Demo Data from SIGIR 2026 / reviewers in the wild / expert
Swapnil Parekh
dblp:282/0874
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% | |
| Artificial intelligence
1 paper |
Language models and text generation · 100% |
Topics — the 2 heaviest of 5, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning
adversarial attack |
0.6 | 1 | 2022 | MINIMAL: Mining Models for Universal Adversarial Triggers · AAAI 2022 |
Security and privacy of machine learning › adversarial attack › universal attack
universal adversarial trigger |
0.6 | 1 | 2022 | MINIMAL: Mining Models for Universal Adversarial Triggers · AAAI 2022 |
Methods — techniques the papers use, named apart from their topics
data-free trigger mining · 1.1
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2022 | MINIMAL: Mining Models for Universal Adversarial TriggersabstractIt is well known that natural language models are vulnerable to adversarial attacks, which are mostly input-specific in nature. Recently, it has been shown that there also exist input-agnostic attacks in NLP models, called universal adversarial triggers. However, existing methods to craft universal triggers are data intensive. They require large amounts of data samples to generate adversarial triggers, which are typically inaccessible by attackers. For instance, previous works take 3000 data samples per class for the SNLI dataset to generate adversarial triggers. In this paper, we present a novel data-free approach, MINIMAL, to mine input-agnostic adversarial triggers from models. Using the triggers produced with our data-free algorithm, we reduce the accuracy of Stanford Sentiment Treebank’s positive class from 93.6% to 9.6%. Similarly, for the Stanford Natural LanguageInference (SNLI), our single-word trigger reduces the accuracy of the entailment class from 90.95% to less than 0.6%. Despite being completely data-free, we get equivalent accuracy drops as data-dependent methods Yaman Singla, Swapnil Parekh, Somesh Singh 0003, Changyou Chen, Balaji Krishnamurthy, Rajiv Ratn Shah |
AAAI | 2 |