Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Liuyi Yao

dblp:219/1767 · DBLP profile ↗
← Back
32ranked-venue papers
10as first author
22since 2021 · last 2026
0000-0003-3828-796XORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 20 · 4 first-author · 13 since 2021Databases, data management, data science and information retrieval · 18 · 8 first-author · 13 since 2021Graphics, computer vision, multimedia, augmented reality and games · 5 · 1 first-author · 2 since 2021Applied, interdisciplinary, general and emerging computing · 2 · 1 first-author · 1 since 2021Security and privacy · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
24 papers
Efficient and distributed learning · 41% Trustworthy machine learning · 19% Language models and text generation · 17%
Network and information security
6 papers
Security and privacy of machine learning · 79% Privacy and data protection · 21%
Databases, data mining, and information retrieval
2 papers
Data mining · 54% Recommender systems · 46%

Topics — the 30 heaviest of 63, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Efficient and distributed learning
federated learning
5.782025
A Bargaining-Based Approach for Feature Trading in Vertical Federated Learning · ICDE 2025
Performance-Based Pricing of Federated Learning via Auction · Proc. VLDB Endow. 2024
Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resources · NeurIPS 2024
Security and privacy of machine learning
large language model security
1.722025
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs · USENIX Security Symposium 2025
Safety Layers in Aligned Large Language Models: The Key to LLM Security · ICLR 2025
Machine learning › Trustworthy machine learning
interpretability
1.732023
Concept-Level Model Interpretation From the Causal Aspect · IEEE Trans. Knowl. Data Eng. 2023
Towards Automating Model Explanations with Certified Robustness Guarantees · AAAI 2022
Malicious Attacks against Deep Reinforcement Learning Interpretations · KDD 2020
Natural language and speech › Language models and text generation
large language model fine-tuning
1.622025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resources · NeurIPS 2024
Machine learning › Efficient and distributed learning › federated learning
personalized federated learning
1.322023
Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks · KDD 2023
Efficient Personalized Federated Learning via Sparse Model-Adaptation · ICML 2023
Machine learning › Trustworthy machine learning › interpretability
concept-based explanation
1.222023
Concept-Level Model Interpretation From the Causal Aspect · IEEE Trans. Knowl. Data Eng. 2023
Towards Automating Model Explanations with Certified Robustness Guarantees · AAAI 2022
Machine learning › Probabilistic and Bayesian machine learning
causal inference
1.132020
Causal Inference Meets Machine Learning · KDD 2020
ACE: Adaptively Similarity-Preserved Representation Learning for Individual Treatment Effect Estimation · ICDM 2019
Representation Learning for Treatment Effect Estimation from Observational Data · NeurIPS 2018
Natural language and speech › Language models and text generation › LLM agents
agent memory
1.012026
Agentic Memory: Learning Unified Long-Term and Short-Term Memory Management for Large Language Model Agents · ACL (1) 2026
Natural language and speech › Language models and text generation
alignment
0.912025
Safety Layers in Aligned Large Language Models: The Key to LLM Security · ICLR 2025
Machine learning › Representation and self-supervised learning › pre-training
data mixture optimization
0.912025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Machine learning › Efficient and distributed learning
data selection
0.912025
Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data · NeurIPS 2025
Natural language and speech › Language models and text generation
large language model safety
0.912025
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs · USENIX Security Symposium 2025
Computer vision › Vision and language › vision-language model
multimodal large language model
0.912025
The Synergy Between Data and Multi-Modal Large Language Models: A Survey From Co-Development Perspective · IEEE Trans. Pattern Anal. Mach. Intell. 2025
Machine learning › Efficient and distributed learning › federated learning › federated learning architecture
vertical federated learning
0.912025
A Bargaining-Based Approach for Feature Trading in Vertical Federated Learning · ICDE 2025
Security and privacy of machine learning › poisoning attack
fine-tuning attack
0.912025
Safety Layers in Aligned Large Language Models: The Key to LLM Security · ICLR 2025
Security and privacy of machine learning › adversarial attack
jailbreak attack
0.912025
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs · USENIX Security Symposium 2025
Machine learning › Efficient and distributed learning › federated learning
federated graph learning
0.822024
FederatedScope-GNN: Towards a Unified, Comprehensive and Efficient Package for Federated Graph Learning · KDD 2022
Is Sharing Neighbor Generator in Federated Graph Learning Safe? · IEEE Trans. Knowl. Data Eng. 2024
Machine learning › Probabilistic and Bayesian machine learning › causal inference › causal effect estimation
treatment effect estimation
0.822020
Causal Inference Meets Machine Learning · KDD 2020
Representation Learning for Treatment Effect Estimation from Observational Data · NeurIPS 2018
Machine learning › Optimization for machine learning
convergence analysis
0.812024
On the Convergence of Zeroth-Order Federated Tuning for Large Language Models · KDD 2024
Machine learning › Efficient and distributed learning › federated learning
federated fine-tuning
0.812024
On the Convergence of Zeroth-Order Federated Tuning for Large Language Models · KDD 2024
Machine learning › Efficient and distributed learning › federated learning
incentive mechanism
0.812024
Performance-Based Pricing of Federated Learning via Auction · Proc. VLDB Endow. 2024
Machine learning › Optimization for machine learning › black-box optimization
zeroth-order optimization
0.812024
On the Convergence of Zeroth-Order Federated Tuning for Large Language Models · KDD 2024
Security and privacy of machine learning › privacy attack
data reconstruction attack
0.812024
Is Sharing Neighbor Generator in Federated Graph Learning Safe? · IEEE Trans. Knowl. Data Eng. 2024
