Demo Data from SIGIR 2026 / reviewers in the wild / expert
Hongye Fu
dblp:56/2356
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% | |
| Artificial intelligence
1 paper |
Segmentation and scene understanding · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning
adversarial robustness |
0.8 | 1 | 2024 | MMCert: Provable Defense Against Adversarial Attacks to Multi-Modal Models · CVPR 2024 |
Security and privacy of machine learning › adversarial robustness
certified robustness |
0.8 | 1 | 2024 | MMCert: Provable Defense Against Adversarial Attacks to Multi-Modal Models · CVPR 2024 |
Computer vision › Segmentation and scene understanding › semantic segmentation › road scene segmentation
road segmentation |
0.2 | 1 | 2024 | MMCert: Provable Defense Against Adversarial Attacks to Multi-Modal Models · CVPR 2024 |
Methods — techniques the papers use, named apart from their topics
randomized smoothing · 1.5certified robustness · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | MMCert: Provable Defense Against Adversarial Attacks to Multi-Modal ModelsabstractDifferent from a unimodal model whose input is from a single modality, the input (called multi-modal input) of a multi-modal model is from multiple modalities such as image, 3D points, audio, text, etc. Similar to unimodal models, many existing studies show that a multi-modal model is also vulnerable to adversarial perturbation, where an attacker could add small perturbation to all modalities of a multi-modal input such that the multi-modal model makes incorrect predictions for it. Existing certified defenses are mostly designed for unimodal models, which achieve sub optimal certified robustness guarantees when extended to multi-modal models as shown in our experimental results. In our work, we propose MMCert, the first certified defense against adversarial attacks to a multi-modal model. We derive a lower bound on the performance of our MMCert under arbitrary adversarial attacks with bounded perturbations to both modalities (e.g., in the context of auto-driving, we bound the number of changed pixels in both RGB image and depth image). We evaluate our MMCert using two benchmark datasets: one for the multi-modal road segmentation task and the other for the multi-modal emotion recognition task. Moreover, we compare our MMCert with a state-of-the-art certified defense extended from unimodal models. Our experimental results show that our MMCert outperforms the baseline. Yanting Wang 0001, Hongye Fu, Jinyuan Jia 0001 |
CVPR | 2 |