← Search

Xiaochun Cao

139 accepted papers

2026

A Pure Hierarchical Spectral Parcellation Network for Brain Network Analysis

ICML 2026poster

Brain network classification is pivotal for diagnosing neurological disorders, yet clinical interpretability and the identification of discriminative biomarkers fundamentally rely on precise functional parcellation. However, existing graph learning models for brain network analysis typically suffer …

Cited by 0SourceScholar
2026

Agent4FaceForgery: Multi-Agent LLM Framework for Realistic Face Forgery Detection

CVPR 2026

Face forgery detection faces a critical challenge: a persistent gap between offline benchmarks and real-world efficacy, which we attribute to the ecological invalidity of training data. This work introduces Agent4FaceForgery to address two fundamental problems: (1) how to capture the diverse intents

Cited by 0SourceScholar
2026

BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation

CVPR 2026

This paper investigates the challenging task of detecting backdoored text-to-image models under black-box settings and introduces a novel detection framework BlackMirror. Existing approaches typically rely on analyzing image-level similarity, under the assumption that backdoor-triggered generations

Cited by 0SourcecodeScholar
2026

Compactness and Consistency: A Conjoint Framework for Deep Graph Clustering

ICLR 2026oral

Graph clustering is a fundamental task in data analysis, aiming at grouping nodes with similar characteristics in the graph into clusters. This problem has been widely explored using graph neural networks (GNNs) due to their ability to leverage node attributes and graph topology for effective cluste…

Cited by 0SourcecodeScholar
2026

EagleNet: Energy-Aware Fine-Grained Relationship Learning Network for Text-Video Retrieval

CVPR 2026

Text-video retrieval tasks have seen significant improvements due to the recent development of large-scale vision-language pre-trained models. Traditional methods primarily focus on video representations or cross-modal alignment, while recent works shift toward enriching text expressiveness to bette

Cited by 0SourcecodeScholar
2026

End-to-end Graph-structured Brain Representation Learning

ICML 2026poster

The construction of the brain functional network often follows the hand-crafted Correlation Coefficients of blood-oxygen-level-dependent (BOLD) time series without any learnable components. Meanwhile, most efforts are made to the models, such as graph neural networks, that make predictions with the …

Cited by 0SourceScholar
2026

FaceShield: Explainable Face Anti-Spoofing with Multimodal Large Language Models

AAAI 2026technical

Face anti-spoofing (FAS) is crucial for protecting facial recognition systems from presentation attacks. Previous methods approached this task as a classification problem, lacking interpretability and reasoning behind the predicted results. Recently, multimodal large language models (MLLMs) have sho

Cited by 0SourcePDFScholar
2026

HTAC: Hierarchical Task-Aware Composition for Continual Offline Reinforcement Learning

ICML 2026poster

Continual Offline Reinforcement Learning (CORL) enables building long-term autonomous agents from static datasets. However, it faces heterogeneity in environment dynamics, reward functions, and behavior policies across tasks. Combined with the inherent distribution shift in offline learning, this re…

Cited by 0SourceScholar
2026

Improving Graph Transformers via Global Structural Priors

ICML 2026poster

By synergizing graph topology with the global expressive power of the attention mechanism, Graph Transformers (GTs) have emerged as a dominant architecture for node classification. However, existing models primarily focus on diverse topology injection mechanisms, specifically score-level and represe…

Cited by 0SourceScholar
2026

Inverse Reinforcement Learning with Dynamic Reward Scaling for LLM Alignment

ICLR 2026poster

Alignment is vital for safely deploying large language models (LLMs). Existing techniques are either reward-based--train a reward model on preference pairs and optimize with reinforcement learning (RL)--or reward-free--directly fine-tune on ranked outputs. Recent research show that well-tuned reward…

Cited by 0SourceScholar
2026

Making Training-Free Diffusion Segmentors Scale with the Generative Power

CVPR 2026

As powerful generative models, text-to-image diffusion models have recently been explored for discriminative tasks. A line of research focuses on adapting a pre-trained diffusion model to semantic segmentation without any further training, leading to training-free diffusion segmentors. These methods

Cited by 0SourcecodeScholar
2026

MergOPT: A Merge-Aware Optimizer for Robust Model Merging

ICLR 2026poster

Model merging aims to integrate multiple independently fine-tuned expert models into a single model while preserving the knowledge of all experts. However, existing approaches mainly address parameter conflicts at the merging stage and overlook the role of the fine-tuning process, which often leads…

Cited by 0SourceScholar
2026

OptMerge: Unifying Multimodal LLM Capabilities and Modalities via Model Merging

ICLR 2026poster

Foundation models update slowly due to resource-intensive training, whereas domain-specific models evolve rapidly between releases. Model merging seeks to combine multiple expert models into a single, more capable model, reducing storage and serving costs while supporting decentralized development.…

Cited by 0SourceScholar
2026

Performance-Driven Demonstration Selection for In-Context Learning

IJCAI 2026

In-context learning (ICL) enables large language models (LLMs) to adapt to new tasks with considerable performance gains, yet its effectiveness is highly sensitive to the choice of demonstrations. Most existing selection methods rely on heuristic or proxy signals (e.g., similarity, diversity, or unc

Cited by 0Scholar
2026

PhaseWin Search Framework Enable Efficient Object-Level Interpretation

CVPR 2026

Attribution is essential for interpreting object-level foundation models. Recent methods based on submodular subset selection have achieved high faithfulness, but their efficiency limitations hinder practical deployment in real-world scenarios. To address this, we propose PhaseWin, a novel phase-win

