Demo Data from SIGIR 2026 / reviewers in the wild / expert
Chang Xiao 0003
dblp:66/10110-3
· DBLP profile ↗
11ranked-venue papers
7as first author
5since 2021 · last 2022
—ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 5 · 3 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 5 · 3 first-author · 2 since 2021Human-computer interaction and ubiquitous computing · 2 · 2 first-author · 2 since 2021Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
5 papers |
Generative modeling · 54% Trustworthy machine learning · 39% Representation and self-supervised learning · 7% | |
| Human-computer interaction and pervasive computing
3 papers |
Interaction techniques and input · 89% Personal fabrication and tangible interfaces · 11% | |
| Computer graphics and multimedia
3 papers |
Geometric modeling and processing · 34% Rendering · 34% Visual content generation and editing · 22% | |
| Network and information security
2 papers |
Hardware security and side channels · 78% Digital forensics and information hiding · 22% |
Topics — the 23 heaviest of 28, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › adversarial machine learning
adversarial defense |
0.9 | 2 | 2020 | Enhancing Adversarial Defense by k-Winners-Take-All · ICLR 2020 One Man's Trash Is Another Man's Treasure: Resisting Adversarial Examples by Adversarial Examples · CVPR 2020 |
Hardware security and side channels › side-channel attack › electromagnetic side channel
magnetic side channel |
0.6 | 1 | 2022 | Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel · USENIX Security Symposium 2022 |
Hardware security and side channels
side-channel attack |
0.6 | 1 | 2022 | Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel · USENIX Security Symposium 2022 |
Machine learning › Generative modeling › diffusion model
3d shape generation |
0.5 | 1 | 2021 | DeepCAD: A Deep Generative Network for Computer-Aided Design Models · ICCV 2021 |
Machine learning › Generative modeling
autoregressive model |
0.5 | 1 | 2021 | DeepCAD: A Deep Generative Network for Computer-Aided Design Models · ICCV 2021 |
Geometric modeling and processing
computer-aided design |
0.5 | 1 | 2021 | DeepCAD: A Deep Generative Network for Computer-Aided Design Models · ICCV 2021 |
Interaction techniques and input › touch interaction
back-of-device interaction |
0.5 | 1 | 2021 | BackTrack: 2D Back-of-device Interaction Through Front Touchscreen · CHI 2021 |
Interaction techniques and input › input sensing › touch sensing
capacitive touch sensing |
0.5 | 1 | 2021 | BackTrack: 2D Back-of-device Interaction Through Front Touchscreen · CHI 2021 |
Interaction techniques and input › input sensing › tracking › hand tracking
finger tracking |
0.5 | 1 | 2021 | BackTrack: 2D Back-of-device Interaction Through Front Touchscreen · CHI 2021 |
Interaction techniques and input › input sensing › tracking
virtual reality tracking |
0.5 | 1 | 2021 | MoiréBoard: A Stable, Accurate and Low-cost Camera Tracking Method · UIST 2021 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
0.4 | 1 | 2020 | Enhancing Adversarial Defense by k-Winners-Take-All · ICLR 2020 |
Machine learning › Trustworthy machine learning
robustness |
0.4 | 1 | 2020 | One Man's Trash Is Another Man's Treasure: Resisting Adversarial Examples by Adversarial Examples · CVPR 2020 |
Machine learning › Generative modeling › generative model evaluation
mode coverage |
0.4 | 1 | 2019 | Rethinking Generative Mode Coverage: A Pointwise Guaranteed Approach · NeurIPS 2019 |
Interaction techniques and input
mobile interaction |
0.4 | 1 | 2019 | Vidgets: modular mechanical widgets for mobile devices · ACM Trans. Graph. 2019 |
Personal fabrication and tangible interfaces
tangible user interface |
0.4 | 1 | 2019 | Vidgets: modular mechanical widgets for mobile devices · ACM Trans. Graph. 2019 |
Machine learning › Generative modeling
generative adversarial network |
0.3 | 1 | 2018 | BourGAN: Generative Networks with Metric Embeddings · NeurIPS 2018 |
Machine learning › Representation and self-supervised learning
metric embedding |
0.3 | 1 | 2018 | BourGAN: Generative Networks with Metric Embeddings · NeurIPS 2018 |
Machine learning › Generative modeling › generative adversarial network › GAN training
mode collapse |
0.3 | 1 | 2018 | BourGAN: Generative Networks with Metric Embeddings · NeurIPS 2018 |
Digital forensics and information hiding
steganography |
