Is this you? Claim this profile to correct it, add a bio and choose the work people see first.

Claim this profile

Academic lineage

Possible advisorsa guess from early papers, not confirmed

  • Shu‐Tao Xia

    Possible advisor · last author on 3 of their early first-author papers, 2016–2018

    Suggested from co-authorship

Is this you? Claim this profile to confirm or dismiss it.

Works137 from public data

TitleCited by
  • Symmetric Cross Entropy for Robust Learning With Noisy Labels

    Yisen Wang, Xingjun Ma, Zaiyi Chen, Yuan Luo, Jinfeng Yi, James Bailey

    IEEE/CVF International Conference on Computer Vision (ICCV) · 2019

    The proposed Symmetric cross entropy Learning (SL) approach simultaneously addresses both the under learning and overfitting problem of CE in the presence of noisy labels, and empirically shows that SL outperforms state-of-the-art methods.

    1,212
  • Adversarial Weight Perturbation Helps Robust Generalization

    Dongxian Wu, Shu‐Tao Xia, Yisen Wang

    neural information processing systems · 2020

    This paper proposes a simple yet effective Adversarial Weight Perturbation (AWP) to explicitly regularize the flatness of weight loss landscape, forming a double-perturbation mechanism in the adversarial training framework that adversarially perturbs both inputs and weights.

    923
  • Improving Adversarial Robustness Requires Revisiting Misclassified Examples

    Yisen Wang, Difan Zou, Jinfeng Yi, James Bailey, Xingjun Ma, Quanquan Gu

    International Conference on Learning Representations · 2020

    This paper proposes a new defense algorithm called MART, which explicitly differentiates the misclassified and correctly classified examples during the training, and shows that MART and its variant could significantly improve the state-of-the-art adversarial robustness.

    876
  • Understanding adversarial attacks on deep learning based medical image analysis systems

    Xingjun Ma, Yuhao Niu, Lin Gu, Yisen Wang, Yitian Zhao, James Bailey, Feng Lu

    Pattern Recognition · 2020

    It is found that medical DNN models can be more vulnerable to adversarial attacks compared to models for natural images, according to two different viewpoints, and surprisingly, medical adversarialattacks can be easily detected.

    567
  • Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality

    Xingjun Ma, Bo Li, Yisen Wang, Sarah Erfani, Sudanthi N. R. Wijewickrema, Grant Robert Schoenebeck, Dawn Xiaodong Song, Michael E. Houle, +1 more

    arXiv · 2018

    440
  • Iterative Learning with Open-set Noisy Labels

    Yisen Wang, Weiyang Liu, Xingjun Ma, James Bailey, Hongyuan Zha, Le Song, Shu‐Tao Xia

    IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · 2018

    A novel iterative learning framework for training CNNs on datasets with open-set noisy labels that detects noisy labels and learns deep discriminative features in an iterative fashion and designs a Siamese network to encourage clean labels and noisy labels to be dissimilar.

    361
  • Adversarial Camouflage: Hiding Physical-World Attacks With Natural Styles

    Ranjie Duan, Xingjun Ma, Yisen Wang, James Bailey, Alex Kai Qin, Yun Yang

    IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · 2020

    Experimental evaluation shows that, in both digital and physical-world scenarios, adversarial examples crafted by Adversarial Camouflage are well camouflaged and highly stealthy, while remaining effective in fooling state-of-the-art DNN image classifiers.

    285
  • Dimensionality-Driven Learning with Noisy Labels

    Xingjun Ma, Yisen Wang, Michael E. Houle, Shuo Zhou, Sarah Erfani, Shu‐Tao Xia, Sudanthi N. R. Wijewickrema, James Bailey

    arXiv · 2018

    217
  • Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets

    Dongxian Wu, Yisen Wang, Shu‐Tao Xia, James Bailey, Xingjun Ma

    arXiv · 2020

    166
  • On the Convergence and Robustness of Adversarial Training

    Yisen Wang, Xingjun Ma, James Bailey, Jinfeng Yi, Bowen Zhou, Quanquan Gu

    arXiv · 2021

    159
  • The EBS-A* algorithm: An improved A* algorithm for path planning

    Huanwei Wang, Shangjie Lou, Jing Jing, Yisen Wang, Wei Liu, Tieming Liu

    PLoS ONE · 2022

    An improved A*-based algorithm is proposed, called the EBS-A* algorithm, that introduces expansion distance, bidirectional search, and smoothing into path planning, and improves the path planning efficiency by 278% and reduces the number of critical nodes by 91.89%.

    146
  • Chaos is a Ladder: A New Theoretical Understanding of Contrastive Learning via Augmentation Overlap

    Yifei Wang, Qi Zhang, Yisen Wang, Yang Jian-sheng, Zhouchen Lin

    arXiv · 2022

    The theory suggests an alternative understanding of contrastive learning: the role of aligning positive samples is more like a surrogate task than an ultimate goal, and the overlapped augmented views create a ladder for Contrastive learning to gradually learn class-separated representations.

