Tagoram: real-time tracking of mobile RFID tags to high precision using COTS devices. - Lei Yang 025; Yekui Chen; Xiang-Yang Li 001; Chaowei Xiao; Mo Li 001; Yunhao Liu 001 (MobiCom, 2014)

Static power of mobile devices: Self-updating radio maps for wireless indoor localization. - Chenshu Wu; Zheng Yang 002; Chaowei Xiao; Chaofan Yang; Yunhao Liu 001; Mingyan Liu (INFOCOM, 2015)

Patch Me If You Can: A Study on the Effects of Individual User Behavior on the End-Host Vulnerability State. - Armin Sarabi; Ziyun Zhu; Chaowei Xiao; Mingyan Liu; Tudor Dumitras (PAM, 2017)

Robust Physical-World Attacks on Deep Learning Visual Classification. - Kevin Eykholt; Ivan Evtimov; Earlence Fernandes; Bo Li 026; Amir Rahmati; Chaowei Xiao; Atul Prakash 001; Tadayoshi Kohno; Dawn Song (CVPR, 2018)

Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation. - Chaowei Xiao; Ruizhi Deng; Bo Li 026; Fisher Yu 001; Mingyan Liu; Dawn Song (ECCV (10), 2018)

Spatially Transformed Adversarial Examples. - Chaowei Xiao; Jun-Yan Zhu; Bo Li 026; Warren He; Mingyan Liu; Dawn Song (ICLR (Poster), 2018)

Generating Adversarial Examples with Adversarial Networks. - Chaowei Xiao; Bo Li 026; Jun-Yan Zhu; Warren He; Mingyan Liu; Dawn Song (IJCAI, 2018)

From Patching Delays to Infection Symptoms: Using Risk Profiles for an Early Discovery of Vulnerabilities Exploited in the Wild. - Chaowei Xiao; Armin Sarabi; Yang Liu 018; Bo Li 026; Mingyan Liu; Tudor Dumitras (USENIX Security Symposium, 2018)

Realistic Adversarial Examples in 3D Meshes. - Dawei Yang; Chaowei Xiao; Bo Li 026; Jia Deng 001; Mingyan Liu (CoRR, 2018)

Data Poisoning Attack against Unsupervised Node Embedding Methods. - Mingjie Sun; Jian Tang 008; Huichen Li; Bo Li 026; Chaowei Xiao; Yao Chen; Dawn Song (CoRR, 2018)

Protecting Sensitive Attributes via Generative Adversarial Networks. - Aria Rezaei; Chaowei Xiao; Jie Gao 001; Bo Li 026 (CoRR, 2018)

Automatic Radio Map Adaptation for Indoor Localization Using Smartphones. - Chenshu Wu; Zheng Yang 002; Chaowei Xiao (IEEE Trans. Mob. Comput., 2018)

Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving. - Yulong Cao; Chaowei Xiao; Benjamin Cyr; Yimeng Zhou; Won Park; Sara Rampazzi; Qi Alfred Chen; Kevin Fu; Z. Morley Mao (CCS, 2019)

MeshAdv: Adversarial Meshes for Visual Recognition. - Chaowei Xiao; Dawei Yang; Bo Li 026; Jia Deng 001; Mingyan Liu (CVPR, 2019)

AdvIT: Adversarial Frames Identifier Based on Temporal Consistency in Videos. - Chaowei Xiao; Ruizhi Deng; Bo Li 026; Taesung Lee; Benjamin Edwards; Jinfeng Yi; Dawn Song; Mingyan Liu; Ian M. Molloy (ICCV, 2019)

Performing Co-membership Attacks Against Deep Generative Models. - Kin Sum Liu; Chaowei Xiao; Bo Li 026; Jie Gao 001 (ICDM, 2019)

Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features. - Liang Tong; Bo Li 026; Chen Hajaj; Chaowei Xiao; Ning Zhang 017; Yevgeniy Vorobeychik (USENIX Security Symposium, 2019)

Towards Stable and Efficient Training of Verifiably Robust Neural Networks. - Huan Zhang 001; Hongge Chen; Chaowei Xiao; Bo Li 026; Duane S. Boning; Cho-Jui Hsieh (CoRR, 2019)

SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing. - Haonan Qiu; Chaowei Xiao; Lei Yang; Xinchen Yan; Honglak Lee; Bo Li 026 (CoRR, 2019)

Adversarial Objects Against LiDAR-Based Autonomous Driving Systems. - Yulong Cao; Chaowei Xiao; Dawei Yang; Jing Fang; Ruigang Yang; Mingyan Liu; Bo Li 026 (CoRR, 2019)

Characterizing Attacks on Deep Reinforcement Learning. - Chaowei Xiao; Xinlei Pan; Warren He; Jian Peng 001; Mingjie Sun; Jinfeng Yi; Mingyan Liu; Bo Li 026; Dawn Song (CoRR, 2019)

