← Search

Keke Tang

33 accepted papers

2026

Less Is More: Sparse and Cooperative Perturbation for Point Cloud Attacks

AAAI 2026technical

Most adversarial attacks on point clouds perturb a large number of points, causing widespread geometric changes and limiting applicability in real-world scenarios. While recent works explore sparse attacks by modifying only a few points, such approaches often struggle to maintain effectiveness due t

Cited by 0SourcePDFScholar
2026

Nasty Adversarial Training: A Probability Sparsity Perspective for Robustness Enhancement

ICLR 2026poster

The vulnerability of deep neural networks to adversarial examples poses significant challenges to their reliable deployment. Among existing empirical defenses, adversarial training and robust distillation have proven the most effective. In this paper, we identify a property originally associated wit…

Cited by 0SourceScholar
2026

Optimal Transport-Induced Samples against Out-of-Distribution Overconfidence

ICLR 2026poster

Deep neural networks (DNNs) often produce overconfident predictions on out-of-distribution (OOD) inputs, undermining their reliability in open-world environments. Singularities in semi-discrete optimal transport (OT) mark regions of semantic ambiguity, where classifiers are particularly prone to unw…

Cited by 0SourceScholar
2026

Towards Unified Vision-Language Models with Incomplete Multi-Modal Inputs

AAAI 2026technical

Video-Language Models (VLMs) have demonstrated impressive multi-modal reasoning capabilities across diverse computer vision applications. However, these VLMs are task-specific and assume that both video and language inputs are complete. However, real-world VLM applications might face challenges due

Cited by 0SourcePDFScholar
2026

Transferable Hypergraph Attack via Injecting Nodes into Pivotal Hyperedges

AAAI 2026technical

Recent studies have demonstrated that hypergraph neural networks (HGNNs) are susceptible to adversarial attacks. However, existing methods rely on the specific information mechanisms of target HGNNs, overlooking the common vulnerability caused by the significant differences in hyperedge pivotality a

Cited by 0SourcePDFScholar
2026

Understanding and Exploiting Phase Sensitivity for Attacking Large Vision–Language Models

IJCAI 2026

Although Large Vision-Language Models (LVLMs) have demonstrated remarkable reasoning capabilities across various downstream multimodal tasks, they are proven to be vulnerable to carefully designed adversarial examples. Existing LVLM attackers show that exploring external components of adversarial gu

Cited by 0Scholar
2025

AdvGrasp: Adversarial Attacks on Robotic Grasping from a Physical Perspective

IJCAI 2025

Adversarial attacks on robotic grasping provide valuable insights into evaluating and improving the robustness of these systems. Unlike studies that focus solely on neural network predictions while overlooking the physical principles of grasping, this paper introduces AdvGrasp, a framework for adver

Cited by 0SourcePDFScholar
2025

HyperDet: Source Detection in Hypergraphs via Interactive Relationship Construction and Feature-rich Attention Fusion

IJCAI 2025

Hypergraphs offer superior modeling capabilities for social networks, particularly in capturing group phenomena that extend beyond pairwise interactions in rumor propagation. Existing approaches in rumor source detection predominantly focus on dyadic interactions, which inadequately address the comp

Cited by 0SourcePDFScholar
2025

Hypergraph Attacks via Injecting Homogeneous Nodes into Elite Hyperedges

AAAI 2025technical

Recent studies have shown that Hypergraph Neural Networks (HGNNs) are vulnerable to adversarial attacks. Existing approaches focus on hypergraph modification attacks guided by gradients, overlooking node spanning in the hypergraph and the group identity of hyperedges, thereby resulting in limited at…

Cited by 2SourcePDFScholar
2025

Imperceptible 3D Point Cloud Attacks on Lattice-based Barycentric Coordinates

AAAI 2025technical

Imperceptible adversarial attacks on 3D point clouds rely on effective constraints. While manifold constraints have notable advantages over Euclidean ones, the global parameterization used in current methods often fails to fully preserve manifold properties. In this paper, we propose to constrain la…

Cited by 1SourcePDFScholar
2025

Imperceptible Adversarial Attacks on Point Clouds Guided by Point-to-Surface Field

ICASSP 2025accepted

Adversarial attacks on point clouds are crucial for assessing and improving the adversarial robustness of 3D deep learning models. Traditional solutions strictly limit point displacement during attacks, making it challenging to balance imperceptibility with adversarial effectiveness. In this paper,…