Cited by 0SourcecodeScholar
2026

Reasoning as an Attack Surface: Adaptive Evolutionary CoT Jailbreaks for LLMs

ICML 2026poster

Large Reasoning Models (LRMs) have demonstrated remarkable capabilities in reasoning and generation tasks and are increasingly deployed in real-world applications. However, their explicit chain-of-thought (CoT) mechanism introduces new security risks, making them particularly vulnerable to jailbreak…

Cited by 0SourceScholar
2026

SCNS: Continual Personalization of Diffusion Models via Submodular Concept Neuron Selection

ICML 2026poster

Custom diffusion models (CDMs) have demonstrated impressive success in visual personalization tasks by enabling the generation of user-specific concepts. However, existing CDMs typically assume that personalized concepts are static and rely on costly model merging or sequential updates that are pron…

Cited by 0SourceScholar
2026

TrojanTO: Action-Level Backdoor Attacks Against Trajectory Optimization Models

ICLR 2026poster

Trajectory Optimization (TO) models have achieved remarkable success in offline reinforcement learning (offline RL). However, their vulnerability to backdoor attacks remains largely unexplored. We find that existing backdoor attacks in RL, which typically rely on reward manipulation throughout train…

Cited by 0SourceScholar
2026

Where MLLMs Attend and What They Rely On: Explaining Autoregressive Token Generation

CVPR 2026

Multimodal large language models (MLLMs) have demonstrated remarkable capabilities in aligning visual inputs with natural language outputs. Yet, the extent to which generated tokens depend on visual modalities remains poorly understood, limiting interpretability and reliability. In this work, we pre

Cited by 0SourcecodeScholar
2025

3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation

ICCV 2025poster

Physical adversarial attack methods expose the vulnerabilities of deep neural networks and pose a significant threat to safety-critical scenarios such as autonomous driving. Camouflage-based physical attack is a more promising approach compared to the patch-based attack, offering stronger adversaria…

2025

A Closer Look at Graph Transformers: Cross-Aggregation and Beyond

NeurIPS 2025spotlight

Graph Transformers (GTs), which effectively capture long-range dependencies and structural biases simultaneously, have recently emerged as promising alternatives to traditional Graph Neural Networks (GNNs). Advanced approaches for GTs to leverage topology information involve integrating GNN modules…

Cited by 0SourceScholar
2025

Ada-R1: Hybrid-CoT via Bi-Level Adaptive Reasoning Optimization

NeurIPS 2025poster

Recently, long-thought reasoning models achieve strong performance on complex reasoning tasks, but often incur substantial inference overhead, making efficiency a critical concern. Our empirical analysis reveals that the benefit of using Long-CoT varies across problems: while some problems require e…

Cited by 0SourceScholar
2025

CamEdit: Continuous Camera Parameter Control for Photorealistic Image Editing

NeurIPS 2025poster

Recent advances in diffusion models have substantially improved text-driven image editing. However, existing frameworks based on discrete textual tokens struggle to support continuous control over camera parameters and smooth transitions in visual effects. These limitations hinder their applications…

Cited by 0SourceScholar
2025

Continual Model Merging without Data: Dual Projections for Balancing Stability and Plasticity

NeurIPS 2025poster

Model merging integrates multiple expert models with diverse capabilities into a unified framework, facilitating collaborative learning. However, most existing methods assume simultaneous access to all models, which is often impractical in real-world scenarios where models are received sequentially.…

Cited by 0SourceScholar
2025

Critical Forgetting-Based Multi-Scale Disentanglement for Deepfake Detection

AAAI 2025technical

Recent face forgery detection methods based on disentangled representation learning utilize paired images for cross-reconstruction, aiming to extract forgery-relevant attributes and forgery-irrelevant content. However, there still exist the following issues that may comprise the detector performance…

Cited by 0SourcePDFScholar
2025

DADM: Dual Alignment of Domain and Modality for Face Anti-spoofing

ICCV 2025poster

With the availability of diverse sensor modalities (i.e., RGB, Depth, Infrared) and the success of multi-modal learning, multi-modal face anti-spoofing (FAS) has emerged as a prominent research focus. The intuition behind it is that leveraging multiple modalities can uncover more intrinsic spoofing…

2025

Decoupled Graph Energy-based Model for Node Out-of-Distribution Detection on Heterophilic Graphs

ICLR 2025poster

Despite extensive research efforts focused on Out-of-Distribution (OOD) detection on images, OOD detection on nodes in graph learning remains underexplored. The dependence among graph nodes hinders the trivial adaptation of existing approaches on images that assume inputs to be i.i.d. sampled, since…

2025

Disentangled Graph Spectral Domain Adaptation

ICML 2025poster

The distribution shifts and the scarcity of labels prevent graph learning methods, especially graph neural networks (GNNs), from generalizing across domains. Compared to Unsupervised Domain Adaptation (UDA) with embedding alignment, Unsupervised Graph Domain Adaptation (UGDA) becomes more challengin…

Cited by 0SourcePDFScholar
2025

Do We Really Need Message Passing in Brain Network Modeling?

