VLDB 2026 Research / reviewers in the wild / expert
Daehwa Ko
dblp:396/7072
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 87% Reinforcement learning · 13% |
Topics — the 2 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness
adversarial attack |
0.8 | 1 | 2024 | Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection · NeurIPS 2024 |
Machine learning › Trustworthy machine learning › robustness › adversarial attack
query-efficient attack |
0.8 | 1 | 2024 | Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object Detection · NeurIPS 2024 |
Methods — techniques the papers use, named apart from their topics
reinforcement learning · 0.8pixel perturbation · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Amnesia as a Catalyst for Enhancing Black Box Pixel Attacks in Image Classification and Object DetectionabstractIt is well known that query-based attacks tend to have relatively higher success
rates in adversarial black-box attacks. While research on black-box attacks is actively
being conducted, relatively few studies have focused on pixel attacks that
target only a limited number of pixels. In image classification, query-based pixel
attacks often rely on patches, which heavily depend on randomness and neglect
the fact that scattered pixels are more suitable for adversarial attacks. Moreover, to
the best of our knowledge, query-based pixel attacks have not been explored in the
field of object detection. To address these issues, we propose a novel pixel-based
black-box attack called Remember and Forget Pixel Attack using Reinforcement
Learning(RFPAR), consisting of two main components: the Remember and Forget
processes. RFPAR mitigates randomness and avoids patch dependency by
leveraging rewards generated through a one-step RL algorithm to perturb pixels.
RFPAR effectively creates perturbed images that minimize the confidence scores
while adhering to limited pixel constraints. Furthermore, we advance our proposed
attack beyond image classification to object detection, where RFPAR reduces
the confidence scores of detected objects to avoid detection. Experiments
on the ImageNet-1K dataset for classification show that RFPAR outperformed
state-of-the-art query-based pixel attacks. For object detection, using the MSCOCO
dataset with YOLOv8 and DDQ, RFPAR demonstrates comparable mAP
reduction to state-of-the-art query-based attack while requiring fewer query. Further
experiments on the Argoverse dataset using YOLOv8 confirm that RFPAR
effectively removed objects on a larger scale dataset. Our code is available at
https://github.com/KAU-QuantumAILab/RFPAR. Dongsu Song, Daehwa Ko, Jay Hoon Jung |
NeurIPS | 2 |