← Search

Shuang Song

33 accepted papers

2026

Olbedo: An Albedo and Shading Aerial Dataset for Large-Scale Outdoor Environments

CVPR 2026

Intrinsic image decomposition (IID) of outdoor scenes is crucial for relighting, editing, and understanding large-scale environments, but progress has been limited by the lack of real-world datasets with reliable albedo and shading supervision. We introduce Olbedo, a large-scale aerial dataset for o

Cited by 0SourcecodeScholar
2025

Confront Insider Threat: Precise Anomaly Detection in Behavior Logs Based on LLM Fine-Tuning

COLING 2025main

Anomaly-based detection is effective against evolving insider threats but still suffers from low precision. Current data processing can result in information loss, and models often struggle to distinguish between benign anomalies and actual threats. Both issues hinder precise detection. To address t…

Cited by 1SourcePDFScholar
2025

EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation

EMNLP 2025

Retrieval-Augmented Generation (RAG) compensates for the static knowledge limitations of Large Language Models (LLMs) by integrating external knowledge, producing responses with enhanced factual correctness and query-specific contextualization. However, it also introduces new attack surfaces such as

Cited by 0SourcePDFScholar
2025

ParetoRAG: Leveraging Sentence-Context Attention for Robust and Efficient Retrieval-Augmented Generation

EMNLP 2025

While Retrieval-Augmented Generation systems enhance Large Language Models by incorporating external knowledge, they still face persistent challenges in retrieval inefficiency and the inability of LLMs to filter out irrelevant information. We presentParetoRAG, an unsupervised framework that optimize

Cited by 0SourcePDFScholar
2024

Chained Flexible Capsule Endoscope: Unraveling the Conundrum of Size Limitations and Functional Integration for Gastrointestinal Transitivity

ICRA 2024poster

Capsule endoscopes, predominantly serving diagnostic functions, provide lucid internal imagery but are devoid of surgical or therapeutic capabilities. Consequently, despite lesion detection, physicians frequently resort to traditional endoscopic or open surgical procedures for treatment, resulting i…

Cited by 1SourceScholar
2024

Private Learning with Public Features

AISTATS 2024poster

We study a class of private learning problems in which the data is a join of private and public features. This is often the case in private personalization tasks such as recommendation or ad prediction, in which features related to individuals are sensitive, while features related to items (the movi…

Cited by 7SourcePDFScholar
2023

Feature Proliferation -- the "Cancer" in StyleGAN and its Treatments

ICCV 2023poster

Despite the success of StyleGAN in image synthesis, the images it synthesizes are not always perfect and the well-known truncation trick has become a standard post-processing technique for StyleGAN to synthesize high-quality images. Although effective, it has long been noted that the truncation tric…

Cited by 0PDFcodeScholar
2023

Measuring Forgetting of Memorized Training Examples

ICLR 2023poster

Machine learning models exhibit two seemingly contradictory phenomena: training data memorization and various forms of forgetting. In memorization, models overfit specific training examples and become susceptible to privacy attacks. In forgetting, examples which appeared early in training are forgot…

Cited by 112SourcePDFScholar
2023

Multi-Task Differential Privacy Under Distribution Skew

ICML 2023poster

We study the problem of multi-task learning under user-level differential privacy, in which n users contribute data to m tasks, each involving a subset of users. One important aspect of the problem, that can significantly impact quality, is the distribution skew among tasks. Tasks that have much few…

Cited by 5SourcePDFScholar
2022

A Modular Lockable Mechanism for Tendon-Driven Robots: Design, Modeling and Characterization

RA-L 2022

Surgical robots with variable stiffness can provide more stable configurations during minimally-invasive surgery.This letter presents a new design of modular lockable mechanism which can be used to change the stiffness of tendon-driven surgical robots. Locking and unlocking are simply actuated by pu

Cited by 24SourceScholar
2022

Design and Kinematic Modeling of In-Situ Torsionally-Steerable Flexible Surgical Robots

