arXiv Science⌕ Search

arXiv subjects

Xun Chen

Publications and source records attributed to Xun Chen.

At least 145 records · Page 8Linked to original sources
arXiv2023

GraphCloak: Safeguarding Task-specific Knowledge within Graph-structured Data from Unauthorized Exploitation

As Graph Neural Networks (GNNs) become increasingly prevalent in a variety of fields, from social network analysis to protein-protein interaction studies, growing concerns have emerged regarding the unauthorized utilization of personal data. Recent studies have shown that imperceptible poisoning attacks are an effective method of protecting image data from such misuse. However, the efficacy of this approach in the graph domain remains unexplored. To bridge this gap, this paper introduces GraphCloak to safeguard against the unauthorized usage of graph data. Compared with prior work, GraphCloak offers unique significant innovations: (1) graph-oriented, the perturbations are applied to both topological structures and descriptive features of the graph; (2) effective and stealthy, our cloaking method can bypass various inspections while causing a significant performance drop in GNNs trained on the cloaked graphs; and (3) stable across settings, our methods consistently perform effectively under a range of practical settings with limited knowledge. To address the intractable bi-level optimization problem, we propose two error-minimizing-based poisoning methods that target perturbations on the structural and feature space, along with a subgraph injection poisoning method. Our comprehensive evaluation of these methods underscores their effectiveness, stealthiness, and stability. We also delve into potential countermeasures and provide analytical justification for their effectiveness, paving the way for intriguing future research.

cs.CR↗
arXiv2023

Holographic Schwinger Effect in Anisotropic Media

According to gauge/gravity correspondence, we study the holographic Schwinger effect within an anisotropic background. Firstly, the separate length of the particle-antiparticle pairs is computed within the context of an anisotropic background which is parameterized by dynamical exponent $ν$. It is found that the maximum separate length $x$ increases with the increase of dynamical exponent $ν$. By analyzing the potential energy, we find that the potential barrier increases with the dynamical exponent $ν$ at a small separate distance. This observation implies that the Schwinger effect within an anisotropic background is comparatively weaker when contrasted with its manifestation in an isotropic background. Finally, we also find that the Schwinger effect in the transverse direction is weakened, compared to the parallel direction in the anisotropic background, which is consistent with the top-down model.

hep-th↗
arXiv2023

String-breaking of the triply heavy baryon at finite temperature and chemical potential

In this work, we use gauge/gravity duality to study potential energy and string-breaking of triply heavy baryons at finite temperature and chemical potential. Two different possible configurations of triply heavy baryon are considered. The effect of temperature and chemical potential on string-breaking distance is investigated. With increasing temperature/chemical potential, the sting-breaking distance decreases and then increases in symmetric collinear geometry while steadily increasing in equilateral triangle geometry. Our study provides insights into triply heavy baryon configuration and string-breaking behavior.

hep-ph↗
arXiv2023

MASTERKEY: Practical Backdoor Attack Against Speaker Verification Systems

Speaker Verification (SV) is widely deployed in mobile systems to authenticate legitimate users by using their voice traits. In this work, we propose a backdoor attack MASTERKEY, to compromise the SV models. Different from previous attacks, we focus on a real-world practical setting where the attacker possesses no knowledge of the intended victim. To design MASTERKEY, we investigate the limitation of existing poisoning attacks against unseen targets. Then, we optimize a universal backdoor that is capable of attacking arbitrary targets. Next, we embed the speaker's characteristics and semantics information into the backdoor, making it imperceptible. Finally, we estimate the channel distortion and integrate it into the backdoor. We validate our attack on 6 popular SV models. Specifically, we poison a total of 53 models and use our trigger to attack 16,430 enrolled speakers, composed of 310 target speakers enrolled in 53 poisoned models. Our attack achieves 100% attack success rate with a 15% poison rate. By decreasing the poison rate to 3%, the attack success rate remains around 50%. We validate our attack in 3 real-world scenarios and successfully demonstrate the attack through both over-the-air and over-the-telephony-line scenarios.

cs.CR↗
arXiv2023

Contribution of Coulomb interaction to elastic pp and p p\bar scattering in holographic QCD

