Latent Backdoor Attacks on Deep Neural Networks. - Yuanshun Yao; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (CCS, 2019)

Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks. - Bolun Wang; Yuanshun Yao; Shawn Shan; Huiying Li 001; Bimal Viswanath; Haitao Zheng 001; Ben Y. Zhao (IEEE Symposium on Security and Privacy, 2019)

Understanding the Effectiveness of Ultrasonic Microphone Jammer. - Yuxin Chen 001; Huiying Li 001; Steven Nagels; Zhijing Li 001; Pedro Lopes 001; Ben Y. Zhao; Haitao Zheng 001 (CoRR, 2019)

Regula Sub-rosa: Latent Backdoor Attacks on Deep Neural Networks. - Yuanshun Yao; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2019)

Persistent and Unforgeable Watermarks for Deep Neural Networks. - Huiying Li 001; Emily Willson; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2019)

Wearable Microphone Jamming. - Yuxin Chen 001; Huiying Li 001; Shan-Yuan Teng; Steven Nagels; Zhijing Li 001; Pedro Lopes 001; Ben Y. Zhao; Haitao Zheng 001 (CHI, 2020)

Demonstrating Wearable Microphone Jamming. - Yuxin Chen 001; Huiying Li 001; Shan-Yuan Teng; Steven Nagels; Zhijing Li 001; Pedro Lopes 001; Haitao Zheng 001; Ben Y. Zhao (CHI Extended Abstracts, 2020)

Fawkes: Protecting Privacy against Unauthorized Deep Learning Models. - Shawn Shan; Emily Wenger; Jiayun Zhang; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (USENIX Security Symposium, 2020)

Fawkes: Protecting Personal Privacy against Unauthorized Deep Learning Models. - Shawn Shan; Emily Wenger; Jiayun Zhang; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2020)

Blacklight: Defending Black-Box Adversarial Attacks on Deep Neural Networks. - Huiying Li 001; Shawn Shan; Emily Wenger; Jiayun Zhang; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2020)

Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks. - Huiying Li 001; Shawn Shan; Emily Wenger; Jiayun Zhang; Haitao Zheng 001; Ben Y. Zhao (USENIX Security Symposium, 2022)

Can Backdoor Attacks Survive Time-Varying Models? - Huiying Li 001; Arjun Nitin Bhagoji; Ben Y. Zhao; Haitao Zheng 001 (CoRR, 2022)