Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Jaechul Roh

dblp:333/0790 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
2since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021Security and privacy · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Security and privacy of machine learning · 96% Privacy and data protection · 4%

Topics — the 7 heaviest of 7, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › adversarial attack
backdoor attack
0.912025
Backdooring Bias (B^2) into Stable Diffusion Models · USENIX Security Symposium 2025
Security and privacy of machine learning › poisoning attack
bias injection
0.912025
Backdooring Bias (B^2) into Stable Diffusion Models · USENIX Security Symposium 2025
Security and privacy of machine learning
adversarial example
0.812024
OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024
Security and privacy of machine learning › membership inference
label-only membership inference
0.812024
OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024
Security and privacy of machine learning
membership inference
0.812024
OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024
Security and privacy of machine learning › adversarial attack › black-box attack
transfer-based black-box attacks
0.812024
OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024
Privacy and data protection › privacy-preserving machine learning
training data privacy
0.212024
OSLO: One-Shot Label-Only Membership Inference Attacks · NeurIPS 2024

Methods — techniques the papers use, named apart from their topics

transfer attack · 0.8adversarial perturbation · 0.8
YearPublicationVenuePosition
2025 Backdooring Bias (B^2) into Stable Diffusion Models
Ali Naseh, Jaechul Roh, Eugene Bagdasarian, Amir Houmansadr
USENIX Security Symposium2
2024 OSLO: One-Shot Label-Only Membership Inference Attacks
abstract
We introduce One-Shot Label-Only (OSLO) membership inference attacks (MIAs), which accurately infer a given sample's membership in a target model's training set with high precision using just a single query, where the target model only returns the predicted hard label. This is in contrast to state-of-the-art label-only attacks which require $\sim6000$ queries, yet get attack precisions lower than OSLO's. OSLO leverages transfer-based black-box adversarial attacks. The core idea is that a member sample exhibits more resistance to adversarial perturbations than a non-member. We compare OSLO against state-of-the-art label-only attacks and demonstrate that, despite requiring only one query, our method significantly outperforms previous attacks in terms of precision and true positive rate (TPR) under the same false positive rates (FPR). For example, compared to previous label-only MIAs, OSLO achieves a TPR that is at least 7$\times$ higher under a 1\% FPR and at least 22$\times$ higher under a 0.1\% FPR on CIFAR100 for a ResNet18 model. We evaluated multiple defense mechanisms against OSLO.
Yuefeng Peng, Jaechul Roh, Subhransu Maji, Amir Houmansadr
NeurIPS2