Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.

Nuoyan Zhou

dblp:358/6072 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Trustworthy machine learning · 67% Representation and self-supervised learning · 33%

Topics — the 3 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › robustness › adversarial robustness › adversarial training
adversarial fine-tuning
0.912025
Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement · AAAI 2025
Machine learning › Trustworthy machine learning › robustness
adversarial robustness
0.912025
Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement · AAAI 2025
Machine learning › Representation and self-supervised learning › representation learning › disentangled representation learning
feature disentanglement
0.912025
Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement · AAAI 2025

Methods — techniques the papers use, named apart from their topics

feature disentangler · 0.9feature alignment · 0.9adversarial training · 0.9
YearPublicationVenuePosition
2025 Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement
abstract
Adversarial fine-tuning methods enhance adversarial robustness via fine-tuning the pre-trained model in an adversarial training manner. However, we identify that some specific latent features of adversarial samples are confused by adversarial perturbation and lead to an unexpectedly increasing gap between features in the last hidden layer of natural and adversarial samples. To address this issue, we propose a disentanglement-based approach to explicitly model and further remove the specific latent features. We introduce a feature disentangler to separate out the specific latent features from the features of the adversarial samples, thereby boosting robustness by eliminating the specific latent features. Besides, we align clean features in the pre-trained model with features of adversarial samples in the fine-tuned model, to benefit from the intrinsic features of natural samples. Empirical evaluations on three benchmark datasets demonstrate that our approach surpasses existing adversarial fine-tuning methods and adversarial training baselines.
Nuoyan Zhou, Dawei Zhou 0004, Decheng Liu, Nannan Wang 0001, Xinbo Gao 0001
AAAI1