Demo Data from EDBT 2026 / reviewers in the wild / expert
Haitao Su
dblp:03/8546
· DBLP profile ↗
3ranked-venue papers
2as first author
2since 2021 · last 2025
—ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 first-author · 1 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 first-author
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 67% Privacy and data protection · 33% | |
| Computer architecture, parallel and distributed computing, and storage systems
1 paper |
Cloud and datacenter computing · 77% Memory systems · 23% | |
| Artificial intelligence
1 paper |
Language models and text generation · 100% |
Topics — the 6 heaviest of 6, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning › model privacy
language model privacy |
0.9 | 1 | 2025 | Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025 |
Security and privacy of machine learning
membership inference |
0.9 | 1 | 2025 | Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025 |
Privacy and data protection
privacy risk assessment |
0.9 | 1 | 2025 | Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025 |
Cloud and datacenter computing
virtualization |
0.8 | 1 | 2024 | vSoC: Efficient Virtual System-on-Chip on Heterogeneous Hardware · SOSP 2024 |
Natural language and speech › Language models and text generation
in-context learning |
0.3 | 1 | 2025 | Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context Learning · IEEE Trans. Inf. Forensics Secur. 2025 |
Memory systems › virtual memory management
shared virtual memory |
0.2 | 1 | 2024 | vSoC: Efficient Virtual System-on-Chip on Heterogeneous Hardware · SOSP 2024 |
Methods — techniques the papers use, named apart from their topics
text obfuscation · 1.7black-box attack · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Falcon: A Universal Text-Only Membership Inference Attack Framework Against In-Context LearningabstractMembership inference attacks (MIAs) against in-context learning (ICL) serve as essential tools for privacy risk assessment and intellectual property safeguarding due to the use of small, private datasets for adaptation. However, most MIAs against language models require unrealistic, internal access or risk triggering built-in security mechanisms. In this paper, we propose Falcon (Flexible Attack on Language Context via ObfuscatioN), the first task-aware MIA framework against text-only model APIs. Falcon fully exploits the complexity of text obfuscation techniques and leverages the model’s discrepancies in reconstructing obfuscated texts from seen versus unseen data as a strong membership signal, successfully bypassing application constraints and LLM safeguarding mechanisms. Through extensive experiments on six widely used LLMs, including four open-source models (Llama-2, Llama-3, Qwen-2.5, Ministral) and two commercial models (GPT-3.5, and GPT-4o-mini), five datasets from various domains for tasks including question answering, text classification and summarization, Falcon generally achieves over 95% attack success rates, significantly outperforming existing methods. An in-depth analysis of the impact of model scale shows that Falcon exploits a capacity-induced vulnerability, indicating that models with higher capabilities are more susceptible to our attack. Additionally, we explore three defense methods, highlighting role validation as a potential mechanism for safeguarding LLM privacy. We have open-sourced Falcon’s modular, extensible codebase to support future research. Haitao Su, Zhenhua Li 0001, Yuan Zhou 0007 |
IEEE Trans. Inf. Forensics Secur. | 1 |
| 2024 | vSoC: Efficient Virtual System-on-Chip on Heterogeneous HardwareabstractEmerging mobile apps such as UHD video and AR/VR access diverse high-throughput hardware devices, e.g., video codecs, cameras, and image processors. However, today's mobile emulators exhibit poor performance when emulating these devices. We pinpoint the major reason to be the discrepancy between the guest's and host's memory architectures for hardware devices, i.e., the mobile guest's centralized memory on a system-on-chip (SoC) versus the PC/server's separated memory modules on individual hardware. Such a discrepancy makes the shared virtual memory (SVM) architecture of mobile emulators highly inefficient. Jiaxing Qiu, Yang Li 0092, Zhenhua Li 0001, Feng Qian 0001, Hao Lin 0005, Haitao Su, Yunhao Liu 0001, Tianyin Xu |
SOSP | 8 |
| 2010 | Research on Production-Oriented Virtual Enterprise Quality Information ManagementabstractProduction-oriented virtual enterprise is a more important form in the virtual enterprise, quality information management plays an irreplaceable role in production-oriented virtual enterprise. According to life-cycle theory of the virtual enterprise and the condition of information technology, combing with quality assurance model and started with customer relations, quality information management system of production-oriented virtual enterprise was built. It is conducive to identify, acquire and deal with quality information, in order to provide quality information management guarantee for production-oriented virtual enterprise. Haitao Su, Junxia Ma |
ICSS | 1 |