User-Specific Rating Prediction for Mobile Applications via Weight-Based Matrix Factorization. - Jingke Meng; Zibin Zheng; Guanhong Tao 001; Xuanzhe Liu (ICWS, 2016)

Precise Android API Protection Mapping Derivation and Reasoning. - Yousra Aafer; Guanhong Tao 001; Jianjun Huang 001; Xiangyu Zhang 001; Ninghui Li (CCS, 2018)

Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples. - Guanhong Tao 001; Shiqing Ma; Yingqi Liu; Xiangyu Zhang 001 (NeurIPS, 2018)

MalPat: Mining Patterns of Malicious and Benign Android Apps via Permission-Related APIs. - Guanhong Tao 001; Zibin Zheng; Ziying Guo; Michael R. Lyu (IEEE Trans. Reliab., 2018)

ABS: Scanning Neural Networks for Back-doors by Artificial Brain Stimulation. - Yingqi Liu; Wen-Chuan Lee; Guanhong Tao 001; Shiqing Ma; Yousra Aafer; Xiangyu Zhang 001 (CCS, 2019)

NIC: Detecting Adversarial Samples with Neural Network Invariant Checking. - Shiqing Ma; Yingqi Liu; Guanhong Tao 001; Wen-Chuan Lee; Xiangyu Zhang 001 (NDSS, 2019)

BDA: practical dependence analysis for binary executables by unbiased whole-program path sampling and per-path abstract interpretation. - Zhuo Zhang 002; Wei You 001; Guanhong Tao 001; Guannan Wei 001; Yonghwi Kwon 001; Xiangyu Zhang 001 (Proc. ACM Program. Lang., 2019)

TRADER: trace divergence analysis and embedding regulation for debugging recurrent neural networks. - Guanhong Tao 001; Shiqing Ma; Yingqi Liu; Qiuling Xu; Xiangyu Zhang 001 (ICSE, 2020)

CPC: automatically classifying and propagating natural language comments via program analysis. - Juan Zhai; Xiangzhe Xu; Yu Shi; Guanhong Tao 001; Minxue Pan; Shiqing Ma; Lei Xu 003; Weifeng Zhang 001; Lin Tan 001; Xiangyu Zhang 001 (ICSE, 2020)

Correlations between deep neural network model coverage criteria and model quality. - Shenao Yan; Guanhong Tao 001; Xuwei Liu; Juan Zhai; Shiqing Ma; Lei Xu 003; Xiangyu Zhang 001 (ESEC/SIGSOFT FSE, 2020)

Towards Feature Space Adversarial Attack. - Qiuling Xu; Guanhong Tao 001; Siyuan Cheng 005; Lin Tan 001; Xiangyu Zhang 001 (CoRR, 2020)

D-square-B: Deep Distribution Bound for Natural-looking Adversarial Attack. - Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (CoRR, 2020)

Towards Feature Space Adversarial Attack by Style Perturbation. - Qiuling Xu; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (AAAI, 2021)

Backdoor Scanning for Deep Neural Networks through K-Arm Optimization. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Shengwei An; Qiuling Xu; Siyuan Cheng 005; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2021)

ALchemist: Fusing Application and Audit Logs for Precise Attack Provenance without Instrumentation. - Le Yu; Shiqing Ma; Zhuo Zhang 002; Guanhong Tao 001; Xiangyu Zhang 001; Dongyan Xu; Vincent E. Urias; Han Wei Lin; Gabriela F. Ciocarlie; Vinod Yegneswaran; Ashish Gehani (NDSS, 2021)

StochFuzz: Sound and Cost-effective Fuzzing of Stripped Binaries by Incremental and Stochastic Rewriting. - Zhuo Zhang 002; Wei You 001; Guanhong Tao 001; Yousra Aafer; Xuwei Liu; Xiangyu Zhang 001 (SP, 2021)

OSPREY: Recovery of Variable and Data Structure via Probabilistic Analysis for Stripped Binary. - Zhuo Zhang 002; Yapeng Ye; Wei You 001; Guanhong Tao 001; Wen-Chuan Lee; Yonghwi Kwon 001; Yousra Aafer; Xiangyu Zhang 001 (SP, 2021)

EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Zhenting Wang; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2021)

Checkpointing and deterministic training for deep learning. - Xiangzhe Xu; Hongyu Liu 005; Guanhong Tao 001; Zhou Xuan; Xiangyu Zhang 001 (CAIN, 2022)

Complex Backdoor Detection by Symmetric Feature Differencing. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Zhenting Wang; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2022)

Better Trigger Inversion Optimization in Backdoor Scanning. - Guanhong Tao 001; Guangyu Shen; Yingqi Liu; Shengwei An; Qiuling Xu; Shiqing Ma; Pan Li; Xiangyu Zhang 001 (CVPR, 2022)

Bounded Adversarial Attack on Deep Content Features. - Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (CVPR, 2022)

Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches. - Zhiyuan Cheng 010; James Liang; Hongjun Choi; Guanhong Tao 001; Zhiwen Cao; Dongfang Liu; Xiangyu Zhang 001 (ECCV (38), 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLP Backdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2022)