Privacy and data protection › privacy-preserving machine learning
federated learning privacy
0.812024
Is Sharing Neighbor Generator in Federated Graph Learning Safe? · IEEE Trans. Knowl. Data Eng. 2024
Privacy and data protection › privacy-preserving data processing
graph data privacy
0.812024
Is Sharing Neighbor Generator in Federated Graph Learning Safe? · IEEE Trans. Knowl. Data Eng. 2024
Algorithmic game theory and mechanism design › mechanism design
auction design
0.812024
Performance-Based Pricing of Federated Learning via Auction · Proc. VLDB Endow. 2024
Machine learning › Probabilistic and Bayesian machine learning › causal inference › causal effect estimation › treatment effect estimation
individual treatment effect estimation
0.722019
ACE: Adaptively Similarity-Preserved Representation Learning for Individual Treatment Effect Estimation · ICDM 2019
Representation Learning for Treatment Effect Estimation from Observational Data · NeurIPS 2018
Machine learning › Trustworthy machine learning › robustness
backdoor defense
0.712023
Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks · KDD 2023
Machine learning › Trustworthy machine learning › interpretability
causal explanation
0.712023
Concept-Level Model Interpretation From the Causal Aspect · IEEE Trans. Knowl. Data Eng. 2023
Machine learning › Trustworthy machine learning
fairness
0.712023
Path-specific Causal Fair Prediction via Auxiliary Graph Structure Learning · WWW 2023

Methods — techniques the papers use, named apart from their topics

reinforcement learning · 1.9performance gain estimation · 1.7partial-parameter fine-tuning · 1.7gradient masking · 1.7bargaining model · 1.7tool-based memory actions · 1.0GRPO · 1.0reward modeling · 0.9representation learning · 0.8mechanism design · 0.8link prediction · 0.8gradient matching · 0.8federated averaging · 0.8auction theory · 0.8prototype-based explanation · 0.6model auto-tuning · 0.6imputed treatment effects · 0.6doubly robust estimator · 0.6
YearPublicationVenuePosition
2026 Agentic Memory: Learning Unified Long-Term and Short-Term Memory Management for Large Language Model Agents
abstract
Large language model (LLM) agents face fundamental limitations in long-horizon reasoning due to finite context windows, making effective memory management critical.Existing methods typically handle long-term memory (LTM) and short-term memory (STM) as separate components, relying on heuristics or auxiliary controllers, which limits adaptability and end-to-end optimization.In this paper, we propose Agentic Memory (AgeMem), a unified framework that integrates LTM and STM management directly into the agent's policy.AgeMem exposes memory operations as tool-based actions, enabling the LLM agent to autonomously decide what and when to store, retrieve, update, summarize, or discard information.To train such unified behaviors, we propose a three-stage progressive reinforcement learning strategy and design a step-wise GRPO to address sparse and discontinuous rewards induced by memory operations.Experiments on five long-horizon benchmarks demonstrate that AgeMem consistently outperforms strong memory-augmented baselines across multiple LLM backbones, achieving improved task performance, higher-quality long-term memory, and more efficient context usage.
Liuyi Yao, Yuexiang Xie, Qingquan Tan, Yaliang Li
ACL (1)2
2025 A Bargaining-Based Approach for Feature Trading in Vertical Federated Learning
abstract
Vertical Federated Learning (VFL) has emerged as a popular machine learning paradigm, enabling model training between the data and the task parties with different features about the same user set while preserving data privacy. In a production environment, VFL usually involves one task party and one data party. Fair and economically efficient feature trading is crucial to the commercialization of VFL, where the task party is considered the data consumer who buys the data party's features. However, current VFL feature trading practices often price the data party's data as a whole and assume transactions occur before performing VFL. Neglecting the performance gains resulting from traded features may lead to underpayment and overpayment issues. In this study, we propose a bargaining-based feature trading approach in VFL to facilitate economically efficient transactions. Our model incorporates performance gain-based pricing, taking into account the revenue-based optimization objectives of both parties. We analyze the proposed bargaining model under perfect and imperfect performance information settings, proving the existence of an equilibrium that optimizes the parties' objectives. Moreover, we develop performance gain estimation-based bargaining strategies for imperfect performance information scenarios and discuss potential security concerns and solutions. Experiments on three real-world datasets demonstrate the effectiveness of the proposed bargaining model.
Yue Cui 0001, Liuyi Yao, Zitao Li, Yaliang Li, Keqin Zhong, Bingyi Liu, Bolin Ding, Xiaofang Zhou 0001
ICDE2
2025 Safety Layers in Aligned Large Language Models: The Key to LLM Security
abstract
Aligned LLMs are secure, capable of recognizing and refusing to answer malicious questions. However, the role of internal parameters in maintaining such security is not well understood yet, further these models can be vulnerable to security degradation when subjected to fine-tuning attacks. To address these challenges, our work uncovers the mechanism behind security in aligned LLMs at the parameter level, identifying a small set of contiguous layers in the middle of the model that are crucial for distinguishing malicious queries from normal ones, referred to as "safety layers". We first confirm the existence of these safety layers by analyzing variations in input vectors within the model's internal layers. Additionally, we leverage the over-rejection phenomenon and parameters scaling analysis to precisely locate the safety layers. Building on these findings, we propose a novel fine-tuning approach, Safely Partial-Parameter Fine-Tuning (SPPFT), that fixes the gradient of the safety layers during fine-tuning to address the security degradation. Our experiments demonstrate that the proposed approach can significantly preserve LLM security while maintaining performance and reducing computational resources compared to full fine-tuning.
