Wild-Time: A Benchmark of in-the-Wild Distribution Shift over Time. - Huaxiu Yao; Caroline Choi; Bochuan Cao; Yoonho Lee 001; Pang Wei Koh; Chelsea Finn (NeurIPS, 2022)

IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI. - Bochuan Cao; Changjiang Li; Ting Wang 006; Jinyuan Jia 001; Bo Li 026; Jinghui Chen (NeurIPS, 2023)

On the Safety of Open-Sourced Large Language Models: Does Alignment Really Prevent Them From Being Misused? - Hangfan Zhang; Zhimeng Guo; Huaisheng Zhu; Bochuan Cao; Lu Lin 001; Jinyuan Jia 001; Jinghui Chen; Dinghao Wu (CoRR, 2023)

Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM. - Bochuan Cao; Yuanpu Cao; Lu Lin 001; Jinghui Chen (ACL (1), 2024)

Jailbreak Open-Sourced Large Language Models via Enforced Decoding. - Hangfan Zhang; Zhimeng Guo; Huaisheng Zhu; Bochuan Cao; Lu Lin 001; Jinyuan Jia 001; Jinghui Chen; Dinghao Wu (ACL (1), 2024)

Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections. - Yuanpu Cao; Bochuan Cao; Jinghui Chen (NAACL-HLT, 2024)

Data Free Backdoor Attacks. - Bochuan Cao; Jinyuan Jia 001; Chuxuan Hu; Wenbo Guo 002; Zhen Xiang; Jinghui Chen; Bo Li 026; Dawn Song (NeurIPS, 2024)

Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization. - Yuanpu Cao; Tianrong Zhang; Bochuan Cao; Ziyi Yin 003; Lu Lin 001; Fenglong Ma; Jinghui Chen (NeurIPS, 2024)

On the Difficulty of Defending Contrastive Learning against Backdoor Attacks. - Changjiang Li; Ren Pang; Bochuan Cao; Zhaohan Xi; Jinghui Chen; Shouling Ji; Ting Wang 006 (USENIX Security Symposium, 2024)

XPrompt:Explaining Large Language Model's Generation via Joint Prompt Attribution. - Yurui Chang; Bochuan Cao; Yujia Wang; Jinghui Chen; Lu Lin 001 (CoRR, 2024)

On the Intrinsic Self-Correction Capability of LLMs: Uncertainty and Latent Concept. - Guangliang Liu; Haitao Mao; Bochuan Cao; Zhiyu Xue; Kristen Marie Johnson; Jiliang Tang; Rongrong Wang (CoRR, 2024)

Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models. - Changjiang Li; Ren Pang; Bochuan Cao; Jinghui Chen; Fenglong Ma; Shouling Ji; Ting Wang 006 (CoRR, 2024)

AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models. - Yaopei Zeng; Yuanpu Cao; Bochuan Cao; Yurui Chang; Jinghui Chen; Lu Lin 001 (CoRR, 2024)

Monitoring Decoding: Mitigating Hallucination via Evaluating the Factuality of Partial Response during Generation. - Yurui Chang; Bochuan Cao; Lu Lin 001 (ACL (Findings), 2025)

JoPA: Explaining Large Language Model's Generation via Joint Prompt Attribution. - Yurui Chang; Bochuan Cao; Yujia Wang; Jinghui Chen; Lu Lin 001 (ACL (1), 2025)

WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response. - Tianrong Zhang; Bochuan Cao; Yuanpu Cao; Lu Lin 001; Prasenjit Mitra; Jinghui Chen (NAACL (Findings), 2025)

TruthFlow: Truthful LLM Generation via Representation Flow Correction. - Hanyu Wang; Bochuan Cao; Yuanpu Cao; Jinghui Chen (CoRR, 2025)

Your Agent Can Defend Itself against Backdoor Attacks. - Changjiang Li; Jiacheng Liang; Bochuan Cao; Jinghui Chen; Ting Wang 006 (CoRR, 2025)