arXiv subjects

Huan Tian

Publications and source records attributed to Huan Tian.

8 recordsLinked to original sources

arXiv2026

Hybrid integrated narrow linewidth semiconductor laser based on the distributed feedback from an external deformed microcavity

Optical microcavities with rotational symmetry have been widely used for narrowing linewidth and reducing frequency noise, however, the narrow but wavelength dependent optical feedback restricts the narrow linewidth laser works only at some discrete wavelength matching the resonance of the microcavity. Here, we demonstrate a narrow linewidth semiconductor laser with continuous wavelength tunability by hybrid integrating a DFB laser chip with a deformed microcavity fabricated on a 220 nm SOI wafer. The deformed microcavity with vortex radius demonstrates the unique characteristics of unidirectional energy storage, wavelength self-adaptivity, and self-focusing of the Rayleigh scattering based distributed feedback. In addition, the strength of Rayleigh scattering is also significantly enhanced by the high numerical aperture silicon waveguide. The optical feedback signal measured by the optical frequency domain reflectometry (OFDR) shows that the deformed microcavity can effectively lengthen the equivalent propagation distance without wavelength dependence. With the wavelength self-adaptive optical feedback from the deformed microcavity, the intrinsic linewidth of a DFB laser diode is narrowed to 525 Hz and the side mode suppression ratio (SMSR) is improved to 76 dB in a maximum allowable continuous wavelength tuning range of 2.25 nm. The frequency noise and relative intensity noise (RIN) are reduced to 2.98 Hz2 /Hz and -148.74 dB/Hz at the offset frequency of 1 MHz, respectively. The work demonstrated here paves a new way for integrated tunable narrow linewidth lasers, which are of crucial importance in high-speed communication and high-precision spectroscopy

physics.optics↗

arXiv2026

Poisoning the Pixels: Revisiting Backdoor Attacks on Semantic Segmentation

Semantic segmentation models are widely deployed in safety-critical applications such as autonomous driving, yet their vulnerability to backdoor attacks remains largely underexplored. Prior segmentation backdoor studies transfer threat settings from existing image classification tasks, focusing primarily on object-to-background mis-segmentation. In this work, we revisit the threats by systematically examining backdoor attacks tailored to semantic segmentation. We identify four coarse-grained attack vectors (Object-to-Object, Object-to-Background, Background-to-Object, and Background-to-Background attacks), as well as two fine-grained vectors (Instance-Level and Conditional attacks). To formalize these attacks, we introduce BADSEG, a unified framework that optimizes trigger designs and applies label manipulation strategies to maximize attack performance while preserving victim model utility. Extensive experiments across diverse segmentation architectures on benchmark datasets demonstrate that BADSEG achieves high attack effectiveness with minimal impact on clean samples. We further evaluate six representative defenses and find that they fail to reliably mitigate our attacks, revealing critical gaps in current defenses. Finally, we demonstrate that these vulnerabilities persist in recent emerging architectures, including transformer-based networks and the Segment Anything Model (SAM), thereby compromising their security. Our work reveals previously overlooked security vulnerabilities in semantic segmentation, and motivates the development of defenses tailored to segmentation-specific threat models.

cs.CR↗

arXiv2026

Hybrid integrated narrow linewidth laser with external distributed optical feedback from a silicon strip waveguide

External optical feedback via Rayleigh scattering from an integrated microresonator or an optical fiber has been demonstrated to significantly narrow the intrinsic linewidth of semiconductor lasers. Wavelength matching between the lasing cavity and the external high-Q microresonator is required to accumulate Rayleigh scattering based optical feedback. Optical fiber can provide Rayleigh scattering based optical feedback for any lasing wavelength. However, optical fibers hundreds of meters or even kilometers long are required for the accumulation of Rayleigh scattering based optical feedback, hindering the integration of narrow linewidth lasers. Here, we present an integrated scheme that collects distributed feedback signal with weak wavelength dependence by exploiting surface radiation in a silicon waveguide. The effects of waveguide width on the intensities of the surface radiation and distributed optical feedback signal are first numerically analyzed by introducing a collection coefficient. Numerical calculations show that a 1 {\mu}m-wide strip waveguide yields optimal performance for excitation and collection of distributed optical feedback, which is also experimentally verified by measuring the feedback signal with an optical frequency-domain reflectometry. Benefitting from the enhanced distributed optical feedback that is 34.72 dB higher than that in a single-mode fiber, the hybrid integrated laser demonstrates an intrinsic linewidth of 1.52 kHz, a side-mode suppression ratio (SMSR) of 74.71 dB, and a frequency noise of 24.44 Hz2/Hz. Furthermore, within a maximum allowable wavelength tuning range of 2.342 nm, the linewidth narrowing ratio depends little on the wavelength for all the waveguides with different widths.

physics.optics↗

arXiv2025

Real-Time Spatial Reasoning by Mobile Robots for Reconstruction and Navigation in Dynamic LiDAR Scenes

Our brain has an inner global positioning system which enables us to sense and navigate 3D spaces in real time. Can mobile robots replicate such a biological feat in a dynamic environment? We introduce the first spatial reasoning framework for real-time surface reconstruction and navigation that is designed for outdoor LiDAR scanning data captured by ground mobile robots and capable of handling moving objects such as pedestrians. Our reconstruction-based approach is well aligned with the critical cellular functions performed by the border vector cells (BVCs) over all layers of the medial entorhinal cortex (MEC) for surface sensing and tracking. To address the challenges arising from blurred boundaries resulting from sparse single-frame LiDAR points and outdated data due to object movements, we integrate real-time single-frame mesh reconstruction, via visibility reasoning, with robot navigation assistance through on-the-fly 3D free space determination. This enables continuous and incremental updates of the scene and free space across multiple frames. Key to our method is the utilization of line-of-sight (LoS) vectors from LiDAR, which enable real-time surface normal estimation, as well as robust and instantaneous per-voxel free space updates. We showcase two practical applications: real-time 3D scene reconstruction and autonomous outdoor robot navigation in real-world conditions. Comprehensive experiments on both synthetic and real scenes highlight our method's superiority in speed and quality over existing real-time LiDAR processing approaches.