Liuyi Yao, Lan Zhang 0002, Yaliang Li
ICLR2
2025 Diversity as a Reward: Fine-Tuning LLMs on a Mixture of Domain-Undetermined Data
abstract
Fine-tuning large language models (LLMs) using diverse datasets is crucial for enhancing their overall performance across various domains. In practical scenarios, existing methods based on modeling the mixture proportions of data composition often struggle with data whose domain labels are missing, imprecise or non-normalized, while methods based on data selection usually encounter difficulties in balancing multi-domain performance. To address these challenges, in this work, we investigate the role of data diversity in enhancing the overall abilities of LLMs by empirically constructing contrastive data pools and theoretically deriving explanations. Building upon the insights gained, we propose a new method that gives the LLM a dual identity: an output model to cognitively probe and select data based on diversity reward, as well as an input model to be tuned with the selected data. Extensive experiments show that the proposed method notably boosts performance across domain-undetermined data and a series of foundational downstream tasks when applied to various advanced LLMs. We release our code and hope this study can shed light on the understanding of data diversity and advance feedback-driven data-model co-design for LLMs.
Zhenqing Ling, Daoyuan Chen, Liuyi Yao, Qianli Shen, Yaliang Li, Ying Shen 0001
NeurIPS3
2025 Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs
Lan Zhang 0002, Xinben Gao, Liuyi Yao, Jinke Song, Yaliang Li
USENIX Security Symposium3
2025 The Synergy Between Data and Multi-Modal Large Language Models: A Survey From Co-Development Perspective
abstract
Recent years have witnessed the rapid development of large language models (LLMs). Multi-modal LLMs (MLLMs) extend modality from text to various domains, attracting widespread attention due to their diverse application scenarios. As LLMs and MLLMs rely on vast amounts of model parameters and data to achieve emergent capabilities, the importance of data is gaining increasing recognition. Reviewing recent data-driven works for MLLMs, we find that the development of models and data is not two separate paths but rather interconnected. Vaster and higher-quality data improve MLLM performance, while MLLMs, in turn, facilitate the development of data. The co-development of multi-modal data and MLLMs requires a clear view of 1) at which development stages of MLLMs specific data-centric approaches can be employed to enhance certain MLLM capabilities, and 2) how MLLMs, using these capabilities, can contribute to multi-modal data in specific roles. To promote data-model co-development for MLLM communities, we systematically review existing works on MLLMs from the data-model co-development perspective.
Zhen Qin 0004, Daoyuan Chen, Liuyi Yao, Yilun Huang 0004, Bolin Ding, Yaliang Li, Shuiguang Deng
IEEE Trans. Pattern Anal. Mach. Intell.4
2024 On the Convergence of Zeroth-Order Federated Tuning for Large Language Models
abstract
The confluence of Federated Learning (FL) and Large Language Models (LLMs) is ushering in a new era in privacy-preserving natural language processing. However, the intensive memory requirements for fine-tuning LLMs pose significant challenges, especially when deploying on clients with limited computational resources. To circumvent this, we explore the novel integration of Memory-efficient Zeroth-Order Optimization within a federated setting, a synergy we term as FedMeZO. Our study is the first to examine the theoretical underpinnings of FedMeZO in the context of LLMs, tackling key questions regarding the influence of large parameter spaces on optimization behavior, the establishment of convergence properties, and the identification of critical parameters for convergence to inform personalized federated strategies. Our extensive empirical evidence supports the theory, showing that FedMeZO not only converges faster than traditional first-order methods such as FedAvg but also significantly reduces GPU memory usage during training to levels comparable to those during inference. Moreover, the proposed personalized FL strategy that is built upon the theoretical insights to customize the client-wise learning rate can effectively accelerate loss reduction. We hope our work can help to bridge theoretical and practical aspects of federated fine-tuning for LLMs, thereby stimulating further advancements and research in this area.
Zhenqing Ling, Daoyuan Chen, Liuyi Yao, Yaliang Li, Ying Shen 0001
KDD3
2024 Federated Fine-tuning of Large Language Models under Heterogeneous Tasks and Client Resources
abstract
Federated Learning (FL) has recently been applied to the parameter-efficient fine-tuning of Large Language Models (LLMs). While promising, it raises significant challenges due to the heterogeneous resources and data distributions of clients.This study introduces FlexLoRA, a simple yet effective aggregation scheme for LLM fine-tuning, which mitigates the "buckets effect" in traditional FL that restricts the potential of clients with ample resources by tying them to the capabilities of the least-resourced participants. FlexLoRA allows for dynamic adjustment of local LoRA ranks, fostering the development of a global model imbued with broader, less task-specific knowledge. By synthesizing a full-size LoRA weight from individual client contributions and employing Singular Value Decomposition (SVD) for weight redistribution, FlexLoRA fully leverages heterogeneous client resources. Involving thousands of clients performing heterogeneous NLP tasks and client resources, our experiments validate the efficacy of FlexLoRA, with the federated global model achieving consistently better improvement over SOTA FL methods in downstream NLP task performance across various heterogeneous distributions. FlexLoRA's practicality is further underscored by our theoretical analysis and its seamless integration with existing LoRA-based FL methods, offering a path toward cross-device, privacy-preserving federated tuning for LLMs.
