EDBT 2026 Demo / reviewers in the wild / expert
Moein Madadi
dblp:395/1013
· DBLP profile ↗
2ranked-venue papers
0as first author
2since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 2 · 2 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
2 papers |
Trustworthy machine learning · 54% Generative modeling · 46% | |
| Network and information security
2 papers |
Security and privacy of machine learning · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning › adversarial attack › backdoor attack › backdoor defense
backdoor detection |
1.6 | 2 | 2025 | DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion · ICCV 2025 Scanning Trojaned Models Using Out-of-Distribution Samples · NeurIPS 2024 |
Machine learning › Generative modeling
diffusion model |
0.9 | 1 | 2025 | DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion · ICCV 2025 |
Machine learning › Trustworthy machine learning › robustness
out-of-distribution detection |
0.8 | 1 | 2024 | Scanning Trojaned Models Using Out-of-Distribution Samples · NeurIPS 2024 |
Machine learning › Trustworthy machine learning › adversarial machine learning
trojan detection |
0.3 | 1 | 2025 | DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion · ICCV 2025 |
Methods — techniques the papers use, named apart from their topics
latent diffusion · 1.7data-free inversion · 1.7out-of-distribution sampling · 1.5adversarial perturbation · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion
Hossein Mirzaei, Zeinab Taghavi 0001, Sepehr Rezaee, Masoud Hadi, Moein Madadi, Mackenzie W. Mathis |
ICCV | 5 |
| 2024 | Scanning Trojaned Models Using Out-of-Distribution SamplesabstractScanning for trojan (backdoor) in deep neural networks is crucial due to their significant real-world applications. There has been an increasing focus on developing effective general trojan scanning methods across various trojan attacks. Despite advancements, there remains a shortage of methods that perform effectively without preconceived assumptions about the backdoor attack method. Additionally, we have observed that current methods struggle to identify classifiers trojaned using adversarial training. Motivated by these challenges, our study introduces a novel scanning method named TRODO (TROjan scanning by Detection of adversarial shifts in Out-of-distribution samples). TRODO leverages the concept of "blind spots"—regions where trojaned classifiers erroneously identify out-of-distribution (OOD) samples as in-distribution (ID). We scan for these blind spots by adversarially shifting OOD samples towards in-distribution. The increased likelihood of perturbed OOD samples being classified as ID serves as a signature for trojan detection. TRODO is both trojan and label mapping agnostic, effective even against adversarially trained trojaned classifiers. It is applicable even in scenarios where training data is absent, demonstrating high accuracy and adaptability across various scenarios and datasets, highlighting its potential as a robust trojan scanning strategy. Hossein Mirzaei, Ali Ansari 0001, Bahar Dibaei Nia, Mojtaba Nafez, Moein Madadi, Sepehr Rezaee, Zeinab Taghavi 0001, Arad Maleki, Kian Shamsaie, Mahdi Hajialilue, Jafar Habibi, Mohammad Sabokrou, Mohammad H. Rohban |
NeurIPS | 5 |