Demo Data from VLDB 2026 / reviewers in the wild / expert
Peihai Jiang
dblp:397/2959
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% | |
| Artificial intelligence
1 paper |
Language models and text generation · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Natural language and speech › Language models and text generation › large language model › large language model adaptation
pre-trained language model fine-tuning |
0.9 | 1 | 2025 | Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Models · AAAI 2025 |
Security and privacy of machine learning › adversarial attack › backdoor attack
backdoor defense |
0.9 | 1 | 2025 | Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Models · AAAI 2025 |
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.3 | 1 | 2025 | Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Models · AAAI 2025 |
Methods — techniques the papers use, named apart from their topics
token unlearning · 1.7embedding parameter analysis · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language ModelsabstractSupervised fine-tuning has become the predominant method for adapting large pretrained models to downstream tasks. However, recent studies have revealed that these models are vulnerable to backdoor attacks, where even a small number of malicious samples can successfully embed backdoor triggers into the model. While most existing defense methods focus on post-training backdoor defense, efficiently defending against backdoor attacks during training phase remains largely unexplored. To address this gap, we propose a novel defense method called Backdoor Token Unlearning (BTU), which proactively detects and neutralizes trigger tokens during the training stage. Our work is based on two key findings: 1) backdoor learning causes distinctive differences between backdoor token parameters and clean token parameters in word embedding layers, and 2) the success of backdoor attacks heavily depends on backdoor token parameters. The BTU defense leverages these properties to identify aberrant embedding parameters and subsequently removes backdoor behaviors using a fine-grained unlearning technique. Extensive evaluations across three datasets and four types of backdoor attacks demonstrate that BTU effectively defends against these threats while preserving the model’s performance on primary tasks. Peihai Jiang, Xixiang Lyu, Yige Li |
AAAI | 1 |