Jiamu Bai, Daoyuan Chen, Bingchen Qian, Liuyi Yao, Yaliang Li
NeurIPS4
2024 Performance-Based Pricing of Federated Learning via Auction
abstract
Many machine learning techniques rely on plenty of training data. However, data are often possessed unequally by different entities, with a large proportion of data being held by a small number of data-rich entities. It can be challenging to incentivize data-rich entities to help train models with others via federated learning (FL) if there are no additional benefits. This difficulty arises because these data-rich entities cannot enjoy the revenue increment generated from the improved performances on tasks controlled by data-limited entities. In this paper, we investigate pricing mechanisms through auctions for FL, focusing on auction scenarios with one data seller and some data-limited entities as buyers. The mechanisms aim to account for buyers' performance gains from the FL and provide equitable monetary compensation to the data seller. We first formulate the task as a performance-based auction mechanism design problem and offer a template that can accommodate multiple kinds of auctions with different desiderata. Utilizing this template, we instantiate different truthful strategies with different goals, including maximizing social welfare and maximizing the seller's profit in auctions. In addition, considering the randomness between the model test performance used in the auction and the actual performance in a production environment, we provide theoretical analyses to quantify the impact of the uncertainty on the social welfare or the seller's profit of auction mechanisms. We provide experimental results based on two datasets with synthetic buyers' valuation to illustrate the truthfulness, social welfare, and data sellers' profit.
Zitao Li, Bolin Ding, Liuyi Yao, Yaliang Li, Xiaokui Xiao, Jingren Zhou 0001
Proc. VLDB Endow.3
2024 Is Sharing Neighbor Generator in Federated Graph Learning Safe?
abstract
Nowadays, as privacy concerns continue to rise, federated graph learning (FGL) which generalizes the classic federated learning to graph data has attracted increasing attention. However, while the focus has been on designing collaborative learning algorithms, the potential risks of privacy leakage through the sharing of necessary graph-related information in FGL, such as node embeddings and neighbor generators, have been largely neglected. In this paper, we verify the potential risks of privacy leakage in FGL, and provide insights about the cautions in FGL algorithm design. Specifically, we propose a novel privacy attack algorithm named Privacy Attack on federated Graph learning (PAG) towards reconstructing participants’ private node attributes and the linkage relationships. The participant performing the PAG attack is able to reconstruct the node attributes of the victim by matching the received gradients of the generator, and then train a link prediction model based on its local sub-graph to inductively infer the linkages connected to these reconstructed nodes. We theoretically and empirically demonstrate that under PAG attack, directly sharing the neighbor generators makes the FGL vulnerable to the data reconstruction attack. Furthermore, an investigation into the key factors that can hinder the success of the PAG attack provides insights into corresponding defense strategies and inspires future research into privacy-preserving FGL.
Liuyi Yao, Zhen Wang 0036, Yuexiang Xie, Yaliang Li, Weirui Kuang, Daoyuan Chen, Bolin Ding
IEEE Trans. Knowl. Data Eng.1
2023 Efficient Personalized Federated Learning via Sparse Model-Adaptation
abstract
Federated Learning (FL) aims to train machine learning models for multiple clients without sharing their own private data. Due to the heterogeneity of clients’ local data distribution, recent studies explore the personalized FL that learns and deploys distinct local models with the help of auxiliary global models. However, the clients can be heterogeneous in terms of not only local data distribution, but also their computation and communication resources. The capacity and efficiency of personalized models are restricted by the lowest-resource clients, leading to sub-optimal performance and limited practicality of personalized FL. To overcome these challenges, we propose a novel approach named pFedGate for efficient personalized FL by adaptively and efficiently learning sparse local models. With a lightweight trainable gating layer, pFedGate enables clients to reach their full potential in model capacity by generating different sparse models accounting for both the heterogeneous data distributions and resource constraints. Meanwhile, the computation and communication efficiency are both improved thanks to the adaptability between the model sparsity and clients’ resources. Further, we theoretically show that the proposed pFedGate has superior complexity with guaranteed convergence and generalization error. Extensive experiments show that pFedGate achieves superior global accuracy, individual accuracy and efficiency simultaneously over state-of-the-art methods. We also demonstrate that pFedGate performs better than competitors in the novel clients participation and partial clients participation scenarios, and can learn meaningful sparse local models adapted to different data distributions.
Daoyuan Chen, Liuyi Yao, Bolin Ding, Yaliang Li
ICML2
2023 Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks
abstract
In this work, besides improving prediction accuracy, we study whether personalization could bring robustness benefits to backdoor attacks. We conduct the first study of backdoor attacks in the pFL framework, testing 4 widely used backdoor attacks against 6 pFL methods on benchmark datasets FEMNIST and CIFAR-10, a total of 600 experiments. The study shows that pFL methods with partial model-sharing can significantly boost robustness against backdoor attacks. In contrast, pFL methods with full model-sharing do not show robustness. To analyze the reasons for varying robustness performances, we provide comprehensive ablation studies on different pFL methods. Based on our findings, we further propose a lightweight defense method, Simple-Tuning, which empirically improves defense performance against backdoor attacks. We believe that our work could provide both guidance for pFL application in terms of its robustness and offer valuable insights to design more robust FL methods in the future. We open-source our code to establish the first benchmark for black-box backdoor attacks in pFL: https://github.com/alibaba/FederatedScope/tree/backdoor-bench.
Zeyu Qin, Liuyi Yao, Daoyuan Chen, Yaliang Li, Bolin Ding, Minhao Cheng
KDD2
2023 Path-specific Causal Fair Prediction via Auxiliary Graph Structure Learning
abstract
With ubiquitous adoption of machine learning algorithms in web technologies, such as recommendation system and social network, algorithm fairness has become a trending topic, and it has a great impact on social welfare. Among different fairness definitions, path-specific causal fairness is a widely adopted one with great potentials, as it distinguishes the fair and unfair effects that the sensitive attributes exert on algorithm predictions. Existing methods based on path-specific causal fairness either require graph structure as the prior knowledge or have high complexity in the calculation of path-specific effect. To tackle these challenges, we propose a novel casual graph based fair prediction framework which integrates graph structure learning into fair prediction to ensure that unfair pathways are excluded in the causal graph. Furthermore, we generalize the proposed framework to the scenarios where sensitive attributes can be non-root nodes and affected by other variables, which is commonly observed in real-world applications, such as recommendation system, but hardly addressed by existing works. We provide theoretical analysis on the generalization bound for the proposed fair prediction method, and conduct a series of experiments on real-world datasets to demonstrate that the proposed framework can provide better prediction performance and algorithm fairness trade-off.
