobiCom 2024
Machine learning › Efficient and distributed learning › model compression
quantization
0.212024
LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models · MobiCom 2024

Methods — techniques the papers use, named apart from their topics

non-cooperative wireless sensing · 3.0diffusion model · 1.5adversarial training · 1.5encryption · 1.3encoding · 1.3PPML · 1.3adversarial perturbation · 0.9
YearPublicationVenuePosition
2026 XR Devices Send WiFi Packets When They Should Not: Cross-Building Keylogging Attacks via Non-Cooperative Wireless Sensing
Christopher Vattheuer, Justin Feng, Hossein Khalili, Nader Sehatbakhsh, Omid Abari
NDSS3
2025 Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors
Alexander Vilesov, Jinghuai Zhang, Hossein Khalili, Achuta Kadambi, Nader Sehatbakhsh
USENIX Security Symposium4
2025 Compact Dual-Band Microstrip Array Feed Network Using CRLH-TL Power Dividers
abstract
ABSTRACT This paper introduces a novel, dual‐band, compact 1:4 feed network employing a parallel power divider architecture designed to operate at 0.915 and 2.44 GHz, covering both industrial, scientific, and medical and ultra high frequency bands. The design leverages the non‐linear phase characteristics of composite right/left‐handed transmission lines to achieve dual‐band functionality with high precision. Simulation results confirm the efficacy of the proposed network, which delivers quadrature‐phase outputs with a 90° phase shift and uniform power distribution across all output ports, facilitating wideband circular polarisation in array antenna applications. Compared to traditional series power dividers, the parallel power divider offers significant advantages in terms of fabrication simplicity, reduced size, and lower manufacturing costs. The design avoids the use of non‐radiating composite right/left‐handed transmission lines and addresses impedance‐matching challenges through the implementation of only three resistors, effectively isolating the output ports. The proposed architecture is highly scalable and can be easily adapted to various output port configurations, frequencies, and power division ratios, offering broad flexibility for a wide range of microwave applications.
Aslan Nouri Moqadam, Hadi Sharifi, Reza Masoumi, Hossein Khalili, Mohammad Bemani
IET Commun.4
2024 LightPure: Realtime Adversarial Image Purification for Mobile Devices Using Diffusion Models
abstract
Autonomous mobile systems increasingly rely on deep neural networks for perception and decision-making. While effective, these systems are vulnerable to adversarial machine learning attacks where small perturbations in the input could significantly impact the outcome of the system. Common countermeasures include leveraging adversarial training and/or data or network transformation. Although widely used, the main drawback of these countermeasures is that they require full and invasive access to the classifiers, which are typically proprietary. Additionally, the cost of training or retraining is often prohibitively expensive for large models. To tackle this, purification models have recently been proposed. The aim is to incorporate a "purification" layer before classification, thereby eliminating the necessity to modify the classifier. Despite their effectiveness, state-of-the-art purification methods are compute-intensive, rendering them unsuitable for mobile systems where resources are constrained and large latency is not desired.
Hossein Khalili, Vincent Li, Brandan Bright, Ali Payani, Ramana Rao Kompella, Nader Sehatbakhsh
MobiCom1
2024 Context-Aware Hybrid Encoding for Privacy-Preserving Computation in IoT Devices
abstract
Recent years have witnessed a surge in hybrid IoT-cloud applications where an end user distributes the desired computation between the IoT and cloud nodes. While achieving significant speed up, the major caveat of this approach is data privacy. Privacy-preserving methods have received major attention in the past few years, mainly because they can potentially solve this issue. Among several proposals, methods based on dynamic encoding and perturbation offer flexibility and low overhead. However, they often consider a weak adversary model or overlook practical limitations, such as encoding latency and complexity. This work proposes a new privacy-preserving method to address these issues. The key contributions of this article are twofold. First, unlike state-of-the-art, it proposes a new approach based on evolutionary algorithms to systematically evaluate the robustness of the encoding algorithm against a large population of potential adversaries. Second, it develops a dynamic obfuscation strategy that balances latency requirements in a realistic IoT-cloud hybrid ecosystem and privacy demands. Additionally, our method offers a unique benefit: it can be used alone for privacy protection, or it can be integrated with most existing methods to enhance privacy and reduce latency. The applicability and effectiveness of our proposed methods are thoroughly evaluated using two popular deep neural networks in a real-world IoT-cloud setting. We study the impact of our approach on important metrics, such as accuracy and privacy. Our results show that our proposed method can improve the overall privacy of a given IoT-cloud hybrid ecosystem by more than 10% on average.
Hossein Khalili, Hao-Jen Chien, Amin Hass, Nader Sehatbakhsh
IEEE Internet Things J.1
2023 Enc2: Privacy-Preserving Inference for Tiny IoTs via Encoding and Encryption
abstract
Privacy-preserving machine learning (PPML) techniques have allowed remote and private inference for resource-constrained internet-of-things (IoT) devices on the cloud. The main challenge in most of the existing PPML technologies is a severe slowdown in inference latency mainly due to the use of encryption during the computation. To combat this, an emerging method is to leverage encoding as an alternative. While this results in a significant speedup, it imposes the burden of encoding to the resource-constrained IoT/edge device. Despite being feasible for simple workloads where encoding is lightweight, devices with very limited computational capabilities face a tradeoff between latency and privacy when performing complex tasks.
Hao-Jen Chien, Hossein Khalili, Amin Hass, Nader Sehatbakhsh
MobiCom2