ICML 2025spotlight

Brain network analysis plays a critical role in brain disease prediction and diagnosis. Graph mining tools have made remarkable progress. Graph neural networks (GNNs) and Transformers, which rely on the message-passing scheme, recently dominated this field due to their powerful expressive ability on…

2025

Ex-VAD: Explainable Fine-grained Video Anomaly Detection Based on Visual-Language Models

ICML 2025poster

With advancements in visual language models (VLMs) and large language models (LLMs), video anomaly detection (VAD) has progressed beyond binary classification to fine-grained categorization and multidimensional analysis. However, existing methods focus mainly on coarse-grained detection, lacking ano…

Cited by 0SourcePDFScholar
2025

Focal-SAM: Focal Sharpness-Aware Minimization for Long-Tailed Classification

ICML 2025poster

Real-world datasets often follow a long-tailed distribution, making generalization to tail classes difficult. Recent methods resorted to long-tail variants of Sharpness-Aware Minimization (SAM), such as ImbSAM and CC-SAM, to improve generalization by flattening the loss landscape. However, these att…

Cited by 0SourcePDFScholar
2025

Gradient-Reweighted Adversarial Camouflage for Physical Object Detection Evasion

ICCV 2025poster

Object detection is widely used in real-world applications such as autonomous driving, yet adversarial camouflage poses a significant threat by deceiving detectors from multiple viewpoints. Existing techniques struggle to maintain consistent attack efficacy across different viewpoints. To address th…

2025

Graph Contrastive Learning with Joint Spectral Augmentation of Attribute and Topology

AAAI 2025technical

As an essential technique for Graph Contrastive Learning (GCL), Graph Augmentation (GA) improves the generalization capability of the GCLs by introducing different forms of the same graph. To ensure information integrity, existing GA strategies have been designed to simultaneously process the two ty…

Cited by 0SourcePDFScholar
2025

Improved Techniques for Optimization-Based Jailbreaking on Large Language Models

ICLR 2025poster

Large language models (LLMs) are being rapidly developed, and a key component of their widespread deployment is their safety-related alignment. Many red-teaming efforts aim to jailbreak LLMs, where among these efforts, the Greedy Coordinate Gradient (GCG) attack's success has led to a growing intere…

2025

Interpreting Object-level Foundation Models via Visual Precision Search

CVPR 2025highlight

Advances in multimodal pre-training have propelled object-level foundation models, such as Grounding DINO and Florence-2, in tasks like visual grounding and object detection. However, interpreting these models' decisions has grown increasingly challenging. Existing interpretable attribution methods…

2025

Lie Detector: Unified Backdoor Detection via Cross-Examination Framework

NeurIPS 2025poster

Institutions with limited data and computing resources often outsource model training to third-party providers in a semi-honest setting, assuming adherence to prescribed training protocols with pre-defined learning paradigm (e.g., supervised or semi-supervised learning). However, this practice can i…

Cited by 0SourceScholar
2025

MMGIA: Gradient Inversion Attack Against Multimodal Federated Learning via Intermodal Correlation

IJCAI 2025

Multimodal federated learning (MMFL) enables collaborative model training across multiple modalities, such as images and text, without requiring direct data sharing. However, the inherent correlations between modalities introduce new privacy vulnerabilities, making MMFL more susceptible to gradient

Cited by 0SourcePDFScholar
2025

Modeling Multi-Task Model Merging as Adaptive Projective Gradient Descent

ICML 2025poster

Merging multiple expert models offers a promising approach for performing multi-task learning without accessing their original data. Existing methods attempt to alleviate task conflicts by sparsifying task vectors or promoting orthogonality among them. However, they overlook the fundamental target o…

2025

Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries

ACL 2025long

Current multi-task adversarial text attacks rely on abundant access to shared internal features and numerous queries, often limited to a single task type. As a result, these attacks are less effective against practical scenarios involving black-box feedback APIs, limited queries, or multiple task ty…

Cited by 0SourcePDFScholar
2025

Object-Level Backdoor Attacks in RGB-T Semantic Segmentation with Cross-Modality Trigger Optimization

IJCAI 2025

The escalating threat of backdoor risks in deep vision models is a pressing concern. Existing research on backdoor attacks is often confined to a single modality, neglecting the challenges posed by multi-modality scene perception. This work is a pioneer of backdoor attacks in RGB-Thermal (RGB-T) sem

Cited by 0SourcePDFScholar
2025

One Image is Worth a Thousand Words: A Usability Preservable Text-Image Collaborative Erasing Framework

ICML 2025poster

Concept erasing has recently emerged as an effective paradigm to prevent text-to-image diffusion models from generating visually undesirable or even harmful content. However, current removal methods heavily rely on manually crafted text prompts, making it challenging to achieve a high erasure (**eff…

2025

Physical Adversarial Camouflage Through Gradient Calibration and Regularization

IJCAI 2025

The advancement of deep object detectors has greatly affected safety-critical fields like autonomous driving. However, physical adversarial camouflage poses a significant security risk by altering object textures to deceive detectors. Existing techniques struggle with variable physical environments,

Cited by 0SourcePDFScholar
2025

Rethinking Joint Maximum Mean Discrepancy for Visual Domain Adaptation

NeurIPS 2025oral

In domain adaption (DA), joint maximum mean discrepancy (JMMD), as a famous distribution-distance metric, aims to measure joint probability distribution difference between the source domain and target domain, while it is still not fully explored and especially hard to be applied into a subspace-lear…

Cited by 0SourceScholar
2025

Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift

CVPR 2025poster

Instruction tuning enhances large vision-language models (LVLMs) but increases their vulnerability to backdoor attacks due to their open design. Unlike prior studies in static settings, this paper explores backdoor attacks in LVLM instruction tuning across mismatched training and testing domains. We…

2025

RoMa: A Robust Model Watermarking Scheme for Protecting IP in Diffusion Models

NeurIPS 2025poster

Preserving intellectual property (IP) within a pre-trained diffusion model is critical for protecting the model's copyright and preventing unauthorized model deployment. In this regard, model watermarking is a common practice for IP protection that embeds traceable information within models and allo…

Cited by 0SourcecodeScholar
2025

RobustSplat: Decoupling Densification and Dynamics for Transient-Free 3DGS

ICCV 2025poster

3D Gaussian Splatting (3DGS) has gained significant attention for its real-time, photo-realistic rendering in novel-view synthesis and 3D modeling. However, existing methods struggle with accurately modeling scenes affected by transient objects, leading to artifacts in the rendered images. We identi…