Liuyi Yao, Yaliang Li, Bolin Ding, Jingren Zhou 0001, Jinduo Liu 0001, Mengdi Huai, Jing Gao 0004
WWW1
2023 FederatedScope: A Flexible Federated Learning Platform for Heterogeneity
abstract
Although remarkable progress has been made by existing federated learning (FL) platforms to provide infrastructures for development, these platforms may not well tackle the challenges brought by various types of heterogeneity. To fill this gap, in this paper, we propose a novel FL platform, named FederatedScope, which employs an event-driven architecture to provide users with great flexibility to independently describe the behaviors of different participants. Such a design makes it easy for users to describe participants with various local training processes, learning goals and backends, and coordinate them into an FL course with synchronous or asynchronous training strategies. Towards an easy-to-use and flexible platform, FederatedScope enables rich types of plug-in operations and components for efficient further development, and we have implemented several important components to better help users with privacy protection, attack simulation and auto-tuning. We have released FederatedScope at https://github.com/alibaba/FederatedScope to promote academic research and industrial deployment of federated learning in a wide range of scenarios.
Yuexiang Xie, Zhen Wang 0036, Daoyuan Chen, Liuyi Yao, Weirui Kuang, Yaliang Li, Bolin Ding, Jingren Zhou 0001
Proc. VLDB Endow.5
2023 Concept-Level Model Interpretation From the Causal Aspect
abstract
With the increasing growth of data and the ability of learning with them, machine learning models are adopted in various domains. However, few of machine learning models are able to reason their prediction, which limits their further applications in real-world tasks. With the potential to address this dilemma, model interpretation has become an important research topic because of the ability to provide the underlying reasons for model predictions at the feature level or concept level. Model interpretation at the concept level focuses on exploring the roles of concepts in model prediction, which enables more compact and understandable interpretations. Concept-level model interpretation requires the identification of the concepts that contribute to model prediction and the exploration of the rules underneath these concepts. To achieve the two objectives, we propose a Concept-level Model Interpretation framework (CMIC) from the perspective of causality. CMIC can automatically detect concepts in data and discover the causal relation between the detected concepts and the model's predicted labels. Furthermore, CMIC ranks the contributions of concepts by their causal effect on the model prediction, reflecting the detected concepts’ importance. We evaluate the proposed CMIC framework on both synthetic and real-world datasets to demonstrate the quality of the provided interpretation.
Liuyi Yao, Yaliang Li, Sheng Li 0001, Jinduo Liu 0001, Mengdi Huai, Aidong Zhang 0001, Jing Gao 0004
IEEE Trans. Knowl. Data Eng.1
2022 Imbalance-Aware Uplift Modeling for Observational Data
abstract
Uplift modeling aims to model the incremental impact of a treatment on an individual outcome, which has attracted great interests of researchers and practitioners from different communities. Existing uplift modeling methods rely on either the data collected from randomized controlled trials (RCTs) or the observational data which is more realistic. However, we notice that on the observational data, it is often the case that only a small number of subjects receive treatment, but finally infer the uplift on a much large group of subjects. Such highly imbalanced data is common in various fields such as marketing and medical treatment but it is rarely handled by existing works. In this paper, we theoretically and quantitatively prove that the existing representative methods, transformed outcome (TOM) and doubly robust (DR), suffer from large bias and deviation on highly imbalanced datasets with skewed propensity scores, mainly because they are proportional to the reciprocal of the propensity score. To reduce the bias and deviation of uplift modeling with an imbalanced dataset, we propose an imbalance-aware uplift modeling (IAUM) method via constructing a robust proxy outcome, which adaptively combines the doubly robust estimator and the imputed treatment effects based on the propensity score. We theoretically prove that IAUM can obtain a better bias-variance trade-off than existing methods on a highly imbalanced dataset. We conduct extensive experiments on a synthetic dataset and two real-world datasets, and the experimental results well demonstrate the superiority of our method over state-of-the-art.
Xuanying Chen, Zhining Liu 0001, Liuyi Yao, Wenpeng Zhang 0003, Lihong Gu, Xiaodong Zeng, Yize Tan, Jinjie Gu
AAAI4
2022 Towards Automating Model Explanations with Certified Robustness Guarantees
abstract
Providing model explanations has gained significant popularity recently. In contrast with the traditional feature-level model explanations, concept-based explanations can provide explanations in the form of high-level human concepts. However, existing concept-based explanation methods implicitly follow a two-step procedure that involves human intervention. Specifically, they first need the human to be involved to define (or extract) the high-level concepts, and then manually compute the importance scores of these identified concepts in a post-hoc way. This laborious process requires significant human effort and resource expenditure due to manual work, which hinders their large-scale deployability. In practice, it is challenging to automatically generate the concept-based explanations without human intervention due to the subjectivity of defining the units of concept-based interpretability. In addition, due to its data-driven nature, the interpretability itself is also potentially susceptible to malicious manipulations. Hence, our goal in this paper is to free human from this tedious process, while ensuring that the generated explanations are provably robust to adversarial perturbations. We propose a novel concept-based interpretation method, which can not only automatically provide the prototype-based concept explanations but also provide certified robustness guarantees for the generated prototype-based explanations. We also conduct extensive experiments on real-world datasets to verify the desirable properties of the proposed method.
