Advances text explanation method for social media attacks.
problem Identifying personal attacks in social media comments.
method Adversarial approach to extract high-recall explanations from neural text classifiers.
result Demonstrates the importance of manually setting a default behavior for the model.
Paper shows data poisoning and Byzantine attacks are equivalent, impacting federated learning security.
problem Resilience of federated learning systems to adversarial attacks.
method Proved equivalence between data poisoning and Byzantine gradient attacks.
result Equivalence between data poisoning and Byzantine attacks in federated learning.
This paper protects rankings from differential privacy breaches.
problem Leakage of personal information in rankings.
method Develops ε-ranking differential privacy and a multistage ranking algorithm.
result Establishes the connection between Mallows model and ε-ranking differential privacy.
New attacks inflate earnings while reducing fraud scores, potentially millions at stake.
problem Manipulating financial reports to hide distress and gain.
method Maximum Violated Multi-Objective (MVMO) attacks that adapt search direction.
result Inflation of earnings by 100-200% while reducing fraud scores by 15% in 50% of cases.
Ditto improves fairness and robustness in federated learning.
problem Fairness and robustness in statistically heterogeneous federated learning networks.
method Personalized federated learning framework (Ditto) with a scalable solver.
result Ditto achieves competitive performance and superior fairness and robustness compared to existing methods.
Paper introduces a new adversarial attack type that cheats classifiers with significant changes.
problem Cheating well-trained classifiers with small permutations.
method Supervised variation autoencoder and gradient-based updates to latent variables.
result The proposed attack significantly cheats classifiers with significant changes, reducing Type I error.
Cyber attacks are growing in frequency and severity. Over the past year alone we have witnessed massive data breaches that stole personal information of millions of people and wide-scale ransomware attacks that paralyzed critical infrastructure of several countries. Combating the rising cyber threat calls for a multi-p…
Score attack method provides a lower bound on privacy-constrained minimax risk.
problem Characterizing the optimality of privacy-constrained statistical models.
method Score attack based on tracing attack concept.
result Optimally lower bounds the minimax risk of estimating unknown model parameters.
Data poisoning is an attack on machine learning models wherein the attacker adds examples to the training set to manipulate the behavior of the model at test time. This paper explores poisoning attacks on neural nets. The proposed attacks use "clean-labels"; they don't require the attacker to have any control over the …
Paper develops image disguising to protect privacy in outsourced deep learning.
problem Privacy concerns in outsourced deep learning, especially re-identification and model-based attacks.
method Develops image disguising approach to protect against attacks.
result Image-disguising mechanisms provide high protection against attacks while maintaining model quality.
A federated graph learning approach improves EV charging demand forecasting while protecting against cyberattacks.
problem Cybersecurity risk and data heterogeneity in EV charging demand forecasting.
method Federated Graph Neural Network (GNN) model with global attention mechanism and credit-based function.
result Enhanced robustness and prediction accuracy in EV charging demand forecasting.
Data poisoning attacks can fool neighborhood-based recommender systems.
problem Robustness of neighborhood-based recommender systems to data poisoning attacks.
method Proposed a novel data poisoning attack framework (UNAttack) to fool the systems.
result Neighborhood-based recommender systems can be easily fooled by well-designed fake users.
Tampering data during training can corrupt neural networks, leading to misclassification.
problem Adversarial attacks on neural networks during training.
method Creating a backdoor in neural networks by modifying training data.
result A single pixel modification to all images of a class in training data can corrupt neural networks, leading to misclassification.
This paper addresses privacy issues in personalized pricing using nonparametric demand models.
problem Privacy violation in personalized pricing algorithms with unknown nonparametric demand models.
method Develops algorithms to make pricing decisions and learn demand while ensuring central and local differential privacy.
result Proves near-optimal regret bounds for algorithms with CDP and LDP guarantees.
Paper shows how to hide individuals in graphs to fool community detection models.
problem Adversarial attack on community detection models by hiding individuals.
method Iterative learning framework that updates a graph generator and a community detection model.
result Adversarial graphs generated by the method can fool multiple community detection models.
This paper improves AI defenses against network attacks using ML and adversarial learning.
problem Protecting personal data from sophisticated network attacks.
method Unified multi-modal dataset, machine learning for detection, adversarial learning for synthetic data generation.
result Stable ML models for intrusion detection and high-fidelity synthetic data.