0.3 | 1 | 2018 | FontCode: Embedding Information in Text Documents Using Glyph Perturbation · ACM Trans. Graph. 2018 |
GPUs and heterogeneous computing
GPU security |
0.2 | 1 | 2022 | Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel · USENIX Security Symposium 2022 |
Computer animation and physical simulation › cloth simulation
yarn-level simulation |
0.1 | 1 | 2021 | Mechanics-Aware Modeling of Cloth Appearance · IEEE Trans. Vis. Comput. Graph. 2021 |
Interaction techniques and input › mobile interaction
mobile phone interaction |
0.1 | 1 | 2021 | BackTrack: 2D Back-of-device Interaction Through Front Touchscreen · CHI 2021 |
Algorithms and data structures
metric embedding |
0.1 | 1 | 2018 | BourGAN: Generative Networks with Metric Embeddings · NeurIPS 2018 |
Methods — techniques the papers use, named apart from their topics
transformer · 1.0autoregressive modeling · 1.0objective augmentation · 0.7metric embedding · 0.7generative model · 0.7gaussian mixture model · 0.7font manifold · 0.7error correction coding · 0.7user study · 0.5regression neural network · 0.5procedural yarn model · 0.5parameter fitting · 0.5moiré effect analysis · 0.5finite element simulation · 0.5controlled laboratory experiment · 0.53d printing · 0.5k-winners-take-all · 0.4gradient obfuscation · 0.4
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2022 | Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel
Henrique Teles Maia, Chang Xiao 0003, Dingzeyu Li, Eitan Grinspun, Changxi Zheng |
USENIX Security Symposium | 2 |
| 2021 | BackTrack: 2D Back-of-device Interaction Through Front TouchscreenabstractWe present BackTrack, a trackpad placed on the back of a smartphone to track fine-grained finger motions. Our system has a small form factor, with all the circuits encapsulated in a thin layer attached to a phone case. It can be used with any off-the-shelf smartphone, requiring no power supply or modification of the operating systems. BackTrack simply extends the finger tracking area of the front screen, without interrupting the use of the front screen. It also provides a switch to prevent unintentional touch on the trackpad. All these features are enabled by a battery-free capacitive circuit, part of which is a transparent, thin-film conductor coated on a thin glass and attached to the front screen. To ensure accurate and robust tracking, the capacitive circuits are carefully designed. Our design is based on a circuit model of capacitive touchscreens, justified through both physics-based finite-element simulation and controlled laboratory experiments. We conduct user studies to evaluate the performance of using BackTrack. We also demonstrate its use in a number of smartphone applications. Chang Xiao 0003, Karl Bayer, Changxi Zheng, Shree K. Nayar |
CHI | 1 |
| 2021 | DeepCAD: A Deep Generative Network for Computer-Aided Design ModelsabstractDeep generative models of 3D shapes have received a great deal of research interest. Yet, almost all of them generate discrete shape representations, such as voxels, point clouds, and polygon meshes. We present the first 3D generative model for a drastically different shape representation— describing a shape as a sequence of computer-aided design (CAD) operations. Unlike meshes and point clouds, CAD models encode the user creation process of 3D shapes, widely used in numerous industrial and engineering design tasks. However, the sequential and irregular structure of CAD operations poses significant challenges for existing 3D generative models. Drawing an analogy between CAD operations and natural language, we propose a CAD generative network based on the Transformer. We demonstrate the performance of our model for both shape autoencoding and random shape generation. To train our network, we create a new CAD dataset consisting of 178,238 models and their CAD construction sequences. We have made this dataset publicly available to promote future research on this topic. Rundi Wu, Chang Xiao 0003, Changxi Zheng |
ICCV | 2 |
