← Search

Simon S. Woo

19 accepted papers

2025

DIA: The Adversarial Exposure of Deterministic Inversion in Diffusion Models

ICCV 2025poster

Diffusion models have shown to be strong representation learners, showcasing state-of-the-art performance across multiple domains. Aside from accelerated sampling, DDIM also enables the inversion of real images back to their latent codes. A direct inheriting application of this inversion operation i…

Cited by 0SourcePDFScholar
2025

RUAGO: Effective and Practical Retain-Free Unlearning via Adversarial Attack and OOD Generator

NeurIPS 2025poster

With increasing regulations on private data usage in AI systems, machine unlearning has emerged as a critical solution for selectively removing sensitive information from trained models while preserving their overall utility. While many existing unlearning methods rely on the *retain data* to mitiga…

Cited by 0SourceScholar
2025

SpecGuard: Spectral Projection-based Advanced Invisible Watermarking

ICCV 2025poster

Watermarking embeds imperceptible patterns into images for authenticity verification. However, existing methods often lack robustness against various transformations primarily including distortions, image regeneration, and adversarial perturbation, creating real-world challenges. In this work, we in…

2025

Through the Lens: Benchmarking Deepfake Detectors Against Moiré-Induced Distortions

NeurIPS 2025poster

Deepfake detection remains a pressing challenge, particularly in real-world settings where smartphone-captured media from digital screens often introduces Moiré artifacts that can distort detection outcomes. This study systematically evaluates state-of-the-art (SOTA) deepfake detectors on Moiré-affe…

Cited by 0SourceScholar
2025

Translation of Text Embedding via Delta Vector to Suppress Strongly Entangled Content in Text-to-Image Diffusion Models

ICCV 2025poster

Text-to-Image (T2I) diffusion models have made significant progress in generating diverse high-quality images from textual prompts. However, these models still face challenges in suppressing content that is strongly entangled with specific words. For example, when generating an image of "Charlie Cha…

2024

All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models

AAAI 2024technical

Text-to-Image models such as Stable Diffusion have shown impressive image generation synthesis, thanks to the utilization of large-scale datasets. However, these datasets may contain sexually explicit, copyrighted, or undesirable content, which allows the model to directly generate them. Given that…

Cited by 17SourcePDFScholar
2024

Blind-Touch: Homomorphic Encryption-Based Distributed Neural Network Inference for Privacy-Preserving Fingerprint Authentication

AAAI 2024technical

Fingerprint authentication is a popular security mechanism for smartphones and laptops. However, its adoption in web and cloud environments has been limited due to privacy concerns over storing and processing biometric data on servers. This paper introduces Blind-Touch, a novel machine learning-base…

2024

Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation

AAAI 2024technical

Recently, serious concerns have been raised about the privacy issues related to training datasets in machine learning algorithms when including personal data. Various regulations in different countries, including the GDPR grant individuals to have personal data erased, known as ‘the right to be forg…

Cited by 10SourcePDFScholar
2024

Source-Free Online Domain Adaptive Semantic Segmentation of Satellite Images Under Image Degradation

ICASSP 2024accepted

Online adaptation to distribution shifts in satellite image segmentation stands as a crucial yet underexplored problem. In this paper, we address source-free and online domain adaptation, i.e., test-time adaptation (TTA), for satellite images, with the focus on mitigating distribution shifts caused…

Cited by 0SourceScholar
2023

IMF: Integrating Matched Features Using Attentive Logit in Knowledge Distillation

IJCAI 2023poster

Knowledge distillation (KD) is an effective method for transferring the knowledge of a teacher model to a student model, that aims to improve the latter's performance efficiently. Although generic knowledge distillation methods such as softmax representation distillation and intermediate feature mat…

Cited by 4SourcePDFScholar
2021

FakeAVCeleb: A Novel Audio-Video Multimodal Deepfake Dataset

NeurIPS 2021poster

While the significant advancements have made in the generation of deepfakes using deep learning technologies, its misuse is a well-known issue now. Deepfakes can cause severe security and privacy issues as they can be used to impersonate a person's identity in a video by replacing his/her face with…

Cited by 254SourcecodeScholar
2021

VFP290K: A Large-Scale Benchmark Dataset for Vision-based Fallen Person Detection

NeurIPS 2021poster

Detection of fallen persons due to, for example, health problems, violence, or accidents, is a critical challenge. Accordingly, detection of these anomalous events is of paramount importance for a number of applications, including but not limited to CCTV surveillance, security, and health care. Give…

Cited by 20SourceScholar