Jinhao Duan

Dr. Jinhao Duan

orcid

Research Focus & Metrics

Academic Career Length

4Years (2023-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
17 May 2024 in IEEE Robotics and Automation Letters
Verified
Journal Article
Closed access
HLHanqing Liu
Hanqing Liu
Jinhao DuanJinhao Duan
Jinhao Duan
Zhufeng ShaoZhufeng Shao
Zhufeng Shao
Caro StephaneCaro Stephane
Caro Stephane
This letter investigates the torque resistance performance and dynamic trajectory planning methods for general 3-DOF Cable Suspended Parallel Robots (CSPRs) with parallelogram cable loops, aiming to offer efficient and lightweight robotic equipment for industrial applications. The Torque Resistance Ability Index (TRAI) and Torque Resistance Consumption Index (TRCI) are proposed to evaluate the torque resistance performance of parallelogram cable loops and CSPRs. The Fourier model is adopted to plan the dynamic trajectory of the CSPR with the proposed TRAI and TRCI, which effectively minimizes oscillations and avoids overturns of the moving platform. The B-spline model is employed to implement more complex dynamic trajectories that go through additional constraint points, enhancing flexibility and adaptability. A prototype of the CSPR with parallelogram cable loops is established, and the proposed indexes and trajectory planning methods are verified with experiments.

1 August 2023
Verified
Conference Paper
Open access
PDF file
Jinhao DuanJinhao Duan
Jinhao Duan
QFQuanfu Fan
Quanfu Fan
HCHao Cheng
Hao Cheng
Xiaoshuang ShiXiaoshuang Shi
Xiaoshuang Shi
KXKaidi Xu
Kaidi Xu
Recent works reveal that adversarial augmentation benefits the generalization of neural networks (NNs) if used in an appropriate manner. In this paper, we introduce Temporal Adversarial Augmentation (TA), a novel video augmentation technique that utilizes temporal attention. Unlike conventional adversarial augmentation, TA is specifically designed to shift the attention distributions of neural networks with respect to video clips by maximizing a temporal-related loss function. We demonstrate that TA will obtain diverse temporal views, which significantly affect the focus of neural networks. Training with these examples remedies the flaw of unbalanced temporal information perception and enhances the ability to defend against temporal shifts, ultimately leading to better generalization. To leverage TA, we propose Temporal Video Adversarial Fine-tuning (TAF) framework for improving video representations. TAF is a model-agnostic, generic, and interpretability-friendly training strategy. We evaluate TAF with four powerful models (TSM, GST, TAM, and TPN) over three challenging temporal-related benchmarks (Something-something V1&V2 and diving48). Experimental results demonstrate that TAF effectively improves the test accuracy of these models with notable margins without introducing additional parameters or computational costs. As a byproduct, TAF also improves the robustness under out-of-distribution (OOD) settings. Code is available at https://github.com/jinhaoduan/TAF.

12 July 2023 in arXiv
Verified
Preprint
Open access
PDF file
RMRuipeng Ma
Ruipeng Ma
Jinhao DuanJinhao Duan
Jinhao Duan
FKFei Kong
Fei Kong
Xiaoshuang ShiXiaoshuang Shi
Xiaoshuang Shi
KXKaidi Xu
Kaidi Xu
Image synthesis has seen significant advancements with the advent of diffusion-based generative models like Denoising Diffusion Probabilistic Models (DDPM) and text-to-image diffusion models. Despite their efficacy, there is a dearth of research dedicated to detecting diffusion-generated images, which could pose potential security and privacy risks. This paper addresses this gap by proposing a novel detection method called Stepwise Error for Diffusion-generated Image Detection (SeDID). Comprising statistical-based $\text{SeDID}_{\text{Stat}}$ and neural network-based $\text{SeDID}_{\text{NNs}}$, SeDID exploits the unique attributes of diffusion models, namely deterministic reverse and deterministic denoising computation errors. Our evaluations demonstrate SeDID's superior performance over existing methods when applied to diffusion models. Thus, our work makes a pivotal contribution to distinguishing diffusion model-generated images, marking a significant step in the domain of artificial intelligence security.

23 September 2023 in arXiv
Verified
Preprint
Open access
PDF file
HCHao Cheng
Hao Cheng
Jinhao DuanJinhao Duan
Jinhao Duan
HLHui Li
Hui Li
LZLyutianyang Zhang
Lyutianyang Zhang
JCJiahang Cao
Jiahang Cao
RXRenjing Xu
Renjing Xu
Recently, there has been a surge of interest and attention in Transformer-based structures, such as Vision Transformer (ViT) and Vision Multilayer Perceptron (VMLP). Compared with the previous convolution-based structures, the Transformer-based structure under investigation showcases a comparable or superior performance under its distinctive attention-based input token mixer strategy. Introducing adversarial examples as a robustness consideration has had a profound and detrimental impact on the performance of well-established convolution-based structures. This inherent vulnerability to adversarial attacks has also been demonstrated in Transformer-based structures. In this paper, our emphasis lies on investigating the intrinsic robustness of the structure rather than introducing novel defense measures against adversarial attacks. To address the susceptibility to robustness issues, we employ a rational structure design approach to mitigate such vulnerabilities. Specifically, we enhance the adversarial robustness of the structure by increasing the proportion of high-frequency structural robust biases. As a result, we introduce a novel structure called Robust Bias Transformer-based Structure (RBFormer) that shows robust superiority compared to several existing baseline structures. Through a series of extensive experiments, RBFormer outperforms the original structures by a significant margin, achieving an impressive improvement of +16.12% and +5.04% across different evaluation criteria on CIFAR-10 and ImageNet-1k, respectively.

14 September 2023 in arXiv
Verified
Preprint
Open access
PDF file
CWChenan Wang
Chenan Wang
Jinhao DuanJinhao Duan
Jinhao Duan
CXChaowei Xiao
Chaowei Xiao
EKEdward Kim
Edward Kim
MSMatthew Stamm
Matthew Stamm
KXKaidi Xu
Kaidi Xu
Traditional adversarial attacks concentrate on manipulating clean examples in the pixel space by adding adversarial perturbations. By contrast, semantic adversarial attacks focus on changing semantic attributes of clean examples, such as color, context, and features, which are more feasible in the real world. In this paper, we propose a framework to quickly generate a semantic adversarial attack by leveraging recent diffusion models since semantic information is included in the latent space of well-trained diffusion models. Then there are two variants of this framework: 1) the Semantic Transformation (ST) approach fine-tunes the latent space of the generated image and/or the diffusion model itself; 2) the Latent Masking (LM) approach masks the latent space with another target image and local backpropagation-based interpretation methods. Additionally, the ST approach can be applied in either white-box or black-box settings. Extensive experiments are conducted on CelebA-HQ and AFHQ datasets, and our framework demonstrates great fidelity, generalizability, and transferability compared to other baselines. Our approaches achieve approximately 100% attack success rate in multiple settings with the best FID as 36.61. Code is available at https://github.com/steven202/semantic_adv_via_dm.