Demo Data from SIGIR 2026 / reviewers in the wild / expert
Asim Waheed
dblp:287/4144
· DBLP profile ↗
3ranked-venue papers
1as first author
3since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 1 first-author · 3 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
3 papers |
Security and privacy of machine learning · 84% Web and mobile security · 16% | |
| Software engineering, system software, and programming languages
1 paper |
Program analysis · 100% | |
| Artificial intelligence
1 paper |
Graph learning · 100% |
Topics — the 8 heaviest of 8, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning › model intellectual property protection › model ownership verification › model fingerprinting
graph neural network fingerprinting |
0.8 | 1 | 2024 | GrOVe: Ownership Verification of Graph Neural Networks using Embeddings · SP 2024 |
Security and privacy of machine learning › model intellectual property protection › model ownership verification
model fingerprinting |
0.8 | 1 | 2024 | GrOVe: Ownership Verification of Graph Neural Networks using Embeddings · SP 2024 |
Security and privacy of machine learning
model stealing |
0.8 | 1 | 2024 | GrOVe: Ownership Verification of Graph Neural Networks using Embeddings · SP 2024 |
Security and privacy of machine learning › model intellectual property protection
ownership verification |
0.8 | 1 | 2024 | GrOVe: Ownership Verification of Graph Neural Networks using Embeddings · SP 2024 |
Web and mobile security › web security
API security |
0.7 | 1 | 2023 | Auditing Framework APIs via Inferred App-side Security Specifications · USENIX Security Symposium 2023 |
Program analysis
specification mining |
0.7 | 1 | 2023 | Auditing Framework APIs via Inferred App-side Security Specifications · USENIX Security Symposium 2023 |
Security and privacy of machine learning › adversarial attack › backdoor attack
backdoor defense |
0.5 | 1 | 2021 | T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification · USENIX Security Symposium 2021 |
Machine learning › Graph learning
graph neural network |
0.2 | 1 | 2024 | GrOVe: Ownership Verification of Graph Neural Networks using Embeddings · SP 2024 |
Methods — techniques the papers use, named apart from their topics
embedding-based fingerprinting · 1.5generative modeling · 0.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | GrOVe: Ownership Verification of Graph Neural Networks using EmbeddingsabstractGraph neural networks (GNNs) have emerged as a state-of-the-art approach to model and draw inferences from large scale graph-structured data in various application settings such as social networking. The primary goal of a GNN is to learn an embedding for each graph node in a dataset that encodes both the node features and the local graph structure around the node.Prior work has shown that GNNs are prone to model extraction attacks. Model extraction attacks and defenses have been explored extensively in other non-graph settings. While detecting or preventing model extraction appears to be difficult, deterring them via effective ownership verification techniques offer a potential defense. In non-graph settings, fingerprinting models, or the data used to build them, have shown to be a promising approach toward ownership verification.We present GrOVe, a state-of-the-art GNN model fingerprinting scheme that, given a target model and a suspect model, can reliably determine if the suspect model was trained independently of the target model or if it is a surrogate of the target model obtained via model extraction. We show that GrOVe can distinguish between surrogate and independent models even when the independent model uses the same training dataset and architecture as the original target model.Using six benchmark datasets and three model architectures, we show that GrOVe consistently achieves low falsepositive and false-negative rates. We demonstrate that GrOVe is robust against known fingerprint evasion techniques while remaining computationally efficient. Asim Waheed, Vasisht Duddu, N. Asokan |
SP | 1 |
| 2023 | Auditing Framework APIs via Inferred App-side Security Specifications
Parjanya Vyas, Asim Waheed, Yousra Aafer, N. Asokan |
USENIX Security Symposium | 2 |
| 2021 | T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification
Ahmadreza Azizi, Ibrahim Asadullah Tahmid, Asim Waheed, Neal Mangaokar, Jiameng Pu, Mobin Javed, Chandan K. Reddy, Bimal Viswanath |
USENIX Security Symposium | 3 |