EDBT 2026 Demo / reviewers in the wild / expert
Shuaiwei Yuan
dblp:407/9049
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning › adversarial attack
backdoor attack |
0.9 | 1 | 2025 | Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025 |
Security and privacy of machine learning › poisoning attack
clean-label poisoning |
0.9 | 1 | 2025 | Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025 |
Security and privacy of machine learning
poisoning attack |
0.9 | 1 | 2025 | Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025 |
Security and privacy of machine learning
trigger generation |
0.3 | 1 | 2025 | Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted · CVPR 2025 |
Methods — techniques the papers use, named apart from their topics
trigger generator · 0.9backdoor injection · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Where the Devil Hides: Deepfake Detectors Can No Longer Be TrustedabstractWith the advancement of AI generative techniques, Deepfake faces have become incredibly realistic and nearly indistinguishable to the human eye. To counter this, Deep-fake detectors have been developed as reliable tools for assessing face authenticity. These detectors are typically developed on Deep Neural Networks (DNNs) and trained using third-party datasets. However, this protocol raises a new security risk that can seriously undermine the trustfulness of Deepfake detectors: Once the third-party data providers insert poisoned (corrupted) data maliciously, Deepfake detectors trained on these datasets will be injected "backdoors" that cause abnormal behavior when presented with samples containing specific triggers. This is a practical concern, as third-party providers may distribute or sell these triggers to malicious users, allowing them to manipulate detector performance and escape accountability.This paper investigates this risk in depth and describes a solution to stealthily infect Deepfake detectors. Specifically, we develop a trigger generator, that can synthesize passcode-controlled, semantic-suppression, adaptive, and invisible trigger patterns, ensuring both the stealthiness and effectiveness of these triggers. Then we discuss two poisoning scenarios, dirty-label poisoning and clean-label poisoning, to accomplish the injection of backdoors. Extensive experiments demonstrate the effectiveness, stealthiness, and practicality of our method compared to several baselines. Shuaiwei Yuan, Junyu Dong, Yuezun Li |
CVPR | 1 |