MDLdroid improves mobile deep learning for personal sensing with faster training.
problem Continuous local changes and resource constraints in personal mobile sensing affect global model performance.
method ChainSGD-reduce approach to reduce overhead and balance resources.
result 2x to 3.5x faster training on off-the-shelf mobile devices compared to single-device training.
Paper develops a method to detect training data used in machine learning models.
problem Detecting training data used in machine learning models.
method Measures leakage of training data using a proxy of a model's total variation near training samples.
result Empirical evidence supports the effectiveness of the proposed method.
Face recognition models can be inferred from student models, posing privacy risks.
problem Privacy threats in transfer learning models for face recognition.
method Membership inference attacks and attribute inference from aggregate-level information.
result Sensitive attributes can be inferred from student models, even with limited auxiliary information.
The growing trend of using wearable devices for context-aware computing and pervasive sensing systems has raised its potentials for quick and reliable authentication techniques. Since personal writing habitats differ from each other, it is possible to realize user authentication through writing. This is of great signif…
Fuzzy Rough Set selects key features for phishing detection.
problem Efficient feature selection for phishing detection.
method Fuzzy Rough Set (FRS) theory for feature selection.
result Maximum F-measure of 95% using Random Forest.
Federated Learning (FL) systems are gaining popularity as a solution to training Machine Learning (ML) models from large-scale user data collected on personal devices (e.g., smartphones) without their raw data leaving the device. At the core of FL is a network of anonymous user devices sharing training information (mod…
The paper explores how machine learning personalization aligns with humanistic views of the person.
problem Aligning machine learning personalization with humanistic views of the person.
method Explicating the concept of personalization and contrasting it with humanistic views of the person.
result Proposes dimensions for evaluating the degree of personalization of ML personalized scores.
Federated learning framework extended for personalizing global models.
problem Evaluate personalization strategies for global models on-device.
method Extend federated learning framework, develop tools for analysis and evaluation.
result Personalization yields significant benefits for a large user population.
Adaptive personalized federated learning improves local model personalization.
problem Maximizing global model performance limits local model personalization.
method APFL algorithm trains local models while contributing to global model, with optimal mixing parameter and communication-efficient optimization.
result Demonstrates effectiveness of personalization schema and correctness of generalization theories.
Deep Learning has recently become hugely popular in machine learning, providing significant improvements in classification accuracy in the presence of highly-structured and large databases. Researchers have also considered privacy implications of deep learning. Models are typically trained in a centralized manner with …
A new personality-based recommender system tackles data sparsity without feedback.
problem Data sparsity without common feedback among users.
method Implicitly identifying users' personality type and incorporating it with personal interests and knowledge level.
result The model's effectiveness, especially in data sparsity situations, demonstrated on a real-world dataset.
Framework generates personalized insulin treatment strategies using deep models.
problem Developing optimal personalized treatment strategies for diabetes patients.
method Combines deep generative time series models with decision theory.
result Demonstrated improved personalized insulin treatment strategies for diabetes patients.
Paper uses language models to predict MBTI personality types with high accuracy.
problem Predicting Myers-Briggs personality types from text.
method Fine-tuned BERT model for predicting MBTI types and generating personality-specific language.
result BERT model achieves high accuracy in predicting MBTI types and personality-specific language generation.
Personalized explanations improve understanding of machine learning models.
problem Improving human understanding of machine learning models and decisions.
method Deriving a conceptualization of personalized explanation, categorizing explainee data, identifying key properties, and introducing new measures.
result Identification of three key properties amendable to personalization: complexity, decision information, and presentation.
FMP improves personalized ASR models on private devices.
problem Limited accuracy and privacy in federated fine-tuning of ASR models.
method FMP estimates global and personalized marginal distributions and adjusts NNLM probabilities.
result FMP achieves modest WER reductions on ASR rescoring tasks.
Background doesn't affect personality predictions in deep networks.
problem Understanding how background images influence personality attribution in deep learning models.
method Explicitly studied the effect of background images on personality prediction in deep residual networks, controlling for confounds.
result Adding background information to input decreases model performance for personality trait prediction.
Generative framework unifies and improves personalized learning and estimation methods.
problem Statistical heterogeneity in client data motivates personalized learning models.
method Generative framework unifies and suggests new personalized learning and estimation algorithms.
result AdaPeD algorithm numerically outperforms known algorithms.