The differential cross sections of elastic proton-proton (pp) and proton-antiproton (pp\bar) scattering are studied in a holographic QCD model, considering the strong and Coulomb interaction in the Regge regime. Based on previous studies of strong interactions described in terms of Pomeron and Reggeon exchange, we add the contribution of Coulomb interaction described by photon exchange. We present the momentum transfer dependence of the contribution rates for each component, especially for the Coulomb-nuclear interference, which refers to the cross term between both interactions. For the adjustable parameters for the strong interaction, we can adopt the values determined in previous studies, and there are no extra adjustable parameters that need to be determined for the Coulomb interaction. It is presented that the resulting differential cross sections are consistent with the data for pp and pp\bar scattering.

hep-ph↗
arXiv2023

Achieving Covert Communication With A Probabilistic Jamming Strategy

In this work, we consider a covert communication scenario, where a transmitter Alice communicates to a receiver Bob with the aid of a probabilistic and uninformed jammer against an adversary warden's detection. The transmission status and power of the jammer are random and follow some priori probabilities. We first analyze the warden's detection performance as a function of the jammer's transmission probability, transmit power distribution, and Alice's transmit power. We then maximize the covert throughput from Alice to Bob subject to a covertness constraint, by designing the covert communication strategies from three different perspectives: Alice's perspective, the jammer's perspective, and the global perspective. Our analysis reveals that the minimum jamming power should not always be zero in the probabilistic jamming strategy, which is different from that in the continuous jamming strategy presented in the literature. In addition, we prove that the minimum jamming power should be the same as Alice's covert transmit power, depending on the covertness and average jamming power constraints. Furthermore, our results show that the probabilistic jamming can outperform the continuous jamming in terms of achieving a higher covert throughput under the same covertness and average jamming power constraints.

eess.SP↗
arXiv2023

Potential and string breaking of doubly heavy baryon at finite temperature and chemical potential

Using gauge/gravity duality, we first study the string breaking and melting of doubly heavy baryon at a finite chemical potential and temperature in this paper. The decay mode $\rm{Q Q q \rightarrow Q q q+Q \bar{q}}$ is investigated with the presence of temperature and chemical potential in this paper. With the increase of temperature and chemical potential, string breaking takes place at a smaller potential energy and the string-breaking distance will increase slightly. It is also found that the $\rm{QQq}$ melts at small separate distance with the increase of temperature and chemical potential. Then, we compare the screening distance of $\rm{QQq}$ with $\rm{Q \bar{Q}}$ under the same conditions. Finally, we draw the melting diagram of $\rm{QQq}$ and $\rm{Q \bar{Q}}$ in the $T-μ$ plane.

hep-ph↗
arXiv2023

Search for light dark matter from atmosphere in PandaX-4T

We report a search for light dark matter produced through the cascading decay of $η$ mesons, which are created as a result of inelastic collisions between cosmic rays and Earth's atmosphere. We introduce a new and general framework, publicly accessible, designed to address boosted dark matter specifically, with which a full and dedicated simulation including both elastic and quasi-elastic processes of Earth attenuation effect on the dark matter particles arriving at the detector is performed. In the PandaX-4T commissioning data of 0.63 tonne$\cdot$year exposure, no significant excess over background is observed. The first constraints on the interaction between light dark matter generated in the atmosphere and nucleus through a light scalar mediator are obtained. The lowest excluded cross-section is set at $5.9 \times 10^{-37}{\rm cm^2}$ for dark matter mass of $0.1$ MeV$/c^2$ and mediator mass of 300 MeV$/c^2$. The lowest upper limit of $η$ to dark matter decay branching ratio is $1.6 \times 10^{-7}$.

hep-ex↗
arXiv2023

A Search for Light Fermionic Dark Matter Absorption on Electrons in PandaX-4T

We report a search on a sub-MeV fermionic dark matter absorbed by electrons with an outgoing active neutrino using the 0.63 tonne-year exposure collected by PandaX-4T liquid xenon experiment. No significant signals are observed over the expected background. The data are interpreted into limits to the effective couplings between such dark matter and electrons. For axial-vector or vector interactions, our sensitivity is competitive in comparison to existing astrophysical bounds on the decay of such dark matter into photon final states. In particular, we present the first direct detection limits for an axial-vector (vector) interaction which are the strongest in the mass range from 25 to 45 (35 to 50) keV/c$^2$.

hep-ex↗
arXiv2023

Detection of Cross-Dataset Fake Audio Based on Prosodic and Pronunciation Features

