← Search

Yajie Wang

6 accepted papers

2026

On the Misalignment Between Data Learnability and Forgettability in Machine Unlearning

AAAI 2026technical

We report a structural mismatch between a data point’s {learnability}—how quickly it improves the loss—and its {forgettability}—how much it anchors the final parameters—an aspect ignored by prior machine unlearning frameworks such as SISA, Fisher-Forget, and influence-based fine-tuning. To make th

Cited by 0SourcePDFScholar
2025

Personalized Label Inference Attack in Federated Transfer Learning via Contrastive Meta Learning

AAAI 2025technical

Federated Transfer Learning (FTL) is a popular approach to solve the problem of heterogeneous feature space and label distribution. Among the mainstream strategies for FTL, parameter decoupling, which balance the impact of a single global model and multiple personalized models under data heterogenei…

Cited by 0SourcePDFScholar
2024

Teeth-SEG: An Efficient Instance Segmentation Framework for Orthodontic Treatment based on Multi-Scale Aggregation and Anthropic Prior Knowledge

CVPR 2024poster

Teeth localization segmentation and labeling in 2D images have great potential in modern dentistry to enhance dental diagnostics treatment planning and population-based studies on oral health. However general instance segmentation frameworks are incompetent due to 1) the subtle differences between s…

Cited by 3SourcePDFScholar
2024

Towards Transferable Adversarial Attacks with Centralized Perturbation

AAAI 2024technical

Adversarial transferability enables black-box attacks on unknown victim deep neural networks (DNNs), rendering attacks viable in real-world scenarios. Current transferable attacks create adversarial perturbation over the entire image, resulting in excessive noise that overfit the source model. Conce…

Cited by 9SourcePDFScholar
2021

Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity

IJCAI 2021poster

Deep neural networks (DNNs) have been found to be vulnerable to adversarial examples. Adversarial examples are malicious images with visually imperceptible perturbations. While these carefully crafted perturbations restricted with tight Lp norm bounds are small, they are still easily perceivable by…

Cited by 35SourcePDFScholar