Demo Data from EDBT 2026 / reviewers in the wild / expert
Kangheng Tong
dblp:309/5718
· DBLP profile ↗
2ranked-venue papers
0as first author
2since 2021 · last 2023
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 2 · 2 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
2 papers |
Trustworthy machine learning · 100% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 6 heaviest of 6, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness
adversarial attack |
0.7 | 1 | 2023 | Rethinking the Backward Propagation for Adversarial Transferability · NeurIPS 2023 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
0.7 | 1 | 2023 | Rethinking the Backward Propagation for Adversarial Transferability · NeurIPS 2023 |
Machine learning › Trustworthy machine learning › robustness › adversarial robustness
adversarial transferability |
0.7 | 1 | 2023 | Rethinking the Backward Propagation for Adversarial Transferability · NeurIPS 2023 |
Machine learning › Trustworthy machine learning › robustness › adversarial attack
transfer attack |
0.7 | 1 | 2023 | Rethinking the Backward Propagation for Adversarial Transferability · NeurIPS 2023 |
Machine learning › Trustworthy machine learning › robustness › adversarial attack
hard-label black-box attack |
0.6 | 1 | 2022 | Triangle Attack: A Query-Efficient Decision-Based Adversarial Attack · ECCV (5) 2022 |
Security and privacy of machine learning
adversarial attack |
0.6 | 1 | 2022 | Triangle Attack: A Query-Efficient Decision-Based Adversarial Attack · ECCV (5) 2022 |
Methods — techniques the papers use, named apart from their topics
temperature-scaled softmax · 0.7non-monotonic activation derivative · 0.7backward propagation · 0.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2023 | Rethinking the Backward Propagation for Adversarial TransferabilityabstractTransfer-based attacks generate adversarial examples on the surrogate model, which can mislead other black-box models without access, making it promising to attack real-world applications. Recently, several works have been proposed to boost adversarial transferability, in which the surrogate model is usually overlooked. In this work, we identify that non-linear layers (e.g., ReLU, max-pooling, etc.) truncate the gradient during backward propagation, making the gradient w.r.t. input image imprecise to the loss function. We hypothesize and empirically validate that such truncation undermines the transferability of adversarial examples. Based on these findings, we propose a novel method called Backward Propagation Attack (BPA) to increase the relevance between the gradient w.r.t. input image and loss function so as to generate adversarial examples with higher transferability. Specifically, BPA adopts a non-monotonic function as the derivative of ReLU and incorporates softmax with temperature to smooth the derivative of max-pooling, thereby mitigating the information loss during the backward propagation of gradients. Empirical results on the ImageNet dataset demonstrate that not only does our method substantially boost the adversarial transferability, but it is also general to existing transfer-based attacks. Code is available at https://github.com/Trustworthy-AI-Group/RPA. Xiaosen Wang, Kangheng Tong, Kun He 0001 |
NeurIPS | 2 |
| 2022 | Triangle Attack: A Query-Efficient Decision-Based Adversarial Attack
Xiaosen Wang, Zeliang Zhang 0001, Kangheng Tong, Dihong Gong, Kun He 0001, Zhifeng Li 0001, Wei Liu 0005 |
ECCV (5) | 3 |