Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning. - Hangtao Zhang; Zeming Yao; Leo Yu Zhang; Shengshan Hu; Chao Chen 015; Alan Wee-Chung Liew; Zhetao Li (IJCAI, 2023)

AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning. - Ziqi Zhou 001; Shengshan Hu; Minghui Li; Hangtao Zhang; Yechao Zhang; Hai Jin 001 (ACM Multimedia, 2023)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness in the Physical World. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (IJCAI, 2024)

Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need. - Xianlong Wang 001; Minghui Li; Wei Liu 004; Hangtao Zhang; Shengshan Hu; Yechao Zhang; Ziqi Zhou 001; Hai Jin 001 (NeurIPS, 2024)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (CoRR, 2024)

BadRobot: Jailbreaking LLM-based Embodied AI in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Shengshan Hu; Leo Yu Zhang (CoRR, 2024)

TrojanRobot: Backdoor Attacks Against Robotic Manipulation in the Physical World. - Xianlong Wang 001; Hewen Pan; Hangtao Zhang; Minghui Li; Shengshan Hu; Ziqi Zhou 001; Lulu Xue; Peijin Guo; Yichen Wang; Wei Wan; Aishan Liu; Leo Yu Zhang (CoRR, 2024)

Reverse Backdoor Distillation: Towards Online Backdoor Attack Detection for Deep Neural Network Models. - Zeming Yao; Hangtao Zhang; Yicheng Guo; Xin Tian 015; Wei Peng 011; Yi Zou; Leo Yu Zhang; Chao Chen 015 (IEEE Trans. Dependable Secur. Comput., 2024)

Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature. - Yichen Wang; Yuxuan Chou; Ziqi Zhou 001; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li (AAAI, 2025)

Test-Time Backdoor Detection for Object Detection Models. - Hangtao Zhang; Yichen Wang; Shihui Yan; Chenyu Zhu; Ziqi Zhou 001; Linshan Hou; Shengshan Hu; Minghui Li; Yanjun Zhang; Leo Yu Zhang (CVPR, 2025)

PB-UAP: Hybride Universal Adversarial Attack for Image Segmentation. - Yufei Song; Ziqi Zhou 001; Minghui Li; Xianlong Wang 001; Hangtao Zhang; Menghao Deng; Wei Wan; Shengshan Hu; Leo Yu Zhang (ICASSP, 2025)

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Changgan Yin; Minghui Li; Lulu Xue; Yichen Wang; Shengshan Hu; Aishan Liu; Peijin Guo; Leo Yu Zhang (ICLR, 2025)

DarkHash: A Data-Free Backdoor Attack Against Deep Hashing. - Ziqi Zhou 001; Menghao Deng; Yufei Song; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li; Leo Yu Zhang; Dezhong Yao 002 (IEEE Trans. Inf. Forensics Secur., 2025)

TSCAN: Context-Aware Uplift Modeling via Two-Stage Training for Online Merchant Business Diagnosis. - Hangtao Zhang; Zhe Li; Kairui Zhang (CoRR, 2025)