Search

Federated learning (FL) is an emerging collaborative learning paradigm that aims to protect data privacy. Unfortunately, recent works show FL algorithms are vulnerable to the serious data reconstruction attacks. However, existing works lack a theoretical foundation on to what extent the devices' data can be reconstructed and the effectiveness of these attacks cannot be compared fairly due to their unstable performance. To address this deficiency, we propose a theoretical framework to understand data reconstruction attacks to FL. Our framework involves bounding the data reconstruction error and an attack's error bound reflects its inherent attack effectiveness. Under the framework, we can theoretically compare the effectiveness of existing attacks. For instance, our results on multiple datasets validate that the iDLG attack inherently outperforms the DLG attack.

Federated Learning (FL) is a novel client-server distributed learning framework that can protect data privacy. However, recent works show that FL is vulnerable to poisoning attacks. Many defenses with robust aggregators (AGRs) are proposed to mitigate the issue, but they are all broken by advanced attacks. Very recently, some renewed robust AGRs are designed, typically with novel clipping or/and filtering strate-gies, and they show promising defense performance against the advanced poisoning attacks. In this paper, we show that these novel robust AGRs are also vulnerable to carefully designed poisoning attacks. Specifically, we observe that breaking these robust AGRs reduces to bypassing the clipping or/and filtering of malicious clients, and propose an optimization-based attack framework to leverage this observation. Under the framework, we then design the customized attack against each robust AGR. Extensive experiments on multiple datasets and threat models verify our proposed optimization-based attack can break the SOTA AGRs. We hence call for novel defenses against poisoning attacks to FL. Code is available at: https://github.com/Yuxin104/ BreakSTOAPoisoningDefenses., Comment: This is an extended version of our CIKM 2024 paper

Harmonic mode-locking, realized actively or passively, is an effective technique for increasing the repetition rate of lasers, with important applications in optical sampling, laser micro-machining and frequency metrology. It is critically important to understand how a harmonically mode-locked pulse train responds to external perturbations and noise, so as to make sure that it is stable and resistant to noise. Here, in a series of carefully designed experiments, we elucidate the retiming dynamics of laser pulses generated in a soliton fiber laser harmonically mode-locked at ~2 GHz to the acoustic resonance in a photonic crystal fiber (PCF) core. We characterize the self-driven optomechanical lattice along the PCF using a homodyne set-up, and reveal that each soliton undergoes damped oscillatory retiming within its trapping potential after an abrupt perturbation. In addition we show, through statistical analysis of the intra-cavity pulse spacing, how the trapping potentials are effective for suppressing timing jitter. The experimental results are well described using a dynamic model including dissipation, which provides valuable insight into the stability and noise performance of optomechanically mode-locked laser systems, and may also be useful for studying complex inter-soliton interactions.

Explainable Graph Neural Network (GNN) has emerged recently to foster the trust of using GNNs. Existing GNN explainers are developed from various perspectives to enhance the explanation performance. We take the first step to study GNN explainers under adversarial attack--We found that an adversary slightly perturbing graph structure can ensure GNN model makes correct predictions, but the GNN explainer yields a drastically different explanation on the perturbed graph. Specifically, we first formulate the attack problem under a practical threat model (i.e., the adversary has limited knowledge about the GNN explainer and a restricted perturbation budget). We then design two methods (i.e., one is loss-based and the other is deduction-based) to realize the attack. We evaluate our attacks on various GNN explainers and the results show these explainers are fragile., Comment: 17 pages, 64 figures

Coherent dispersive wave emission, as an important phenomenon of soliton dynamics, manifests itself in multiple platforms of nonlinear optics from fibre waveguides to integrated photonics. Limited by its resonance nature, efficient generation of coherent dispersive wave with ultra-broad bandwidth has, however, proved difficult to realize. Here, we unveil a new regime of soliton dynamics in which the dispersive wave emission process strongly couples with the splitting dynamics of the driving pulse. High-order dispersion and self-steepening effects, accumulated over soliton self-compression, break the system symmetry, giving rise to high-efficiency generation of coherent dispersive wave in the ultraviolet region. Simultaneously, asymmetric soliton splitting results in the appearance of a temporally-delayed ultrashort pulse with high intensity, overlapping and copropagating with the dispersive wave pulse. Intense cross-phase modulations lead to octave-wide broadening of the dispersive wave spectrum, covering 200 to 400 nm wavelengths. The highly-coherent, octave-wide ultraviolet spectrum, generated from the simple capillary fibre set-up, is in great demand for time-resolved spectroscopy, ultrafast electron microscopy and frequency metrology applications, and the critical role of the secondary pulse in this process reveals some new opportunities for all-optical control of versatile soliton dynamics.