2025

SUMI-IFL: An Information-Theoretic Framework for Image Forgery Localization with Sufficiency and Minimality Constraints

AAAI 2025technical

Image forgery localization (IFL) is a crucial technique for preventing tampered image misuse and protecting social safety. However, due to the rapid development of image tampering technologies, extracting more comprehensive and accurate forgery clues remains an urgent challenge. To address these cha…

Cited by 1SourcePDFScholar
2025

Semi-Supervised State-Space Model with Dynamic Stacking Filter for Real-World Video Deraining

CVPR 2025poster

Significant progress has been made in video restoration under rainy conditions over the past decade, largely propelled by advancements in deep learning. Nevertheless, existing methods that depend on paired data struggle to generalize effectively to real-world scenarios, primarily due to the disparit…

Cited by 0SourcePDFScholar
2025

Targeted Low-rank Refinement: Enhancing Sparse Language Models with Precision

ICML 2025poster

Pruning is a widely used technique for compressing large neural networks that eliminates weights that have minimal impact on the model's performance. Current pruning methods, exemplified by magnitude pruning, assign an importance score to each weight based on its magnitude and remove weights with sc…

Cited by 0SourcePDFScholar
2025

Towards Irreversible Attack: Fooling Scene Text Recognition via Multi-Population Coevolution Search

NeurIPS 2025poster

Recent work has shown that scene text recognition (STR) models are vulnerable to adversarial examples. Different from non-sequential vision tasks, the output sequence of STR models contains rich information. However, existing adversarial attacks against STR models can only lead to a few incorrect c…

Cited by 0SourcecodeScholar
2025

Transparent Vision: A Theory of Hierarchical Invariant Representations

ICCV 2025poster

Developing robust and interpretable vision systems is a crucial step towards trustworthy artificial intelligence. One promising paradigm is to design transparent structures, e.g., geometric invariance, for fundamental representations. However, such invariants exhibit limited discriminability, limiti…

Cited by 0SourcePDFScholar
2025

UMDATrack: Unified Multi-Domain Adaptive Tracking Under Adverse Weather Conditions

ICCV 2025poster

Visual object tracking has gained promising progress in past decades. Most of the existing approaches focus on learning target representation in well-conditioned daytime data, while for the unconstrained real-world scenarios with adverse weather conditions, e.g. nighttime or foggy environment, the t…

2025

Understanding the Stability-based Generalization of Personalized Federated Learning

ICLR 2025poster

Despite great achievements in algorithm design for Personalized Federated Learning (PFL), research on the theoretical analysis of generalization is still in its early stages. Some theoretical results have investigated the generalization performance of personalized models under the problem setting an…

2025

Unveiling the Power of Multiple Gossip Steps: A Stability-Based Generalization Analysis in Decentralized Training

NeurIPS 2025spotlight

Decentralized training removes the centralized server, making it a communication-efficient approach that can significantly improve training efficiency, but it often suffers from degraded performance compared to centralized training. Multi-Gossip Steps (MGS) serve as a simple yet effective bridge bet…

Cited by 0SourceScholar
2025

Vad-R1: Towards Video Anomaly Reasoning via Perception-to-Cognition Chain-of-Thought

NeurIPS 2025poster

Recent advancements in reasoning capability of Multimodal Large Language Models (MLLMs) demonstrate its effectiveness in tackling complex visual tasks. However, existing MLLM-based Video Anomaly Detection (VAD) methods remain limited to shallow anomaly descriptions without deep reasoning. In this pa…

Cited by 0SourcecodeScholar
2024

BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning

CVPR 2024highlight

While existing backdoor attacks have successfully infected multimodal contrastive learning models such as CLIP they can be easily countered by specialized backdoor defenses for MCL models. This paper reveals the threats in this practical scenario and introduces the BadCLIP attack which is resistant…

2024

CAT: Enhancing Multimodal Large Language Model to Answer Questions in Dynamic Audio-Visual Scenarios

ECCV 2024poster

"This paper focuses on the challenge of answering questions in scenarios that are composed of rich and complex dynamic audio-visual components. Although existing Multimodal Large Language Models (MLLMs) can respond to audio-visual content, these responses are sometimes ambiguous and fail to describe…

2024

Chat-UniVi: Unified Visual Representation Empowers Large Language Models with Image and Video Understanding

CVPR 2024highlight

Large language models have demonstrated impressive universal capabilities across a wide range of open-ended tasks and have extended their utility to encompass multimodal conversations. However existing methods encounter challenges in effectively handling both image and video understanding particular…

2024

Does Few-Shot Learning Suffer from Backdoor Attacks?

AAAI 2024technical

The field of few-shot learning (FSL) has shown promising results in scenarios where training data is limited, but its vulnerability to backdoor attacks remains largely unexplored. We first explore this topic by first evaluating the performance of the existing backdoor attack methods on few-shot lear…

2024

EnsIR: An Ensemble Algorithm for Image Restoration via Gaussian Mixture Models

NeurIPS 2024poster

Image restoration has experienced significant advancements due to the development of deep learning. Nevertheless, it encounters challenges related to ill-posed problems, resulting in deviations between single model predictions and ground-truths. Ensemble learning, as a powerful machine learning tech…

2024

Fast Graph Sharpness-Aware Minimization for Enhancing and Accelerating Few-Shot Node Classification

NeurIPS 2024poster

Graph Neural Networks (GNNs) have shown superior performance in node classification. However, GNNs perform poorly in the Few-Shot Node Classification (FSNC) task that requires robust generalization to make accurate predictions for unseen classes with limited labels. To tackle the challenge, we propo…

