arXiv subjects

Yu Bi

Publications and source records attributed to Yu Bi.

14 recordsLinked to original sources

arXiv2026

A comparative study of two-sample hypothesis tests in the presence of long-term survivors

Time-to-event data with long-term survivors (L-TS), subjects who never experience the event, have been reported in multiple areas of oncology as therapies have improved. Conventional two-sample tests ignore L-TS, but alternatives have been developed in the cure models literature. Because L-TS can induce non-proportional hazards (non-PH), non-PH candidates also exist. However, there has not been a comprehensive comparison of these candidates. Additionally, follow-up is an important consideration for data with L-TS, but there has been limited study of the impact of follow-up time on performance of two-sample tests with L-TS. We conducted a neutral simulation study of the impact of sample size and follow-up time on type I error and power across varying effect sizes for conventional methods, methods adapted for non-PH, and a correctly-specified parametric model. When one or both groups lack L-TS, log-rank tests and one non-PH method typically have the highest power, but order varies. Surprisingly, when both groups have L-TS, these tests have non-monotonic power as a function of follow-up time, while parametric models have monotonic increasing power and the highest power at the longest follow-up time. While absolute power differs, patterns over follow-up are consistent across sample sizes. To address this for practitioners, we devise a numerical approach to predict the potential for non-monotonicity during study planning. We conclude that na\"ive use of conventional methods can have counterintuitive properties in settings with L-TS, and this work provides knowledge and a tool to anticipate and address these issues.

stat.ME↗

arXiv2026

Lite-BD: A Lightweight Black-box Backdoor Defense via Reviving Multi-Stage Image Transformations

Deep Neural Networks (DNNs) are vulnerable to backdoor attacks. Due to the nature of Machine Learning as a Service (MLaaS) applications, black-box defenses are more practical than white-box methods, yet existing purification techniques suffer from key limitations: a lack of justification for specific transformations, dataset dependency, high computational overhead, and a neglect of frequency-domain transformations. This paper conducts a preliminary study on various image transformations, identifying down-upscaling as the most effective backdoor trigger disruption technique. We subsequently propose \texttt{Lite-BD}, a lightweight two-stage blackbox backdoor defense. \texttt{Lite-BD} first employs a super-resolution-based down-upscaling stage to neutralize spatial triggers. A secondary stage utilizes query-based band-by-band frequency filtering to remove triggers hidden in specific bands. Extensive experiments against state-of-the-art attacks demonstrate that \texttt{Lite-BD} provides robust and efficient protection. Codes can be found at https://github.com/SiSL-URI/Lite-BD.

cs.CR↗

arXiv2026

BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron

Spiking Neural Networks (SNNs) are energy-efficient counterparts of Deep Neural Networks (DNNs) with high biological plausibility, as information is transmitted through temporal spiking patterns. The core element of an SNN is the spiking neuron, which converts input data into spikes following the Leaky Integrate-and-Fire (LIF) neuron model. This model includes several important hyperparameters, such as the membrane potential threshold and membrane time constant. Both the DNNs and SNNs have proven to be exploitable by backdoor attacks, where an adversary can poison the training dataset with malicious triggers and force the model to behave in an attacker-defined manner. Yet, how an adversary can exploit the unique characteristics of SNNs for backdoor attacks remains underexplored. In this paper, we propose \textit{BadSNN}, a novel backdoor attack on spiking neural networks that exploits hyperparameter variations of spiking neurons to inject backdoor behavior into the model. We further propose a trigger optimization process to achieve better attack performance while making trigger patterns less perceptible. \textit{BadSNN} demonstrates superior attack performance on various datasets and architectures, as well as compared with state-of-the-art data poisoning-based backdoor attacks and robustness against common backdoor mitigation techniques. Codes can be found at https://github.com/SiSL-URI/BadSNN.

