Demo Data from EDBT 2026 / reviewers in the wild / expert
Racchit Jain
dblp:287/7839
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2023
0009-0003-1009-2447ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Optimization for machine learning · 100% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 2 heaviest of 2, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Optimization for machine learning
stochastic gradient descent |
0.7 | 1 | 2023 | Unforgeability in Stochastic Gradient Descent · CCS 2023 |
Security and privacy of machine learning
machine learning security |
0.7 | 1 | 2023 | Unforgeability in Stochastic Gradient Descent · CCS 2023 |
Methods — techniques the papers use, named apart from their topics
algebraic precision analysis · 1.3
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2023 | Unforgeability in Stochastic Gradient DescentabstractStochastic Gradient Descent (SGD) is a popular training algorithm, a cornerstone of modern machine learning systems. Several security applications benefit from determining if SGD executions are forgeable, i.e., whether the model parameters seen at a given step are obtainable by more than one distinct set of data samples. In this paper, we present the first attempt at proving impossibility of such forgery. We furnish a set of conditions, which are efficiently checkable on concrete checkpoints seen during training runs, under which checkpoints are provably unforgeable at that step. Our experiments show that the conditions are somewhat mild and hence always satisfied at checkpoints sampled in our experiments. Our results sharply contrast prior findings at a high level: We show that checkpoints we find to be provably unforgeable have been deemed to be forgeable using the same methodology and experimental setup suggested in prior work. This discrepancy arises because of unspecified subtleties in definitions. We experimentally confirm that the distinction matters, i.e., small errors amplify during training to produce significantly observable difference in final models trained. We hope our results serve as a cautionary note on the role of algebraic precision in forgery definitions and related security arguments. Teodora Baluta, Ivica Nikolic, Racchit Jain, Divesh Aggarwal, Prateek Saxena |
CCS | 3 |