← Search

Qinghua Tao

8 accepted papers

2024

Kernel PCA for Out-of-Distribution Detection

NeurIPS 2024poster

Out-of-Distribution (OoD) detection is vital for the reliability of Deep Neural Networks (DNNs). Existing works have shown the insufficiency of Principal Component Analysis (PCA) straightforwardly applied on the features of DNNs in detecting OoD data from In-Distribution (InD) data. The failure of P…

2024

Learning in Feature Spaces via Coupled Covariances: Asymmetric Kernel SVD and Nyström method

ICML 2024poster

In contrast with Mercer kernel-based approaches as used e.g. in Kernel Principal Component Analysis (KPCA), it was previously shown that Singular Value Decomposition (SVD) inherently relates to asymmetric kernels and Asymmetric Kernel Singular Value Decomposition (KSVD) has been proposed. However, t…

Cited by 3SourcePDFScholar
2024

Self-Attention through Kernel-Eigen Pair Sparse Variational Gaussian Processes

ICML 2024poster

While the great capability of Transformers significantly boosts prediction accuracy, it could also yield overconfident predictions and require calibrated uncertainty estimation, which can be commonly tackled by Gaussian processes (GPs). Existing works apply GPs with symmetric kernels under variation…

2023

Measuring the Transferability of ℓ∞ Attacks by the ℓ2 Norm

ICASSP 2023accepted

Deep neural networks could be fooled by adversarial examples with trivial differences to original samples. To keep the difference imperceptible in human eyes, researchers bound the adversarial perturbations by the ℓ <inf xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1…

Cited by 0SourceScholar
2023

Primal-Attention: Self-attention through Asymmetric Kernel SVD in Primal Representation

NeurIPS 2023poster

Recently, a new line of works has emerged to understand and improve self-attention in Transformers by treating it as a kernel machine. However, existing works apply the methods for symmetric kernels to the asymmetric self-attention, resulting in a nontrivial gap between the analytical understanding…

2023

Trainable Weight Averaging: Efficient Training by Optimizing Historical Solutions

ICLR 2023poster

Stochastic gradient descent (SGD) and its variants are considered as the de-facto methods to train deep neural networks (DNNs). While recent improvements to SGD mainly focus on the descent algorithm itself, few works pay attention to utilizing the historical solutions---as an iterative method, SGD h…

Cited by 14SourcePDFScholar
2022

Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks

NeurIPS 2022accept

The score-based query attacks (SQAs) pose practical threats to deep neural networks by crafting adversarial perturbations within dozens of queries, only using the model's output scores. Nonetheless, we note that if the loss trend of the outputs is slightly perturbed, SQAs could be easily misled and…