2024

Harnessing Hierarchical Label Distribution Variations in Test Agnostic Long-tail Recognition

ICML 2024poster

This paper explores test-agnostic long-tail recognition, a challenging long-tail task where the test label distributions are unknown and arbitrarily imbalanced. We argue that the variation in these distributions can be broken down hierarchically into global and local levels. The global ones reflect…

2024

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds

CVPR 2024poster

Adversarial attack methods based on point manipulation for 3D point cloud classification have revealed the fragility of 3D models yet the adversarial examples they produce are easily perceived or defended against. The trade-off between the imperceptibility and adversarial strength leads most point a…

2024

Improving Graph Contrastive Learning via Adaptive Positive Sampling

CVPR 2024poster

Graph Contrastive Learning (GCL) a Self-Supervised Learning (SSL) architecture tailored for graphs has shown notable potential for mitigating label scarcity. Its core idea is to amplify feature similarities between the positive sample pairs and reduce them between the negative sample pairs. Unfortun…

Cited by 5SourcePDFScholar
2024

Less is More: Fewer Interpretable Region via Submodular Subset Selection

ICLR 2024oral

Image attribution algorithms aim to identify important regions that are highly relevant to model decisions. Although existing attribution solutions can effectively assign importance to target elements, they still face the following challenges: 1) existing attribution methods generate inaccurate smal…

2024

Logit Standardization in Knowledge Distillation

CVPR 2024highlight

Knowledge distillation involves transferring soft labels from a teacher to a student using a shared temperature-based softmax function. However the assumption of a shared temperature between teacher and student implies a mandatory exact match between their logits in terms of logit range and variance…

2024

Not All Diffusion Model Activations Have Been Evaluated as Discriminative Features

NeurIPS 2024spotlight

Diffusion models are initially designed for image generation. Recent research shows that the internal signals within their backbones, named activations, can also serve as dense features for various discriminative tasks such as semantic segmentation. Given numerous activations, selecting a small yet…

2024

Omnidirectional Image Super-resolution via Bi-projection Fusion

AAAI 2024technical

With the rapid development of virtual reality, omnidirectional images (ODIs) have attracted much attention from both the industrial community and academia. However, due to storage and transmission limitations, the resolution of current ODIs is often insufficient to provide an immersive virtual reali…

2024

PTUS: Photo-Realistic Talking Upper-Body Synthesis via 3D-Aware Motion Decomposition Warping

AAAI 2024technical

Talking upper-body synthesis is a promising task due to its versatile potential for video creation and consists of animating the body and face from a source image with the motion from a given driving video. However, prior synthesis approaches fall short in addressing this task and have been either l…

2024

Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection

ICLR 2024spotlight

The proliferation of face forgery techniques has raised significant concerns within society, thereby motivating the development of face forgery detection methods. These methods aim to distinguish forged faces from genuine ones and have proven effective in practical applications. However, this paper…

2024

Restoring Images in Adverse Weather Conditions via Histogram Transformer

ECCV 2024poster

"Transformer-based image restoration methods in adverse wea-ther have achieved significant progress. Most of them use self-attention along the channel dimension or within spatially fixed-range blocks to reduce computational load. However, such a compromise results in limitations in capturing long-ra…

2024

SDGAN: Disentangling Semantic Manipulation for Facial Attribute Editing

AAAI 2024technical

Facial attribute editing has garnered significant attention, yet prevailing methods struggle with achieving precise attribute manipulation while preserving irrelevant details and controlling attribute styles. This challenge primarily arises from the strong correlations between different attributes a…

2024

Size-invariance Matters: Rethinking Metrics and Losses for Imbalanced Multi-object Salient Object Detection

ICML 2024spotlight

This paper explores the size-invariance of evaluation metrics in Salient Object Detection (SOD), especially when multiple targets of diverse sizes co-exist in the same image. We observe that current metrics are size-sensitive, where larger objects are focused, and smaller ones tend to be ignored. We…

2024

Suppress Content Shift: Better Diffusion Features via Off-the-Shelf Generation Techniques

NeurIPS 2024poster

Diffusion models are powerful generative models, and this capability can also be applied to discrimination. The inner activations of a pre-trained diffusion model can serve as features for discriminative tasks, namely, diffusion feature. We discover that diffusion feature has been hindered by a hidd…

2024

Unified Graph Augmentations for Generalized Contrastive Learning on Graphs

NeurIPS 2024poster

In real-world scenarios, networks (graphs) and their tasks possess unique characteristics, requiring the development of a versatile graph augmentation (GA) to meet the varied demands of network analysis. Unfortunately, most Graph Contrastive Learning (GCL) frameworks are hampered by the specificity,…

Cited by 1SourcePDFScholar
2023

A Unified Generalization Analysis of Re-Weighting and Logit-Adjustment for Imbalanced Learning

NeurIPS 2023spotlight

Real-world datasets are typically imbalanced in the sense that only a few classes have numerous samples, while many classes are associated with only a few samples. As a result, a naive ERM learning process will be biased towards the majority classes, making it difficult to generalize to the minority…

Cited by 33SourcePDFScholar
2023

DRAUC: An Instance-wise Distributionally Robust AUC Optimization Framework

NeurIPS 2023poster

The Area Under the ROC Curve (AUC) is a widely employed metric in long-tailed classification scenarios. Nevertheless, most existing methods primarily assume that training and testing examples are drawn i.i.d. from the same distribution, which is often unachievable in practice. Distributionally Robus…

2023

Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization

AAAI 2023technical

Recent studies have demonstrated that existing deep neural networks (DNNs) on 3D point clouds are vulnerable to adversarial examples, especially under the white-box settings where the adversaries have access to model parameters. However, adversarial 3D point clouds generated by existing white-box me…

