Brain Tumor Segmentation Using Concurrent Fully Convolutional Networks and Conditional Random Fields. - Guangyu Shen; Yi Ding 003; Tian Lan 005; Hao Chen 047; Zhiguang Qin (ICMIP, 2018)

Multi-modal brain tumor image segmentation based on SDAE. - Yi Ding 003; Rongfeng Dong; Tian Lan 005; Xuerui Li; Guangyu Shen; Hao Chen 047; Zhiguang Qin (Int. J. Imaging Syst. Technol., 2018)

Unrestricted Adversarial Attacks for Semantic Segmentation. - Guangyu Shen; Chengzhi Mao; Junfeng Yang; Baishakhi Ray (CoRR, 2019)

PENet: Object Detection using Points Estimation in Aerial Images. - Ziyang Tang; Xiang Liu 016; Guangyu Shen; Baijian Yang 001 (CoRR, 2020)

Backdoor Scanning for Deep Neural Networks through K-Arm Optimization. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Shengwei An; Qiuling Xu; Siyuan Cheng 005; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2021)

EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Zhenting Wang; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2021)

Complex Backdoor Detection by Symmetric Feature Differencing. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Zhenting Wang; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2022)

Better Trigger Inversion Optimization in Backdoor Scanning. - Guanhong Tao 001; Guangyu Shen; Yingqi Liu; Shengwei An; Qiuling Xu; Shiqing Ma; Pan Li; Xiangyu Zhang 001 (CVPR, 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLP Backdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2022)

MIRROR: Model Inversion for Deep LearningNetwork with High Fidelity. - Guanhong Tao 001; Qiuling Xu; Yingqi Liu; Guangyu Shen; Shengwei An; Jingwei Xu 001; Xiangyu Zhang 001; Yuan Yao 001 (NDSS, 2022)

Piccolo: Exposing Complex Backdoors in NLP Transformer Models. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2022)

Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security. - Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Qiuling Xu; Shengwei An; Zhuo Zhang 002; Xiangyu Zhang 001 (SP, 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2022)

DECK: Model Hardening for Defending Pervasive Backdoors. - Guanhong Tao 001; Yingqi Liu; Siyuan Cheng 005; Shengwei An; Zhuo Zhang 002; Qiuling Xu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2022)

Backdoor Vulnerabilities in Normally Trained Deep Learning Models. - Guanhong Tao 001; Zhenting Wang; Siyuan Cheng 005; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (CoRR, 2022)

Detecting Backdoors in Pre-trained Encoders. - Shiwei Feng 002; Guanhong Tao 001; Siyuan Cheng 005; Guangyu Shen; Xiangzhe Xu; Yingqi Liu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2023)

MEDIC: Remove Model Backdoors via Importance Driven Cloning. - Qiuling Xu; Guanhong Tao 001; Jean Honorio; Yingqi Liu; Shengwei An; Guangyu Shen; Siyuan Cheng 005; Xiangyu Zhang 001 (CVPR, 2023)

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. - Kaiyuan Zhang 002; Guanhong Tao 001; Qiuling Xu; Siyuan Cheng 005; Shengwei An; Yingqi Liu; Shiwei Feng 002; Guangyu Shen; Pin-Yu Chen; Shiqing Ma; Xiangyu Zhang 001 (ICLR, 2023)

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis. - Xiangzhe Xu; Shiwei Feng 002; Yapeng Ye; Guangyu Shen; Zian Su; Siyuan Cheng 005; Guanhong Tao 001; Qingkai Shi; Zhuo Zhang 002; Xiangyu Zhang 001 (ISSTA, 2023)

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Shengwei An; Xiangzhe Xu; Shiwei Feng 002; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Shiqing Ma; Xiangyu Zhang 001 (NDSS, 2023)

Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. - Guangyu Shen; Siyuan Cheng 005; Guanhong Tao 001; Kaiyuan Zhang 002; Yingqi Liu; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (NeurIPS, 2023)

ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. - Lu Yan; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Xuan Chen; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2023)