A new federated multi-armed bandit framework with personalization balances generalization and personalization.
problem Balancing generalization and personalization in federated multi-armed bandits.
method Proposed a Personalized Federated Upper Confidence Bound (PF-UCB) algorithm to achieve a O(log(T)) regret. result PF-UCB achieves an O(log(T)) regret regardless of personalization degree and has similar instance dependency to lower bound. The paper explores methods to personalize deep learning models.
problem Optimizing deep learning models for individual performance.
method Curriculum learning and data augmentation techniques.
result Personalized methods improve performance on individual data but degrade on general datasets.
Unified proof for scalable personalized federated learning.
problem Personalized federated learning under asynchronous updates.
method Unified proof for asynchronous federated learning with bounded staleness applied to MAML and ME personalization frameworks.
result Unified proof for convergence to first-order stationary point for smooth and non-convex functions.
This paper analyzes the trade-off between accuracy and communication in personalized federated learning.
problem The accuracy-communication trade-off in personalized federated learning.
method The paper provides a quantitative characterization of the personalization degree on the trade-off, establishing minimax optimality.
result The paper offers theoretical insights for choosing the personalization degree and validates the results on synthetic and real-world datasets.
Personalized sleep staging achieved with single-night data using KL-divergence regularization.
problem Improving automatic sleep staging accuracy with limited single-night data.
method KL-divergence regularization for transfer learning from a pretrained model to a personalized model.
result Personalized sleep staging accuracy of 79.6% with KL-divergence regularization.
FSPO optimizes synthetic preferences for LLM personalization.
problem Personalizing large language models for diverse users.
method FSPO reframes reward modeling as a meta-learning problem, using few labeled preferences and synthetic data.
result FSPO achieves high winrates in personalized responses, both synthetic and real.
System interprets complex treatment effects for personalized policies.
problem Complex, hard-to-understand treatment effect models.
method Scalable, interpretable personalized experimentation system.
result Learned explanations and generated interpretable policies.
RevGAN generates personalized reviews with given sentiment and style.
problem Creating reviews that are both personalized and of high quality.
method RevGAN combines self-attentive recursive autoencoders, conditional discriminators, and personalized decoders.
result RevGAN outperforms state-of-the-art models in sentence quality, coherence, and personalization.
Guarantees for third-person imitation learning from offline data.
problem Improving generalizability in imitation learning.
method Problem-dependent statistical learning guarantees for third-person imitation from offline observation.
result Strong performance guarantees for transferred policies in the offline setting.
The paper analyzes a game where players must balance short-term and long-term interests, leading to cooperative or competitive outcomes.
problem Analyzing time inconsistency in inter-personal decision-making under non-exponential discounting.
method Iterative procedures and Zorn's lemma to find Nash equilibria between players' intra-personal equilibria.
result Inter-personal equilibria exist and depend on the impatience levels of the players.
Group personalization improves FL performance in heterogeneous client data.
problem Mitigating client drift in federated learning with heterogeneous data.
method Fine-tuning a global FL model over homogeneous groups of clients, then personalizing each group's model.
result The proposed method achieves superior personalization performance compared to other FL approaches.
LP-FT improves personalized model training in FL by balancing generalization and personalization.
problem Federated Learning struggles with balancing global generalization and local personalization due to non-identical data distributions.
method Adapting Linear Probing followed by full Fine-Tuning (LP-FT) to the FL setting.
result LP-FT outperforms standard fine-tuning in balancing personalization and generalization across various datasets and PFT variants.
This paper detects multi-stage Feint Attacks using Bi-RNN and few-shot learning.
problem Detecting multi-stage Feint Attacks due to lack of professional datasets and semantic relationships.
method Fuzzy clustering for attack chain mining, few-shot deep learning, Bi-RNN for feature extraction.
result Accurately detected Feint Attacks using Bi-RNN and few-shot learning.
Study assesses whether RL algorithm personalizes treatment sequences.
problem Evaluate if RL algorithm truly personalizes treatment sequences.
method Resampling-based methodology to investigate personalization.
result RL algorithm's personalization may be due to stochasticity.
This paper studies adversarial attacks on Gaussian process bandits.
problem Adversarial attacks on Gaussian process bandits to manipulate optimal function regions.
method Proposes various adversarial attack methods on GP bandits, including white-box and black-box attacks.
result Adversarial attacks can force GP bandits to optima in target regions even with low attack budgets.