SemanticAdv: Generating Adversarial Examples via Attribute-Conditioned Image Editing. - Haonan Qiu; Chaowei Xiao; Lei Yang; Xinchen Yan; Honglak Lee; Bo Li 026 (ECCV (14), 2020)

Towards Stable and Efficient Training of Verifiably Robust Neural Networks. - Huan Zhang 001; Hongge Chen; Chaowei Xiao; Sven Gowal; Robert Stanforth; Bo Li 026; Duane S. Boning; Cho-Jui Hsieh (ICLR, 2020)

Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observations. - Huan Zhang 001; Hongge Chen; Chaowei Xiao; Bo Li 026; Mingyan Liu; Duane S. Boning; Cho-Jui Hsieh (NeurIPS, 2020)

Robust Deep Reinforcement Learning against Adversarial Perturbations on Observations. - Huan Zhang 001; Hongge Chen; Chaowei Xiao; Bo Li 026; Duane S. Boning; Cho-Jui Hsieh (CoRR, 2020)

Machine Learning in Adversarial Environments. - Chaowei Xiao (2020)

Application-driven Privacy-preserving Data Publishing with Correlated Attributes. - Aria Rezaei; Chaowei Xiao; Jie Gao 001; Bo Li 026; Sirajum Munir (EWSN, 2021)

Can Shape Structure Features Improve Model Robustness under Diverse Adversarial Settings? - Mingjie Sun; Zichao Li 009; Chaowei Xiao; Haonan Qiu; Bhavya Kailkhura; Mingyan Liu; Bo Li 026 (ICCV, 2021)

A Behavior Privacy Preserving Method towards RF Sensing. - Jianwei Liu 008; Chaowei Xiao; Kaiyan Cui; Jinsong Han; Xian Xu; Kui Ren 001; XuFei Mao (IWQoS, 2021)

ADVM'21: 1st International Workshop on Adversarial Learning for Multimedia. - Aishan Liu; Xinyun Chen; Yingwei Li 002; Chaowei Xiao; Xun Yang 001; Xianglong Liu 001; Dawn Song; Dacheng Tao; Alan L. Yuille; Anima Anandkumar (ACM Multimedia, 2021)

Adversarially Robust 3D Point Cloud Recognition Using Self-Supervisions. - Jiachen Sun; Yulong Cao; Christopher B. Choy; Zhiding Yu; Anima Anandkumar; Zhuoqing Morley Mao; Chaowei Xiao (NeurIPS, 2021)

AugMax: Adversarial Composition of Random Augmentations for Robust Training. - Haotao Wang; Chaowei Xiao; Jean Kossaifi; Zhiding Yu; Anima Anandkumar; Zhangyang Wang (NeurIPS, 2021)

Long-Short Transformer: Efficient Transformers for Language and Vision. - Chen Zhu 001; Wei Ping; Chaowei Xiao; Mohammad Shoeybi; Tom Goldstein; Anima Anandkumar; Bryan Catanzaro (NeurIPS, 2021)

Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks. - Yulong Cao; Ningfei Wang; Chaowei Xiao; Dawei Yang; Jin Fang; Ruigang Yang; Qi Alfred Chen; Mingyan Liu; Bo Li 026 (SP, 2021)

Practical Machine Learning Safety: A Survey and Primer. - Sina Mohseni; Haotao Wang; Zhiding Yu; Chaowei Xiao; Zhangyang Wang; Jay Yadawa (CoRR, 2021)

Auditing AI models for Verified Deployment under Semantic Specifications. - Homanga Bharadhwaj; De-An Huang; Chaowei Xiao; Anima Anandkumar; Animesh Garg (CoRR, 2021)

Characterizing Attacks on Deep Reinforcement Learning. - Xinlei Pan; Chaowei Xiao; Warren He; Shuang Yang; Jian Peng 001; Mingjie Sun; Mingyan Liu; Bo Li 026; Dawn Song (AAMAS, 2022)

Robust Trajectory Prediction against Adversarial Attacks. - Yulong Cao; Danfei Xu; Xinshuo Weng; Zhuoqing Mao 001; Anima Anandkumar; Chaowei Xiao; Marco Pavone 001 (CoRL, 2022)

AdvDO: Realistic Adversarial Attacks for Trajectory Prediction. - Yulong Cao; Chaowei Xiao; Anima Anandkumar; Danfei Xu; Marco Pavone 001 (ECCV (5), 2022)

SecretGen: Privacy Recovery on Pre-trained Models via Distribution Discrimination. - Zhuowen Yuan; Fan Wu 011; Yunhui Long; Chaowei Xiao; Bo Li 026 (ECCV (5), 2022)

RelViT: Concept-guided Vision Transformer for Visual Relational Reasoning. - Xiaojian Ma 001; Weili Nie; Zhiding Yu; Huaizu Jiang; Chaowei Xiao; Yuke Zhu; Song-Chun Zhu; Anima Anandkumar (ICLR, 2022)