RA-L 2022

Flexible robots have been widely used in minimally-invasive surgery because of their dexterity and accuracy. However, the torsion of end-effector under bending state usually produces unnecessary concomitant motion of the robot arm. This letter proposes a novel design of <i>in-situ</i> torsionally-st

Cited by 10SourceScholar
2022

Dexterity Analysis and Motion Optimization of In-Situ Torsionally-Steerable Flexible Surgical Robots

RA-L 2022

Flexible robots with <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">in-situ</i> torsion can be used in laryngeal endoscopic surgery which can maintain the position and approach vector of the end-effector during the operation. However, the inherent e

Cited by 16SourceScholar
2022

MO-Transformer: A Transformer-Based Multi-Object Point Cloud Reconstruction Network

IROS 2022poster

This paper proposes a new network for reconstructing multi-object point cloud. Different from previous networks which reconstruct multi-object point cloud as a whole, our network iteratively reconstructs each individual object point cloud from a frame of multi-object point cloud. To achieve this goa…

Cited by 2SourceScholar
2022

Model-free and Uncalibrated Visual-feedback Control of Magnetically-Actuated Flexible Endoscopes

IROS 2022poster

Magnetically-actuated flexible endoscopes (MAFE) have been well used in minimally-invasive surgery because they can be steered by a magnetic field thus more flexible than traditional endoscopes. Model-free and uncalibrated visual-feedback control makes it possible to manipulate MAFE with a magnetic…

Cited by 4SourceScholar
2022

Public Data-Assisted Mirror Descent for Private Model Training

ICML 2022spotlight

In this paper, we revisit the problem of using in-distribution public data to improve the privacy/utility trade-offs for differentially private (DP) model training. (Here, public data refers to auxiliary data sets that have no privacy concerns.) We design a natural variant of DP mirror descent, wher…

Cited by 68SourcePDFScholar
2022

Towards Terrain Adaptablity: In Situ Transformation of Wheel-Biped Robots

RA-L 2022

Most existing bipedal robots can only move with either their wheels or feet. Even if some of them are capable of transforming between these two motions, they need to change their configuration dramatically. In order to truly combine the advantages of wheeled and footed robots, in this letter, an <it

Cited by 26SourceScholar
2022

Versatile Motion Generation of Magnetic Origami Spring Robots in the Uniform Magnetic Field

RA-L 2022

Magnetic soft robots have attracted widespread attention for their untethered, remotely operated, and compliant deformation characteristics. Earlier work has demonstrated magnetic origami robots' diverse locomotion capabilities. This letter will focus on the motion generation and open-loop control o

Cited by 22SourceScholar
2021

Differentially Private Model Personalization

NeurIPS 2021spotlight

We study personalization of supervised learning with user-level differential privacy. Consider a setting with many users, each of whom has a training data set drawn from their own distribution $P_i$. Assuming some shared structure among the problems $P_i$, can users collectively learn the shared str…

Cited by 41SourcePDFScholar
2021

Dynamic tracking for microrobot with active magnetic sensor array

ICRA 2021poster

Accurate position feedback in a wide range is critical for medical microrobotics and robot-assisted examinations, such as colonoscopy, bronchoscopy and capsule endoscopy examination. Among the many modalities of positioning feedback, magnetic tracking is a preferable method due to the unique advanta…

Cited by 11SourceScholar
2021

Evading the Curse of Dimensionality in Unconstrained Private GLMs

AISTATS 2021poster

We revisit the well-studied problem of differentially private empirical risk minimization (ERM). We show that for unconstrained convex generalized linear models (GLMs), one can obtain an excess empirical risk of $\tilde O\left(\sqrt{\rank}/\epsilon n\right)$, where $\rank$ is the rank of the feature…

Cited by 92SourcePDFScholar
2021

Kinematic Modeling of Magnetically-Actuated Robotic Catheter in Nonlinearly-Coupled Multi-Field

