2025. Faculty Member at Vector Institute; 2025. Google Research Scholar Award; 2025. Top Area Chairs Award for NeurIPS 2025; 2025. Outstanding Meta Reviewer Award for ICML 2025; 2024. Top Area Chairs Award for NeurIPS 2024; 2024. AAAI New Faculty Highlights; 2023. WAIC Yunfan Award; 2023. Amazon Research Award; 2021. 1st place (out of 1,559 teams) in CVPR 2021 Security AI Challenger: Unrestricted Adversarial Attacks on ImageNet; 2020 - present. In the defense benchmark RobustBench, 10 out of top-10 methods use TRADES as training algorithms; Jan. 2019 - Dec. 2019. 1st place in Unrestricted Adversarial Example Challenge (hosted by Google); 2018. 1st place (out of 396 teams) in NeurIPS 2018 Adversarial Vision Challenge (Robust Model Track); 2018. 1st place (out of 75 teams) in NeurIPS 2018 Adversarial Vision Challenge (Targeted Attacks Track); 2018. 3rd place (out of 101 teams) in NeurIPS 2018 Adversarial Vision Challenge (Untargeted Attacks Track).
Research Experience
Currently an Assistant Professor at the University of Waterloo, leading the SafeAI Lab; Previously a Postdoc fellow at TTIC.
Education
Completed Ph.D. in 2019 from the Machine Learning Department at Carnegie Mellon University, co-advised by Maria-Florina Balcan and David P. Woodruff; Graduated from Peking University in 2015; Was a Postdoc fellow at Toyota Technological Institute at Chicago (TTIC), hosted by Avrim Blum and Greg Shakhnarovich.
Background
Interested in the intersection of beautiful theory and practical methodology, broadly including theories and applications of machine learning and algorithms. Currently a tenure-track Assistant Professor at the University of Waterloo, leading the SafeAI Lab, and a faculty member at Vector Institute for AI.
Miscellany
Blogs and software projects include EAGLE, The Matrix, and AON-PRISMA.