Mengdi Huai, Jinduo Liu 0001, Chenglin Miao, Liuyi Yao, Aidong Zhang 0001
AAAI4
2022 FederatedScope-GNN: Towards a Unified, Comprehensive and Efficient Package for Federated Graph Learning
abstract
The incredible development of federated learning (FL) has benefited various tasks in the domains of computer vision and natural language processing, and the existing frameworks such as TFF and FATE has made the deployment easy in real-world applications. However, federated graph learning (FGL), even though graph data are prevalent, has not been well supported due to its unique characteristics and requirements. The lack of FGL-related framework increases the efforts for accomplishing reproducible research and deploying in real-world applications. Motivated by such strong demand, in this paper, we first discuss the challenges in creating an easy-to-use FGL package and accordingly present our implemented package FederatedScope-GNN (FS-G), which provides (1) a unified view for modularizing and expressing FGL algorithms; (2) comprehensive DataZoo and ModelZoo for out-of-the-box FGL capability; (3) an efficient model auto-tuning component; and (4) off-the-shelf privacy attack and defense abilities. We validate the effectiveness of FS-G by conducting extensive experiments, which simultaneously gains many valuable insights about FGL for the community. Moreover, we employ FS-G to serve the FGL application in real-world E-commerce scenarios, where the attained improvements indicate great potential business benefits. We publicly release FS-G, as submodules of FederatedScope, at https://github.com/alibaba/FederatedScope to promote FGL's research and enable broad applications that would otherwise be infeasible due to the lack of a dedicated package.
Zhen Wang 0036, Weirui Kuang, Yuexiang Xie, Liuyi Yao, Yaliang Li, Bolin Ding, Jingren Zhou 0001
KDD4
2022 On the Robustness of Metric Learning: An Adversarial Perspective
abstract
Metric learning aims at automatically learning a distance metric from data so that the precise similarity between data instances can be faithfully reflected, and its importance has long been recognized in many fields. An implicit assumption in existing metric learning works is that the learned models are performed in a reliable and secure environment. However, the increasingly critical role of metric learning makes it susceptible to a risk of being malicious attacked. To well understand the performance of metric learning models in adversarial environments, in this article, we study the robustness of metric learning to adversarial perturbations, which are also known as the imperceptible changes to the input data that are crafted by an attacker to fool a well-learned model. However, different from traditional classification models, metric learning models take instance pairs rather than individual instances as input, and the perturbation on one instance may not necessarily affect the prediction result for an instance pair, which makes it more difficult to study the robustness of metric learning. To address this challenge, in this article, we first provide a definition of pairwise robustness for metric learning, and then propose a novel projected gradient descent-based attack method (called AckMetric) to evaluate the robustness of metric learning models. To further explore the capability of the attacker to change the prediction results, we also propose a theoretical framework to derive the upper bound of the pairwise adversarial loss. Finally, we incorporate the derived bound into the training process of metric learning and design a novel defense method to make the learned models more robust. Extensive experiments on real-world datasets demonstrate the effectiveness of the proposed methods.
Mengdi Huai, Tianhang Zheng, Chenglin Miao, Liuyi Yao, Aidong Zhang 0001
ACM Trans. Knowl. Discov. Data4
2021 SCI: Subspace Learning Based Counterfactual Inference for Individual Treatment Effect Estimation
abstract
Inferring causal effect from observational data has attracted much attention from various domains. Under the potential outcome framework, the estimation of counterfactuals is crucial for the investigation of causal effect at the individual level. Existing representation learning approaches focus on learning one balanced feature space, which ignores certain information predictive to the outcomes. To fully utilize the predictive information, we propose a Subspace learning based Counterfactual Inference (SCI) method to estimate causal effect at the individual level. Different from existing work, SCI learns both a common subspace, which preserves the information across all the treatment groups, and treatment-specific subspaces, which retain the information associated with each specific treatment. Learning from two kinds of subspaces helps SCI obtain better causal effect estimations than state-of-the-art methods, demonstrated by a series of experiments on synthetic and real-world datasets.
Liuyi Yao, Yaliang Li, Sheng Li 0001, Mengdi Huai, Jing Gao 0004, Aidong Zhang 0001
CIKM1
2021 Debiasing Learning based Cross-domain Recommendation
abstract
As it becomes prevalent that user information exists in multiple platforms or services, cross-domain recommendation has been an important task in industry. Although it is well known that users tend to show different preferences in different domains, existing studies seldom model how domain biases affect user preferences. Focused on this issue, we develop a casual-based approach to mitigating the domain biases when transferring the user information cross domains. To be specific, this paper presents a novel debiasing learning based cross-domain recommendation framework with causal embedding. In this framework, we design a novel Inverse-Propensity-Score (IPS) estimator designed for cross-domain scenario, and further propose three kinds of restrictions for propensity score learning. Our framework can be generally applied to various recommendation algorithms for cross-domain recommendation. Extensive experiments on both public and industry datasets have demonstrated the effectiveness of the proposed framework.
Siqing Li, Liuyi Yao, Shanlei Mu, Wayne Xin Zhao, Yaliang Li, Tonglei Guo, Bolin Ding, Ji-Rong Wen
KDD2
2021 A Survey on Causal Inference
abstract
Causal inference is a critical research topic across many domains, such as statistics, computer science, education, public policy, and economics, for decades. Nowadays, estimating causal effect from observational data has become an appealing research direction owing to the large amount of available data and low budget requirement, compared with randomized controlled trials. Embraced with the rapidly developed machine learning area, various causal effect estimation methods for observational data have sprung up. In this survey, we provide a comprehensive review of causal inference methods under the potential outcome framework, one of the well-known causal inference frameworks. The methods are divided into two categories depending on whether they require all three assumptions of the potential outcome framework or not. For each category, both the traditional statistical methods and the recent machine learning enhanced methods are discussed and compared. The plausible applications of these methods are also presented, including the applications in advertising, recommendation, medicine, and so on. Moreover, the commonly used benchmark datasets as well as the open-source codes are also summarized, which facilitate researchers and practitioners to explore, evaluate and apply the causal inference methods.