cs.CR↗

arXiv2026

BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack

Graph neural network (GNN) have demonstrated exceptional performance in solving critical problems across diverse domains yet remain susceptible to backdoor attacks. Existing studies on backdoor attack for graph classification are limited to single target attack using subgraph replacement based mechanism where the attacker implants only one trigger into the GNN model. In this paper, we introduce the first multi-targeted backdoor attack for graph classification task, where multiple triggers simultaneously redirect predictions to different target labels. Instead of subgraph replacement, we propose subgraph injection which preserves the structure of the original graphs while poisoning the clean graphs. Extensive experiments demonstrate the efficacy of our approach, where our attack achieves high attack success rates for all target labels with minimal impact on the clean accuracy. Experimental results on five dataset demonstrate the superior performance of our attack framework compared to the conventional subgraph replacement-based attack. Our analysis on four GNN models confirms the generalization capability of our attack which is effective regardless of the GNN model architectures and training parameters settings. We further investigate the impact of the attack design parameters including injection methods, number of connections, trigger sizes, trigger edge density and poisoning ratios. Additionally, our evaluation against state-of-the-art defenses (randomized smoothing and fine-pruning) demonstrates the robustness of our proposed multi-target attacks. This work highlights the GNN vulnerability against multi-targeted backdoor attack in graph classification task. Our source codes will be available at https://github.com/SiSL-URI/Multi-Targeted-Graph-Backdoor-Attack.

cs.LG↗

arXiv2024

Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor

Deep neural networks (DNNs) have long been recognized as vulnerable to backdoor attacks. By providing poisoned training data in the fine-tuning process, the attacker can implant a backdoor into the victim model. This enables input samples meeting specific textual trigger patterns to be classified as target labels of the attacker's choice. While such black-box attacks have been well explored in both computer vision and natural language processing (NLP), backdoor attacks relying on white-box attack philosophy have hardly been thoroughly investigated. In this paper, we take the first step to introduce a new type of backdoor attack that conceals itself within the underlying model architecture. Specifically, we propose to design separate backdoor modules consisting of two functions: trigger detection and noise injection. The add-on modules of model architecture layers can detect the presence of input trigger tokens and modify layer weights using Gaussian noise to disturb the feature distribution of the baseline model. We conduct extensive experiments to evaluate our attack methods using two model architecture settings on five different large language datasets. We demonstrate that the training-free architectural backdoor on a large language model poses a genuine threat. Unlike the-state-of-art work, it can survive the rigorous fine-tuning and retraining process, as well as evade output probability-based defense methods (i.e. BDDR). All the code and data is available https://github.com/SiSL-URI/Arch_Backdoor_LLM.

cs.CR↗

arXiv2024

NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise

Backdoor attacks pose a significant threat when using third-party data for deep learning development. In these attacks, data can be manipulated to cause a trained model to behave improperly when a specific trigger pattern is applied, providing the adversary with unauthorized advantages. While most existing works focus on designing trigger patterns in both visible and invisible to poison the victim class, they typically result in a single targeted class upon the success of the backdoor attack, meaning that the victim class can only be converted to another class based on the adversary predefined value. In this paper, we address this issue by introducing a novel sample-specific multi-targeted backdoor attack, namely NoiseAttack. Specifically, we adopt White Gaussian Noise (WGN) with various Power Spectral Densities (PSD) as our underlying triggers, coupled with a unique training strategy to execute the backdoor attack. This work is the first of its kind to launch a vision backdoor attack with the intent to generate multiple targeted classes with minimal input configuration. Furthermore, our extensive experimental results demonstrate that NoiseAttack can achieve a high attack success rate against popular network architectures and datasets, as well as bypass state-of-the-art backdoor detection methods. Our source code and experiments are available at https://github.com/SiSL-URI/NoiseAttack/tree/main.

cs.CV↗

arXiv2024

Dissecting Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks

Emerging in recent years, open edge computing platforms (OECPs) claim large-scale edge nodes, the extensive usage and adoption, as well as the openness to any third parties to join as edge nodes. For instance, OneThingCloud, a major OECP operated in China, advertises 5 million edge nodes, 70TB bandwidth, and 1,500PB storage. However, little information is publicly available for such OECPs with regards to their technical mechanisms and involvement in edge computing activities. Furthermore, different from known edge computing paradigms, OECPs feature an open ecosystem wherein any third party can participate as edge nodes and earn revenue for the contribution of computing and bandwidth resources, which, however, can introduce byzantine or even malicious edge nodes and thus break the traditional threat model for edge computing. In this study, we conduct the first empirical study on two representative OECPs, which is made possible through the deployment of edge nodes across locations, the efficient and semi-automatic analysis of edge traffic as well as the carefully designed security experiments. As the results, a set of novel findings and insights have been distilled with regards to their technical mechanisms, the landscape of edge nodes, the usage and adoption, and the practical security/privacy risks. Particularly, millions of daily active edge nodes have been observed, which feature a wide distribution in the network space and the extensive adoption in content delivery towards end users of 16 popular Internet services. Also, multiple practical and concerning security risks have been identified along with acknowledgements received from relevant parties, e.g., the exposure of long-term and cross-edge-node credentials, the co-location with malicious activities of diverse categories, the failures of TLS certificate verification, the extensive information leakage against end users, etc.

