Removing Adversarial Noise in Class Activation Feature Space. - Dawei Zhou 004; Nannan Wang 001; Chunlei Peng; Xinbo Gao 001; Xiaoyu Wang 002; Jun Yu 001; Tongliang Liu (ICCV, 2021)

Towards Defending against Adversarial Examples via Attack-Invariant Features. - Dawei Zhou 004; Tongliang Liu; Bo Han 003; Nannan Wang 001; Chunlei Peng; Xinbo Gao 001 (ICML, 2021)

Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training. - Dawei Zhou 004; Nannan Wang 001; Xinbo Gao 001; Bo Han 003; Jun Yu 001; Xiaoyu Wang 002; Tongliang Liu (CoRR, 2021)

Modelling Adversarial Noise for Adversarial Defense. - Dawei Zhou 004; Nannan Wang 001; Tongliang Liu; Bo Han 003 (CoRR, 2021)

Improving Adversarial Robustness via Mutual Information Estimation. - Dawei Zhou 004; Nannan Wang 001; Xinbo Gao 001; Bo Han 003; Xiaoyu Wang 002; Yibing Zhan; Tongliang Liu (ICML, 2022)

Modeling Adversarial Noise for Adversarial Training. - Dawei Zhou 004; Nannan Wang 001; Bo Han 003; Tongliang Liu (ICML, 2022)

Visual Privacy Protection Based on Type-I Adversarial Attack. - Zhigang Su; Dawei Zhou 004; Decheng Liu; Nannan Wang 001; Zhen Wang 037; Xinbo Gao 001 (CoRR, 2022)

Strength-Adaptive Adversarial Training. - Chaojian Yu; Dawei Zhou 004; Li Shen 008; Jun Yu 001; Bo Han 003; Mingming Gong; Nannan Wang 001; Tongliang Liu (CoRR, 2022)

Towards Multi-Domain Face Synthesis Via Domain-Invariant Representations and Multi-Level Feature Parts. - Dawei Zhou 004; Nannan Wang 001; Chunlei Peng; Yi Yu 001; Xi Yang 011; Xinbo Gao 001 (IEEE Trans. Multim., 2022)

Hiding Visual Information via Obfuscating Adversarial Perturbations. - Zhigang Su; Dawei Zhou 004; Nannan Wang 001; Decheng Liu; Zhen Wang 037; Xinbo Gao 001 (ICCV, 2023)

Phase-aware Adversarial Defense for Improving Adversarial Robustness. - Dawei Zhou 004; Nannan Wang 001; Heng Yang; Xinbo Gao 001; Tongliang Liu (ICML, 2023)

Eliminating Adversarial Noise via Information Discard and Robust Representation Restoration. - Dawei Zhou 004; Yukun Chen; Nannan Wang 001; Decheng Liu; Xinbo Gao 001; Tongliang Liu (ICML, 2023)

Quantization Aware Attack: Enhancing the Transferability of Adversarial Attacks across Target Models with Different Quantization Bitwidths. - Yulong Yang 002; Chenhao Lin; Qian Li 024; Chao Shen 001; Dawei Zhou 004; Nannan Wang 001; Tongliang Liu (CoRR, 2023)

Gradient constrained sharpness-aware prompt learning for vision-language models. - Liangchen Liu 001; Nannan Wang 001; Dawei Zhou 004; Xinbo Gao 001; Decheng Liu; Xi Yang 011; Tongliang Liu (CoRR, 2023)

Robust Representation Learning via Asymmetric Negative Contrast and Reverse Attention. - Nuoyan Zhou; Decheng Liu; Dawei Zhou 004; Xinbo Gao 001; Nannan Wang 001 (CoRR, 2023)

Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training. - Jiacheng Zhang; Feng Liu 003; Dawei Zhou 004; Jingfeng Zhang; Tongliang Liu (ICML, 2024)

