Mingyang Sun
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Previous Organizations / Institutes
The organizations / institutes from the scholar's other articles in the past ten years
Research Subjects
Mingyang Sun has a total of 175 co-authors. Here are the top co-authors by number of shared publications:
- Goran Strbac
Imperial College London
14 shared publications - Fei Teng
Imperial College London
11 shared publications - Yi Wang
The University of Hong Kong
10 shared publications - Chongqing Kang
Department of Electrical Engineering, Tsinghua University, Beijing, China
8 shared publications - Peng Cheng
The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China
8 shared publications - Jiming Chen
Zhejiang University
7 shared publications
Latest Publications
- 1 November 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Knowledge and Data Engineering
- Vol. 38 (11) , 7461-7477
Efficient Poisoning Attacks Against Reinforcement Learning-Based Recommender Systems
- 1 November 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Knowledge and Data Engineering
- Vol. 38 (11) , 7461-7477
Efficient Poisoning Attacks Against Reinforcement Learning-Based Recommender Systems
- Top Cited PapersOpen Access
- 2 March 2026
- Published by Springer Nature in Nature Climate Change
- Vol. 16 (4) , 460-467
Technological improvements in EV batteries offset climate-induced durability challenges
Electric vehicles (EVs) are key to transportation decarbonization, yet their battery performance and longevity are vulnerable to temperature extremes, which will be affected by climate change. Battery technology advancements moderate this vulnerability, a dynamic rarely captured in technology assessments under future climates. Here we show that technological advancements have largely mitigated battery lifetime reductions driven by climate change. We combine bottom-up EV simulation and battery degradation models with high-resolution downscaled climate data, capturing warming and variability, for 300 global cities. Under 2 °C warming, old (2010–2018) batteries would experience lifetime declines of 8% (average) and 30% (maximum), whereas new batteries (2019–2023) would experience lifetime declines of 3% (average) and 10% (maximum). New batteries also mitigate regional inequities in battery lifetime reductions driven by climate change. Increasing cell temperature primarily drives lifetime declines. Our findings emphasize climate adaptation co-benefits from technological advancement and increasing thermal resiliency of emerging battery technologies.
- 2 March 2026
- Published by Springer Nature in Nature Climate Change
- Vol. 16 (4) , 460-467
Top Cited PapersOpen AccessTechnological improvements in EV batteries offset climate-induced durability challenges
Electric vehicles (EVs) are key to transportation decarbonization, yet their battery performance and longevity are vulnerable to temperature extremes, which will be affected by climate change. Battery technology advancements moderate this vulnerability, a dynamic rarely captured in technology assessments under future climates. Here we show that technological advancements have largely mitigated battery lifetime reductions driven by climate change. We combine bottom-up EV simulation and battery degradation models with high-resolution downscaled climate data, capturing warming and variability, for 300 global cities. Under 2 °C warming, old (2010–2018) batteries would experience lifetime declines of 8% (average) and 30% (maximum), whereas new batteries (2019–2023) would experience lifetime declines of 3% (average) and 10% (maximum). New batteries also mitigate regional inequities in battery lifetime reductions driven by climate change. Increasing cell temperature primarily drives lifetime declines. Our findings emphasize climate adaptation co-benefits from technological advancement and increasing thermal resiliency of emerging battery technologies.
- Top Cited PapersOpen Access
- 6 February 2026
- Published by Elsevier in The Innovation
- Vol. 7 (3)
Updating global green-hydrogen production costs and configurations under future climates
- 6 February 2026
- Published by Elsevier in The Innovation
- Vol. 7 (3)
Top Cited PapersOpen AccessUpdating global green-hydrogen production costs and configurations under future climates
- 3 February 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Smart Grid
- Vol. 17 (3) , 2622-2625
PDF-Reshape: Adversarial Attack on Probabilistic Wind Power Forecasting
Probabilistic wind power forecasting (PWPF) is a critical tool to manage the inherent uncertainty of wind power generation, providing probability predictions essential for economic dispatch and stability assessment. However, the increasing threat of cyberattacks necessitates a comprehensive investigation of the vulnerabilities of PWPFs. This letter introduces a novel adversarial attack framework, termed PDF-Reshape Attack, which targets to manipulate the statistical measures of the probability density functions (PDFs) while maintaining stealthiness by minimizing changes to the expectations. We evaluate the effectiveness of the proposed attack on mainstream PDF distributions (e.g., Gaussian, Beta, Gamma, Weibull) and assess its economic impact on downstream economic dispatch.
- 3 February 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Smart Grid
- Vol. 17 (3) , 2622-2625
PDF-Reshape: Adversarial Attack on Probabilistic Wind Power Forecasting
Probabilistic wind power forecasting (PWPF) is a critical tool to manage the inherent uncertainty of wind power generation, providing probability predictions essential for economic dispatch and stability assessment. However, the increasing threat of cyberattacks necessitates a comprehensive investigation of the vulnerabilities of PWPFs. This letter introduces a novel adversarial attack framework, termed PDF-Reshape Attack, which targets to manipulate the statistical measures of the probability density functions (PDFs) while maintaining stealthiness by minimizing changes to the expectations. We evaluate the effectiveness of the proposed attack on mainstream PDF distributions (e.g., Gaussian, Beta, Gamma, Weibull) and assess its economic impact on downstream economic dispatch.