cs.CR↗

arXiv2024

Enabling Privacy-Preserving Cyber Threat Detection with Federated Learning

Despite achieving good performance and wide adoption, machine learning based security detection models (e.g., malware classifiers) are subject to concept drift and evasive evolution of attackers, which renders up-to-date threat data as a necessity. However, due to enforcement of various privacy protection regulations (e.g., GDPR), it is becoming increasingly challenging or even prohibitive for security vendors to collect individual-relevant and privacy-sensitive threat datasets, e.g., SMS spam/non-spam messages from mobile devices. To address such obstacles, this study systematically profiles the (in)feasibility of federated learning for privacy-preserving cyber threat detection in terms of effectiveness, byzantine resilience, and efficiency. This is made possible by the build-up of multiple threat datasets and threat detection models, and more importantly, the design of realistic and security-specific experiments. We evaluate FL on two representative threat detection tasks, namely SMS spam detection and Android malware detection. It shows that FL-trained detection models can achieve a performance that is comparable to centrally trained counterparts. Also, most non-IID data distributions have either minor or negligible impact on the model performance, while a label-based non-IID distribution of a high extent can incur non-negligible fluctuation and delay in FL training. Then, under a realistic threat model, FL turns out to be adversary-resistant to attacks of both data poisoning and model poisoning. Particularly, the attacking impact of a practical data poisoning attack is no more than 0.14\% loss in model accuracy. Regarding FL efficiency, a bootstrapping strategy turns out to be effective to mitigate the training delay as observed in label-based non-IID scenarios.

cs.CR↗

arXiv2023

Silver Telluride Colloidal Quantum Dot Infrared Photodetectors and Image Sensors

Photodetectors that are sensitive in shortwave infrared (SWIR) range (1 um - 2 um) are of significant interest for applications in 3D, night and adverse weather imaging, machine vision and autonomous driving, among others. Currently available technologies in the SWIR rely on costly epitaxial semiconductors that are not monolithically integrated with CMOS electronics. Solution-processed quantum dots can address this challenge by enabling low-cost manufacturing and simple monolithic integration on silicon in a back-end-of-line (BEOL) process. To date, colloidal quantum dot (CQD) materials to access the SWIR are mostly based on lead sulfide (PbS) and mercury telluride (HgTe) compounds, imposing major regulatory concerns and impeding their deployment in consumer electronics due to toxicity concerns. Here we report a new synthesis method for environmentally-friendly silver telluride (Ag2Te) quantum dots and their application in high-performance SWIR photodetectors. The CQD photodetector stack employs materials compliant with the Restriction of Hazardous Substance (RoHS) directives and is sensitive in the spectral range from 350 nm - 1600 nm. The room-temperature detectivity is of the order 1012 Jones, the 3dB bandwidth is in excess of 0.1 MHz and the linear dynamic range is over 118 dB. We also realize a monolithically integrated SWIR imager based on solution processed, heavy-metal-free materials, thus paving the way of this technology to consumer electronics market.

physics.app-ph↗

arXiv2020

Entropy-Based Modeling for Estimating Soft Errors Impact on Binarized Neural Network Inference

Over past years, the easy accessibility to the large scale datasets has significantly shifted the paradigm for developing highly accurate prediction models that are driven from Neural Network (NN). These models can be potentially impacted by the radiation-induced transient faults that might lead to the gradual downgrade of the long-running expected NN inference accelerator. The crucial observation from our rigorous vulnerability assessment on the NN inference accelerator demonstrates that the weights and activation functions are unevenly susceptible to both single-event upset (SEU) and multi-bit upset (MBU), especially in the first five layers of our selected convolution neural network. In this paper, we present the relatively-accurate statistical models to delineate the impact of both undertaken SEU and MBU across layers and per each layer of the selected NN. These models can be used for evaluating the error-resiliency magnitude of NN topology before adopting them in the safety-critical applications.

