Data Poisoning Attacks to Deep Learning Based Recommender Systems. - Hai Huang 014; Jiaming Mu; Neil Zhenqiang Gong; Qi Li 002; Bin Liu 045; Mingwei Xu (NDSS, 2021)

On the Privacy Risks of Cell-Based NAS Architectures. - Hai Huang 014; Zhikun Zhang 001; Yun Shen; Michael Backes 001; Qi Li 002; Yang Zhang 016 (CCS, 2022)

Prompt Backdoors in Visual Prompt Learning. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Composite Backdoor Attacks Against Large Language Models. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (NAACL-HLT (Findings), 2024)

Amplifying Machine Learning Attacks Through Strategic Compositions. - Yugeng Liu; Zheng Li 023; Hai Huang 014; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)