Demo Data from EDBT 2026 / reviewers in the wild / expert
Sicong Han
dblp:301/9801
· DBLP profile ↗
3ranked-venue papers
2as first author
3since 2021 · last 2026
0000-0002-8459-4701ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 2 · 2 first-author · 2 since 2021Databases, data management, data science and information retrieval · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 91% Deep learning architectures and training · 9% |
Topics — the 3 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness
adversarial attack |
1.0 | 1 | 2026 | Quantitative Frequency-Based Framework for Interpreting Adversarial Examples · IEEE Trans. Dependable Secur. Comput. 2026 |
Machine learning › Trustworthy machine learning › interpretability › model behavior analysis
adversarial example interpretation |
1.0 | 1 | 2026 | Quantitative Frequency-Based Framework for Interpreting Adversarial Examples · IEEE Trans. Dependable Secur. Comput. 2026 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
1.0 | 1 | 2026 | Quantitative Frequency-Based Framework for Interpreting Adversarial Examples · IEEE Trans. Dependable Secur. Comput. 2026 |
Methods — techniques the papers use, named apart from their topics
quantitative framework · 1.0frequency-domain analysis · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Quantitative Frequency-Based Framework for Interpreting Adversarial ExamplesabstractDeep neural networks are known to be susceptible to imperceptible adversarial perturbations. Many studies aim to interpret adversarial examples in the frequency domain. However, existing research often relies on a limited number of datasets, models, and adversarial attacks, leading to incomplete conclusions. Moreover, a quantitative interpretation of adversarial examples remains lacking. This paper proposes a quantitative frequency-based framework to comprehensively investigate adversarial examples, where six kinds of attacks against naturally and adversarially trained models across three datasets are adopted. Initially, our framework visualizes the distributions of successful adversarial perturbations in the frequency domain to locate their target regions. Subsequently, we characterize the importance of perturbations contained in different frequency bands and define adversarially effective frequency bands (AEFBs). Furthermore, we leverage the identified AEFBs to enhance two query-based black-box adversarial attacks. Our experimental results uncover the varying characteristics of adversarial perturbations, which are analyzed from dataset-level, model-level, and attack-level perspectives. After reordering frequency bands and identifying AEFBs, we further demonstrate that adversarial attacks guided by AEFBs can achieve superior performance, verifying their effectiveness and generalization. These significant findings contribute to a deeper understanding of adversarial examples and provide valuable insights for future research. Sicong Han, Chenhao Lin, Chao Shen 0001, Zhengyu Zhao 0001, Qian Li 0024, Qian Wang 0002 |
IEEE Trans. Dependable Secur. Comput. | 1 |
| 2023 | Sensitive region-aware black-box adversarial attacks
Chenhao Lin, Sicong Han, Jiongli Zhu, Qian Li 0024, Chao Shen 0001, Xiaohong Guan |
Inf. Sci. | 2 |
| 2021 | Rethinking Adversarial Examples Exploiting Frequency-Based Analysis
Sicong Han, Chenhao Lin, Chao Shen 0001, Qian Wang 0002 |
ICICS (2) | 1 |