中文
相关论文

相关论文: Holmes: Towards Effective and Harmless Model Owner…

200 篇论文

Model stealing attack is increasingly threatening the confidentiality of machine learning models deployed in the cloud. Recent studies reveal that adversaries can exploit data synthesis techniques to steal machine learning models even in…

密码学与安全 · 计算机科学 2025-03-25 Yunfei Yang , Xiaojun Chen , Yuexin Xuan , Zhendong Zhao

The use of machine learning (ML) has become increasingly prevalent in various domains, highlighting the importance of understanding and ensuring its safety. One pressing concern is the vulnerability of ML applications to model stealing…

机器学习 · 计算机科学 2026-04-07 Ganghua Wang , Yuhong Yang , Jie Ding

Deep learning techniques have made tremendous progress in a variety of challenging tasks, such as image recognition and machine translation, during the past decade. Training deep neural networks is computationally expensive and requires…

密码学与安全 · 计算机科学 2019-11-11 Zheng Li , Chengyu Hu , Yang Zhang , Shanqing Guo

Large language models(LLMs) are currently at the forefront of the machine learning field, which show a broad application prospect but at the same time expose some risks of privacy leakage. We combined Fully Homomorphic Encryption(FHE) and…

密码学与安全 · 计算机科学 2025-01-08 Zhang Ruoyan , Zheng Zhongxiang , Bao Wankang

In many application domains, it is important to characterize how complex learned models make their decisions across the distribution of instances. One way to do this is to identify the features and interactions among them that contribute to…

机器学习 · 计算机科学 2018-11-22 Kyubin Lee , Akshay Sood , Mark Craven

Recent advances in generative image modeling have achieved visual realism sufficient to deceive human experts, yet their potential for privacy preserving data sharing remains insufficiently understood. A central obstacle is the absence of…

计算机视觉与模式识别 · 计算机科学 2025-12-17 Mischa Dombrowski , Felix Nützel , Bernhard Kainz

Machine Learning (ML) models, including Large Language Models (LLMs), are characterized by a range of system-level attributes such as security and reliability. Recent studies have demonstrated that ML models are vulnerable to multiple forms…

密码学与安全 · 计算机科学 2026-02-09 Hema Karnam Surendrababu , Nithin Nagaraj

Due to the increasing usage of machine learning (ML) techniques in security- and safety-critical domains, such as autonomous systems and medical diagnosis, ensuring correct behavior of ML systems, especially for different corner cases, is…

密码学与安全 · 计算机科学 2022-12-21 Kexin Pei , Linjie Zhu , Yinzhi Cao , Junfeng Yang , Carl Vondrick , Suman Jana

Despite extensive alignment efforts, Large Vision-Language Models (LVLMs) remain vulnerable to jailbreak attacks. To mitigate these risks, existing detection methods are essential, yet they face two major challenges: generalization and…

密码学与安全 · 计算机科学 2026-01-28 Shuang Liang , Zhihao Xu , Jiaqi Weng , Jialing Tao , Hui Xue , Xiting Wang

The increasing use of Artificial Intelligence (AI) technologies, such as Large Language Models (LLMs) has led to nontrivial improvements in various tasks, including accurate authorship identification of documents. However, while LLMs…

The development of large language models (LLMs) is costly and has significant commercial value. Consequently, preventing unauthorized appropriation of open-source LLMs and protecting developers' intellectual property rights have become…

计算与语言 · 计算机科学 2026-02-02 Yiheng Liu , Junhao Ning , Sichen Xia , Haiyang Sun , Yang Yang , Hanyang Chi , Xiaohui Gao , Ning Qiang , Bao Ge , Junwei Han , Xintao Hu

Large Vision-Language Models (LVLMs) can be vulnerable to adversarial images that subtly bias their outputs toward plausible yet incorrect responses. We introduce a general, efficient, and training-free defense that combines image…

计算机视觉与模式识别 · 计算机科学 2026-03-18 Nadav Kadvil , Malak Fares , Ayellet Tal

A first-person camera, placed at a person's head, captures, which objects are important to the camera wearer. Most prior methods for this task learn to detect such important objects from the manually labeled first-person data in a…

计算机视觉与模式识别 · 计算机科学 2017-08-03 Gedas Bertasius , Hyun Soo Park , Stella X. Yu , Jianbo Shi

Modern computer vision services often require users to share raw feature descriptors with an untrusted server. This presents an inherent privacy risk, as raw descriptors may be used to recover the source images from which they were…

计算机视觉与模式识别 · 计算机科学 2023-08-23 Francesco Pittaluga , Bingbing Zhuang

High-performance visual recognition systems generally require a large collection of labeled images to train. The expensive data curation can be an obstacle for improving recognition performance. Sharing more data allows training for better…

计算机视觉与模式识别 · 计算机科学 2019-06-24 Tae-hoon Kim , Dongmin Kang , Kari Pulli , Jonghyun Choi

Recent studies have raised significant concerns regarding the vulnerability of Large Vision Language Models (LVLMs) to maliciously injected or perturbed input images, which can mislead their responses. Existing defense methods show that…

计算机视觉与模式识别 · 计算机科学 2025-09-05 Qi Zhou , Tianlin Li , Qing Guo , Dongxia Wang , Yun Lin , Yang Liu , Jin Song Dong

Deep neural networks have had enormous impact on various domains of computer science, considerably outperforming previous state of the art machine learning techniques. To achieve this performance, neural networks need large quantities of…

密码学与安全 · 计算机科学 2018-09-05 Dorjan Hitaj , Luigi V. Mancini

Large language models (LLMs) demonstrate remarkable capabilities across various tasks. However, their deployment introduces significant risks related to intellectual property. In this context, we focus on model stealing attacks, where…

密码学与安全 · 计算机科学 2025-10-28 Kieu Dang , Phung Lai , NhatHai Phan , Yelong Shen , Ruoming Jin , Abdallah Khreishah

Recent advances in visual-language alignment have endowed vision-language models (VLMs) with fine-grained image understanding capabilities. However, this progress also introduces new privacy risks. This paper first proposes a novel privacy…

计算机视觉与模式识别 · 计算机科学 2026-03-26 Hongyi Miao , Jun Jia , Xincheng Wang , Qianli Ma , Wei Sun , Wangqiu Zhou , Dandan Zhu , Yewen Cao , Zhi Liu , Guangtao Zhai

Model Inversion attacks aim to reconstruct information from private training data by exploiting access to a target model. Nearly all recent MI studies evaluate attack success using a standard framework that computes attack accuracy through…

机器学习 · 计算机科学 2026-05-15 Sy-Tuyen Ho , Koh Jun Hao , Ngoc-Bao Nguyen , Alexander Binder , Ngai-Man Cheung