cs.LG↗

arXiv2020

A Survey on Impact of Transient Faults on BNN Inference Accelerators

Over past years, the philosophy for designing the artificial intelligence algorithms has significantly shifted towards automatically extracting the composable systems from massive data volumes. This paradigm shift has been expedited by the big data booming which enables us to easily access and analyze the highly large data sets. The most well-known class of big data analysis techniques is called deep learning. These models require significant computation power and extremely high memory accesses which necessitate the design of novel approaches to reduce the memory access and improve power efficiency while taking into account the development of domain-specific hardware accelerators to support the current and future data sizes and model structures.The current trends for designing application-specific integrated circuits barely consider the essential requirement for maintaining the complex neural network computation to be resilient in the presence of soft errors. The soft errors might strike either memory storage or combinational logic in the hardware accelerator that can affect the architectural behavior such that the precision of the results fall behind the minimum allowable correctness. In this study, we demonstrate that the impact of soft errors on a customized deep learning algorithm called Binarized Neural Network might cause drastic image misclassification. Our experimental results show that the accuracy of image classifier can drastically drop by 76.70% and 19.25% in lfcW1A1 and cnvW1A1 networks,respectively across CIFAR-10 and MNIST datasets during the fault injection for the worst-case scenarios

cs.LG↗

arXiv2019

Solution Processed Infrared- and Thermo- Photovoltaics based on 0.7 eV Bandgap PbS Colloidal Quantum Dots

Harnessing low energy photons is of paramount importance for multi-junction high efficiency solar cells as well as for thermo-photovoltaic applications. However, semiconductor absorbers with bandgap lower than 0.8 eV have been limited to III-V (InGaAs) or IV (Ge) semiconductors that are characterized by high manufacturing costs and complicated lattice matching requirements in their growth and integration with the higher bandgap cells. Here, we have developed solution processed low bandgap photovoltaic devices based on PbS colloidal quantum dots (CQDs) with a bandgap of 0.7 eV suited for both thermo-photovoltaic as well as low energy solar photon harvesting. By matching the spectral response of those cells to that of the infrared solar spectrum, we report a record high short circuit current (JSC) of 37 mA/cm2 under full solar spectrum and 5.5 mA/cm2 when placed at the back of a silicon wafer resulting in power conversion efficiencies (PCE) of 6.4 % and 0.7 % respectively. Moreover, the device reached an above bandgap PCE of ~6 % as a thermo-photovoltaic cell recorded under a 1000 {\deg}C blackbody radiator.

cond-mat.mtrl-sci↗

arXiv2019

Colloidal Quantum Dot Tandem Solar Cells Using CVD Graphene as An Atomically Thin Intermediate Recombination Layer

Two-terminal tandem cell architectures are believed to be an effective way to further improve the power conversion efficiency in solution processed photovoltaics. To design an efficient tandem solar cell, two key issues need to be considered. Firstly, subcells with well-matched currents and complementary absorption characteristics are a prerequisite for high efficiency. Secondly identifying the appropriate intermediate layer (IML) to connect the subcells is necessary to minimize the optical and electronic losses. PbS colloidal quantum dots (CQDs) are a notable choice for the subcells due to their low cost, solution processibility and remarkable wide range band gap tunability. Single layer Graphene (Gr) has been proposed to be a promising IML due to its high transparency and conductivity. Here, as a proof of concept, we demonstrate a solution processed two terminal PbS CQDs tandem solar cell employing chemical vapor deposited Gr as the IML. In doing so, we report a PbS CQD cell comprising subcells with bandgaps of 1.4 and 0.95 eV that delivers power conversion efficiency in excess of 7%, substantially higher than previously reported CQD tandem cells.

physics.app-ph↗

arXiv2019

High-Efficiency Light-Emitting Diodes based on Formamidinium lead bromide nanocrystals and solution processed transport layers

Perovskite nanocrystal light-emitting diodes (LEDs) employing architecture comprising a ZnO nanoparticles electron-transport layer and a conjugated polymer hole-transport layer have been fabricated. The obtained LEDs demonstrate a maximum external-quantum-efficiency of 6.04%, luminance of 12998 Cd/m2 and stable electroluminescence at 519 nm. Importantly, such high efficiency and brightness have been achieved by employing solution processed transport layers, formamidinium lead bromide nanocrystals (CH(NH2)2PbBr3 NCs) synthesized at room-temperature and in air without the use of a Schlenk line, and a procedure based on atomic layer deposition to insolubilize the NC film. The obtained NCs show a photoluminescence quantum yield of 90% that is retained upon film fabrica-tion. The results show that perovskite NC LEDs can achieve high-performance without the use of transport layers deposited through evapo-ration in ultra-high-vacuum.

physics.app-ph↗