We studied the underlying mechanism of broadband dispersive-wave emission within a resonance band of gas-filled anti-resonant hollow-core fiber. Both theoretical and experimental results unveiled that the high-order soliton, launched into the hollow-core fiber, experienced two stages of pulse compression, resulting in a multi-peak structure of the dispersive-wave spectrum. Over the first-stage pulse compression, a sharp increase of the pulse peak power triggered the first time of dispersion-wave emission, and simultaneously caused ionization of the noble gas filled in the fiber core. Strong soliton-plasma interactions led to blue shifting of the pump pulse, and the blue-shifted pulse experienced a decreasing dispersion value in the fiber waveguide, resulting in an increase of its soliton order. Then, the second-stage pulse compression due to the high-order soliton effect triggered the second time of dispersive-wave emission at a phase-matched frequency slightly lower than that in the first stage. Multi-peak spectra of the output dispersive-waves and their formation dynamics were clearly observed in our experiments, which can be understood using a delicate coupling mechanism among three nonlinear effects including high-order-soliton compression, soliton-plasma interaction and phase-matched dispersive-wave emission. The output broadband dispersive-wave could be potentially compressed to sub-30 fs duration using precise chirp-compensation technique.

Graph neural networks (GNNs) have achieved state-of-the-art performance in many graph learning tasks. However, recent studies show that GNNs are vulnerable to both test-time evasion and training-time poisoning attacks that perturb the graph structure. While existing attack methods have shown promising attack performance, we would like to design an attack framework to further enhance the performance. In particular, our attack framework is inspired by certified robustness, which was originally used by defenders to defend against adversarial attacks. We are the first, from the attacker perspective, to leverage its properties to better attack GNNs. Specifically, we first derive nodes' certified perturbation sizes against graph evasion and poisoning attacks based on randomized smoothing, respectively. A larger certified perturbation size of a node indicates this node is theoretically more robust to graph perturbations. Such a property motivates us to focus more on nodes with smaller certified perturbation sizes, as they are easier to be attacked after graph perturbations. Accordingly, we design a certified robustness inspired attack loss, when incorporated into (any) existing attacks, produces our certified robustness inspired attack counterpart. We apply our framework to the existing attacks and results show it can significantly enhance the existing base attacks' performance., Comment: Accepted by CVPR 2023

We demonstrate the stable and flexible light delivery of multi-{\mu}J, sub-200-fs pulses over a ~10-m-long vacuumized anti-resonant hollow-core fiber (AR-HCF), which was successfully used for high-performance pulse synchronization. Compared with the pulse train launched into the AR-HCF, the transmitted pulse train out of the fiber exhibits excellent stabilities in pulse power and spectrum, with pointing stability largely improved. The walk-off between the fiber-delivery and the other free-space-propagation pulse trains, in an open loop, was measured to be <6 fs root-mean-square (RMS) over 90 minutes, corresponding to a relative optical-path variation of <2x10-7. This walk-off can be further suppressed to ~2 fs RMS simply using an active control loop, highlighting the great application potentials of this AR-HCF set-up in large-scale laser and accelerator facilities.

Femtosecond light pulses carrying optical angular momentums (OAMs), possessing intriguing properties of helical phase fronts and ultrafast temporal profiles, enable many applications in nonlinear optics, strong-field physics and laser micro-machining. While generation of OAM-carrying ultrafast pulses and their interactions with matters have been intensively studied in experiments, three-dimensional characterization of ultrafast OAM-carrying light beams in spatio-temporal domain has, however, proved difficult to achieve. Conventional measurement schemes rely on the use of a reference pulsed light beam which needs to be well-characterized in its phase front and to have sufficient overlap and coherence with the beam under test, largely limiting practical applications of these schemes. Here we demonstrate a self-referencing set-up based on a tilted interferometer that can be used to measure complete spatio-temporal information of OAM-carrying femtosecond pulses with different topological charges. Through scanning one interferometer arm, the spectral phase over the pulse spatial profile can be obtained using the tilted interference signal, and the temporal envelope of the light field at one particular position around its phase singularity can be retrieved simultaneously, enabling three-dimensional beam reconstruction. This self-referencing technique, capable of measuring spatio-temporal ultrafast optical-vortex beams, may find many applications in fields of nonlinear optics and light-matter interactions.