    136
  • Normalized Loss Functions for Deep Learning with Noisy Labels

    Xingjun Ma, Hanxun Huang, Yisen Wang, Simone Romano, Sarah Erfani, James Bailey

    arXiv · 2020

    112
  • A Novel Consistent Random Forest Framework: Bernoulli Random Forests

    Yisen Wang, Shu‐Tao Xia, Qingtao Tang, Jia Xin Wu, Xingquan Zhu

    IEEE Transactions on Neural Networks and Learning Systems · 2017

    109
  • Decoupled Networks

    Weiyang Liu, Zhen Liu, Zhiding Yu, Bo Dai, Rongmei Lin, Yisen Wang, James Matthew Rehg, Le Song

    IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · 2018

    A generic decoupled learning framework which models the intra-class variation and semantic difference independently and directly learn the operator from data is proposed.

    92
  • Fight Back Against Jailbreaking via Prompt Adversarial Tuning

    Yichuan Mo, Yuji Wang, Zeming Wei, Yisen Wang

    neural information processing systems · 2024

    This paper proposes an approach named Prompt Adversarial Tuning (PAT) that trains a prompt control attached to the user prompt as a guard prefix that is effective against both grey-box and black-box attacks, while maintaining the model's utility on the benign task and incurring only negligible computational overhead.

    91
  • CFA: Class-Wise Calibrated Fair Adversarial Training

    Zeming Wei, Yifei Wang, Yiwen Guo, Yisen Wang

    IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · 2023

    This paper is the first to theoretically and empirically investigate the preference of different classes for adversarial configu-rations, including perturbation margin, regularization, and weight averaging, which customizes specific training con-figurations for each class automatically.

    91
  • Query efficient black-box adversarial attack on deep neural networks

    Yang Bai, Yisen Wang, Yuyuan Zeng, Yong Jiang, Shu‐Tao Xia

    Pattern Recognition · 2022

    80
  • What is Wrong with Perplexity for Long-context Language Modeling?

    Fang, Lizhe, Yifei Wang, Zhaoyang Liu, Chenheng Zhang, Stefanie Jegelka, Jinyang Gao, Bolin Ding, Yisen Wang

    arXiv · 2024

    Deeper insights are offered into the limitations of PPL and effective solutions for accurately evaluating and enhancing the long-context capabilities of LLMs are presented, leading to consistent improvements across diverse benchmarks.

    77
  • ContraNorm: A Contrastive Learning Perspective on Oversmoothing and Beyond

    Xiaojun Guo, Yifei Wang, Tianqi Du, Yisen Wang

    arXiv · 2023

    A novel normalization layer called ContraNorm is proposed, inspired by the effectiveness of contrastive learning in preventing dimensional collapse, which implicitly shatters representations in the embedding space, leading to a more uniform distribution and a slighter dimensional collapse.

    67
  • Hilbert-Based Generative Defense for Adversarial Examples

    Yang Bai, Yan Feng, Yisen Wang, Tao Dai, Shu‐Tao Xia, Yong Jiang

    IEEE/CVF International Conference on Computer Vision (ICCV) · 2019

    63
  • Self-Ensemble Adversarial Training for Improved Robustness

    Hongjun Wang, Yisen Wang

    arXiv · 2022

    This work devise a simple but powerful Self-Ensemble Adversarial Training (SEAT) method for yielding a robust classifier by averaging weights of history models and discusses the relationship between the ensemble of predictions from different adversarially trained models and the prediction of weight-ensembled models.

    61
  • Improving Query Efficiency of Black-Box Adversarial Attack

    Yang Bai, Yuyuan Zeng, Yong Jiang, Yisen Wang, Shu‐Tao Xia, Weiwei Guo

    Lecture notes in computer science · 2020

    This paper explores the distribution of adversarial examples around benign inputs with the help of image structure information characterized by a Neural Process, and proposes a Neuralprocess based black-box adversarial attack (NP-Attack) in this paper.

    61
  • Analysis and Applications of Class-wise Robustness in Adversarial Training

    Qi Chuan Tian, Kun Kuang, Kelu Jiang, Fei Qing Wu, Yisen Wang

    Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining · 2021

    This work proposes to analyze the class-wise robustness in adversarial training and proposes a simple but effective attack method, named Temperature-PGD attack, which proposes to enlarge the robustness disparity among classes with a temperature factor on the confidence distribution of each image.

    60
  • Residual Convolutional CTC Networks for Automatic Speech Recognition

    Yisen Wang, Xuejiao Deng, Songbai Pu, Zhiheng Huang

    arXiv · 2017

    59

Show all 137 works

Publication data from OpenAlex, with missing venues and authors filled in from Crossref; citation counts are the higher of OpenAlex and Semantic Scholar, last synced 2026-10-16. One-sentence summaries under some papers are written by Semantic Scholar’s model. Citation counts may be lower than on Google Scholar, which indexes more sources.

Report an error

Wrong papers, two people merged into one, or a profile that should not be here? Tell us and we will fix or hide it.

Sign in to report