VLDB 2026 Research / reviewers in the wild / expert
Zijun Zhang 0003
dblp:84/4245-3
· DBLP profile ↗
4ranked-venue papers
0as first author
4since 2021 · last 2026
0000-0002-0964-0034ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 3 since 2021Computer networks · 1 · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | N Truths and a Lie: Consistency-Based Backdoor Defense for Vertical Federated Learning
Zijun Zhang 0003, Kun He 0008, Jing Chen 0003, Ruiying Du |
IEEE Trans. Inf. Forensics Secur. | 2 |
| 2025 | Transferable and Robust Dynamic Adversarial Attack Against Object Detection ModelsabstractObject detection models have been widely deployed in physical world applications, and they are vulnerable to adversarial attacks. However, most adversarial attacks are implemented in a glass box setting, and under ideal shooting conditions, such as fixed distances and angles, and thus have limited attack success rate (ASR) in practice. In this article, we present a transferable and robust dynamic adversarial attack where the adversarial patches can be printed on or attached to nonrigid objects, such as clothes. We develop a cascade module with a momentum-based technique to optimize adversarial patches against various object detection models, achieving better transferability of the patches in a closed box setting. We also develop a strategy of distance-adaptive patch generation and employ perspective transformation to enhance the robustness of patches. To evaluate the attack performance, we conduct extensive experiments on seven mainstream object detection models at different distances and angles. The results show that our method can achieve an average ASR of 69.85%, which is 3.27 times that of the baseline method at 3 m. Jing Chen 0003, Zijun Zhang 0003, Kun He 0008, Zongru Wu, Ruiying Du, Gongshen Liu |
IEEE Internet Things J. | 3 |
| 2024 | Model-agnostic adversarial example detection via high-frequency amplification
Jing Chen 0003, Kun He 0008, Zijun Zhang 0003, Ruiying Du, Jisi She |
Comput. Secur. | 4 |
| 2024 | Corrigendum to "Model-agnostic Adversarial Example Detection via High-Frequency Amplification" [Computers & Security, Volume 141, June 2024, 103791]
Jing Chen 0003, Kun He 0008, Zijun Zhang 0003, Ruiying Du, Jisi She |
Comput. Secur. | 4 |