Existing fake audio detection systems perform well in in-domain testing, but still face many challenges in out-of-domain testing. This is due to the mismatch between the training and test data, as well as the poor generalizability of features extracted from limited views. To address this, we propose multi-view features for fake audio detection, which aim to capture more generalized features from prosodic, pronunciation, and wav2vec dimensions. Specifically, the phoneme duration features are extracted from a pre-trained model based on a large amount of speech data. For the pronunciation features, a Conformer-based phoneme recognition model is first trained, keeping the acoustic encoder part as a deeply embedded feature extractor. Furthermore, the prosodic and pronunciation features are fused with wav2vec features based on an attention mechanism to improve the generalization of fake audio detection models. Results show that the proposed approach achieves significant performance gains in several cross-dataset experiments.

cs.SD↗
arXiv2023

TO-Rawnet: Improving RawNet with TCN and Orthogonal Regularization for Fake Audio Detection

Current fake audio detection relies on hand-crafted features, which lose information during extraction. To overcome this, recent studies use direct feature extraction from raw audio signals. For example, RawNet is one of the representative works in end-to-end fake audio detection. However, existing work on RawNet does not optimize the parameters of the Sinc-conv during training, which limited its performance. In this paper, we propose to incorporate orthogonal convolution into RawNet, which reduces the correlation between filters when optimizing the parameters of Sinc-conv, thus improving discriminability. Additionally, we introduce temporal convolutional networks (TCN) to capture long-term dependencies in speech signals. Experiments on the ASVspoof 2019 show that the Our TO-RawNet system can relatively reduce EER by 66.09\% on logical access scenario compared with the RawNet, demonstrating its effectiveness in detecting fake audio attacks.

cs.SD↗
arXiv2023

Two Low-complexity Efficient Beamformers for IRS-and-UAV-aided Directional Modulation Networks

As the excellent tools for aiding communication,intelligent reflecting surface (IRS) and unmanned aerial vehicle (UAV) can extend the coverage area, remove blind area, and achieve a dramatic rate improvement. In this paper, we improve the secrecy rate (SR) performance at directional modulation (DM) networks using IRS and UAV in combination. To fully explore the benefits of IRS and UAV, two efficient methods are proposed to enhance SR performance. The first approach computes the confidential message (CM) beamforming vector by maximizing the SR, and the signal-to-leakage-noise ratio (SLNR) method is used to optimize the IRS phase shift matrix, which is called Max-SR-SLNR. Here, Eve is maximally interfered by transmitting artificial noise (AN) along the direct path and null-space projection (NSP) on the remaining two channels. To reduce the computational complexity, the CM, AN beamforming and IRS phase shift design are independently designed in the following methods. The CM beamforming vector is constructed based on maximum ratio transmission (MRT) criteria along the channel from Alice-to-IRS, and phase shift matrix of IRS is directly given by phase alignment (PA) method. This method is called MRT-NSP-PA. Simulation results show that the SR performance of the Max-SR-SLNR method outperforms the MRT-NSP-PA method in the cases of small-scale and medium-scale IRSs, and the latter approaches the former in performance as IRS tends to lager-scale.

cs.IT↗
arXiv2023

Suppression of accidental backgrounds with deep neural networks in the PandaX-II experiment

The PandaX dark matter detection project searches for dark matter particles using the technology of dual phase xenon time projection chamber. The low expected rate of the signal events makes the control of backgrounds crucial for the experiment success. In addition to reducing external and internal backgrounds during the construction and operation of the detector, special techniques are employed to suppress the background events during the data analysis. In this article, we demonstrate the use of deep neural networks(DNNs)for suppressing the accidental backgrounds, as an alternative to the boosted-decision-tree method used in previous analysis of PandaX-II. A new data preparation approach is proposed to enhance the stability of the machine learning algorithms to be run and ultimately the sensitivity of the final data analysis.

