Demo Data from VLDB 2026 / reviewers in the wild / expert
Wa-Kin Lei
dblp:417/5575
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Generative modeling · 100% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 77% Privacy and data protection · 23% |
Topics — the 3 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Generative modeling
diffusion model |
0.9 | 1 | 2025 | DRAG: Data Reconstruction Attack using Guided Diffusion · ICML 2025 |
Machine learning › Generative modeling › diffusion model
guided diffusion |
0.9 | 1 | 2025 | DRAG: Data Reconstruction Attack using Guided Diffusion · ICML 2025 |
Security and privacy of machine learning › privacy attack
data reconstruction attack |
0.9 | 1 | 2025 | DRAG: Data Reconstruction Attack using Guided Diffusion · ICML 2025 |
Methods — techniques the papers use, named apart from their topics
latent diffusion model · 1.7iterative reconstruction · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | DRAG: Data Reconstruction Attack using Guided DiffusionabstractWith the rise of large foundation models, split inference (SI) has emerged as a popular computational paradigm for deploying models across lightweight edge devices and cloud servers, addressing data privacy and computational cost concerns. However, most existing data reconstruction attacks have focused on smaller CNN classification models, leaving the privacy risks of foundation models in SI settings largely unexplored. To address this gap, we propose a novel data reconstruction attack based on guided diffusion, which leverages the rich prior knowledge embedded in a latent diffusion model (LDM) pre-trained on a large-scale dataset. Our method performs iterative reconstruction on the LDM’s learned image prior, effectively generating high-fidelity images resembling the original data from their intermediate representations (IR). Extensive experiments demonstrate that our approach significantly outperforms state-of-the-art methods, both qualitatively and quantitatively, in reconstructing data from deep-layer IRs of the vision foundation model. The results highlight the urgent need for more robust privacy protection mechanisms for large models in SI scenarios. Wa-Kin Lei, Jun-Cheng Chen, Shang-Tse Chen |
ICML | 1 |