← Search

Hui Xue'

7 accepted papers

2023

Inequality phenomenon in $l_{\infty}$-adversarial training, and its unrealized threats

ICLR 2023top-25%

The appearance of adversarial examples raises attention from both academia and industry. Along with the attack-defense arms race, adversarial training is the most effective against adversarial examples. However, we find inequality phenomena occur during the $l_{\infty}$-adversarial training, that fe…

Cited by 0SourcePDFScholar
2023

Sparse Black-Box Multimodal Attack for Vision-Language Adversary Generation

EMNLP 2023long findings

Deep neural networks have been widely applied in real-world scenarios, such as product restrictions on e-commerce and hate speech monitoring on social media, to ensure secure governance of various platforms. However, illegal merchants often deceive the detection models by adding large-scale perturb…

Cited by 0SourceScholar
2023

Spectral Invariant Learning for Dynamic Graphs under Distribution Shifts

NeurIPS 2023poster

Dynamic graph neural networks (DyGNNs) currently struggle with handling distribution shifts that are inherent in dynamic graphs. Existing work on DyGNNs with out-of-distribution settings only focuses on the time domain, failing to handle cases involving distribution shifts in the spectral domain. In…

2022

Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains

ICLR 2022poster

Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-model transferability, which mostly assume the substitute model is trained in the same domain as the target model. However,…

2022

Boosting Out-of-distribution Detection with Typical Features

NeurIPS 2022accept

Out-of-distribution (OOD) detection is a critical task for ensuring the reliability and safety of deep neural networks in real-world scenarios. Different from most previous OOD detection methods that focus on designing OOD scores or introducing diverse outlier examples to retrain the model, we delve…

Cited by 61SourcePDFScholar
2022

Enhance the Visual Representation via Discrete Adversarial Training

NeurIPS 2022accept

Adversarial Training (AT), which is commonly accepted as one of the most effective approaches defending against adversarial examples, can largely harm the standard performance, thus has limited usefulness on industrial-scale production and applications. Surprisingly, this phenomenon is totally oppos…