Demo Data from EDBT 2026 / reviewers in the wild / expert
Jialin Wen
dblp:267/9325
· DBLP profile ↗
2ranked-venue papers
2as first author
1since 2021 · last 2021
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 2 · 2 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning
poisoning attack |
0.5 | 1 | 2021 | With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression Models · IEEE Trans. Inf. Forensics Secur. 2021 |
Security and privacy of machine learning
poisoning attack defense |
0.5 | 1 | 2021 | With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression Models · IEEE Trans. Inf. Forensics Secur. 2021 |
Security and privacy of machine learning › federated learning defense
robust aggregation |
0.5 | 1 | 2021 | With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression Models · IEEE Trans. Inf. Forensics Secur. 2021 |
Methods — techniques the papers use, named apart from their topics
probability estimation · 0.5optimization · 0.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2021 | With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression ModelsabstractWith the rise of third parties in the machine learning pipeline, the service provider in “Machine Learning as a Service” (MLaaS), or external data contributors in online learning, or the retraining of existing models, the need to ensure the security of the resulting machine learning models has become an increasingly important topic. The security community has demonstrated that without transparency of the data and the resulting model, there exist many potential security risks, with new risks constantly being discovered. In this paper, we focus on one of these security risks - poisoning attacks. Specifically, we analyze how attackers may interfere with the results of regression learning by poisoning the training datasets. To this end, we analyze and develop a new poisoning attack algorithm. Our attack, termed Nopt, in contrast with previous poisoning attack algorithms, can produce larger errors with the same proportion of poisoning data-points. Furthermore, we also significantly improve the state-of-the-art defense algorithm, termed TRIM, proposed by Jagielsk et al. (IEEE S&P 2018), by incorporating the concept of probability estimation of clean data-points into the algorithm. Our new defense algorithm, termed Proda, demonstrates an increased effectiveness in reducing errors arising from the poisoning dataset through optimizing ensemble models. We highlight that the time complexity of TRIM had not been estimated; however, we deduce from their work that TRIM can take exponential time complexity in the worst-case scenario, in excess of Proda's logarithmic time. The performance of both our proposed attack and defense algorithms is extensively evaluated on four real-world datasets of housing prices, loans, health care, and bike sharing services. We hope that our work will inspire future research to develop more robust learning algorithms immune to poisoning attacks. Jialin Wen, Benjamin Zi Hao Zhao, Minhui Xue 0001, Alina Oprea, Haifeng Qian |
IEEE Trans. Inf. Forensics Secur. | 1 |
| 2020 | PALOR: Poisoning Attacks Against Logistic Regression
Jialin Wen, Benjamin Zi Hao Zhao, Minhui Xue 0001, Haifeng Qian |
ACISP | 1 |