2023

IRNeXt: Rethinking Convolutional Network Design for Image Restoration

ICML 2023poster

We present IRNeXt, a simple yet effective convolutional network architecture for image restoration. Recently, Transformer models have dominated the field of image restoration due to the powerful ability of modeling long-range pixels interactions. In this paper, we excavate the potential of the convo…

2023

LSGNN: Towards General Graph Neural Network in Node Classification by Local Similarity

IJCAI 2023poster

Heterophily has been considered as an issue that hurts the performance of Graph Neural Networks (GNNs). To address this issue, some existing work uses a graph-level weighted fusion of the information of multi-hop neighbors to include more nodes with homophily. However, the heterophily might differ a…

2023

Lightweight Image Super-Resolution with Superpixel Token Interaction

ICCV 2023poster

Transformer-based methods have demonstrated impressive results on single-image super-resolution (SISR) task. However, self-attention mechanism is computationally expensive when applied to the entire image. As a result, current approaches divide low-resolution input images into small patches, which a…

Cited by 68PDFcodeScholar
2023

Punctuation-level Attack: Single-shot and Single Punctuation Can Fool Text Models

NeurIPS 2023poster

The adversarial attacks have attracted increasing attention in various fields including natural language processing. The current textual attacking models primarily focus on fooling models by adding character-/word-/sentence-level perturbations, ignoring their influence on human perception. In this p…

Cited by 3SourcePDFScholar
2023

Selective Frequency Network for Image Restoration

ICLR 2023poster

Image restoration aims to reconstruct the latent sharp image from its corrupted counterpart. Besides dealing with this long-standing task in the spatial domain, a few approaches seek solutions in the frequency domain in consideration of the large discrepancy between spectra of sharp/degraded image p…

Cited by 169SourcePDFScholar
2023

Self-supervised Graph Neural Networks via Low-Rank Decomposition

NeurIPS 2023poster

Self-supervised learning is introduced to train graph neural networks (GNNs) by employing propagation-based GNNs designed for semi-supervised learning tasks. Unfortunately, this common choice tends to cause two serious issues. Firstly, global parameters cause the model lack the ability to capture th…

Cited by 14SourcePDFScholar
2022

A Large-Scale Multiple-Objective Method for Black-Box Attack against Object Detection

ECCV 2022poster

"Recent studies have shown that detectors based on deep models are vulnerable to adversarial examples, even in the black-box scenario where the attacker cannot access the model information. Most existing attack methods aim to minimize the true positive rate, which often shows poor attack performance…

2022

Defending against Model Stealing via Verifying Embedded External Features

AAAI 2022technical

Obtaining a well-trained model involves expensive data collection and training procedures, therefore the model is a valuable intellectual property. Recent studies revealed that adversaries can `steal' deployed models even when they have no training samples and can not get access to the model paramet…

2022

Geometry Interaction Knowledge Graph Embeddings

AAAI 2022technical

Knowledge graph (KG) embeddings have shown great power in learning representations of entities and relations for link prediction tasks. Previous work usually embeds KGs into a single geometric space such as Euclidean space (zero curved), hyperbolic space (negatively curved) or hyperspherical space (…

2022

LAS-AT: Adversarial Training With Learnable Attack Strategy

CVPR 2022oral

Adversarial training (AT) is always formulated as a minimax problem, of which the performance depends on the inner optimization that involves the generation of adversarial examples (AEs). Most previous methods adopt Projected Gradient Decent (PGD) with manually specifying attack parameters for AE ge…

Cited by 196PDFcodeScholar
2022

OPEN: Orthogonal Propagation with Ego-Network Modeling

NeurIPS 2022accept

To alleviate the unfavorable effect of noisy topology in Graph Neural networks (GNNs), some efforts perform the local topology refinement through the pairwise propagation weight learning and the multi-channel extension. Unfortunately, most of them suffer a common and fatal drawback: irrelevant propa…

Cited by 7SourcePDFScholar
2022

OTKGE: Multi-modal Knowledge Graph Embeddings via Optimal Transport

NeurIPS 2022accept

Multi-modal knowledge graph embeddings (KGE) have caught more and more attention in learning representations of entities and relations for link prediction tasks. Different from previous uni-modal KGE approaches, multi-modal KGE can leverage expressive knowledge from a wealth of modalities (image, te…

Cited by 72SourcePDFScholar
2022

OpenAUC: Towards AUC-Oriented Open-Set Recognition

NeurIPS 2022accept

Traditional machine learning follows a close-set assumption that the training and test set share the same label space. While in many practical scenarios, it is inevitable that some test samples belong to unknown classes (open-set). To fix this issue, Open-Set Recognition (OSR), whose goal is to make…

2022

PMP-NET: Rethinking Visual Context for Scene Graph Generation

ICASSP 2022accepted

Scene graph generation aims to describe the contents in scenes by identifying the objects and their relationships. In previous works, visual context is widely utilized in message passing networks to generate the representations for classification. However, the noisy estimation of visual context limi…

Cited by 0SourceScholar
2022

Prior-Guided Adversarial Initialization for Fast Adversarial Training

ECCV 2022poster

"Fast adversarial training (FAT) effectively improves the efficiency of standard adversarial training (SAT). However, initial FAT encounters catastrophic overfitting, i.e., the robust accuracy against adversarial attacks suddenly decreases to 0% during training. Though several FAT variants spare no…

2022

Self-Supervised Graph Neural Networks via Diverse and Interactive Message Passing

AAAI 2022technical

By interpreting Graph Neural Networks (GNNs) as the message passing from the spatial perspective, their success is attributed to Laplacian smoothing. However, it also leads to serious over-smoothing issue by stacking many layers. Recently, many efforts have been paid to overcome this issue in semi-s…