Diffusion Models for Adversarial Purification. - Weili Nie; Brandon Guo; Yujia Huang; Chaowei Xiao; Arash Vahdat; Animashree Anandkumar (ICML, 2022)

Understanding The Robustness in Vision Transformers. - Daquan Zhou; Zhiding Yu; Enze Xie; Chaowei Xiao; Animashree Anandkumar; Jiashi Feng; José M. Álvarez 004 (ICML, 2022)

Physical-World Attack towards WiFi-based Behavior Recognition. - Jianwei Liu 008; Yinghui He; Chaowei Xiao; Jinsong Han; Le Cheng; Kui Ren 001 (INFOCOM, 2022)

Test-Time Prompt Tuning for Zero-Shot Generalization in Vision-Language Models. - Manli Shu; Weili Nie; De-An Huang; Zhiding Yu; Tom Goldstein; Anima Anandkumar; Chaowei Xiao (NeurIPS, 2022)

Exploring the Limits of Domain-Adaptive Training for Detoxifying Large-Scale Language Models. - Boxin Wang; Wei Ping; Chaowei Xiao; Peng Xu 008; Mostofa Patwary; Mohammad Shoeybi; Bo Li 026; Anima Anandkumar; Bryan Catanzaro (NeurIPS, 2022)

Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptions. - Jiachen Sun; Qingzhao Zhang; Bhavya Kailkhura; Zhiding Yu; Chaowei Xiao; Z. Morley Mao (CoRR, 2022)

PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition. - Jiachen Sun; Weili Nie; Zhiding Yu; Z. Morley Mao; Chaowei Xiao (CoRR, 2022)

DensePure: Understanding Diffusion Models towards Adversarial Robustness. - Chaowei Xiao; Zhongzhu Chen; Kun Jin; Jiongxiao Wang; Weili Nie; Mingyan Liu; Anima Anandkumar; Bo Li 026; Dawn Song (CoRR, 2022)

Defending against Insertion-based Textual Backdoor Attacks via Attribution. - Jiazhao Li; Zhuofeng Wu 001; Wei Ping; Chaowei Xiao; V. G. Vinod Vydiswaran (ACL (Findings), 2023)

Semantic Adversarial Attacks via Diffusion Models. - Chenan Wang; Jinhao Duan; Chaowei Xiao; Edward Kim 006; Matthew C. Stamm; Kaidi Xu (BMVC, 2023)

VoxFormer: Sparse Voxel Transformer for Camera-Based 3D Semantic Scene Completion. - Yiming Li 003; Zhiding Yu; Christopher B. Choy; Chaowei Xiao; José M. Álvarez 004; Sanja Fidler; Chen Feng 002; Anima Anandkumar (CVPR, 2023)

Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency. - Xiaogeng Liu; Minghui Li; Haoyu Wang; Shengshan Hu; Dengpan Ye; Hai Jin 001; Libing Wu; Chaowei Xiao (CVPR, 2023)

HiCL: Hierarchical Contrastive Learning of Unsupervised Sentence Embeddings. - Zhuofeng Wu 001; Chaowei Xiao; V. G. Vinod Vydiswaran (EMNLP (Findings), 2023)

Shall We Pretrain Autoregressive Language Models with Retrieval? A Comprehensive Study. - Boxin Wang; Wei Ping; Peng Xu 008; Lawrence McAfee; Zihan Liu 001; Mohammad Shoeybi; Yi Dong; Oleksii Kuchaiev; Bo Li 026; Chaowei Xiao; Anima Anandkumar; Bryan Catanzaro (EMNLP, 2023)

Re-ViLM: Retrieval-Augmented Visual Language Model for Zero and Few-Shot Image Captioning. - Zhuolin Yang; Wei Ping; Zihan Liu 001; Vijay Korthikanti; Weili Nie; De-An Huang; Linxi Fan; Zhiding Yu; Shiyi Lan; Bo Li 026; Mohammad Shoeybi; Ming-Yu Liu 001; et al. (EMNLP (Findings), 2023)

Retrieval-based Controllable Molecule Generation. - Zichao Wang 001; Weili Nie; Zhuoran Qiao; Chaowei Xiao; Richard G. Baraniuk; Anima Anandkumar (ICLR, 2023)

Defending against Adversarial Audio via Diffusion Model. - Shutong Wu; Jiongxiao Wang; Wei Ping; Weili Nie; Chaowei Xiao (ICLR, 2023)

DensePure: Understanding Diffusion Models for Adversarial Robustness. - Chaowei Xiao; Zhongzhu Chen; Kun Jin; Jiongxiao Wang; Weili Nie; Mingyan Liu; Anima Anandkumar; Bo Li 026; Dawn Song (ICLR, 2023)

A Critical Revisit of Adversarial Robustness in 3D Point Cloud Recognition with Diffusion-Driven Purification. - Jiachen Sun; Jiongxiao Wang; Weili Nie; Zhiding Yu; Zhuoqing Mao 001; Chaowei Xiao (ICML, 2023)

