Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Changyue Li

dblp:338/0957 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
2since 2021 · last 2024
0009-0002-0921-7014ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Security and privacy of machine learning · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning
adversarial attack
1.522024
Decision-Based Query Efficient Adversarial Attack via Adaptive Boundary Learning · IEEE Trans. Dependable Secur. Comput. 2024
Transferability of White-box Perturbations: Query-Efficient Adversarial Attacks against Commercial DNN Services · USENIX Security Symposium 2024
Security and privacy of machine learning › adversarial attack › black-box attack
decision-based black-box attack
0.812024
Decision-Based Query Efficient Adversarial Attack via Adaptive Boundary Learning · IEEE Trans. Dependable Secur. Comput. 2024
Security and privacy of machine learning › adversarial attack
query-efficient attack
0.812024
Decision-Based Query Efficient Adversarial Attack via Adaptive Boundary Learning · IEEE Trans. Dependable Secur. Comput. 2024
Security and privacy of machine learning › adversarial attack › query-efficient attack
query-efficient black-box attack
0.812024
Transferability of White-box Perturbations: Query-Efficient Adversarial Attacks against Commercial DNN Services · USENIX Security Symposium 2024
Security and privacy of machine learning › adversarial attack › transferable adversarial attack
transferable adversarial perturbation
0.812024
Transferability of White-box Perturbations: Query-Efficient Adversarial Attacks against Commercial DNN Services · USENIX Security Symposium 2024

Methods — techniques the papers use, named apart from their topics

white-box perturbation · 0.8meta-learning · 0.8boundary learner · 0.8adaptive boundary learning · 0.8
YearPublicationVenuePosition
2024 Transferability of White-box Perturbations: Query-Efficient Adversarial Attacks against Commercial DNN Services
Meng Shen 0001, Changyue Li, Qi Li 0002, Liehuang Zhu, Ke Xu 0002
USENIX Security Symposium2
2024 Decision-Based Query Efficient Adversarial Attack via Adaptive Boundary Learning
abstract
Decision-based adversarial attacks pose a severe threat to real-world applications of Deep Neural Networks (DNNs), as attackers are assumed to have no prior knowledge about target model except hard labels of model outputs. Existing decision-based attacks require a large number of queries on the target model for a successful attack. In this paper, we propose DEAL, a decision-based query efficient adversarial attack based on adaptive boundary learning. DEAL relies on a local model named boundary learner, which is initialized through meta-learning mechanism to obtain the ability to adapt the decision boundaries to a new model. We conduct extensive experiments to evaluate the effectiveness of DEAL, which demonstrates that it outperforms 8 state-of-the-art attacks. Specifically for the evaluation on CIFAR-10 dataset, DEAL can achieve similar attack success rates with a maximum reduction in average number of queries of 51% in untargeted attacks and 14% in targeted attacks, respectively.
Meng Shen 0001, Changyue Li, Hao Yu 0017, Qi Li 0002, Liehuang Zhu, Ke Xu 0002
IEEE Trans. Dependable Secur. Comput.2