Mingyuan Fan

Defense against Backdoor Attacks via Identifying and Purifying Bad Neurons

2022 · arXiv (Cornell University)

The opacity of neural networks leads their vulnerability to backdoor attacks, where hidden attention of infected neurons is triggered to override normal predictions to the attacker-chosen ones. In this paper, we propose a novel backdoor …

Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness

2023 · arXiv (Cornell University)

A prevailing belief in attack and defense community is that the higher flatness of adversarial examples enables their better cross-model transferability, leading to a growing interest in employing sharpness-aware minimization and its variants. However, the …