| 2021 | MoiréBoard: A Stable, Accurate and Low-cost Camera Tracking MethodabstractCamera tracking is an essential building block in a myriad of HCI applications. For example, commercial VR devices are equipped with dedicated hardware, such as laser-emitting beacon stations, to enable accurate tracking of VR headsets. However, this hardware remains costly. On the other hand, low-cost solutions such as IMU sensors and visual markers exist, but they suffer from large tracking errors. In this work, we bring high accuracy and low cost together to present MoiréBoard, a new 3-DOF camera position tracking method that leverages a seemingly irrelevant visual phenomenon, the moiré effect. Based on a systematic analysis of the moiré effect under camera projection, MoiréBoard requires no power nor camera calibration. It can be easily made at a low cost (e.g., through 3D printing), ready to use with any stock mobile devices with a camera. Its tracking algorithm is computationally efficient, able to run at a high frame rate. Although it is simple to implement, it tracks devices at high accuracy, comparable to the state-of-the-art commercial VR tracking systems. Chang Xiao 0003, Changxi Zheng |
UIST | 1 |
| 2021 | Mechanics-Aware Modeling of Cloth AppearanceabstractMicro-appearance models have brought unprecedented fidelity and details to cloth rendering. Yet, these models neglect fabric mechanics: when a piece of cloth interacts with the environment, its yarn and fiber arrangement usually changes in response to external contact and tension forces. Since subtle changes of a fabric's microstructures can greatly affect its macroscopic appearance, mechanics-driven appearance variation of fabrics has been a phenomenon that remains to be captured. We introduce a mechanics-aware model that adapts the microstructures of cloth yarns in a physics-based manner. Our technique works on two distinct physical scales: using physics-based simulations of individual yarns, we capture the rearrangement of yarn-level structures in response to external forces. These yarn structures are further enriched to obtain appearance-driving fiber-level details. The cross-scale enrichment is made practical through a new parameter fitting algorithm for simulation, an augmented procedural yarn model coupled with a custom-design regression neural network. We train the network using a dataset generated by joint simulations at both the yarn and the fiber levels. Through several examples, we demonstrate that our model is capable of synthesizing photorealistic cloth appearance in a mechanically plausible way. Zahra Montazeri, Chang Xiao 0003, Yun Fei, Changxi Zheng |
IEEE Trans. Vis. Comput. Graph. | 2 |
| 2020 | One Man's Trash Is Another Man's Treasure: Resisting Adversarial Examples by Adversarial ExamplesabstractModern image classification systems are often built on deep neural networks, which suffer from adversarial examples--images with deliberately crafted, imperceptible noise to mislead the network's classification. To defend against adversarial examples, a plausible idea is to obfuscate the network's gradient with respect to the input image. This general idea has inspired a long line of defense methods. Yet, almost all of them have proven vulnerable. We revisit this seemingly flawed idea from a radically different perspective. We embrace the omnipresence of adversarial examples and the numerical procedure of crafting them, and turn this harmful attacking process into a useful defense mechanism. Our defense method is conceptually simple: before feeding an input image for classification, transform it by finding an adversarial example on a pre-trained external model. We evaluate our method against a wide range of possible attacks. On both CIFAR-10 and Tiny ImageNet datasets, our method is significantly more robust than state-of-the-art methods. Particularly, in comparison to adversarial training, our method offers lower training cost as well as stronger robustness. Chang Xiao 0003, Changxi Zheng |
CVPR | 1 |
| 2020 | Enhancing Adversarial Defense by k-Winners-Take-All
Chang Xiao 0003, Peilin Zhong, Changxi Zheng |
ICLR | 1 |
| 2019 | Rethinking Generative Mode Coverage: A Pointwise Guaranteed ApproachabstractMany generative models have to combat missing modes. The conventional wisdom to this end is by reducing through training a statistical distance (such as f -divergence) between the generated distribution and provided data distribution. But this is more of a heuristic than a guarantee. The statistical distance measures a global, but not local, similarity between two distributions. Even if it is small, it does not imply a plausible mode coverage. Rethinking this problem from a game-theoretic perspective, we show that a complete mode coverage is firmly attainable. If a generative model can approximate a data distribution moderately well under a global statistical distance measure, then we will be able to find a mixture of generators that collectively covers every data point and thus every mode, with a lower-bounded generation probability. Constructing the generator mixture has a connection to the multiplicative weights update rule, upon which we propose our algorithm. We prove that our algorithm guarantees complete mode coverage. And our experiments on real and synthetic datasets confirm better mode coverage over recent approaches, ones that also use generator mixtures but rely on global statistical distances. Peilin Zhong, Yuchen Mo, Chang Xiao 0003, Changxi Zheng |