CodeIPPrompt: Intellectual Property Infringement Assessment of Code Language Models. - Zhiyuan Yu 001; Yuhao Wu; Ning Zhang 017; Chenguang Wang; Yevgeniy Vorobeychik; Chaowei Xiao (ICML, 2023)

On the Exploitability of Instruction Tuning. - Manli Shu; Jiongxiao Wang; Chen Zhu 001; Jonas Geiping; Chaowei Xiao; Tom Goldstein (NeurIPS, 2023)

SMACK: Semantically Meaningful Adversarial Audio Attack. - Zhiyuan Yu 001; Yuanhaur Chang; Ning Zhang 017; Chaowei Xiao (USENIX Security Symposium, 2023)

DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing. - Jiawei Zhang 002; Zhongzhu Chen; Huan Zhang 001; Chaowei Xiao; Bo Li 026 (USENIX Security Symposium, 2023)

A Text-guided Protein Design Framework. - Shengchao Liu; Yutao Zhu 001; Jiarui Lu; Zhao Xu 005; Weili Nie; Anthony Gitter; Chaowei Xiao; Jian Tang 005; Hongyu Guo; Anima Anandkumar (CoRR, 2023)

PerAda: Parameter-Efficient and Generalizable Federated Learning Personalization with Guarantees. - Chulin Xie; De-An Huang; Wenda Chu; Daguang Xu; Chaowei Xiao; Bo Li 026; Anima Anandkumar (CoRR, 2023)

Prismer: A Vision-Language Model with An Ensemble of Experts. - Shikun Liu; Linxi Fan; Edward Johns; Zhiding Yu; Chaowei Xiao; Anima Anandkumar (CoRR, 2023)

Mole Recruitment: Poisoning of Image Classifiers via Selective Batch Sampling. - Ethan Wisdom; Tejas Gokhale; Chaowei Xiao; Yezhou Yang (CoRR, 2023)

Adversarial Demonstration Attacks on Large Language Models. - Jiongxiao Wang; Zichen Liu; Keun Hee Park; Muhao Chen 001; Chaowei Xiao (CoRR, 2023)

ChatGPT-powered Conversational Drug Editing Using Retrieval and Domain Feedback. - Shengchao Liu; Jiongxiao Wang; Yijin Yang; Chengpeng Wang; Ling Liu 001; Hongyu Guo; Chaowei Xiao (CoRR, 2023)

CSI: Enhancing the Robustness of 3D Point Cloud Recognition against Corruption. - Zhuoyuan Wu; Jiachen Sun; Chaowei Xiao (CoRR, 2023)

DeepSpeed4Science Initiative: Enabling Large-Scale Scientific Discovery through Sophisticated AI System Technologies. - Shuaiwen Leon Song; Bonnie Kruft; Minjia Zhang; Conglong Li; Shiyang Chen 004; Chengming Zhang 006; Masahiro Tanaka; Xiaoxia Wu; Jeff Rasley; Ammar Ahmad Awan; Connor Holmes; Martin Cai; et al. (CoRR, 2023)

On the Exploitability of Reinforcement Learning with Human Feedback for Large Language Models. - Jiongxiao Wang; Junlin Wu 001; Muhao Chen 001; Yevgeniy Vorobeychik; Chaowei Xiao (CoRR, 2023)

Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations. - Wenjie Mo 001; Jiashu Xu; Qin Liu 010; Jiongxiao Wang; Jun Yan 012; Chaowei Xiao; Muhao Chen 001 (CoRR, 2023)

DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions. - Fangzhou Wu; Xiaogeng Liu; Chaowei Xiao (CoRR, 2023)

Exploring the Limits of ChatGPT in Software Security Applications. - Fangzhou Wu; Qingzhao Zhang; Ati Priya Bajaj; Tiffany Bao; Ning Zhang; Ruoyu Wang 001; Chaowei Xiao (CoRR, 2023)

Taxonomy of Machine Learning Safety: A Survey and Primer. - Sina Mohseni; Haotao Wang; Chaowei Xiao; Zhiding Yu; Zhangyang Wang; Jay Yadawa (ACM Comput. Surv., 2023)

Behavior Privacy Preserving in RF Sensing. - Jianwei Liu 008; Chaowei Xiao; Kaiyan Cui; Jinsong Han; Xian Xu; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2023)

GenSLMs: Genome-scale language models reveal SARS-CoV-2 evolutionary dynamics. - Maxim Zvyagin; Alexander Brace; Kyle Hippe; Yuntian Deng; Bin Zhang; Cindy Orozco Bohorquez; Austin Clyde; Bharat Kale; Danilo Perez-Rivera; Heng Ma; Carla M. Mann; Michael W. Irvin; et al. (Int. J. High Perform. Comput. Appl., 2023)