Code Search based on Context-aware Code Translation. - Weisong Sun; Chunrong Fang; Yuchen Chen; Guanhong Tao 001; Tingxu Han; Quanjun Zhang (ICSE, 2022)

MIRROR: Model Inversion for Deep LearningNetwork with High Fidelity. - Guanhong Tao 001; Qiuling Xu; Yingqi Liu; Guangyu Shen; Shengwei An; Jingwei Xu 001; Xiangyu Zhang 001; Yuan Yao 001 (NDSS, 2022)

RULER: discriminative and iterative adversarial training for deep neural network fairness. - Guanhong Tao 001; Weisong Sun; Tingxu Han; Chunrong Fang; Xiangyu Zhang 001 (ESEC/SIGSOFT FSE, 2022)

Piccolo: Exposing Complex Backdoors in NLP Transformer Models. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2022)

Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security. - Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Qiuling Xu; Shengwei An; Zhuo Zhang 002; Xiangyu Zhang 001 (SP, 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2022)

An Extractive-and-Abstractive Framework for Source Code Summarization. - Weisong Sun; Chunrong Fang; Yuchen Chen; Quanjun Zhang; Guanhong Tao 001; Tingxu Han; Yifei Ge; Yudu You; Bin Luo 003 (CoRR, 2022)

DECK: Model Hardening for Defending Pervasive Backdoors. - Guanhong Tao 001; Yingqi Liu; Siyuan Cheng 005; Shengwei An; Zhuo Zhang 002; Qiuling Xu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2022)

Backdoor Vulnerabilities in Normally Trained Deep Learning Models. - Guanhong Tao 001; Zhenting Wang; Siyuan Cheng 005; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (CoRR, 2022)

Backdooring Neural Code Search. - Weisong Sun; Yuchen Chen; Guanhong Tao 001; Chunrong Fang; Xiangyu Zhang 001; Quanjun Zhang; Bin Luo 003 (ACL (1), 2023)

Detecting Backdoors in Pre-trained Encoders. - Shiwei Feng 002; Guanhong Tao 001; Siyuan Cheng 005; Guangyu Shen; Xiangzhe Xu; Yingqi Liu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2023)

MEDIC: Remove Model Backdoors via Importance Driven Cloning. - Qiuling Xu; Guanhong Tao 001; Jean Honorio; Yingqi Liu; Shengwei An; Guangyu Shen; Siyuan Cheng 005; Xiangyu Zhang 001 (CVPR, 2023)

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. - Kaiyuan Zhang 002; Guanhong Tao 001; Qiuling Xu; Siyuan Cheng 005; Shengwei An; Yingqi Liu; Shiwei Feng 002; Guangyu Shen; Pin-Yu Chen; Shiqing Ma; Xiangyu Zhang 001 (ICLR, 2023)

Adversarial Training of Self-supervised Monocular Depth Estimation against Physical-World Attacks. - Zhiyuan Cheng 010; James Liang; Guanhong Tao 001; Dongfang Liu; Xiangyu Zhang 001 (ICLR, 2023)

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis. - Xiangzhe Xu; Shiwei Feng 002; Yapeng Ye; Guangyu Shen; Zian Su; Siyuan Cheng 005; Guanhong Tao 001; Qingkai Shi; Zhuo Zhang 002; Xiangyu Zhang 001 (ISSTA, 2023)

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Shengwei An; Xiangzhe Xu; Shiwei Feng 002; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Shiqing Ma; Xiangyu Zhang 001 (NDSS, 2023)

BIRD: Generalizable Backdoor Detection and Removal for Deep Reinforcement Learning. - Xuan Chen; Wenbo Guo 002; Guanhong Tao 001; Xiangyu Zhang 001; Dawn Song (NeurIPS, 2023)

Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. - Guangyu Shen; Siyuan Cheng 005; Guanhong Tao 001; Kaiyuan Zhang 002; Yingqi Liu; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (NeurIPS, 2023)

ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. - Lu Yan; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Xuan Chen; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2023)

PEM: Representing Binary Program Semantics for Similarity Analysis via a Probabilistic Execution Model. - Xiangzhe Xu; Zhou Xuan; Shiwei Feng 002; Siyuan Cheng 005; Yapeng Ye; Qingkai Shi; Guanhong Tao 001; Le Yu; Zhuo Zhang 002; Xiangyu Zhang 001 (ESEC/SIGSOFT FSE, 2023)

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. - Shengwei An; Yuan Yao 001; Qiuling Xu; Shiqing Ma; Guanhong Tao 001; Siyuan Cheng 005; Kaiyuan Zhang 002; Yingqi Liu; Guangyu Shen; Ian Kelk; Xiangyu Zhang 001 (SP, 2023)

PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In Binary Code Analysis. - Zhuo Zhang 002; Guanhong Tao 001; Guangyu Shen; Shengwei An; Qiuling Xu; Yingqi Liu; Yapeng Ye; Yaoxuan Wu; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Hard-label Black-box Universal Adversarial Patch Attack. - Guanhong Tao 001; Shengwei An; Siyuan Cheng 005; Guangyu Shen; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering. - Rui Zhu; Di Tang 001; Siyuan Tang; Guanhong Tao 001; Shiqing Ma; XiaoFeng Wang 001; Haixu Tang (CoRR, 2023)

