← Search

Decheng Liu

6 accepted papers

2025

Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement

AAAI 2025technical

Adversarial fine-tuning methods enhance adversarial robustness via fine-tuning the pre-trained model in an adversarial training manner. However, we identify that some specific latent features of adversarial samples are confused by adversarial perturbation and lead to an unexpectedly increasing gap b…

Cited by 0SourcePDFScholar
2025

Phase and Amplitude-aware Prompting for Enhancing Adversarial Robustness

ICML 2025poster

Deep neural networks are found to be vulnerable to adversarial perturbations. The prompt-based defense has been increasingly studied due to its high efficiency. However, existing prompt-based defenses mainly exploited mixed prompt patterns, where critical patterns closely related to object semantics…

Cited by 0SourcePDFScholar
2025

Thinking Racial Bias in Fair Forgery Detection: Models, Datasets and Evaluations

AAAI 2025technical

Due to the successful development of deep image generation technology, forgery detection plays a more important role in social and economic security. Racial bias has not been explored thoroughly in the deep forgery detection field. In the paper, we first contribute a dedicated dataset called the Fai…

2024

Adv-Diffusion: Imperceptible Adversarial Face Identity Attack via Latent Diffusion Model

AAAI 2024technical

Adversarial attacks involve adding perturbations to the source image to cause misclassification by the target model, which demonstrates the potential of attacking face recognition models. Existing adversarial face image generation methods still can’t achieve satisfactory performance because of low t…

2023

Eliminating Adversarial Noise via Information Discard and Robust Representation Restoration

ICML 2023poster

Deep neural networks (DNNs) are vulnerable to adversarial noise. Denoising model-based defense is a major protection strategy. However, denoising models may fail and induce negative effects in fully white-box scenarios. In this work, we start from the latent inherent properties of adversarial sample…

Cited by 8SourcePDFScholar
2023

Hiding Visual Information via Obfuscating Adversarial Perturbations

ICCV 2023poster

Growing leakage and misuse of visual information raise security and privacy concerns, which promotes the development of information protection. Existing adversarial perturbations-based methods mainly focus on the de-identification against deep learning models. However, the inherent visual informatio…

Cited by 12PDFcodeScholar