Multi-modal molecule structure-text model for text-based retrieval and editing. - Shengchao Liu; Weili Nie; Chengpeng Wang; Jiarui Lu; Zhuoran Qiao; Ling Liu 001; Jian Tang 005; Chaowei Xiao; Animashree Anandkumar (Nat. Mac. Intell., 2023)

RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Models. - Jiongxiao Wang; Junlin Wu 001; Muhao Chen 001; Yevgeniy Vorobeychik; Chaowei Xiao (ACL (1), 2024)

Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges. - Qin Liu 010; Wenjie Mo 001; Terry Tong; Jiashu Xu; Fei Wang 060; Chaowei Xiao; Muhao Chen 001 (Allerton, 2024)

IDNet: A Novel Identity Document Dataset via Few-Shot and Quality-Driven Synthetic Data Generation. - Lulu Xie; Yancheng Wang; Hong Guan; Soham Nag; Rajeev Goel; Niranjan Erappa Narayana Swamy; Yingzhen Yang; Chaowei Xiao; Jonathan Prisby; Ross Maciejewski; Jia Zou 001 (IEEE Big Data, 2024)

Perada: Parameter-Efficient Federated Learning Personalization with Generalization Guarantees. - Chulin Xie; De-An Huang; Wenda Chu; Daguang Xu; Chaowei Xiao; Bo Li 026; Anima Anandkumar (CVPR, 2024)

RealGen: Retrieval Augmented Generation for Controllable Traffic Scenarios. - Wenhao Ding; Yulong Cao; Ding Zhao; Chaowei Xiao; Marco Pavone 001 (ECCV (62), 2024)

Dolphins: Multimodal Language Model for Driving. - Yingzi Ma; Yulong Cao; Jiachen Sun; Marco Pavone 001; Chaowei Xiao (ECCV (45), 2024)

AdaShield : Safeguarding Multimodal Large Language Models from Structure-Based Attack via Adaptive Shield Prompting. - Yu Wang; Xiaogeng Liu; Yu Li; Muhao Chen 001; Chaowei Xiao (ECCV (20), 2024)

Leveraging Hierarchical Feature Sharing for Efficient Dataset Condensation. - Haizhong Zheng; Jiachen Sun; Shutong Wu; Bhavya Kailkhura; Z. Morley Mao; Chaowei Xiao; Atul Prakash 001 (ECCV (24), 2024)

Conversational Drug Editing Using Retrieval and Domain Feedback. - Shengchao Liu; Jiongxiao Wang; Yijin Yang; Chengpeng Wang; Ling Liu 001; Hongyu Guo; Chaowei Xiao (ICLR, 2024)

AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models. - Xiaogeng Liu; Nan Xu; Muhao Chen 001; Chaowei Xiao (ICLR, 2024)

CALICO: Self-Supervised Camera-LiDAR Contrastive Pre-training for BEV Perception. - Jiachen Sun; Haizhong Zheng; Qingzhao Zhang; Atul Prakash 001; Zhuoqing Mao 001; Chaowei Xiao (ICLR, 2024)

Position: TrustLLM: Trustworthiness in Large Language Models. - Yue Huang; Lichao Sun 001; Haoran Wang 005; Siyuan Wu 001; Qihui Zhang; Yuan Li; Chujie Gao; Yixin Huang; Wenhan Lyu; Yixuan Zhang; Xiner Li; Hanchi Sun; et al. (ICML, 2024)

Reinforcement Learning with Human Feedback for Realistic Traffic Simulation. - Yulong Cao; Boris Ivanovic; Chaowei Xiao; Marco Pavone 001 (ICRA, 2024)

ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger. - Jiazhao Li; Yijin Yang; Zhuofeng Wu 001; V. G. Vinod Vydiswaran; Chaowei Xiao (NAACL-HLT, 2024)

From Shortcuts to Triggers: Backdoor Defense with Denoised PoE. - Qin Liu 010; Fei Wang 060; Chaowei Xiao; Muhao Chen 001 (NAACL-HLT, 2024)

Instructional Fingerprinting of Large Language Models. - Jiashu Xu; Fei Wang 060; Mingyu Derek Ma; Pang Wei Koh; Chaowei Xiao; Muhao Chen 001 (NAACL-HLT, 2024)

Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models. - Jiashu Xu; Mingyu Derek Ma; Fei Wang 060; Chaowei Xiao; Muhao Chen 001 (NAACL-HLT, 2024)

Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinking. - Nan Xu; Fei Wang 060; Ben Zhou; Bangzheng Li; Chaowei Xiao; Muhao Chen 001 (NAACL-HLT (Findings), 2024)

AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases. - Zhaorun Chen; Zhen Xiang; Chaowei Xiao; Dawn Song; Bo Li 026 (NeurIPS, 2024)

HaloScope: Harnessing Unlabeled LLM Generations for Hallucination Detection. - Xuefeng Du; Chaowei Xiao; Sharon Li 001 (NeurIPS, 2024)

Consistency Purification: Effective and Efficient Diffusion Purification towards Certified Robustness. - Yiquan Li; Zhongzhu Chen; Kun Jin; Jiongxiao Wang; Jiachen Lei; Bo Li 026; Chaowei Xiao (NeurIPS, 2024)

