Demo Data from EDBT 2026 / reviewers in the wild / expert
Jaechul Roh
dblp:333/0790
· DBLP profile ↗
2ranked-venue papers
0as first author
2since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
2 papers |
Security and privacy of machine learning · 96% Privacy and data protection · 4% |
Topics — the 7 heaviest of 7, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.9 | 1 | 2025 | Backdooring Bias (B^2) into Stable Diffusion Models · USENIX Security Symposium 2025 |
Security and privacy of machine learning › poisoning attack
bias injection |
0.9 | 1 | 2025 | Backdooring Bias (B^2) into Stable Diffusion Models · USENIX Security Symposium 2025 |
Security and privacy of machine learning
adversarial example |
0.8 | 1 | 2024 | OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024 |
Security and privacy of machine learning › membership inference
label-only membership inference |
0.8 | 1 | 2024 | OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024 |
Security and privacy of machine learning
membership inference |
0.8 | 1 | 2024 | OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024 |
Security and privacy of machine learning › adversarial attack › black-box attack
transfer-based black-box attacks |
0.8 | 1 | 2024 | OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024 |
Privacy and data protection › privacy-preserving machine learning
training data privacy |
0.2 | 1 | 2024 | OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024 |
Methods — techniques the papers use, named apart from their topics
transfer attack · 0.8adversarial perturbation · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Backdooring Bias (B^2) into Stable Diffusion Models
Ali Naseh, Jaechul Roh, Eugene Bagdasarian, Amir Houmansadr |
USENIX Security Symposium | 2 |
| 2024 | OSLO: One-Shot Label-Only Membership Inference AttacksabstractWe introduce One-Shot Label-Only (OSLO) membership inference attacks (MIAs), which accurately infer a given sample's membership in a target model's training set with high precision using just a single query, where the target model only returns the predicted hard label.
This is in contrast to state-of-the-art label-only attacks which require $\sim6000$ queries, yet get attack precisions lower than OSLO's.
OSLO leverages transfer-based black-box adversarial attacks. The core idea is that a member sample exhibits more resistance to adversarial perturbations than a non-member. We compare OSLO against state-of-the-art label-only attacks and demonstrate that, despite requiring only one query, our method significantly outperforms previous attacks in terms of precision and true positive rate (TPR) under the same false positive rates (FPR). For example, compared to previous label-only MIAs, OSLO achieves a TPR that is at least 7$\times$ higher under a 1\% FPR and at least 22$\times$ higher under a 0.1\% FPR on CIFAR100 for a ResNet18 model. We evaluated multiple defense mechanisms against OSLO. Yuefeng Peng, Jaechul Roh, Subhransu Maji, Amir Houmansadr |
NeurIPS | 2 |