Cited by 12SourcePDFScholar
2022

The Minority Matters: A Diversity-Promoting Collaborative Metric Learning Algorithm

NeurIPS 2022accept

Collaborative Metric Learning (CML) has recently emerged as a popular method in recommendation systems (RS), closing the gap between metric learning and Collaborative Filtering. Following the convention of RS, existing methods exploit unique user representation in their model design. This paper focu…

2022

Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal

ECCV 2022poster

"As a common security tool, visible watermarking has been widely applied to protect copyrights of digital images. However, recent works have shown that visible watermarks can be removed by DNNs without damaging their host images. Such watermark-removal techniques pose a great threat to the ownership…

2021

Deep Partial Rank Aggregation for Personalized Attributes

AAAI 2021technical

In this paper, we study the problem of how to aggregate pairwise personalized attributes (PA) annotations (e.g., Shoes A is more comfortable than B) from different annotators on the crowdsourcing platforms, which is an emerging topic gaining increasing attention in recent years. Given the crowdsourc…

Cited by 7SourcePDFScholar
2021

Diverse Message Passing for Attribute with Heterophily

NeurIPS 2021poster

Most of the existing GNNs can be modeled via the Uniform Message Passing framework. This framework considers all the attributes of each node in its entirety, shares the uniform propagation weights along each edge, and focuses on the uniform weight learning. The design of this framework possesses tw…

Cited by 83SourcePDFScholar
2021

Dual Quaternion Knowledge Graph Embeddings

AAAI 2021technical

In this paper, we study the problem of learning representations of entities and relations in the knowledge graph for the link prediction task. Our idea is based on the observation that the vast majority of the related work only models the relation as a single geometric operation such as translation…

2021

Heterogeneous Graph Information Bottleneck

IJCAI 2021poster

Most attempts on extending Graph Neural Networks (GNNs) to Heterogeneous Information Networks (HINs) implicitly take the direct assumption that the multiple homogeneous attributed networks induced by different meta-paths are complementary. The doubts about the hypothesis of complementary motivate…

Cited by 33SourcePDFScholar
2021

Multi-Scale Separable Network for Ultra-High-Definition Video Deblurring

ICCV 2021poster

Although recent research has witnessed a significant progress on the video deblurring task, these methods struggle to reconcile inference efficiency and visual quality simultaneously, especially on ultra-high-definition (UHD) videos (e.g., 4K resolution). To address the problem, we propose a novel d…

Cited by 36PDFcodeScholar
2021

Parallel Rectangle Flip Attack: A Query-Based Black-Box Attack Against Object Detection

ICCV 2021poster

Object detection has been widely used in many safety-critical tasks, such as autonomous driving. However, its vulnerability to adversarial examples has not been sufficiently studied, especially under the practical scenario of black-box attacks, where the attacker can only access the query feedback o…

Cited by 80PDFScholar
2021

Progressive Contour Regression for Arbitrary-Shape Scene Text Detection

CVPR 2021poster

State-of-the-art scene text detection methods usually model the text instance with local pixels or components from the bottom-up perspective and, therefore, are sensitive to noises and dependent on the complicated heuristic post-processing especially for arbitrary-shape texts. To relieve these two i…

Cited by 141PDFcodeScholar
2021

Pyramid Architecture Search for Real-Time Image Deblurring

ICCV 2021poster

Multi-scale and multi-patch deep models have been shown effective in removing blurs of dynamic scenes. However, these methods still have one major obstacle: manually designing a lightweight and high-efficiency network is challenging and time-consuming. To tackle this problem, we propose a novel debl…

Cited by 48PDFScholar
2021

Ultra-High-Definition Image Dehazing via Multi-Guided Bilateral Learning

CVPR 2021poster

During the last couple of years, convolutional neural networks (CNNs) have achieved significant success in the single image dehazing task. Unfortunately, most existing deep dehazing models have high computational complexity, which hinders their application to high-resolution images, especially for U…

Cited by 248PDFcodeScholar
2021

Ultra-High-Definition Image HDR Reconstruction via Collaborative Bilateral Learning

ICCV 2021poster

Existing single image high dynamic range (HDR) reconstruction attempt to expand the range of luminance. They are not effective to generate plausible textures and colors in the reconstructed results, especially for high-density pixels in ultra-high-definition (UHD) images.To address these problems, w…

Cited by 35PDFScholar
2021

What to Select: Pursuing Consistent Motion Segmentation from Multiple Geometric Models

AAAI 2021technical

Motion segmentation aims at separating motions of different moving objects in a video sequence. Facing the complicated real-world scenes, recent studies reveal that combining multiple geometric models would be a more effective way than just employing a single one. This motivates a new wave of model-…

2021

When All We Need is a Piece of the Pie: A Generic Framework for Optimizing Two-way Partial AUC

ICML 2021oral

The Area Under the ROC Curve (AUC) is a crucial metric for machine learning, which evaluates the average performance over all possible True Positive Rates (TPRs) and False Positive Rates (FPRs). Based on the knowledge that a skillful classifier should simultaneously embrace a high TPR and a low FPR,…

Cited by 34SourcePDFScholar
2021

Why Do Attributes Propagate in Graph Convolutional Neural Networks?

