Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information. - Baolin Zheng; Peipei Jiang 002; Qian Wang 002; Qi Li 002; Chao Shen 001; Cong Wang 001; Yunjie Ge; Qingyang Teng; Shenyi Zhang (CCS, 2021)

Anti-Distillation Backdoor Attacks: Backdoors Can Really Survive in Knowledge Distillation. - Yunjie Ge; Qian Wang 002; Baolin Zheng; Xinlu Zhuang; Qi Li 002; Chao Shen 001; Cong Wang 001 (ACM Multimedia, 2021)

Deep Learning on Mobile and Embedded Devices: State-of-the-art, Challenges, and Future Directions. - Yanjiao Chen; Baolin Zheng; Zihan Zhang; Qian Wang 002; Chao Shen 001; Qian Zhang 001 (ACM Comput. Surv., 2021)

Towards Query-Efficient Adversarial Attacks Against Automatic Speech Recognition Systems. - Qian Wang 002; Baolin Zheng; Qi Li 002; Chao Shen 001; Zhongjie Ba (IEEE Trans. Inf. Forensics Secur., 2021)

Towards Black-Box Adversarial Attacks on Interpretable Deep Learning Systems. - Yike Zhan; Baolin Zheng; Qian Wang 002; Ningping Mou; Binqing Guo; Qi Li 002; Chao Shen 001; Cong Wang 001 (ICME, 2022)

A Few Seconds Can Change Everything: Fast Decision-based Attacks against DNNs. - Ningping Mou; Baolin Zheng; Qian Wang 002; Yunjie Ge; Binqing Guo (IJCAI, 2022)

Adversarial Network Pruning by Filter Robustness Estimation. - Xinlu Zhuang; Yunjie Ge; Baolin Zheng; Qian Wang 002 (ICASSP, 2023)

SDBC: A Novel and Effective Self-Distillation Backdoor Cleansing Approach. - Sheng Ran; Baolin Zheng; Mingwei Sun (ICONIP (12), 2023)

Sequence As Genes: An User Behavior Modeling Framework for Fraud Transaction Detection in E-commerce. - Ziming Wang; Qianru Wu; Baolin Zheng; Junjie Wang; Kaiyu Huang; Yanjie Shi (KDD, 2023)

From Toxic to Trustworthy: Using Self-Distillation and Semi-supervised Methods to Refine Neural Networks. - Xianda Zhang; Baolin Zheng; Jianbao Hu; Chengyang Li; Xiaoying Bai (AAAI, 2024)

FIBA: Federated Invisible Backdoor Attack. - Lu Zhang; Baolin Zheng (ICASSP, 2024)

FastTextDodger: Decision-Based Adversarial Attack Against Black-Box NLP Models With Extremely High Efficiency. - Xiaoxue Hu; Geling Liu; Baolin Zheng; Lingchen Zhao; Qian Wang 002; Yufei Zhang; Minxin Du (IEEE Trans. Inf. Forensics Secur., 2024)

Perception-Driven Imperceptible Adversarial Attack Against Decision-Based Black-Box Models. - Shenyi Zhang; Baolin Zheng; Peipei Jiang 002; Lingchen Zhao; Chao Shen 001; Qian Wang 002 (IEEE Trans. Inf. Forensics Secur., 2024)

Exploring black-box adversarial attacks on Interpretable Deep Learning Systems. - Yike Zhan; Baolin Zheng; Dongxin Liu; Boren Deng; Xu Yang (Comput. Vis. Image Underst., 2025)

USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models. - Baolin Zheng; Guanlin Chen; Hongqiong Zhong; Qingyang Teng; Yingshui Tan; Zhendong Liu; Weixun Wang; Jiaheng Liu; Jian Yang 003; Huiyun Jing; Jincheng Wei; Wenbo Su; et al. (CoRR, 2025)