Liuyi Yao, Zhixuan Chu, Sheng Li 0001, Yaliang Li, Jing Gao 0004, Aidong Zhang 0001
ACM Trans. Knowl. Discov. Data1
2020 EC-GAN: Inferring Brain Effective Connectivity via Generative Adversarial Networks
abstract
Inferring effective connectivity between different brain regions from functional magnetic resonance imaging (fMRI) data is an important advanced study in neuroinformatics in recent years. However, current methods have limited usage in effective connectivity studies due to the high noise and small sample size of fMRI data. In this paper, we propose a novel framework for inferring effective connectivity based on generative adversarial networks (GAN), named as EC-GAN. The proposed framework EC-GAN infers effective connectivity via an adversarial process, in which we simultaneously train two models: a generator and a discriminator. The generator consists of a set of effective connectivity generators based on structural equation models which can generate the fMRI time series of each brain region via effective connectivity. Meanwhile, the discriminator is employed to distinguish between the joint distributions of the real and generated fMRI time series. Experimental results on simulated data show that EC-GAN can better infer effective connectivity compared to other state-of-the-art methods. The real-world experiments indicate that EC-GAN can provide a new and reliable perspective analyzing the effective connectivity of fMRI data.
Jinduo Liu 0001, Junzhong Ji, Guangxu Xun, Liuyi Yao, Mengdi Huai, Aidong Zhang 0001
AAAI4
2020 Causal Inference Meets Machine Learning
abstract
Causal inference has numerous real-world applications in many domains such as health care, marketing, political science and online advertising. Treatment effect estimation, a fundamental problem in causal inference, has been extensively studied in statistics for decades. However, traditional treatment effect estimation methods may not well handle large-scale and high-dimensional heterogeneous data. In recent years, an emerging research direction has attracted increasing attention in the broad artificial intelligence field, which combines the advantages of traditional treatment effect estimation approaches (e.g., matching estimators) and advanced representation learning approaches (e.g., deep neural networks). In this tutorial, we will introduce both traditional and state-of-the-art representation learning algorithms for treatment effect estimation. Background about causal inference, counterfactuals and matching estimators will be covered as well. We will also showcase promising applications of these methods in different application domains.
Peng Cui 0001, Zheyan Shen, Sheng Li 0001, Liuyi Yao, Yaliang Li, Zhixuan Chu, Jing Gao 0004
KDD4
2020 Malicious Attacks against Deep Reinforcement Learning Interpretations
abstract
The past years have witnessed the rapid development of deep reinforcement learning (DRL), which is a combination of deep learning and reinforcement learning (RL). However, the adoption of deep neural networks makes the decision-making process of DRL opaque and lacking transparency. Motivated by this, various interpretation methods for DRL have been proposed. However, those interpretation methods make an implicit assumption that they are performed in a reliable and secure environment. In practice, sequential agent-environment interactions expose the DRL algorithms and their corresponding downstream interpretations to extra adversarial risk. In spite of the prevalence of malicious attacks, there is no existing work studying the possibility and feasibility of malicious attacks against DRL interpretations. To bridge this gap, in this paper, we investigate the vulnerability of DRL interpretation methods. Specifically, we introduce the first study of the adversarial attacks against DRL interpretations, and propose an optimization framework based on which the optimal adversarial attack strategy can be derived. In addition, we study the vulnerability of DRL interpretation methods to the model poisoning attacks, and present an algorithmic framework to rigorously formulate the proposed model poisoning attack. Finally, we conduct both theoretical analysis and extensive experiments to validate the effectiveness of the proposed malicious attacks against DRL interpretations.
Mengdi Huai, Jianhui Sun, Renqin Cai, Liuyi Yao, Aidong Zhang 0001
KDD4
2019 Estimating Brain Effective Connectivity in fMRI data by Non-stationary Dynamic Bayesian Networks
abstract
Estimating brain effective connectivity (EC) from neuroimaging data has recently received wide interest and become a new topic in the neuroinformatics field. Currently, dynamic Bayesian networks (DBN) have been successfully applied to estimating EC from functional magnetic resonance imaging (fMRI) time-series data as they can capture the temporal characteristics of connectivity among brain regions. However, DBN methods assume that activations of brain regions are stationary and follow a Markovian condition, which are strong assumptions that may not be valid in many cases. In this paper, we introduce a novel method to estimate brain effective connectivity networks from fMRI data using non-stationary dynamic Bayesian networks, named as EC-nsDBN. EC-nsDBN can not only capture the non-stationary temporal information from fMRI time-series data but also estimate how interactions among brain regions change dynamically over the fMRI experiments. Systematic experiments on simulated data show that EC-nsDBN has better direction identification ability compared with other state-of-the-art algorithms, and can accurately capture the temporal characteristics of connectivity. Experiments on real-world data sets are also provided to support our analysis.
Jinduo Liu 0001, Junzhong Ji, Liuyi Yao, Aidong Zhang 0001
BIBM3
2019 ACE: Adaptively Similarity-Preserved Representation Learning for Individual Treatment Effect Estimation
abstract
Treatment effect estimation refers to the estimation of causal effects, which benefits decision-making process across various domains, but it is a challenging problem in real practice. The estimation of causal effects from observational data at the individual level faces two major challenges, i.e., treatment selection bias and missing counterfactuals. Existing methods tackle the selection bias problem by learning a balanced representation and infer the missing counterfactuals based on the learned representation. However, most existing methods learn the representation in a global manner and ignore the local similarity information, which is essential for an accurate estimation of causal effects. Motivated by the above observations, we propose a novel representation learning method, which adaptively extracts fine-grained similarity information from the original feature space and minimizes the distance between different treatment groups as well as the similarity loss during the representation learning procedure. Experiments on three public datasets demonstrate that the proposed method achieves the best performance in causal effect estimation among all the compared methods and is robust to the treatment selection bias.