BackdoorAlign: Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment. - Jiongxiao Wang; Jiazhao Li; Yiquan Li; Xiangyu Qi; Junjie Hu 001; Sharon Li 001; Patrick McDaniel; Muhao Chen 001; Bo Li 026; Chaowei Xiao (NeurIPS, 2024)

MProt-DPO: Breaking the ExaFLOPS Barrier for Multimodal Protein Design Workflows with Direct Preference Optimization. - Gautham Dharuman; Kyle Hippe; Alexander Brace; Sam Foreman; Väinö Hatanpää; Varuni Katti Sastry; Huihuo Zheng; Logan T. Ward; Servesh Muralidharan; Archit Vasan; Bharat Kale; Carla M. Mann; et al. (SC, 2024)

Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models. - Zhiyuan Yu 001; Xiaogeng Liu; Shunning Liang; Zach Cameron; Chaowei Xiao; Ning Zhang 017 (USENIX Security Symposium, 2024)

Differentially Private Video Activity Recognition. - Zelun Luo; Yuliang Zou; Yijin Yang; Zane Durante; De-An Huang; Zhiding Yu; Chaowei Xiao; Li Fei-Fei 001; Animashree Anandkumar (WACV, 2024)

TrustLLM: Trustworthiness in Large Language Models. - Lichao Sun 001; Yue Huang 001; Haoran Wang 005; Siyuan Wu 001; Qihui Zhang; Chujie Gao; Yixin Huang; Wenhan Lyu; Yixuan Zhang 001; Xiner Li; Zhengliang Liu; Yixin Liu 002; et al. (CoRR, 2024)

A Learning-based Declarative Privacy-Preserving Framework for Federated Data Management. - Hong Guan; Summer Gautier; Deepti Gupta; Rajan Hari Ambrish; Yancheng Wang; Harsha Lakamsani; Dhanush Giriyan; Saajan Maslanka; Chaowei Xiao; Yingzhen Yang; Jia Zou 001 (CoRR, 2024)

A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents. - Lingbo Mo; Zeyi Liao; Boyuan Zheng; Yu Su 001; Chaowei Xiao; Huan Sun 001 (CoRR, 2024)

Mitigating Fine-tuning Jailbreak Attack with Backdoor Enhanced Alignment. - Jiongxiao Wang; Jiazhao Li; Yiquan Li; Xiangyu Qi; Junjie Hu 001; Yixuan Li 001; Patrick McDaniel; Muhao Chen 001; Bo Li 026; Chaowei Xiao (CoRR, 2024)

WIPI: A New Web Threat for LLM-Driven Web Agents. - Fangzhou Wu; Shutong Wu; Yulong Cao; Chaowei Xiao (CoRR, 2024)

A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems. - Fangzhou Wu; Ning Zhang; Somesh Jha; Patrick D. McDaniel; Chaowei Xiao (CoRR, 2024)

Automatic and Universal Prompt Injection Attacks against Large Language Models. - Xiaogeng Liu; Zhiyuan Yu 001; Yizhe Zhang; Ning Zhang 017; Chaowei Xiao (CoRR, 2024)

JailBreakV-28K: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks. - Weidi Luo; Siyuan Ma; Xiaogeng Liu; Xiaoyu Guo; Chaowei Xiao (CoRR, 2024)

Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors. - Jiachen Sun; Changsheng Wang; Jiongxiao Wang; Yiwei Zhang; Chaowei Xiao (CoRR, 2024)

AI Risk Management Should Incorporate Both Safety and Security. - Xiangyu Qi; Yangsibo Huang; Yi Zeng 005; Edoardo Debenedetti; Jonas Geiping; Luxi He; Kaixuan Huang; Udari Madhushani; Vikash Sehwag; Weijia Shi; Boyi Wei; Tinghao Xie; et al. (CoRR, 2024)

Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Characte. - Siyuan Ma; Weidi Luo; Yu Wang; Xiaogeng Liu; Muhao Chen 001; Bo Li 026; Chaowei Xiao (CoRR, 2024)

UniGen: A Unified Framework for Textual Dataset Generation Using Large Language Models. - Siyuan Wu 001; Yue Huang 001; Chujie Gao; Dongping Chen; Qihui Zhang; Yao Wan 001; Tianyi Zhou 001; Xiangliang Zhang 001; Jianfeng Gao 001; Chaowei Xiao; Lichao Sun 001 (CoRR, 2024)

Consistency Purification: Effective and Efficient Diffusion Purification towards Certified Robustness. - Yiquan Li; Zhongzhu Chen; Kun Jin; Jiongxiao Wang; Bo Li 026; Chaowei Xiao (CoRR, 2024)

