← Search

Lilin Zhang

4 accepted papers

2026

Posterior Mismatch Matters: Adversarial Training for Long-Tailed Robustness

ICML 2026poster

Adversarial training breaks down in long-tailed settings, exhibiting severe robustness degradation on worst-performing (often tail) classes. We identify a key cause of this failure as a posterior mismatch: coarse-grained absolute labels collapse class posteriors into point estimates, leading to bias…

Cited by 0SourceScholar
2026

Taming the Long Tail: Rebalancing Adversarial Training via Adaptive Perturbation

CVPR 2026

Deep neural networks are highly vulnerable to adversarial examples, i.e.,small perturbations that can significantly degrade model performance. While adversarial training has become the primary defense strategy, most studies focus on balanced datasets, overlooking the challenges posed by real-world l

Cited by 0SourcecodeScholar
2025

Weakly Supervised Contrastive Adversarial Training for Learning Robust Features from Semi-supervised Data

CVPR 2025poster

Existing adversarial training (AT) methods often suffer from incomplete perturbation, meaning that not all non-robust features are perturbed when generating adversarial examples (AEs). This results in residual correlations between non-robust features and labels, leading to suboptimal learning of rob…