Advancing Generalized Deepfake Detector with Forgery Perception Guidance. - Ruiyang Xia; Dawei Zhou 004; Decheng Liu; Lin Yuan 002; Shuodi Wang; Jie Li 001; Nannan Wang 001; Xinbo Gao 001 (ACM Multimedia, 2024)

Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantization. - Yulong Yang 002; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Haoran Fan; Dawei Zhou 004; Nannan Wang 001; Tongliang Liu; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Inspector for Face Forgery Detection: Defending Against Adversarial Attacks From Coarse to Fine. - Ruiyang Xia; Dawei Zhou 004; Decheng Liu; Jie Li 001; Lin Yuan 002; Nannan Wang 001; Xinbo Gao 001 (IEEE Trans. Image Process., 2024)

Protecting Prostate Cancer Classification From Rectal Artifacts via Targeted Adversarial Training. - Lei Hu 002; Dawei Zhou 004; Jiahua Xu; Cheng Lu 001; Chu Han; Zhenwei Shi; Qikui Zhu; Xinbo Gao 001; Nannan Wang 001; Zaiyi Liu (IEEE J. Biomed. Health Informatics, 2024)

Motion Artifact Removal in Pixel-Frequency Domain via Alternate Masks and Diffusion Model. - Jiahua Xu; Dawei Zhou 004; Lei Hu 002; Jianfeng Guo; Feng Yang 015; Zaiyi Liu; Nannan Wang 001; Xinbo Gao 001 (AAAI, 2025)

Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement. - Nuoyan Zhou; Dawei Zhou 004; Decheng Liu; Nannan Wang 001; Xinbo Gao 001 (AAAI, 2025)

Fooling human detectors via robust and visually natural adversarial patches. - Dawei Zhou 004; Hongbin Qu; Nannan Wang 001; Chunlei Peng; Zhuoqi Ma; Xi Yang 011; Xinbo Gao 001 (Neurocomputing, 2025)

A Knowledge-Guided Adversarial Defense for Resisting Malicious Visual Manipulation. - Dawei Zhou 004; Zhigang Su; Decheng Liu; Tongliang Liu; Nannan Wang 001; Xinbo Gao 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Robust Adversarial Defenses in Federated Learning: Exploring the Impact of Data Heterogeneity. - Qian Li 024; Di Wu 062; Dawei Zhou 004; Chenhao Lin; Shuai Liu 016; Cong Wang 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Generalizable Prompt Learning via Gradient Constrained Sharpness-Aware Minimization. - Liangchen Liu 001; Nannan Wang 001; Dawei Zhou 004; Decheng Liu; Xi Yang 011; Xinbo Gao 001; Tongliang Liu (IEEE Trans. Multim., 2025)

Improving Adversarial Robustness via Phase and Amplitude-aware Prompting. - Yibo Xu; Dawei Zhou 004; Decheng Liu; Nannan Wang 001 (CoRR, 2025)

A Knowledge-guided Adversarial Defense for Resisting Malicious Visual Manipulation. - Dawei Zhou 004; Suzhi Gang; Decheng Liu; Tongliang Liu; Nannan Wang 001; Xinbo Gao 001 (CoRR, 2025)

Structure-Accurate Medical Image Translation based on Dynamic Frequency Balance and Knowledge Guidance. - Jiahua Xu; Dawei Zhou 004; Lei Hu 002; Zaiyi Liu; Nannan Wang 001; Xinbo Gao 001 (CoRR, 2025)

Towards Generalized Proactive Defense against Face Swapping with Contour-Hybrid Watermark. - Ruiyang Xia; Dawei Zhou 004; Decheng Liu; Lin Yuan 002; Jie Li 001; Nannan Wang 001; Xinbo Gao 001 (CoRR, 2025)

Improving Adversarial Training From the Perspective of Class-Flipping Distribution. - Dawei Zhou 004; Nannan Wang 001; Tongliang Liu; Xinbo Gao 001 (IEEE Trans. Pattern Anal. Mach. Intell., 2025)