← Search

Xiaofeng Chen

7 accepted papers

2026

Stochastic Universal Adversarial Perturbations with Fixed Optimization Constraint and Ensured High-probability Transferability

AAAI 2026technical

Adversarial perturbations (APs) have become a great concern in image classification tasks. The most challenging branch, universal adversarial perturbations (UAPs), are exploited to fool most of the unseen samples. Such one-to-all perturbations have the merit of transferability, which has strong prac

Cited by 0SourcePDFScholar
2025

PoisonedEye: Knowledge Poisoning Attack on Retrieval-Augmented Generation based Large Vision-Language Models

ICML 2025poster

Vision-Language Retrieval-Augmented Generation (VLRAG) systems have been widely applied to Large Vision-Language Models (LVLMs) to enhance their generation ability. However, the reliance on external multimodal knowledge databases renders VLRAG systems vulnerable to malicious poisoning attacks. In th…

Cited by 0SourcePDFScholar
2024

SAME: Sample Reconstruction against Model Extraction Attacks

AAAI 2024technical

While deep learning models have shown significant performance across various domains, their deployment needs extensive resources and advanced computing infrastructure. As a solution, Machine Learning as a Service (MLaaS) has emerged, lowering the barriers for users to release or productize their dee…

2023

ERM-KTP: Knowledge-Level Machine Unlearning via Knowledge Transfer

CVPR 2023poster

Machine unlearning can fortify the privacy and security of machine learning applications. Unfortunately, the exact unlearning approaches are inefficient, and the approximate unlearning approaches are unsuitable for complicated CNNs. Moreover, the approximate approaches have serious security flaws be…

2023

Explaining Adversarial Robustness of Neural Networks from Clustering Effect Perspective

ICCV 2023poster

Adversarial training (AT) is the most commonly used mechanism to improve the robustness of deep neural networks. Recently, a novel adversarial attack against intermediate layers exploits the extra fragility of adversarially trained networks to output incorrect predictions. The result implies the ins…

Cited by 1PDFcodeScholar
2020

A Two-phase Prototypical Network Model for Incremental Few-shot Relation Classification

COLING 2020main

Relation Classification (RC) plays an important role in natural language processing (NLP). Current conventional supervised and distantly supervised RC models always make a closed-world assumption which ignores the emergence of novel relations in open environment. To incrementally recognize the novel…