RA-L 2021

Magnetically-actuated robotic catheter (MARC) has shown great potential in minimally-invasive surgery because they can be steered remotely and wirelessly. However, when driven by external permanent magnets (EPM), the MARC is subject to nonlinearly-coupled gravitational, magnetic, and elastic forces,

Cited by 18SourceScholar
2021

Practical and Private (Deep) Learning Without Sampling or Shuffling

ICML 2021spotlight

We consider training models with differential privacy (DP) using mini-batch gradients. The existing state-of-the-art, Differentially Private Stochastic Gradient Descent (DP-SGD), requires \emph{privacy amplification by sampling or shuffling} to obtain the best privacy/accuracy/computation trade-offs…

Cited by 226SourcePDFScholar
2021

Private Alternating Least Squares: Practical Private Matrix Completion with Tighter Rates

ICML 2021oral

We study the problem of differentially private (DP) matrix completion under user-level privacy. We design a joint differentially private variant of the popular Alternating-Least-Squares (ALS) method that achieves: i) (nearly) optimal sample complexity for matrix completion (in terms of number of ite…

Cited by 23SourcePDFScholar
2021

Tempered Sigmoid Activations for Deep Learning with Differential Privacy

AAAI 2021technical

Because learning sometimes involves sensitive data, machine learning algorithms have been extended to offer differential privacy for training data. In practice, this has been mostly an afterthought, with privacy-preserving models obtained by re-running training with a different optimizer, but using…

Cited by 203SourcePDFScholar
2021

Vis2Mesh: Efficient Mesh Reconstruction From Unstructured Point Clouds of Large Scenes With Learned Virtual View Visibility

ICCV 2021poster

We present a novel framework for mesh reconstruction from unstructured point clouds by taking advantage of the learned visibility of the 3D points in the virtual views and traditional graph-cut based mesh generation. Specifically, we first propose a three-step network that explicitly employs depth c…

Cited by 17PDFcodeScholar
2020

The Flajolet-Martin Sketch Itself Preserves Differential Privacy: Private Counting with Minimal Space

NeurIPS 2020poster

We revisit the problem of counting the number of distinct elements $\dist$ in a data stream $D$, over a domain $[u]$. We propose an $(\epsilon,\delta)$-differentially private algorithm that approximates $\dist$ within a factor of $(1\pm\gamma)$, and with additive error of $O(\sqrt{\ln(1/\delta)}/\ep…

Cited by 44SourcePDFScholar
2018

Robust Generalized Point Cloud Registration with Expectation Maximization Considering Anisotropic Positional Uncertainties

IROS 2018poster

Alignment of two point clouds is an essential problem in medical robotics and computer-assisted surgery. In this paper, we first formally formulate the generalized point cloud registration problem in a probabilistic manner. Specifically, not only positional but also the orientational information are…

Cited by 28SourceScholar
2018

Scalable Private Learning with PATE

ICLR 2018poster

The rapid adoption of machine learning has increased concerns about the privacy implications of machine learning models trained on sensitive data, such as medical records or other personal information. To address those concerns, one promising approach is Private Aggregation of Teacher Ensembles, or…

2017

Preliminary study on magnetic tracking based navigation for wire-driven flexible robot

IROS 2017poster

Flexible manipulator enables curvilinear accessibility through small incisions or natural orifices for minimally invasive surgery and diagnosis, which makes it a good choice for minimally invasive surgery. In order to control the robot precisely and safely, the real-time position and shape informati…

Cited by 9SourceScholar
2017

Renyi Differential Privacy Mechanisms for Posterior Sampling

NeurIPS 2017poster

With the newly proposed privacy definition of Rényi Differential Privacy (RDP) in (Mironov, 2017), we re-examine the inherent privacy of releasing a single sample from a posterior distribution. We exploit the impact of the prior distribution in mitigating the influence of individual data points. In…