← Search

Hong Sun

8 accepted papers

2026

Efficient, Secure, Differentially Private Deep Learning in the Two-Server Model

AAAI 2026technical

Existing solutions on differentially private deep learning (DPDL) either require the assumption of a trusted data server (centralized DPDL) or suffer from poor utility (local DPDL); and hence their adoptions are hampered in real-world scenarios.We present CRYPTDP, a crypto-assisted differentially pr

Cited by 0SourcePDFScholar
2026

Preference Is More than Comparisons: Rethinking Dueling Bandits with Augmented Human Feedback

AAAI 2026technical

Interactive preference elicitation (IPE) aims to substantially reduce human effort while acquiring human preferences in wide personalization systems. Dueling bandit (DB) algorithms enable optimal decision-making in IPE building on pairwise comparisons. However, they remain inefficient when human fee

Cited by 0SourcePDFScholar
2026

Stabilizing Cross-Modal Bidirectional Attribution: Few-Shot Adversarial Prompt Tuning for Robust Vision-Language Models

AAAI 2026technical

Large-scale pre-trained vision-language models (VLMs) like CLIP show exceptional performance and zero-shot generalization. However, their reliability may be severely undermined by a critical vulnerability to subtle adversarial perturbations. Our work reveals a critical cross-modal vulnerability: vis

Cited by 0SourcePDFScholar
2025

Beyond Label Semantics: Language-Guided Action Anatomy for Few-shot Action Recognition

ICCV 2025poster

Few-shot action recognition (FSAR) aims to classify human actions in videos with only a small number of labeled samples per category. The scarcity of training data has driven recent efforts to incorporate additional modalities, particularly text. However, the subtle variations in human posture, moti…

Cited by 0SourcePDFScholar
2025

SADBA: Self-Adaptive Distributed Backdoor Attack Against Federated Learning

AAAI 2025technical

Backdoor attacks in federated learning (FL) face challenges such as lower attack success rates and compromised main task accuracy (MA) compared to local training. Existing methods like distributed backdoor attack (DBA) mitigate these issues by modifying malicious clients’ updates and partitioning gl…

Cited by 0SourcePDFScholar
2024

Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios

ICLR 2024poster

Recent deep neural networks (DNNs) have came to rely on vast amounts of training data, providing an opportunity for malicious attackers to exploit and contaminate the data to carry out backdoor attacks. However, existing backdoor attack methods make unrealistic assumptions, assuming that all trainin…

2022

Enhancing Self-Attention with Knowledge-Assisted Attention Maps

NAACL 2022long

Large-scale pre-trained language models have attracted extensive attentions in the research community and shown promising results on various tasks of natural language processing. However, the attention maps, which record the attention scores between tokens in self-attention mechanism, are sometimes…

Cited by 8SourcePDFScholar
2016

DOA estimation of closely-spaced and spectrally-overlapped sources based on time-frequency sparse representation

ICASSP 2016accepted

For the purpose of dealing with closely-spaced and spectrally-overlapped sources, a direction-of-arrival (DOA) estimation algorithm based on time-frequency (TF) sparse representation is proposed. Firstly a short-time Fourier transform (STFT) based single-source TF points selection method is briefly…

Cited by 0SourceScholar