BackdoorBench: A Comprehensive Benchmark of Backdoor Learning
Wu, Baoyuan, et al. "BackdoorBench: A Comprehensive Benchmark of Backdoor Learning." NeurIPS 2022 Track Datasets and Benchmarks.
CV
Academic Appointments
- Assistant Professor, School of Computing and Artificial Intelligence, Shanghai University of Finance and Economics, January 2026 - Present
Education
- B.S. in Electronic Information Engineering, The Chinese University of Hong Kong, Shenzhen, 2020
- Ph.D. in Data Science, The Chinese University of Hong Kong, Shenzhen, 2020 - 2025
Research Interests
- Trustworthy artificial intelligence and machine learning security
- Backdoor attacks, detection, and mitigation
- Fairness, robustness, computer vision, and optimization
Publications
Mean Parity Fair Regression in RKHS
Wei, Shaokui, et al. "Mean Parity Fair Regression in RKHS" AISTATS 2023.
Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization
Zhu, Mingli, et al. "Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization." 2023 International Conference on Computer Vision"
Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features
Zhu, Mingli, Shaokui Wei (co-first author), et al. "Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features." Thirty-seventh Conference on Neural Information Processing Systems. NeurIPS 2023.
Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples
Wei, Shaokui, et al. "Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples." Thirty-seventh Conference on Neural Information Processing Systems. NeurIPS 2023.
VDC: Versatile Data Cleanser for Detecting Dirty Samples via Visual-Linguistic Inconsistency
Zhu, Zihao, et al. "VDC: Versatile Data Cleanser for Detecting Dirty Samples via Visual-Linguistic Inconsistency." ICLR 2024.
Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor
Wei, Shaokui, et al. "Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor." Thirty-eighth Conference on Neural Information Processing Systems. NeurIPS 2024.
Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness
Lin, Weilin, et al. "Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness." Thirty-eighth Conference on Neural Information Processing Systems. NeurIPS 2024.
Revisiting the Auxiliary Data in Backdoor Purification
Wei, Shaokui, Shanchao Yang, Jiayin Liu, and Hongyuan Zha. "Revisiting the Auxiliary Data in Backdoor Purification." arXiv:2502.07231, 2025.
Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features
Zhu, Mingli, Shaokui Wei, Hongyuan Zha, and Baoyuan Wu. "Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features." arXiv:2502.18520, 2025.
Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks
Yuan, Danni, Shaokui Wei, Mingda Zhang, Li Liu, and Baoyuan Wu. "Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks." ICLR, 2025.
BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning
Wu, Baoyuan, et al. "BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning." International Journal of Computer Vision 133, 5700–5787, 2025.
Backdoor Mitigation by Distance-Driven Detoxification
Wei, Shaokui, Jiayin Liu, and Hongyuan Zha. "Backdoor Mitigation by Distance-Driven Detoxification." ICCV, 2025.
Defenses in Adversarial Machine Learning: A Systematic Survey from the Lifecycle Perspective
Wu, Baoyuan, et al. "Defenses in Adversarial Machine Learning: A Systematic Survey from the Lifecycle Perspective." IEEE Transactions on Pattern Analysis and Machine Intelligence, 2026.
WPDA: Frequency-based Backdoor Attack with Wavelet Packet Decomposition
Song, Zhengyao, et al. "WPDA: Frequency-based Backdoor Attack with Wavelet Packet Decomposition." Neural Networks 194, 108074, 2026.
Boosting Backdoor Attack with a Learnable Poisoning Sample Selection Strategy
Zhu, Zihao, et al. "Boosting Backdoor Attack with a Learnable Poisoning Sample Selection Strategy." Neurocomputing, 2026.
Talks
Logarithmic Regret Algorithms for Online Convex Optimization
Weekly Talk at CUHKSZ, Shenzhen, China
Solving Mixed Integer Programs Using Neural Networks
Weekly Talk at CUHKSZ, Shenzhen, China
Bias and Fairness in Machine Learning
Weekly Talk at CUHKSZ, Shenzhen, China
Generative Models
Weekly Talk at CUHKSZ, Shenzhen, China
Energy-based Learning for Cooperative Games in Valuation Problems
Weekly Talk at CUHKSZ, Shenzhen, China
On the Tradeoff between Fairness and Robustness
Weekly Talk at CUHKSZ, Shenzhen, China
Distributionally Robust Learning
Weekly Talk at CUHKSZ, Shenzhen, China
Loss Surfaces, Mode Connectivity and Model Robustness
Weekly Talk at CUHKSZ, Shenzhen, China
Improving Robustness using Generated Data
Weekly Talk at CUHKSZ, Shenzhen, China
Sharpness-Aware Minimization
Weekly Talk at CUHKSZ, Shenzhen, China
Structured Pruning of Deep Convolutional Neural Networks
Weekly Talk at CUHKSZ, Shenzhen, China
Tutorial on Backdoor Learning: Recent Advances and Future Trends
Tutorial at ICCV 2023, Pairs, France
Advanced Works in ICCV 2023: Backdoor Learning I
Weekly Talk at CUHKSZ, Shenzhen, China
Backdoor Mitigation via Adversarial Training Techniques
Talk at AIRS, Shenzhen, China
Safeguarding AI: Robust Defenses and Benchmark for Backdoor Attacks
Job Talk at , Shanghai, China
Towards Trustworthy AI: Robust Backdoor Defenses in Machine Learning
Thesis Defense at CUHKSZ, Shenzhen, China