arXiv subjects

Lijing Zhou

Publications and source records attributed to Lijing Zhou.

5 recordsLinked to original sources

arXiv2025

Discontinuity-aware physics-informed neural network for phase-field method in three-phase flow with phase change

Physics-informed neural networks (PINNs) have been applied to simulate multiphase flows, yet they are limited in modeling phase changes and sharp interfaces due to optimization conflicts in the strongly coupled Allen-Cahn, Cahn-Hilliard, and Navier-Stokes equations and the intrinsic smoothness bias of neural representations near discontinuities. To mitigate these limitations, this study presents a discontinuity-aware physics-informed neural network (DPINN) based on the phase-field method to resolve sharp interfaces and phase changes in multiphase flows. It incorporates a discontinuity-aware network architecture to mitigate spectral bias and automatically detect and model sharp interfacial dynamics, and a learnable local artificial viscosity term to stabilize the calculation near steep gradients. During optimization, adaptive time-marching and loss-balancing strategies are employed to reduce long-horizon errors and mitigate gradient conflicts, ensuring accurate capture of phase changes. Numerical experiments on two-phase reversed single-vortex and bubble-rising problems demonstrate that DPINN accurately resolves sharp interfacial dynamics, while conventional PINNs fail to converge. The method is further extended and tested in a three-phase droplet-icing case, where the viscosity and density ratios between ice, water, and air exceed seven and three orders of magnitude, respectively. The predicted phase change dynamics and sharp pointy-tip formation show excellent agreement with the reference, highlighting the robustness of the proposed approach.

physics.comp-ph↗

arXiv2025

Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference

The Key-Value (KV) cache, which stores intermediate attention computations (Key and Value pairs) to avoid redundant calculations, is a fundamental mechanism for accelerating Large Language Model (LLM) inference. However, this efficiency optimization introduces significant yet underexplored privacy risks. This paper provides the first comprehensive analysis of these vulnerabilities, demonstrating that an attacker can reconstruct sensitive user inputs directly from the KV-cache. We design and implement three distinct attack vectors: a direct Inversion Attack, a more broadly applicable and potent Collision Attack, and a semantic-based Injection Attack. These methods demonstrate the practicality and severity of KV-cache privacy leakage issues. To mitigate this, we propose KV-Cloak, a novel, lightweight, and efficient defense mechanism. KV-Cloak uses a reversible matrix-based obfuscation scheme, combined with operator fusion, to secure the KV-cache. Our extensive experiments show that KV-Cloak effectively thwarts all proposed attacks, reducing reconstruction quality to random noise. Crucially, it achieves this robust security with virtually no degradation in model accuracy and minimal performance overhead, offering a practical solution for trustworthy LLM deployment.

cs.CR↗

arXiv2024

An energy-stable phase-field model for droplet icing simulations

A phase-field model for three-phase flows is established by combining the Navier-Stokes (NS) and the energy equations, with the Allen-Cahn (AC) and Cahn-Hilliard (CH) equations and is demonstrated analytically to satisfy the energy dissipation law. A finite difference scheme is then established to discretize the model and this numerical scheme is proved to be unconditionally stable. Based on this scheme, the droplet icing process with phase changing is numerically simulated and the pointy tip of the icy droplet is obtained and analyzed. The influence of the temperature of the supercooled substrate and the ambient air on the droplet freezing process is studied. The results indicate that the formation of the droplet pointy tip is primarily due to the expansion in the vertical direction during the freezing process. Lower substrate temperatures can accelerate this process. Changes in air temperature have a relatively minor impact on the freezing process, mainly affecting its early stages. Moreover, our results demonstrate that the ice front transitions from an approximately horizontal shape to a concave one. Dedicated physical experiments were conducted and the measured solidification process matches the results of the proposed phase-field method very well.

physics.flu-dyn↗

arXiv2024

Bicoptor: Two-round Secure Three-party Non-linear Computation without Preprocessing for Privacy-preserving Machine Learning

The overhead of non-linear functions dominates the performance of the secure multiparty computation (MPC) based privacy-preserving machine learning (PPML). This work introduces a family of novel secure three-party computation (3PC) protocols, Bicoptor, which improve the efficiency of evaluating non-linear functions. The basis of Bicoptor is a new sign determination protocol, which relies on a clever use of the truncation protocol proposed in SecureML (S\&P 2017). Our 3PC sign determination protocol only requires two communication rounds, and does not involve any preprocessing. Such sign determination protocol is well-suited for computing non-linear functions in PPML, e.g. the activation function ReLU, Maxpool, and their variants. We develop suitable protocols for these non-linear functions, which form a family of GPU-friendly protocols, Bicoptor. All Bicoptor protocols only require two communication rounds without preprocessing. We evaluate Bicoptor under a 3-party LAN network over a public cloud, and achieve more than 370,000 DReLU/ReLU or 41,000 Maxpool (find the maximum value of nine inputs) operations per second. Under the same settings and environment, our ReLU protocol has a one or even two orders of magnitude improvement to the state-of-the-art works, Falcon (PETS 2021) or Edabits (CRYPTO 2020), respectively without batch processing.

cs.CR↗

arXiv2024

Bicoptor 2.0: Addressing Challenges in Probabilistic Truncation for Enhanced Privacy-Preserving Machine Learning

This paper primarily focuses on analyzing the problems and proposing solutions for the probabilistic truncation protocol in existing PPML works from the perspectives of accuracy and efficiency. In terms of accuracy, we reveal that precision selections recommended in some of the existing works are incorrect. We conduct a thorough analysis of their open-source code and find that their errors were mainly due to simplified implementation, more specifically, fixed numbers are used instead of random numbers in probabilistic truncation protocols. Based on this, we provide a detailed theoretical analysis to validate our views. We propose a solution and a precision selection guideline for future works. Regarding efficiency, we identify limitations in the state-of-the-art comparison protocol, Bicoptor's (S\&P 2023) DReLU protocol, which relies on the probabilistic truncation protocol and is heavily constrained by the security parameter to avoid errors, significantly impacting the protocol's performance. To address these challenges, we introduce the first non-interactive deterministic truncation protocol, replacing the original probabilistic truncation protocol. Additionally, we design a non-interactive modulo switch protocol to enhance the protocol's security. Finally, we provide a guideline to reduce computational and communication overhead by using only a portion of the bits of the input, i.e., the key bits, for DReLU operations based on different model parameters. With the help of key bits, the performance of our DReLU protocol is further improved. We evaluate the performance of our protocols on three GPU servers, and achieve a 10x improvement in DReLU protocol, and a 6x improvement in the ReLU protocol over the state-of-the-art work Piranha-Falcon (USENIX Sec 22). Overall, the performance of our end-to-end (E2E) privacy-preserving machine learning (PPML) inference is improved by 3-4 times.

cs.CR↗