← Search

Yulin Jin

4 accepted papers

2026

DIFT: Protecting Contrastive Learning Against Data Poisoning Backdoor Attacks

AAAI 2026technical

Contrastive learning (CL) is a popular learning paradigm that excels in extracting meaningful representations from unlabeled data. Recent studies have shown that CL is highly vulnerable to backdoor attacks. Current defenses against backdoor attacks in CL are primarily reactive and post-training. Tha

Cited by 0SourcePDFScholar
2026

SEBA: Sample-Efficient Black-Box Attacks on Visual Reinforcement Learning

CVPR 2026

Visual reinforcement learning has achieved remarkable progress in visual control and robotics, but its vulnerability to adversarial perturbations remains underexplored. Most existing black-box attacks focus on vector-based or discrete-action RL, and their effectiveness on image-based continuous cont

Cited by 0SourcecodeScholar
2026

Stochastic Universal Adversarial Perturbations with Fixed Optimization Constraint and Ensured High-probability Transferability

AAAI 2026technical

Adversarial perturbations (APs) have become a great concern in image classification tasks. The most challenging branch, universal adversarial perturbations (UAPs), are exploited to fool most of the unseen samples. Such one-to-all perturbations have the merit of transferability, which has strong prac

Cited by 0SourcePDFScholar
2023

Explaining Adversarial Robustness of Neural Networks from Clustering Effect Perspective

ICCV 2023poster

Adversarial training (AT) is the most commonly used mechanism to improve the robustness of deep neural networks. Recently, a novel adversarial attack against intermediate layers exploits the extra fragility of adversarially trained networks to output incorrect predictions. The result implies the ins…

Cited by 1PDFcodeScholar