cs.RO↗

arXiv2025

Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers

While in-processing fairness approaches show promise in mitigating biased predictions, their potential impact on privacy leakage remains under-explored. We aim to address this gap by assessing the privacy risks of fairness-enhanced binary classifiers via membership inference attacks (MIAs) and attribute inference attacks (AIAs). Surprisingly, our results reveal that enhancing fairness does not necessarily lead to privacy compromises. For example, these fairness interventions exhibit increased resilience against MIAs and AIAs. This is because fairness interventions tend to remove sensitive information among extracted features and reduce confidence scores for the majority of training data for fairer predictions. However, during the evaluations, we uncover a potential threat mechanism that exploits prediction discrepancies between fair and biased models, leading to advanced attack results for both MIAs and AIAs. This mechanism reveals potent vulnerabilities of fair models and poses significant privacy risks of current fairness methods. Extensive experiments across multiple datasets, attack methods, and representative fairness approaches confirm our findings and demonstrate the efficacy of the uncovered mechanism. Our study exposes the under-explored privacy threats in fairness studies, advocating for thorough evaluations of potential security vulnerabilities before model deployments.

cs.LG↗

arXiv2024

Broadband microwave waveform generation with programmable chirp shapes via recirculating phase-modulated optical fiber loop controlled by low-speed electronics

Broadband microwave waveforms with programmable chirp shapes are captivating in numerous practical applications. Compared with electronic technology, photonic-assisted solutions exhibit excellent performance in bandwidth and flexibility, but still suffer from complex architecture and requirement of high-speed electronics. Besides, rapid manipulation of chirp shape is still a challenge in the scientific community. In this paper, we propose and demonstrate a novel concept for generating broadband microwave waveforms with programmable chirp shapes. This concept is realized on a simple fiber-optic platform involving a continuous-wave laser source, a recirculating phase-modulated optical fiber loop, and low-speed electronics with a sampling rate at the level of MS/s. Based on this method, chirped microwave waveforms with a bandwidth up to tens of GHz can be generated, where the chirp shape is identical to the low-frequency driving waveform of the recirculating phase-modulated optical fiber loop. In addition, all the parameters of the generated chirped microwave waveforms can be easily reconfigured in real time, including the bandwidth, the central frequency, and the temporal duration. In the experiment, broadband microwave waveforms with customized chirp shapes are generated, where the center frequency and bandwidth tuning ranges exceed 21 GHz, the temporal duration is tuned in the range of 9 ns to 180 ns, and the coherent time of the generated microwave waveform is larger than 100 {\mu}s. This simple fiber-optic platform paves a way to generate broadband microwave waveforms with user-definable chirp shapes, which can find applications in broadband radar systems, electronic warfare and wireless communications.

physics.optics↗

arXiv2023

When Fairness Meets Privacy: Exploring Privacy Threats in Fair Binary Classifiers via Membership Inference Attacks

Previous studies have developed fairness methods for biased models that exhibit discriminatory behaviors towards specific subgroups. While these models have shown promise in achieving fair predictions, recent research has identified their potential vulnerability to score-based membership inference attacks (MIAs). In these attacks, adversaries can infer whether a particular data sample was used during training by analyzing the model's prediction scores. However, our investigations reveal that these score-based MIAs are ineffective when targeting fairness-enhanced models in binary classifications. The attack models trained to launch the MIAs degrade into simplistic threshold models, resulting in lower attack performance. Meanwhile, we observe that fairness methods often lead to prediction performance degradation for the majority subgroups of the training data. This raises the barrier to successful attacks and widens the prediction gaps between member and non-member data. Building upon these insights, we propose an efficient MIA method against fairness-enhanced models based on fairness discrepancy results (FD-MIA). It leverages the difference in the predictions from both the original and fairness-enhanced models and exploits the observed prediction gaps as attack clues. We also explore potential strategies for mitigating privacy leakages. Extensive experiments validate our findings and demonstrate the efficacy of the proposed method.

cs.LG↗

arXiv2022

How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers

As a booming research area in the past decade, deep learning technologies have been driven by big data collected and processed on an unprecedented scale. However, privacy concerns arise due to the potential leakage of sensitive information from the training data. Recent research has revealed that deep learning models are vulnerable to various privacy attacks, including membership inference attacks, attribute inference attacks, and gradient inversion attacks. Notably, the efficacy of these attacks varies from model to model. In this paper, we answer a fundamental question: Does model architecture affect model privacy? By investigating representative model architectures from convolutional neural networks (CNNs) to Transformers, we demonstrate that Transformers generally exhibit higher vulnerability to privacy attacks than CNNs. Additionally, we identify the micro design of activation layers, stem layers, and LN layers, as major factors contributing to the resilience of CNNs against privacy attacks, while the presence of attention modules is another main factor that exacerbates the privacy vulnerability of Transformers. Our discovery reveals valuable insights for deep learning models to defend against privacy attacks and inspires the research community to develop privacy-friendly model architectures.

cs.CR↗