Fusion is Not Enough: Single-Modal Attacks to Compromise Fusion Models in Autonomous Driving. - Zhiyuan Cheng 010; Hongjun Choi; James Liang; Shiwei Feng 002; Guanhong Tao 001; Dongfang Liu; Michael Zuzak; Xiangyu Zhang 001 (CoRR, 2023)

Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (CoRR, 2023)

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. - Shengwei An; Sheng-Yen Chou; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Guangyu Shen; Siyuan Cheng 005; Shiqing Ma; Pin-Yu Chen; Tsung-Yi Ho; Xiangyu Zhang 001 (AAAI, 2024)

Exploring Inherent Backdoors in Deep Learning Models. - Guanhong Tao 001; Siyuan Cheng 005; Zhenting Wang; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (ACSAC, 2024)

Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Shengwei An; Shiwei Feng 002; Xiangzhe Xu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2024)

Threat Behavior Textual Search by Attention Graph Isomorphism. - Chanwoo Bae; Guanhong Tao 001; Zhuo Zhang 002; Xiangyu Zhang 001 (EACL (1), 2024)

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. - Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Hanxi Guo; Shiqing Ma; Xiangyu Zhang 001 (ECCV (62), 2024)

Fusion Is Not Enough: Single Modal Attacks on Fusion Models for 3D Object Detection. - Zhiyuan Cheng 010; Hongjun Choi; Shiwei Feng 002; James Chenhao Liang; Guanhong Tao 001; Dongfang Liu; Michael Zuzak; Xiangyu Zhang 001 (ICLR, 2024)

Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering. - Rui Zhu; Di Tang 001; Siyuan Tang; Zihao Wang; Guanhong Tao 001; Shiqing Ma; XiaoFeng Wang 001; Haixu Tang (NDSS, 2024)

BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens. - Hanxi Guo; Siyuan Cheng 005; Xiaolong Jin 002; Zhuo Zhang 002; Kaiyuan Zhang 002; Guanhong Tao 001; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2024)

OdScan: Backdoor Scanning for Object Detection Models. - Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Kaiyuan Zhang 002; Zhuo Zhang 002; Shengwei An; Xiangzhe Xu; Yingqi Li; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Distribution Preserving Backdoor Attack in Self-supervised Learning. - Guanhong Tao 001; Zhenting Wang; Shiwei Feng 002; Guangyu Shen; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Exploring the Orthogonality and Linearity of Backdoor Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Shengwei An; Anuran Makur; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

On Large Language Models' Resilience to Coercive Interrogation. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (SP, 2024)

Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. - Shengwei An; Lu Yan; Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (USENIX Security Symposium, 2024)

Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2024)

Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. - Guangyu Shen; Siyuan Cheng 005; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Lu Yan; Zhuo Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2024)

Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage. - Soumil Datta; Shih-Chieh Dai; Leo Yu; Guanhong Tao 001 (CoRR, 2024)

An Extractive-and-Abstractive Framework for Source Code Summarization. - Weisong Sun; Chunrong Fang; Yuchen Chen; Quanjun Zhang; Guanhong Tao 001; Yudu You; Tingxu Han; Yifei Ge; Yuling Hu; Bin Luo 003; Zhenyu Chen 001 (ACM Trans. Softw. Eng. Methodol., 2024)

A Systematic Threat Modeling of LLM Applications. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Wanjing Han; Mu Zhang 001; Xiangyu Zhang 001 (SIGSOFT FSE Companion, 2025)

BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. - Guangyu Shen; Siyuan Cheng 005; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Hanxi Guo; Lu Yan; Xiaolong Jin 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2025)

Alleviating the Fear of Losing Alignment in LLM Fine-tuning. - Kang Yang; Guanhong Tao 001; Xun Chen; Jun Xu 024 (SP, 2025)

PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models. - Lingzhi Yuan; Xinfeng Li; Chejian Xu; Guanhong Tao 001; Xiaojun Jia; Yihao Huang 001; Wei Dong; Yang Liu 003; XiaoFeng Wang 001; Bo Li (CoRR, 2025)

How vulnerable is my policy? Adversarial attacks on modern behavior cloning policies. - Basavasagar Patil; Akansha Kalra; Guanhong Tao 001; Daniel S. Brown (CoRR, 2025)

A Comprehensive Study of LLM Secure Code Generation. - Shih-Chieh Dai; Jun Xu 024; Guanhong Tao 001 (CoRR, 2025)

Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation. - Zhiyuan Zhong; Zhen Sun 001; Yepang Liu 001; Xinlei He 001; Guanhong Tao 001 (CoRR, 2025)

Blackbox Dataset Inference for LLM. - Ruikai Zhou; Kang Yang; Xun Chen; Wendy Hui Wang; Guanhong Tao 001; Jun Xu 024 (CoRR, 2025)