← Search

Yiwei Lu

9 accepted papers

2026

Demystifying Foreground-Background Memorization in Diffusion Models

AAAI 2026technical

Diffusion models (DMs) memorize training images and can reproduce near-duplicates during generation. Current detection methods identify verbatim memorization but fail to capture two critical aspects: quantifying partial memorization occurring in small image regions, and memorization patterns beyond

Cited by 0SourcePDFScholar
2025

BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection

NeurIPS 2025poster

Availability attacks, or unlearnable examples, are defensive techniques that allow data owners to modify their datasets in ways that prevent unauthorized machine learning models from learning effectively while maintaining the data's intended functionality. It has led to the release of popular black-…

Cited by 0SourceScholar
2025

Machine Unlearning Fails to Remove Data Poisoning Attacks

ICLR 2025poster

We revisit the efficacy of several practical methods for approximate machine unlearning developed for large-scale deep learning. In addition to complying with data deletion requests, one often-cited potential application for unlearning methods is to remove the effects of poisoned data. We experiment…

2024

Disguised Copyright Infringement of Latent Diffusion Models

ICML 2024poster

Copyright infringement may occur when a generative model produces samples substantially similar to some copyrighted data that it had access to during the training phase. The notion of access usually refers to including copyrighted samples directly in the training dataset, which one may inspect to id…

2023

Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks

ICML 2023poster

Indiscriminate data poisoning attacks aim to decrease a model's test accuracy by injecting a small amount of corrupted training data. Despite significant interest, existing attacks remain relatively ineffective against modern machine learning (ML) architectures. In this work, we introduce the notion…

2023

Understanding Neural Network Binarization with Forward and Backward Proximal Quantizers

NeurIPS 2023poster

In neural network binarization, BinaryConnect (BC) and its variants are considered the standard. These methods apply the sign function in their forward pass and their respective gradients are backpropagated to update the weights. However, the derivative of the sign function is zero whenever defined,…

Cited by 5SourcePDFScholar
2016

Random matrix based method for joint DOD and DOA estimation for large scale MIMO radar in non-Gaussian noise

ICASSP 2016accepted

Traditional methods of target parameter estimation in MIMO radar are carried out under the assumption that the number of observations is much larger than the number of array elements. However, their estimation performance will decline for the MIMO radar with large arrays and insufficient observation…

Cited by 0SourceScholar