Cited by 0SourceScholar
2025

LoRA-PAR: A Flexible Dual-System LoRA Partitioning Approach to Efficient LLM Fine-Tuning

EMNLP 2025

Large-scale generative models like DeepSeek-R1 and OpenAI-O1 benefit substantially from chain-of-thought (CoT) reasoning, yet pushing their performance typically requires vast data, large model sizes, and full-parameter fine-tuning. While parameter-efficient fine-tuning (PEFT) helps reduce cost, mos

2025

Multi-Pair Temporal Sentence Grounding via Multi-Thread Knowledge Transfer Network

AAAI 2025technical

Given some video-query pairs with untrimmed videos and sentence queries, temporal sentence grounding (TSG) aims to locate query-relevant segments in these videos. Although previous respectable TSG methods have achieved remarkable success, they train each video-query pair separately and ignore the re…

Cited by 4SourcePDFScholar
2025

Simplification Is All You Need against Out-of-Distribution Overconfidence

CVPR 2025poster

Deep neural networks (DNNs) often exhibit out-of-distribution (OOD) overconfidence, producing overly confident predictions on OOD samples. We attribute this issue to the inherent over-complexity of DNNs and investigate two key aspects: capacity and nonlinearity. First, we demonstrate that reducing m…

Cited by 3SourcePDFScholar
2025

SourceDetMamba: A Graph-aware State Space Model for Source Detection in Sequential Hypergraphs

IJCAI 2025

Source detection on graphs has demonstrated high efficacy in identifying rumor origins. Despite advances in machine learning-based methods, many fail to capture intrinsic dynamics of rumor propagation. In this work, we present SourceDetMamba: A Graph-aware State Space Model for Source Detection in S

Cited by 0SourcePDFScholar
2025

Towards Building Model/Prompt-Transferable Attackers against Large Vision-Language Models

NeurIPS 2025spotlight

Although Large Vision-Language Models (LVLMs) exhibit impressive multimodal capabilities, their vulnerability to adversarial examples has raised serious security concerns. Existing LVLM attackers simply optimize adversarial images that easily overfit a certain model/prompt, making them ineffective o…

Cited by 0SourceScholar
2024

A General Black-box Adversarial Attack on Graph-based Fake News Detectors

IJCAI 2024poster

Graph Neural Network (GNN)-based fake news detectors apply various methods to construct graphs, aiming to learn distinctive news embeddings for classification. Since the construction details are unknown for attackers in a black-box scenario, it is unrealistic to conduct the classical adversarial att…

Cited by 15SourcePDFScholar
2024

CORES: Convolutional Response-based Score for Out-of-distribution Detection

CVPR 2024poster

Deep neural networks (DNNs) often display overconfidence when encountering out-of-distribution (OOD) samples posing significant challenges in real-world applications. Capitalizing on the observation that responses on convolutional kernels are generally more pronounced for in-distribution (ID) sample…

Cited by 6SourcePDFScholar
2024

Enhancing Emotion-Cause Pair Extraction in Conversations via Center Event Detection and Reasoning

EMNLP 2024finding

Emotion-Cause Pair Extraction in Conversations (ECPEC) aims to identify emotion utterances and their corresponding cause utterances in unannotated conversations, this task that has garnered increasing attention recently. Previous methods often apply Emotion-Cause Pair Extraction (ECPE) task models,…

Cited by 1SourcePDFScholar
2024

FLAT: Flux-aware Imperceptible Adversarial Attacks on 3D Point Clouds

ECCV 2024poster

"Adversarial attacks on point clouds play a vital role in assessing and enhancing the adversarial robustness of 3D deep learning models. While employing a variety of geometric constraints, existing adversarial attack solutions often display unsatisfactory imperceptibility due to inadequate considera…

Cited by 5SourcePDFScholar
2024

GIN-SD: Source Detection in Graphs with Incomplete Nodes via Positional Encoding and Attentive Fusion

AAAI 2024technical

Source detection in graphs has demonstrated robust efficacy in the domain of rumor source identification. Although recent solutions have enhanced performance by leveraging deep neural networks, they often require complete user data. In this paper, we address a more challenging task, rumor source det…

Cited by 16SourcePDFScholar
2024

Hiding Imperceptible Noise in Curvature-Aware Patches for 3D Point Cloud Attack

ECCV 2024poster

"With the maturity of depth sensors, point clouds have received increasing attention in various 3D safety-critical applications, while deep point cloud learning models have been shown to be vulnerable to adversarial attacks. Most existing 3D attackers rely on implicit global distance losses to pertu…