High-energy ultraviolet pulse generation in gas-filled hollow capillary fibers (HCFs) through dispersive-wave-emission process, has attracted considerable attentions in recent several years due to its great application potentials in ultraviolet spectroscopy and photochemistry. While the ability of this technique to deliver high-energy, ultrafast ultraviolet pulses is widely recognized, few-fs duration of {\mu}J-level dispersive-wave (DW) pulses has, however, escaped direct measurements. In this letter, we demonstrate that using several chirped mirrors, few-fs ultraviolet DW pulses can be obtained in atmosphere environment without the use of vacuum chambers. The pulse temporal profiles, measured using a self-diffraction frequency-resolved optical gating set-up, exhibit full-width-half-maximum pulse widths of 9.6 fs at 384 nm and 9.4 fs at 430 nm, close to the Fourier-transform limits. Moreover, theoretical and experimental studies reveal the strong influences of driving pulse energy and HCF length on temporal width and shape of the measured DW pulses. The ultraviolet pulses obtained in atmosphere environment with {\mu}J-level pulse energy, few-fs pulse width and broadband wavelength tunability are ready to be used in many applications.

Brillouin scattering has been widely exploited for advanced photonics functionalities such as microwave photonics, signal processing, sensing, lasing, and more recently in micro- and nano-photonic waveguides. So far, all the works have focused on the opto-acoustic interaction driven from the core region of micro- and nano-waveguides. Here we observe, for the first time, an efficient Brillouin scattering generated by an evanescent field nearby a sub-wavelength waveguide embedded in a pressurised gas cell, with a maximum gain coefficient of $18.90 \pm 0.17$ m$^{-1}$W$^{-1}$. This gain is 11 times larger than the highest Brillouin gain obtained in a hollow-core fibre and 79 times larger than in a standard single-mode fibre. The realisation of strong free-space Brillouin scattering from a waveguide benefits from the flexibility of confined light while providing a direct access to the opto-acoustic interaction, as required in free-space optoacoustics such as Brillouin spectroscopy and microscopy. Therefore, our work creates an important bridge between Brillouin scattering in waveguides, Brillouin spectroscopy and microscopy, and opens new avenues in light-sound interactions, optomechanics, sensing, lasing and imaging., Comment: Main manuscript: 8 pages, 6 figures; Supplementary: 5 pages, 3 figures

The resonance band in hollow-core photonic crystal fiber (HC-PCF), while leading to high-loss region in the fiber transmission spectrum, has been successfully used for generating phase-matched dispersive wave (DW). Here, we report that the spectral width of the resonance-induced DW can be largely broadened due to plasma-driven blueshifting soliton. In the experiment, we observed that in a short length of Ar-filled single-ring HC-PCF the soliton self-compression and photoionization effects caused a strong spectral blueshift of the pump pulse, changing the phase-matching condition of the DW emission process. Therefore, broadening of DW spectrum to the longer-wavelength side was obtained with several spectral peaks, which correspond to the generation of DW at different positions along the fiber. In the simulation, we used super-Gauss windows with different central wavelengths to filter out these DW spectral peaks, and studied the time-domain characteristics of these peaks respectively using Fourier transform method. The simulation results verified that these multiple-peaks on the DW spectrum have different delays in the time domain, agreeing well with our theoretical prediction. Remarkably, we found that the whole time-domain DW trace can be compressed to ~29 fs using proper chirp compensation. The experimental and numerical results reported here provide some insight into the resonance-induced DW generation process in gas-filled HC-PCFs, they could also pave the way to ultrafast pulse generation using DW-emission mechanism.

