EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning. - Hongbin Liu 005; Jinyuan Jia 001; Wenjie Qu 001; Neil Zhenqiang Gong (CCS, 2021)

PointGuard: Provably Robust 3D Point Cloud Classification. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CVPR, 2021)

On the Intrinsic Differential Privacy of Bagging. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (IJCAI, 2021)

10 Security and Privacy Problems in Self-Supervised Learning. - Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CoRR, 2021)

StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning. - Yupei Liu; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CCS, 2022)

Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning. - Xinlei He 001; Hongbin Liu 005; Neil Zhenqiang Gong; Yang Zhang 016 (ECCV (31), 2022)

Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations. - Jinyuan Jia 001; Binghui Wang; Xiaoyu Cao; Hongbin Liu 005; Neil Zhenqiang Gong (ICLR, 2022)

PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2022)

StolenEncoder: Stealing Pre-trained Encoders. - Yupei Liu; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CoRR, 2022)

CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning. - Jinghuai Zhang; Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2022)

PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees. - Jinghuai Zhang; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CVPR, 2023)

Generation-based fuzzing? Don't build a new generator, reuse! - Chengbin Pang; Hongbin Liu 005; Yifan Wang; Neil Zhenqiang Gong; Bing Mao 001; Jun Xu 024 (Comput. Secur., 2023)

Visual Hallucinations of Multi-modal Large Language Models. - Wen Huang; Hongbin Liu 005; Minxin Guo; Neil Gong 001 (ACL (Findings), 2024)

Data Poisoning Based Backdoor Attacks to Contrastive Learning. - Jinghuai Zhang; Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CVPR, 2024)

AudioMarkBench: Benchmarking Robustness of Audio Watermarking. - Hongbin Liu 005; Moyang Guo; Zhengyuan Jiang; Lun Wang; Neil Gong 001 (NeurIPS, 2024)

Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning. - Hongbin Liu 005; Wenjie Qu 001; Jinyuan Jia 001; Neil Zhenqiang Gong (SP (Workshops), 2024)

Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models. - Hongbin Liu 005; Michael K. Reiter; Neil Zhenqiang Gong (USENIX Security Symposium, 2024)

Tracing Back the Malicious Clients in Poisoning Attacks to Federated Learning. - Yuqi Jia; Minghong Fang; Hongbin Liu 005; Jinghuai Zhang; Neil Zhenqiang Gong (CoRR, 2024)

Refusing Safe Prompts for Multi-modal Large Language Models. - Zedian Shao; Hongbin Liu 005; Yuepeng Hu; Neil Zhenqiang Gong (CoRR, 2024)

Automatically Generating Visual Hallucination Test Cases for Multimodal Large Language Models. - Zhongye Liu; Hongbin Liu 005; Yuepeng Hu; Zedian Shao; Neil Zhenqiang Gong (CoRR, 2024)

Making LLMs Vulnerable to Prompt Injection via Poisoning Alignment. - Zedian Shao; Hongbin Liu 005; Jaden Mu; Neil Zhenqiang Gong (CoRR, 2024)