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. - Shengwei An; Yuan Yao 001; Qiuling Xu; Shiqing Ma; Guanhong Tao 001; Siyuan Cheng 005; Kaiyuan Zhang 002; Yingqi Liu; Guangyu Shen; Ian Kelk; Xiangyu Zhang 001 (SP, 2023)

PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In Binary Code Analysis. - Zhuo Zhang 002; Guanhong Tao 001; Guangyu Shen; Shengwei An; Qiuling Xu; Yingqi Liu; Yapeng Ye; Yaoxuan Wu; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Hard-label Black-box Universal Adversarial Patch Attack. - Guanhong Tao 001; Shengwei An; Siyuan Cheng 005; Guangyu Shen; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (CoRR, 2023)

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. - Shengwei An; Sheng-Yen Chou; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Guangyu Shen; Siyuan Cheng 005; Shiqing Ma; Pin-Yu Chen; Tsung-Yi Ho; Xiangyu Zhang 001 (AAAI, 2024)

Exploring Inherent Backdoors in Deep Learning Models. - Guanhong Tao 001; Siyuan Cheng 005; Zhenting Wang; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (ACSAC, 2024)

Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Shengwei An; Shiwei Feng 002; Xiangzhe Xu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2024)

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. - Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Hanxi Guo; Shiqing Ma; Xiangyu Zhang 001 (ECCV (62), 2024)

BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens. - Hanxi Guo; Siyuan Cheng 005; Xiaolong Jin 002; Zhuo Zhang 002; Kaiyuan Zhang 002; Guanhong Tao 001; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2024)

OdScan: Backdoor Scanning for Object Detection Models. - Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Kaiyuan Zhang 002; Zhuo Zhang 002; Shengwei An; Xiangzhe Xu; Yingqi Li; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Distribution Preserving Backdoor Attack in Self-supervised Learning. - Guanhong Tao 001; Zhenting Wang; Shiwei Feng 002; Guangyu Shen; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Exploring the Orthogonality and Linearity of Backdoor Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Shengwei An; Anuran Makur; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

On Large Language Models' Resilience to Coercive Interrogation. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (SP, 2024)

Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. - Shengwei An; Lu Yan; Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (USENIX Security Symposium, 2024)

Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2024)

Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. - Guangyu Shen; Siyuan Cheng 005; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Lu Yan; Zhuo Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2024)

ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2024)

System Prompt Hijacking via Permutation Triggers in LLM Supply Chains. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (ACL (Findings), 2025)

CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Bruno Ribeiro 001; Shengwei An; Pin-Yu Chen; Xiangyu Zhang 001; Ninghui Li (NDSS, 2025)

A Systematic Threat Modeling of LLM Applications. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Wanjing Han; Mu Zhang 001; Xiangyu Zhang 001 (SIGSOFT FSE Companion, 2025)

BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. - Guangyu Shen; Siyuan Cheng 005; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Hanxi Guo; Lu Yan; Xiaolong Jin 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2025)

AuthGuard: Generalizable Deepfake Detection via Language Guidance. - Guangyu Shen; Zhihua Li; Xiang Xu; Tianchen Zhao; Zheng Zhang 001; Dongsheng An; Zhuowen Tu; Yifan Xing; Qin Zhang (CoRR, 2025)

CodeMirage: A Multi-Lingual Benchmark for Detecting AI-Generated and Paraphrased Source Code from Production-Level LLMs. - Hanxi Guo; Siyuan Cheng 005; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2025)

MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation. - Lu Yan; Zhuo Zhang 002; Xiangzhe Xu; Shengwei An; Guangyu Shen; Zhou Xuan; Xuan Chen; Xiangyu Zhang 001 (CoRR, 2025)

ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants. - Xiangzhe Xu; Guangyu Shen; Zian Su; Siyuan Cheng 005; Hanxi Guo; Lu Yan; Xuan Chen; Jiasheng Jiang; Xiaolong Jin 002; Chengpeng Wang 001; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2025)