Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Xiaolin Li 0015

dblp:56/10261-15 · DBLP profile ↗
← Back
2ranked-venue papers
2as first author
2since 2021 · last 2025
0009-0003-5205-9610ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Security and privacy · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Privacy and data protection · 44% Security and privacy of machine learning · 44% Usable security · 13%

Topics — the 3 heaviest of 3, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Privacy and data protection › differential privacy
local differential privacy
0.912025
Mitigating Data Poisoning Attacks to Local Differential Privacy · CCS 2025
Security and privacy of machine learning
poisoning attack defense
0.912025
Mitigating Data Poisoning Attacks to Local Differential Privacy · CCS 2025
Usable security › security operations › security analytics › malicious activity detection
malicious user detection
0.312025
Mitigating Data Poisoning Attacks to Local Differential Privacy · CCS 2025

Methods — techniques the papers use, named apart from their topics

post-processing for corrupted data recovery · 0.9malicious user detection · 0.9attack pattern recognition · 0.9
YearPublicationVenuePosition
2025 Mitigating Data Poisoning Attacks to Local Differential Privacy
abstract
The distributed nature of local differential privacy (LDP) invites data poisoning attacks and poses unforeseen threats to the underlying LDP-supported applications. In this paper, we propose a comprehensive mitigation framework for popular frequency estimation, which contains a suite of novel defenses, including malicious user detection, attack pattern recognition, and damaged utility recovery. In addition to existing attacks, we explore new adaptive adversarial activities for our mitigation design. For detection, we present a new method to precisely identify bogus reports, and thus LDP aggregation can be performed over the ''clean'' data. When the attack behavior becomes stealthy and direct filtering out malicious users is difficult, we further propose a detection that can effectively recognize hidden adversarial patterns, thus facilitating the decision-making of service providers. These detection methods require no additional data or attack information and incur minimal computational cost. Our experiment demonstrates their excellent performance and substantial improvement over previous work in various settings. In addition, we conduct an empirical analysis of LDP post-processing for corrupted data recovery and propose a new post-processing method, through which we reveal new insights into protocol recommendations in practice and key design principles for future research.
Xiaolin Li 0015, Ninghui Li 0001, Boyang Wang 0001, Wenhai Sun
CCS1
2023 Differential privacy preservation for graph auto-encoders: A novel anonymous graph publishing model
Xiaolin Li 0015, Li Xu 0002, Qikui Xu
Neurocomputing1