Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Linna Jing

dblp:420/2430 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 100%
Artificial intelligence
1 paper
Generative modeling · 50% Vision and language · 50%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › adversarial example
3d adversarial example
0.912025
Exploring Semantic-constrained Adversarial Example with Instruction Uncertainty Reduction · NeurIPS 2025
Security and privacy of machine learning
adversarial example
0.912025
Exploring Semantic-constrained Adversarial Example with Instruction Uncertainty Reduction · NeurIPS 2025
Machine learning › Generative modeling
diffusion model
0.312025
Exploring Semantic-constrained Adversarial Example with Instruction Uncertainty Reduction · NeurIPS 2025
Computer vision › Vision and language › 3d vision and language
language-guided 3d generation
0.312025
Exploring Semantic-constrained Adversarial Example with Instruction Uncertainty Reduction · NeurIPS 2025

Methods — techniques the papers use, named apart from their topics

residual-driven attacking direction stabilization · 1.7instruction uncertainty reduction · 1.7diffusion model · 1.7context-encoded attacking scenario constraint · 1.7
YearPublicationVenuePosition
2025 Exploring Semantic-constrained Adversarial Example with Instruction Uncertainty Reduction
abstract
Recently, semantically constrained adversarial examples (SemanticAE), which are directly generated from natural language instructions, have become a promising avenue for future research due to their flexible attacking forms, but have not been thoroughly explored yet. To generate SemanticAEs, current methods fall short of satisfactory attacking ability as the key underlying factors of semantic uncertainty in human instructions, such as $\textit{referring diversity}$, $\textit{descriptive incompleteness}$, and $\textit{boundary ambiguity}$, have not been fully investigated. To tackle the issues, this paper develops a multi-dimensional $\textbf{ins}$truction $\textbf{u}$ncertainty $\textbf{r}$eduction ($\textbf{InSUR}$) framework to generate more satisfactory SemanticAE, $\textit{i.e.}$, transferable, adaptive, and effective. Specifically, in the dimension of the sampling method, we propose the residual-driven attacking direction stabilization to alleviate the unstable adversarial optimization caused by the diversity of language references. By coarsely predicting the language-guided sampling process, the optimization process will be stabilized by the designed ResAdv-DDIM sampler‌, therefore releasing the transferable and robust adversarial capability of multi-step diffusion models. In task modeling, we propose the context-encoded attacking scenario constraint to supplement the missing knowledge from incomplete human instructions. Guidance masking and renderer integration are proposed to regulate the constraints of 2D/3D SemanticAE, activating stronger scenario-adapted attacks. Moreover, in the dimension of generator evaluation, we propose the semantic-abstracted attacking evaluation enhancement by clarifying the evaluation boundary based on the label taxonomy, facilitating the development of more effective SemanticAE generators. Extensive experiments demonstrate the superiority of the transfer attack performance of InSUR. Besides, it is worth highlighting that we realize the reference-free generation of semantically constrained 3D adversarial examples by utilizing language-guided 3D generation models for the first time.
Jiakai Wang, Linna Jing, Haotong Qin, Aishan Liu, Ke Xu 0001, Xianglong Liu 0001
NeurIPS3