Graph neural network (GNN), the mainstream method to learn on graph data, is vulnerable to graph evasion attacks, where an attacker slightly perturbing the graph structure can fool trained GNN models. Existing work has at least one of the following drawbacks: 1) limited to directly attack two-layer GNNs; 2) inefficient; and 3) impractical, as they need to know full or part of GNN model parameters. We address the above drawbacks and propose an influence-based \emph{efficient, direct, and restricted black-box} evasion attack to \emph{any-layer} GNNs. Specifically, we first introduce two influence functions, i.e., feature-label influence and label influence, that are defined on GNNs and label propagation (LP), respectively. Then we observe that GNNs and LP are strongly connected in terms of our defined influences. Based on this, we can then reformulate the evasion attack to GNNs as calculating label influence on LP, which is \emph{inherently} applicable to any-layer GNNs, while no need to know information about the internal GNN model. Finally, we propose an efficient algorithm to calculate label influence. Experimental results on various graph datasets show that, compared to state-of-the-art white-box attacks, our attack can achieve comparable attack performance, but has a 5-50x speedup when attacking two-layer GNNs. Moreover, our attack is effective to attack multi-layer GNNs\footnote{Source code and full version is in the link: \url{https://github.com/ventr1c/InfAttack}}., Comment: To be appeared in WSDM 2024

Link prediction in dynamic graphs (LPDG) is an important research problem that has diverse applications such as online recommendations, studies on disease contagion, organizational studies, etc. Various LPDG methods based on graph embedding and graph neural networks have been recently proposed and achieved state-of-the-art performance. In this paper, we study the vulnerability of LPDG methods and propose the first practical black-box evasion attack. Specifically, given a trained LPDG model, our attack aims to perturb the graph structure, without knowing to model parameters, model architecture, etc., such that the LPDG model makes as many wrong predicted links as possible. We design our attack based on a stochastic policy-based RL algorithm. Moreover, we evaluate our attack on three real-world graph datasets from different application domains. Experimental results show that our attack is both effective and efficient.

Accurate and fast characterization of spatiotemporal information of high-intensity, ultrashort pulses is crucial in the field of strong-field laser science and technology. While conventional self-referenced interferometers were widely used to retrieve the spatial profile of the relative spectral phase of pulses, additional measurements of temporal and spectral information at a particular position of the laser beam were, however, necessary to remove the indeterminacy, which increases the system complexity. Here we report an advanced, dual-functional interferometer that is able to reconstruct the complete spatiotemporal information of ultrashort pulses with a single scan of the interferometer arm. The set-up integrates an interferometric frequency-resolved optical gating (FROG) with a radial shearing Michelson interferometer. Trough scanning one arm of the interferometer, both cross-correlated FROG trace at the central part of the laser beam and delay-dependent interferograms of the entire laser profile are simultaneously obtained, allowing a fast 3-dimensional reconstruction of few-cycle laser pulses.

Mode-locked lasers have been widely used to explore interactions between optical solitons, including bound-soliton states that may be regarded as "photonic molecules". Conventional mode-locked lasers can however host at most only a few solitons, which means that stochastic behaviour involving large numbers of solitons cannot easily be studied under controlled experimental conditions. Here we report the use of an optoacoustically mode-locked fibre laser to create hundreds of temporal traps or "reactors" within which multiple solitons can be isolated and controlled both globally and individually. We achieve on-demand synthesis and dissociation of soliton molecules within these parallel reactors, in this way unfolding a novel panorama of diverse dynamics in which the statistics of multi-soliton interactions can be studied. The results are of potential importance in all-optical information processing and in the control of ultrafast pulsed lasers., Comment: 14 pages, 6 figures in main article, 28 pages, 21 figures in supplementary text

We demonstrate that the phase-matched dispersive wave (DW) emission within the resonance band of a 25-cm-long gas-filled hollow-core photonic crystal fiber (HC-PCF) can be strongly enhanced by the photoionization effect of the pump pulse. In the experiments we observe that as the pulse energy increases, the pump pulse gradually shifts to shorter wavelengths due to soliton-plasma interactions. When the central wavelength of the blueshifting soliton is close to the resonance band of the HC-PCF, high-efficiency energy transfer from the pump light to the DW in the visible region can be obtained. During this DW emission process, we also observe that the spectral center of the DW gradually shifts to longer wavelengths leading to a slightly-increased DW bandwidth, which can be well explained as the consequence of phase-matched coupling between the pump pulse and the DW. In particular, at an input pulse energy of 6 uJ, the spectral ratio of the DW at the fiber output is measured to be as high as ~53% together with a conversion efficiency of ~19%. These experimental results, explained by numerical simulations, pave the way to high-brightness light sources based on high-efficiency frequency-upconversion processes in gas-filled HC-PCFs.