Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data.

Shuaiwei Yuan

dblp:407/9049 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › adversarial attack
backdoor attack
0.912025
Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025
Security and privacy of machine learning › poisoning attack
clean-label poisoning
0.912025
Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025
Security and privacy of machine learning
poisoning attack
0.912025
Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025
Security and privacy of machine learning
trigger generation
0.312025
Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025

Methods — techniques the papers use, named apart from their topics

trigger generator · 0.9backdoor injection · 0.9
YearPublicationVenuePosition
2025 Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted
abstract
With the advancement of AI generative techniques, Deepfake faces have become incredibly realistic and nearly indistinguishable to the human eye. To counter this, Deep-fake detectors have been developed as reliable tools for assessing face authenticity. These detectors are typically developed on Deep Neural Networks (DNNs) and trained using third-party datasets. However, this protocol raises a new security risk that can seriously undermine the trustfulness of Deepfake detectors: Once the third-party data providers insert poisoned (corrupted) data maliciously, Deepfake detectors trained on these datasets will be injected "backdoors" that cause abnormal behavior when presented with samples containing specific triggers. This is a practical concern, as third-party providers may distribute or sell these triggers to malicious users, allowing them to manipulate detector performance and escape accountability.This paper investigates this risk in depth and describes a solution to stealthily infect Deepfake detectors. Specifically, we develop a trigger generator, that can synthesize passcode-controlled, semantic-suppression, adaptive, and invisible trigger patterns, ensuring both the stealthiness and effectiveness of these triggers. Then we discuss two poisoning scenarios, dirty-label poisoning and clean-label poisoning, to accomplish the injection of backdoors. Extensive experiments demonstrate the effectiveness, stealthiness, and practicality of our method compared to several baselines.
Shuaiwei Yuan, Junyu Dong, Yuezun Li
CVPR1