NeurIPS | 3 |
| 2019 | Vidgets: modular mechanical widgets for mobile devicesabstractWe present Vidgets , a family of mechanical widgets, specifically push buttons and rotary knobs that augment mobile devices with tangible user interfaces. When these widgets are attached to a mobile device and a user interacts with them, the widgets' nonlinear mechanical response shifts the device slightly and quickly, and this subtle motion can be detected by the accelerometer commonly equipped on mobile devices. We propose a physics-based model to understand the nonlinear mechanical response of widgets. This understanding enables us to design tactile force profiles of these widgets so that the resulting accelerometer signals become easy to recognize. We then develop a lightweight signal processing algorithm that analyzes the accelerometer signals and recognizes how the user interacts with the widgets in real time. Vidgets widgets are low-cost, compact, reconfigurable, and power efficient. They can form a diverse set of physical interfaces that enrich users' interactions with mobile devices in various practical scenarios. We demonstrate their use in three applications: photo capture with single-handed zoom, control of mobile games, and making a playable mobile music instrument. Chang Xiao 0003, Karl Bayer, Changxi Zheng, Shree K. Nayar |
ACM Trans. Graph. | 1 |
| 2018 | BourGAN: Generative Networks with Metric EmbeddingsabstractThis paper addresses the mode collapse for generative adversarial networks (GANs). We view modes as a geometric structure of data distribution in a metric space. Under this geometric lens, we embed subsamples of the dataset from an arbitrary metric space into the L2 space, while preserving their pairwise distance distribution. Not only does this metric embedding determine the dimensionality of the latent space automatically, it also enables us to construct a mixture of Gaussians to draw latent space random vectors. We use the Gaussian mixture model in tandem with a simple augmentation of the objective function to train GANs. Every major step of our method is supported by theoretical analysis, and our experiments on real and synthetic data confirm that the generator is able to produce samples spreading over most of the modes while avoiding unwanted samples, outperforming several recent GAN variants on a number of metrics and offering new features. Chang Xiao 0003, Peilin Zhong, Changxi Zheng |
NeurIPS | 1 |
| 2018 | FontCode: Embedding Information in Text Documents Using Glyph PerturbationabstractWe introduceFontCode, an information embedding technique for text documents. Provided a text document with specific fonts, our method embeds user-specified information in the text by perturbing the glyphs of text characters while preserving the text content. We devise an algorithm to choose unobtrusive yet machine-recognizable glyph perturbations, leveraging a recently developed generative model that alters the glyphs of each character continuously on a font manifold. We then introduce an algorithm that embeds a user-provided message in the text document and produces an encoded document whose appearance is minimally perturbed from the original document. We also present a glyph recognition method that recovers the embedded information from an encoded document stored as a vector graphic or pixel image, or even on a printed paper. In addition, we introduce a new error-correction coding scheme that rectifies a certain number of recognition errors. Lastly, we demonstrate that our technique enables a wide array of applications, using it as a text document metadata holder, an unobtrusive optical barcode, a cryptographic message embedding scheme, and a text document signature. Chang Xiao 0003, Changxi Zheng |
ACM Trans. Graph. | 1 |