- 16 October 2025
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Smart Grid
- Vol. 17 (1) , 666-677
Robust Demand-Side Resource Management Scheme Against State-Altering Attacks
Deep reinforcement learning (DRL) has become a promising approach for sequential decision-making in large-scale, complex, and dynamic environments, offering an effective solution for demand-side resource (DSR) control. However, the decision-making process of DRL is highly dependent on the accuracy of its input data, making it vulnerable to data manipulation and perturbations. This vulnerability is exacerbated in DSR systems, where large-scale distributed deployment and reliance on communication networks expose them to widespread cybersecurity threats. In this paper, we propose a robust smoothing adversarial reinforcement learning algorithm to enhance the robustness of DSR control systems under malicious attacks. First, we model the interaction process between attackers and the DSR control center as a partially observable Markov game. Then, we develop a robust adversarial training framework, incorporating randomized smoothing to enhance defense capability against unknown and dynamic attacks. Furthermore, we provide a theoretical robustness guarantee for the proposed algorithm across a wide range of attack scenarios. Finally, comparison studies illustrate and verify that the proposed scheme enhances the robustness of DRL-based DSR control systems under state-altering attacks.
- 16 October 2025
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Smart Grid
- Vol. 17 (1) , 666-677
Robust Demand-Side Resource Management Scheme Against State-Altering Attacks
Deep reinforcement learning (DRL) has become a promising approach for sequential decision-making in large-scale, complex, and dynamic environments, offering an effective solution for demand-side resource (DSR) control. However, the decision-making process of DRL is highly dependent on the accuracy of its input data, making it vulnerable to data manipulation and perturbations. This vulnerability is exacerbated in DSR systems, where large-scale distributed deployment and reliance on communication networks expose them to widespread cybersecurity threats. In this paper, we propose a robust smoothing adversarial reinforcement learning algorithm to enhance the robustness of DSR control systems under malicious attacks. First, we model the interaction process between attackers and the DSR control center as a partially observable Markov game. Then, we develop a robust adversarial training framework, incorporating randomized smoothing to enhance defense capability against unknown and dynamic attacks. Furthermore, we provide a theoretical robustness guarantee for the proposed algorithm across a wide range of attack scenarios. Finally, comparison studies illustrate and verify that the proposed scheme enhances the robustness of DRL-based DSR control systems under state-altering attacks.
- 6 October 2025
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Dependable and Secure Computing
- Vol. 23 (1) , 1514-1527
Revealing the Risk of Hyper-Parameter Leakage in Deep Reinforcement Learning Models
Deep reinforcement learning (DRL) has been implemented across various critical applications, including smart grids, trac management systems, and autonomous vehicles. To safeguard intellectual property and mitigate security vulnerabilities, access to DRL models is typically restricted to a black-box format. is means specic details like the structure of the policy network and optimization processes are not openly available to users. It is crucial to determine if the hyper-parameters can be inferred from observable states and actions within these models, presenting two primary challenges: 1) limited data available from the black-box model and 2) the intertwined eects of hyperparameters on the model's behavior. Since DRL models exhibit varying behaviors in identical tasks depending on their hyper-parameter congurations, we introduce a novel hyper-parameter inference attack against DRL, named HyperInfer, which allows adversaries to deduce the settings of a black-box DRL model. In order to fully assess the risk of model hyper-parameter leakage, we design two novel state generation methods that provoke divergent responses from DRL models. We also develop an inference framework to elucidate the relationship between model behavior and hyper-parameter settings. rough comprehensive experiments involving multiple DRL models and environments, we demonstrate that model behaviors can indeed reveal hyper-parameter settings, with inference accuracy surpassing 90% in scenarios such as PPO with CartPole. We also discuss keyndings relevant to practical applications and explore how knowledge of hyperparameters can facilitate more sophisticated attacks. Lastly, we propose potential defensive strategies to minimize the risk of hyper-parameter leakage in DRL models.
- 6 October 2025
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Dependable and Secure Computing
- Vol. 23 (1) , 1514-1527
Revealing the Risk of Hyper-Parameter Leakage in Deep Reinforcement Learning Models
Deep reinforcement learning (DRL) has been implemented across various critical applications, including smart grids, trac management systems, and autonomous vehicles. To safeguard intellectual property and mitigate security vulnerabilities, access to DRL models is typically restricted to a black-box format. is means specic details like the structure of the policy network and optimization processes are not openly available to users. It is crucial to determine if the hyper-parameters can be inferred from observable states and actions within these models, presenting two primary challenges: 1) limited data available from the black-box model and 2) the intertwined eects of hyperparameters on the model's behavior. Since DRL models exhibit varying behaviors in identical tasks depending on their hyper-parameter congurations, we introduce a novel hyper-parameter inference attack against DRL, named HyperInfer, which allows adversaries to deduce the settings of a black-box DRL model. In order to fully assess the risk of model hyper-parameter leakage, we design two novel state generation methods that provoke divergent responses from DRL models. We also develop an inference framework to elucidate the relationship between model behavior and hyper-parameter settings. rough comprehensive experiments involving multiple DRL models and environments, we demonstrate that model behaviors can indeed reveal hyper-parameter settings, with inference accuracy surpassing 90% in scenarios such as PPO with CartPole. We also discuss keyndings relevant to practical applications and explore how knowledge of hyperparameters can facilitate more sophisticated attacks. Lastly, we propose potential defensive strategies to minimize the risk of hyper-parameter leakage in DRL models.