← Search

Shiwei Feng

9 accepted papers

2025

EffiTune: Diagnosing and Mitigating Training Inefficiency for Parameter Tuner in Robot Navigation System

IROS 2025

Robot navigation systems are critical for various real-world applications such as delivery services, hospital logistics, and warehouse management. Although classical navigation methods provide interpretability, they rely heavily on expert manual tuning, limiting their adaptability. Conversely, purel

Cited by 1SourceScholar
2025

TAI3: Testing Agent Integrity in Interpreting User Intent

NeurIPS 2025poster

LLM agents are increasingly deployed to automate real-world tasks by invoking APIs through natural language instructions. While powerful, they often suffer from misinterpretation of user intent, leading to the agent’s actions that diverge from the user’s intended goal, especially as external toolkit…

Cited by 0SourceScholar
2025

Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving

NeurIPS 2025poster

Assessing the safety of autonomous driving (AD) systems against security threats, particularly backdoor attacks, is a stepping stone for real-world deployment. However, existing works mainly focus on pixel-level triggers which are impractical to deploy in the real world. We address this gap by intro…

Cited by 0SourceScholar
2024

BadPart: Unified Black-box Adversarial Patch Attacks against Pixel-wise Regression Tasks

ICML 2024poster

Pixel-wise regression tasks (e.g., monocular depth estimation (MDE) and optical flow estimation (OFE)) have been widely involved in our daily life in applications like autonomous driving, augmented reality and video composition. Although certain applications are security-critical or bear societal si…

2024

Fusion Is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection

ICLR 2024poster

Multi-sensor fusion (MSF) is widely used in autonomous vehicles (AVs) for perception, particularly for 3D object detection with camera and LiDAR sensors. The purpose of fusion is to capitalize on the advantages of each modality while minimizing its weaknesses. Advanced deep neural network (DNN)-base…

2024

LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning

CVPR 2024poster

Backdoor attack poses a significant security threat to Deep Learning applications. Existing attacks are often not evasive to established backdoor detection techniques. This susceptibility primarily stems from the fact that these attacks typically leverage a universal trigger pattern or transformatio…

2023

Detecting Backdoors in Pre-Trained Encoders

CVPR 2023poster

Self-supervised learning in computer vision trains on unlabeled data, such as images or (image, text) pairs, to obtain an image encoder that learns high-quality embeddings for input data. Emerging backdoor attacks towards encoders expose crucial vulnerabilities of self-supervised learning, since dow…

2023

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning

ICLR 2023poster

Federated Learning (FL) is a distributed learning paradigm that enables different parties to train a model together for high quality and strong privacy protection. In this scenario, individual participants may get compromised and perform backdoor attacks by poisoning the data (or gradients). Existin…