← Search

Shixin Li

5 accepted papers

2025

Consensus-Robust Transfer Attacks via Parameter and Representation Perturbations

NeurIPS 2025poster

Adversarial examples crafted on one model often exhibit poor transferability to others, hindering their effectiveness in black-box settings. This limitation arises from two key factors: (i) \emph{decision-boundary variation} across models and (ii) \emph{representation drift} in feature space. We add…

Cited by 0SourceScholar
2025

Enhancing Adversarial Transferability with Checkpoints of a Single Model's Training

CVPR 2025poster

Adversarial attacks threaten the integrity of deep neural networks (DNNs), particularly in high-stakes applications. In this paper, we present a novel black-box adversarial attack that leverages the diverse checkpoints generated during a single model's training trajectory. Unlike conventional ensemb…

2025

Gassidy: Gaussian Splatting SLAM in Dynamic Environments

ICRA 2025

3D Gaussian Splatting (3DGS) allows flexible adjustments to scene representation, enabling continuous optimization of scene quality during dense visual simultaneous localization and mapping (SLAM) in static environments. However, 3DGS faces challenges in handling environmental disturbances from dyna

Cited by 14SourceScholar
2025

SDBF: Steep-Decision-Boundary Fingerprinting for Hard-Label Tampering Detection of DNN Models

CVPR 2025poster

Cloud-based AI systems offer significant benefits but also introduce vulnerabilities, making deep neural network (DNN) models susceptible to malicious tampering. This tampering may involve harmful behavior injection or resource reduction, compromising model integrity and performance. To detect model…

2025

Safety-Critical Control with Saliency Detection for Mobile Robots in Dynamic Multi-Obstacle Environments

ICRA 2025

This paper proposes a novel dual-filter architecture utilizing RGB-D camera data and dynamic control barrier functions (D-CBFs) for real-time obstacle avoidance in unstructured environments. The proposed method efficiently handles static, suddenly appearing, and dynamic obstacles, maintaining consis

Cited by 1SourceScholar