Cited by 6SourcePDFScholar
2024

LT-Defense: Searching-free Backdoor Defense via Exploiting the Long-tailed Effect

NeurIPS 2024poster

Language models have shown vulnerability against backdoor attacks, threatening the security of services based on them. To mitigate the threat, existing solutions attempted to search for backdoor triggers, which can be time-consuming when handling a large search space. Looking into the attack process…

Cited by 1SourcePDFScholar
2024

Manifold Constraints for Imperceptible Adversarial Attacks on Point Clouds

AAAI 2024technical

Adversarial attacks on 3D point clouds often exhibit unsatisfactory imperceptibility, which primarily stems from the disregard for manifold-aware distortion, i.e., distortion of the underlying 2-manifold surfaces. In this paper, we develop novel manifold constraints to reduce such distortion, aiming…

Cited by 11SourcePDFScholar
2024

Pandora's Box: Towards Building Universal Attackers against Real-World Large Vision-Language Models

NeurIPS 2024poster

Large Vision-Language Models (LVLMs) have demonstrated remarkable capabilities across a wide range of multimodal understanding tasks. Nevertheless, these models are susceptible to adversarial examples. In real-world applications, existing LVLM attackers generally rely on the detailed prior knowledge…

Cited by 7SourcePDFScholar
2024

Reparameterization Head for Efficient Multi-Input Networks

ICASSP 2024accepted

Reparameterization techniques have demonstrated their efficacy in improving the efficiency of deep neural networks. However, their application has been largely confined to single-input network structures, leaving multi-input ones, commonly encountered in real-world applications, largely unexplored.…

Cited by 0SourceScholar
2024

Rethinking Weakly-supervised Video Temporal Grounding From a Game Perspective

ECCV 2024poster

"This paper addresses the challenging task of weakly-supervised video temporal grounding. Existing approaches are generally based on the moment proposal selection framework that utilizes contrastive learning and reconstruction paradigm for scoring the pre-defined moment proposals. Although they have…

Cited by 16SourcePDFScholar
2024

Towards Robust Temporal Activity Localization Learning with Noisy Labels

COLING 2024main

This paper addresses the task of temporal activity localization (TAL). Although recent works have made significant progress in TAL research, almost all of them implicitly assume that the dense frame-level correspondences in each video-query pair are correctly annotated. However, in reality, such an…

Cited by 6SourcePDFScholar
2023

Annotations Are Not All You Need: A Cross-modal Knowledge Transfer Network for Unsupervised Temporal Sentence Grounding

EMNLP 2023long findings

This paper addresses the task of temporal sentence grounding (TSG). Although many respectable works have made decent achievements in this important topic, they severely rely on massive expensive video-query paired annotations, which require a tremendous amount of human effort to collect in real-worl…

Cited by 0SourceScholar
2023

Deep Manifold Attack on Point Clouds via Parameter Plane Stretching

AAAI 2023technical

Adversarial attack on point clouds plays a vital role in evaluating and improving the adversarial robustness of 3D deep learning models. Current attack methods are mainly applied by point perturbation in a non-manifold manner. In this paper, we formulate a novel manifold attack, which deforms the un…

Cited by 17SourcePDFScholar
2022

Manipulation Planning From Demonstration Via Goal-Conditioned Prior Action Primitive Decomposition and Alignment

RA-L 2022

Manipulation plays a vital role in robotics but is left unsolved. Recent work attempts to leverage the hierarchical structure of tasks via using action primitives. However, due to trajectory distribution shift, prior action primitives could hardly be adapted to new tasks. In this letter, we propose

Cited by 15SourceScholar
2021

CODEs: Chamfer Out-of-Distribution Examples Against Overconfidence Issue

ICCV 2021poster

Overconfident predictions on out-of-distribution (OOD) samples is a thorny issue for deep neural networks. The key to resolve the OOD overconfidence issue inherently is to build a subset of OOD samples and then suppress predictions on them. This paper proposes the Chamfer OOD examples (CODEs), whose…

Cited by 39PDFScholar
2020

A Hybrid Underwater Manipulator System With Intuitive Muscle-Level sEMG Mapping Control

RA-L 2020

Soft-robotic manipulators, with their closed-chamber elastomeric actuators, natural water-sealing and inherent compliance, are ideal for underwater applications for compact, lightweight, and dexterous manipulation tasks. However, their low structure rigidity makes soft robots highly prone to underwa

Cited by 11SourceScholar