AAAI 2021technical

Many efforts have been paid to enhance Graph Convolutional Network from the perspective of propagation under the philosophy that ``Propagation is the essence of the GCNNs". Unfortunately, its adverse effect is over-smoothing, which makes the performance dramatically drop. To prevent the over-smoothi…

Cited by 35SourcePDFScholar
2020

Efficient Adversarial Attacks for Visual Object Tracking

ECCV 2020poster

Visual object tracking is an important task that requires the tracker to find the objects quickly and accurately. The existing state-of-the-art object trackers, i.e., Siamese based trackers, use DNNs to attain high accuracy. However, the robustness of visual tracking models is seldom explored. In thi…

Cited by 107SourcePDFScholar
2020

Face Super-Resolution Guided by 3D Facial Priors

ECCV 2020poster

State-of-the-art face super-resolution methods employ deep convolutional neural networks to learn a mapping between low- and high-resolution facial patterns by exploring local appearance knowledge. However, most of these methods do not well exploit facial structures and identity information, and str…

Cited by 85SourcePDFScholar
2020

JANE: Jointly Adversarial Network Embedding

IJCAI 2020poster

Motivated by the capability of Generative Adversarial Network on exploring the latent semantic space and capturing semantic variations in the data distribution, adversarial learning has been adopted in network embedding to improve the robustness. However, this important ability is lost in existing…

Cited by 0SourcePDFScholar
2020

Single Image Super-Resolution via a Holistic Attention Network

ECCV 2020poster

Informative features play a crucial role in the single image super-resolution task. Channel attention has been demonstrated to be effective for preserving information-rich features in each layer. However, channel attention treats each convolution layer as a separate process, which is kind of missing…

Cited by 878SourcePDFScholar
2019

ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples

CVPR 2019poster

Deep neural networks (DNNs) have been demonstrated to be vulnerable to adversarial examples. Specifically, adding imperceptible perturbations to clean images can fool the well trained deep neural networks. In this paper, we propose an end-to-end image compression model to defend adversarial examples…

Cited by 365PDFcodeScholar
2019

DM2C: Deep Mixed-Modal Clustering

NeurIPS 2019spotlight

Data exhibited with multiple modalities are ubiquitous in real-world clustering tasks. Most existing methods, however, pose a strong assumption that the pairing information for modalities is available for all instances. In this paper, we consider a more challenging task where each instance is repres…

2019

Deep Robust Subjective Visual Property Prediction in Crowdsourcing

CVPR 2019poster

The problem of estimating subjective visual properties (SVP) of images (e.g., Shoes A is more comfortable than B) is gaining rising attention. Due to its highly subjective nature, different annotators often exhibit different interpretations of scales when adopting absolute value tests. Therefore, re…

Cited by 6PDFScholar
2019

Generalized Block-Diagonal Structure Pursuit: Learning Soft Latent Task Assignment against Negative Transfer

NeurIPS 2019poster

In multi-task learning, a major challenge springs from a notorious issue known as negative transfer, which refers to the phenomenon that sharing the knowledge with dissimilar and hard tasks often results in a worsened performance. To circumvent this issue, we propose a novel multi-task learning meth…

2019

Single Image Deraining: A Comprehensive Benchmark Analysis

CVPR 2019poster

We present a comprehensive study and evaluation of existing single image deraining algorithms, using a new large-scale benchmark consisting of both synthetic and real-world rainy images.This dataset highlights diverse data sources and image contents, and is divided into three subsets (rain streak, r…

Cited by 368PDFcodeScholar
2019

iSplit LBI: Individualized Partial Ranking with Ties via Split LBI

NeurIPS 2019poster

Due to the inherent uncertainty of data, the problem of predicting partial ranking from pairwise comparison data with ties has attracted increasing interest in recent years. However, in real-world scenarios, different individuals often hold distinct preferences, thus might be misleading to merely lo…

2018

Deep Non-Blind Deconvolution via Generalized Low-Rank Approximation

NeurIPS 2018poster

In this paper, we present a deep convolutional neural network to capture the inherent properties of image degradation, which can handle different kernels and saturated pixels in a unified framework. The proposed neural network is motivated by the low-rank property of pseudo-inverse kernels. We firs…

Cited by 99SourcePDFScholar
2018

Gated Fusion Network for Single Image Dehazing

CVPR 2018poster

In this paper, we propose an efficient algorithm to directly restore a clear image from a hazy input. The proposed algorithm hinges on an end-to-end trainable neural network that consists of an encoder and a decoder. The encoder is exploited to capture the context of the derived input images, while…

Cited by 1032SourcePDFScholar
2017

Binarized Mode Seeking for Scalable Visual Pattern Discovery

CVPR 2017poster

This paper studies visual pattern discovery in large-scale image collections via binarized mode seeking, where images can only be represented as binary codes for efficient storage and computation. We address this problem from the perspective of binary space mode seeking. First, a binary mean shift (…

Cited by 10PDFScholar
2017

Video Deblurring via Semantic Segmentation and Pixel-Wise Non-Linear Kernel

ICCV 2017poster

Video deblurring is a challenging problem as the blur is complex and usually caused by the combination of camera shakes, object motions, and depth variations. Optical flow can be used for kernel estimation since it predicts motion trajectories. However, the estimates are often inaccurate in complex…

Cited by 117PDFScholar
2016

False Discovery Rate Control and Statistical Quality Assessment of Annotators in Crowdsourced Ranking

ICML 2016poster

With the rapid growth of crowdsourcing platforms it has become easy and relatively inexpensive to collect a dataset labeled by multiple annotators in a short time. However due to the lack of control over the quality of the annotators, some abnormal annotators may be affected by position bias which c…

Cited by 13SourcePDFScholar
2015

Matching-CNN Meets KNN: Quasi-Parametric Human Parsing

CVPR 2015poster

Both parametric and non-parametric approaches have demonstrated encouraging performances in the human parsing task, namely segmenting a human image into several semantic regions (e.g., hat, bag, left arm, face). In this work, we aim to develop a new solution with the advantages of both methodologie…

Cited by 203SourcePDFScholar