Liuyi Yao, Sheng Li 0001, Yaliang Li, Mengdi Huai, Jing Gao 0004, Aidong Zhang 0001
ICDM1
2019 Deep Metric Learning: The Generalization Analysis and an Adaptive Algorithm
abstract
As an effective way to learn a distance metric between pairs of samples, deep metric learning (DML) has drawn significant attention in recent years. The key idea of DML is to learn a set of hierarchical nonlinear mappings using deep neural networks, and then project the data samples into a new feature space for comparing or matching. Although DML has achieved practical success in many applications, there is no existing work that theoretically analyzes the generalization error bound for DML, which can measure how good a learned DML model is able to perform on unseen data. In this paper, we try to fill up this research gap and derive the generalization error bound for DML. Additionally, based on the derived generalization bound, we propose a novel DML method (called ADroDML), which can adaptively learn the retention rates for the DML models with dropout in a theoretically justified way. Compared with existing DML works that require predefined retention rates, ADroDML can learn the retention rates in an optimal way and achieve better performance. We also conduct experiments on real-world datasets to verify the findings derived from the generalization error bound and demonstrate the effectiveness of the proposed adaptive DML method.
Mengdi Huai, Hongfei Xue, Chenglin Miao, Liuyi Yao, Lu Su 0001, Changyou Chen, Aidong Zhang 0001
IJCAI4
2019 On the Estimation of Treatment Effect with Text Covariates
abstract
Estimating the treatment effect benefits decision making in various domains as it can provide the potential outcomes of different choices. Existing work mainly focuses on covariates with numerical values, while how to handle covariates with textual information for treatment effect estimation is still an open question. One major challenge is how to filter out the nearly instrumental variables which are the variables more predictive to the treatment than the outcome. Conditioning on those variables to estimate the treatment effect would amplify the estimation bias. To address this challenge, we propose a conditional treatment-adversarial learning based matching method (CTAM). CTAM incorporates the treatment-adversarial learning to filter out the information related to nearly instrumental variables when learning the representations, and then it performs matching among the learned representations to estimate the treatment effects. The conditional treatment-adversarial learning helps reduce the bias of treatment effect estimation, which is demonstrated by our experimental results on both semi-synthetic and real-world datasets.
Liuyi Yao, Sheng Li 0001, Yaliang Li, Hongfei Xue, Jing Gao 0004, Aidong Zhang 0001
IJCAI1
2019 DTEC: Distance Transformation Based Early Time Series Classification
abstract
In many time-sensitive applications, knowing the classification results as early as possible while preserving the accuracy is extremely important for further actions. Shapelet-based early classification methods are popular due to their natural interpretability. However, most of the existing shapelet-based methods ignore the distance information between the shapelets and the time series. The distance information, though may contain some noise, can reflect more information between the shapelets and the time series. Some existing works adopt the distance information, but are not robust to the noise in the distance information. To tackle this challenge, we present a novel distance transformation based early classification (DTEC) framework, which transfers the original time series into the distance space. Upon the distance space, a probabilistic classifier is trained, and a novel classification criterion confidence area is proposed in order to overcome the noise brought by the training phase and the dataset. The effectiveness of the proposed framework is validated on three time series benchmarks as well as the extensive datasets selected from UCR time series archive.
Liuyi Yao, Yaliang Li, Yezheng Li, Hengtong Zhang, Mengdi Huai, Jing Gao 0004, Aidong Zhang 0001
SDM1
2018 Representation Learning for Treatment Effect Estimation from Observational Data
abstract
Estimating individual treatment effect (ITE) is a challenging problem in causal inference, due to the missing counterfactuals and the selection bias. Existing ITE estimation methods mainly focus on balancing the distributions of control and treated groups, but ignore the local similarity information that is helpful. In this paper, we propose a local similarity preserved individual treatment effect (SITE) estimation method based on deep representation learning. SITE preserves local similarity and balances data distributions simultaneously, by focusing on several hard samples in each mini-batch. Experimental results on synthetic and three real-world datasets demonstrate the advantages of the proposed SITE method, compared with the state-of-the-art ITE estimation methods.
Liuyi Yao, Sheng Li 0001, Yaliang Li, Mengdi Huai, Jing Gao 0004, Aidong Zhang 0001
NeurIPS1
2018 Online Truth Discovery on Time Series Data
abstract
Truth discovery, with the goal of inferring true information from massive data through aggregating the information from multiple data sources, has attracted significant attention in recent years. It has demonstrated great advantages in real applications since it can automatically learn the reliability degrees of the data sources without supervision and in turn helps to find more reliable information. In many applications, however, the data may arrive in a stream and present various temporal patterns. Unfortunately, there is no existing truth discovery work that can handle such time series data. To tackle this challenge, we propose a novel online truth discovery framework that incorporates the predictions on the time series data into the truth estimation process. By jointly considering the multi-source information and the temporal patterns of the time series data, the proposed framework can improve the accuracy of the truth discovery results as well as the time series prediction. The effectiveness of the proposed framework is validated on both synthetic and real-world datasets.
Liuyi Yao, Lu Su 0001, Qi Li 0012, Yaliang Li, Fenglong Ma, Jing Gao 0004, Aidong Zhang 0001
SDM1