physics.data-an↗
arXiv2023

Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion

Many backdoor removal techniques in machine learning models require clean in-distribution data, which may not always be available due to proprietary datasets. Model inversion techniques, often considered privacy threats, can reconstruct realistic training samples, potentially eliminating the need for in-distribution data. Prior attempts to combine backdoor removal and model inversion yielded limited results. Our work is the first to provide a thorough understanding of leveraging model inversion for effective backdoor removal by addressing key questions about reconstructed samples' properties, perceptual similarity, and the potential presence of backdoor triggers. We establish that relying solely on perceptual similarity is insufficient for robust defenses, and the stability of model predictions in response to input and parameter perturbations is also crucial. To tackle this, we introduce a novel bi-level optimization-based framework for model inversion, promoting stability and visual quality. Interestingly, we discover that reconstructed samples from a pre-trained generator's latent space are backdoor-free, even when utilizing signals from a backdoored model. We provide a theoretical analysis to support this finding. Our evaluation demonstrates that our stabilized model inversion technique achieves state-of-the-art backdoor removal performance without clean in-distribution data, matching or surpassing performance using the same amount of clean samples.

cs.CV↗
arXiv2023

Vibration and jitter of free-flowing thin liquid sheets as target for high-repetition-rate laser-ion acceleration

Very thin free-flowing liquid sheets are promising targets for high-repetition-rate laser-ion acceleration. In this work, we report the generation of micrometer-thin free-flowing liquid sheets from the collision of two liquid jets, and study the vibration and jitter in their surface normal direction. The dependence of their motion amplitudes on the generation parameters is studied in detail. The origins of the vibration and jitter are discussed. Our results indicate that when the generation parameters are optimized, the motion amplitudes in the stable region can be stabilized below 3.7 μm to meet the stringent requirement of sheet position stability for a tight-focusing setup in laser-ion acceleration experiments.

physics.plasm-ph↗
arXiv2023

SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency

Deep neural networks (DNNs) are vulnerable to backdoor attacks, where adversaries embed a hidden backdoor trigger during the training process for malicious prediction manipulation. These attacks pose great threats to the applications of DNNs under the real-world machine learning as a service (MLaaS) setting, where the deployed model is fully black-box while the users can only query and obtain its predictions. Currently, there are many existing defenses to reduce backdoor threats. However, almost all of them cannot be adopted in MLaaS scenarios since they require getting access to or even modifying the suspicious models. In this paper, we propose a simple yet effective black-box input-level backdoor detection, called SCALE-UP, which requires only the predicted labels to alleviate this problem. Specifically, we identify and filter malicious testing samples by analyzing their prediction consistency during the pixel-wise amplification process. Our defense is motivated by an intriguing observation (dubbed scaled prediction consistency) that the predictions of poisoned samples are significantly more consistent compared to those of benign ones when amplifying all pixel values. Besides, we also provide theoretical foundations to explain this phenomenon. Extensive experiments are conducted on benchmark datasets, verifying the effectiveness and efficiency of our defense and its resistance to potential adaptive attacks. Our codes are available at https://github.com/JunfengGo/SCALE-UP.

cs.CR↗
arXiv2023

A First Search for Solar $^8$B Neutrino in the PandaX-4T Experiment using Neutrino-Nucleus Coherent Scattering

A search for interactions from solar $^8$B neutrinos elastically scattering off xenon nuclei using PandaX-4T commissioning data is reported. The energy threshold of this search is further lowered compared with the previous search for dark matter, with various techniques utilized to suppress the background that emerges from data with the lowered threshold. A blind analysis is performed on the data with an effective exposure of 0.48 tonne$\cdot$year, and no significant excess of events is observed. Among results obtained using the neutrino-nucleus coherent scattering, our results give the best constraint on the solar $^8$B neutrino flux. We further provide a more stringent limit on the cross section between dark matter and nucleon in the mass range from 3 to 9 GeV/c$^2$.

hep-ex↗
arXiv2022

Measurement of Double Beta Decay Half-life of $^{136}$Xe with the PandaX-4T Detector

Precise measurement of two-neutrino double beta decay (DBD) half-life is an important step for the searches of Majorana neutrinos with neutrinoless double beta decay. We report the measurement of DBD half-life of $^{136}$Xe using the PandaX-4T dual-phase Time Projection Chamber (TPC) with 3.7-tonne natural xenon and the first 94.9-day physics data release. The background model in the fiducial volume is well constrained in situ by events in the outer active region. With a $^{136}$Xe exposure of 15.5 kg-year, we establish the half-life as $2.27 \pm 0.03 (stat.)\pm 0.10 (syst.)\times 10^{21}$ years. This is the first DBD half-life measurement with natural xenon and demonstrates the physics capability of a large-scale liquid xenon TPC in the field of rare event searches.

nucl-ex↗