Can Editing LLMs Inject Harm? - Canyu Chen; Baixiang Huang; Zekun Li 008; Zhaorun Chen; Shiyang Lai; Xiongxiao Xu; Jia-Chen Gu; Jindong Gu; Huaxiu Yao; Chaowei Xiao; Xifeng Yan; William Yang Wang; et al. (CoRR, 2024)

IDNet: A Novel Dataset for Identity Document Analysis and Fraud Detection. - Hong Guan; Yancheng Wang; Lulu Xie; Soham Nag; Rajeev Goel; Niranjan Erappa Narayana Swamy; Yingzhen Yang; Chaowei Xiao; Jonathan Prisby; Ross Maciejewski; Jia Zou 001 (CoRR, 2024)

System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective. - Fangzhou Wu; Ethan Cecchetti; Chaowei Xiao (CoRR, 2024)

FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks. - Jiongxiao Wang; Fangzhou Wu; Wendi Li; Jinsheng Pan; G. Edward Suh; Z. Morley Mao; Muhao Chen 001; Chaowei Xiao (CoRR, 2024)

InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models. - Hao Li; Xiaogeng Liu; Chaowei Xiao (CoRR, 2024)

SoK: Unifying Cybersecurity and Cybersafety of Multimodal Foundation Models with an Information Theory Approach. - Ruoxi Sun 001; Jiamin Chang; Hammond Pearce; Chaowei Xiao; Bo Li 026; Qi Wu 001; Surya Nepal; Minhui Xue 001 (CoRR, 2024)

Time to Think the Security of WiFi-Based Behavior Recognition Systems. - Jianwei Liu 008; Yinghui He; Chaowei Xiao; Jinsong Han; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Prismer: A Vision-Language Model with Multi-Task Experts. - Shikun Liu; Linxi Fan; Edward Johns; Zhiding Yu; Chaowei Xiao; Anima Anandkumar (Trans. Mach. Learn. Res., 2024)

Voyager: An Open-Ended Embodied Agent with Large Language Models. - Guanzhi Wang; Yuqi Xie; Yunfan Jiang 001; Ajay Mandlekar; Chaowei Xiao; Yuke Zhu; Linxi Fan; Anima Anandkumar (Trans. Mach. Learn. Res., 2024)

SudoLM: Learning Access Control of Parametric Knowledge with Authorization Alignment. - Qin Liu 010; Fei Wang 060; Chaowei Xiao; Muhao Chen 001 (ACL (1), 2025)

PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free. - Hao Li; Xiaogeng Liu; Ning Zhang; Chaowei Xiao (ACL (1), 2025)

AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection. - Weidi Luo; Shenghong Dai; Xiaogeng Liu; Suman Banerjee 001; Huan Sun 001; Muhao Chen 001; Chaowei Xiao (ACL (1), 2025)

DataGen: Unified Synthetic Dataset Generation via Large Language Models. - Yue Huang 001; Siyuan Wu 001; Chujie Gao; Dongping Chen; Qihui Zhang; Yao Wan 001; Tianyi Zhou 001; Chaowei Xiao; Jianfeng Gao 001; Lichao Sun 001; Xiangliang Zhang 001 (ICLR, 2025)

LeanAgent: Lifelong Learning for Formal Theorem Proving. - Adarsh Kumarappan; Mo Tiwari; Peiyang Song 002; Robert Joseph George; Chaowei Xiao; Anima Anandkumar (ICLR, 2025)

Robust Representation Consistency Model via Contrastive Denoising. - Jiachen Lei; Julius Berner; Jiongxiao Wang; Zhongzhu Chen; Chaowei Xiao; Zhongjie Ba; Kui Ren 001; Jun Zhu 001; Anima Anandkumar (ICLR, 2025)

Eia: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage. - Zeyi Liao; Lingbo Mo; Chejian Xu; Mintong Kang; Jiawei Zhang 002; Chaowei Xiao; Yuan Tian; Bo Li 026; Huan Sun 001 (ICLR, 2025)

AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs. - Xiaogeng Liu; Peiran Li; G. Edward Suh; Yevgeniy Vorobeychik; Zhuoqing Mao 001; Somesh Jha; Patrick McDaniel; Huan Sun 001; Bo Li 026; Chaowei Xiao (ICLR, 2025)

Benchmarking Vision Language Model Unlearning via Fictitious Facial Identity Dataset. - Yingzi Ma; Jiongxiao Wang; Fei Wang 060; Siyuan Ma; Jiazhao Li; Jinsheng Pan; Xiujun Li; Furong Huang; Lichao Sun 001; Bo Li 026; Yejin Choi 001; Muhao Chen 001; et al. (ICLR, 2025)

T-Stitch: Accelerating Sampling in Pre-Trained Diffusion Models with Trajectory Stitching. - Zizheng Pan; Bohan Zhuang; De-An Huang; Weili Nie; Zhiding Yu; Chaowei Xiao; Jianfei Cai 001; Anima Anandkumar (ICLR, 2025)

MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding. - Fei Wang 060; Xingyu Fu; James Y. Huang; Zekun Li 007; Qin Liu 010; Xiaogeng Liu; Mingyu Derek Ma; Nan Xu; Wenxuan Zhou; Kai Zhang 008; Tianyi Lorena Yan; Wenjie Jacky Mo; et al. (ICLR, 2025)

Can Watermarks be Used to Detect LLM IP Infringement For Free? - Zhengyue Zhao; Xiaogeng Liu; Somesh Jha; Patrick McDaniel; Bo Li 026; Chaowei Xiao (ICLR, 2025)

Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations. - Wenjie Jacky Mo; Jiashu Xu; Qin Liu 010; Jiongxiao Wang; Jun Yan 012; Hadi Askari; Chaowei Xiao; Muhao Chen 001 (NAACL (Findings), 2025)

RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process. - Peiran Wang; Xiaogeng Liu; Chaowei Xiao (NAACL (Findings), 2025)

CVE-Bench: Benchmarking LLM-based Software Engineering Agent's Ability to Repair Real-World CVE Vulnerabilities. - Peiran Wang; Xiaogeng Liu; Chaowei Xiao (NAACL (Long Papers), 2025)

Preference Poisoning Attacks on Reward Model Learning. - Junlin Wu 001; Jiongxiao Wang; Chaowei Xiao; Chenguang Wang; Ning Zhang 017; Yevgeniy Vorobeychik (SP, 2025)

A text-guided protein design framework. - Shengchao Liu; Yanjing Li; Zhuoxinran Li; Anthony Gitter; Yutao Zhu 001; Jiarui Lu; Zhao Xu 005; Weili Nie; Arvind Ramanathan; Chaowei Xiao; Jian Tang 005; Hongyu Guo; et al. (Nat. Mac. Intell., 2025)

DreamDrive: Generative 4D Scene Modeling from Street View Images. - Jiageng Mao; Boyi Li; Boris Ivanovic; Yuxiao Chen 008; Yan Wang 051; Yurong You; Chaowei Xiao; Danfei Xu; Marco Pavone 001; Yue Wang 041 (CoRR, 2025)

Safety at Scale: A Comprehensive Survey of Large Model Safety. - Xingjun Ma; Yifeng Gao; Yixu Wang; Ruofan Wang; Xin Wang; Ye Sun; Yifan Ding; Hengyuan Xu; Yunhao Chen; Yunhan Zhao; Hanxun Huang; Yige Li; et al. (CoRR, 2025)

VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap. - Qin Liu 010; Fei Wang 060; Chaowei Xiao; Muhao Chen 001 (CoRR, 2025)

On the Trustworthiness of Generative Foundation Models: Guideline, Assessment, and Perspective. - Yue Huang 001; Chujie Gao; Siyuan Wu 001; Haoran Wang 005; Xiangqi Wang; Yujun Zhou 010; Yanbo Wang 005; Jiayi Ye; Jiawen Shi; Qihui Zhang; Yuan Li 032; Han Bao 003; et al. (CoRR, 2025)

JailDAM: Jailbreak Detection with Adaptive Memory for Vision-Language Model. - Yi Nian; Shenzhe Zhu; Yuehan Qin; Li Li 006; Ziyi Wang; Chaowei Xiao; Yue Zhao 016 (CoRR, 2025)

Doxing via the Lens: Revealing Privacy Leakage in Image Geolocation for Agentic Multi-Modal Large Reasoning Model. - Weidi Luo; Qiming Zhang; Tianyu Lu; Xiaogeng Liu; Yue Zhao 016; Zhen Xiang; Chaowei Xiao (CoRR, 2025)

OET: Optimization-based prompt injection Evaluation Toolkit. - Jinsheng Pan; Xiaogeng Liu; Chaowei Xiao (CoRR, 2025)

Does Representation Intervention Really Identify Desired Concepts and Elicit Alignment? - Hongzheng Yang; Yongqiang Chen 002; Zeyu Qin; Tongliang Liu; Chaowei Xiao; Kun Zhang 001; Bo Han 003 (CoRR, 2025)

RealDrive: Retrieval-Augmented Driving with Diffusion Models. - Wenhao Ding; Sushant Veer; Yuxiao Chen 008; Yulong Cao; Chaowei Xiao; Marco Pavone 001 (CoRR, 2025)

Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification. - Yuhao Sun; Jiacheng Zhang; Zesheng Ye; Chaowei Xiao; Feng Liu (CoRR, 2025)

DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents. - Hao Li; Xiaogeng Liu; Hung-Chun Chiu; Dianqi Li; Ning Zhang; Chaowei Xiao (CoRR, 2025)

ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning. - Zhengyue Zhao; Yingzi Ma; Somesh Jha; Marco Pavone 001; Chaowei Xiao (CoRR, 2025)

MetaAgent: Automatically Constructing Multi-Agent Systems Based on Finite State Machines. - Yaolun Zhang; Xiaogeng Liu; Chaowei Xiao (CoRR, 2025)