Jie Zhang

Orcid: 0000-0002-4230-1077

Affiliations:

A*STAR, CFAR, Singapore
Nanyang Technological University, College of Computing and Data Science, Singapore (2023 - 2024)
University of Science and Technology of China, School of Cyber Science and Security, Hefei, China (PhD 2022)

According to our database¹, Jie Zhang authored at least 100 papers between 2020 and 2026.

Collaborative distances:

Dijkstra number² of four.
Erdős number³ of three.

Timeline

Legend:

Book In proceedings Article PhD thesis Dataset Other

Bibliography

2026

Exploring Security Vulnerabilities in Multilingual Speech Translation Systems via Deceptive Inputs.

[BibT_eX]

[DOI]

IEEE Trans. Pattern Anal. Mach. Intell., June, 2026

EchoDistill:Alignment Noisy-to-Clean Self-Distillation for Robust Audio LLMs.

[BibT_eX]

[DOI]

CoRR, May, 2026

CAAP: Capture-Aware Adversarial Patch Attacks on Palmprint Recognition Models.

[BibT_eX]

[DOI]

CoRR, April, 2026

State-Dependent Safety Failures in Multi-Turn Language Model Interaction.

[BibT_eX]

[DOI]

CoRR, March, 2026

TRACE: Structure-Aware Character Encoding for Robust and Generalizable Document Watermarking.

[BibT_eX]

[DOI]

CoRR, March, 2026

Inference-time Alignment via Sparse Junction Steering.

[BibT_eX]

[DOI]

CoRR, February, 2026

DECEIVE-AFC: Adversarial Claim Attacks against Search-Enabled LLM-based Fact-Checking Systems.

[BibT_eX]

[DOI]

CoRR, February, 2026

JailGuard: A Universal Detection Framework for Prompt-based Attacks on LLM Systems.

[BibT_eX]

[DOI]

ACM Trans. Softw. Eng. Methodol., January, 2026

Character as a Latent Variable in Large Language Models: A Mechanistic Account of Emergent Misalignment and Conditional Safety Failures.

[BibT_eX]

[DOI]

CoRR, January, 2026

SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models.

[BibT_eX]

[DOI]

CoRR, January, 2026

SSD: A State-Based Stealthy Backdoor Attack for IMU/GNSS Navigation System in UAV Route Planning.

[BibT_eX]

[DOI]

IEEE Trans. Inf. Forensics Secur., 2026

Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models.

[BibT_eX]

[DOI]

Proceedings of the 33rd Annual Network and Distributed System Security Symposium, 2026

2025

FaceTracer: Unveiling Source Identities From Swapped Face Images and Videos for Fraud Prevention.

[BibT_eX]

[DOI]

IEEE Trans. Pattern Anal. Mach. Intell., December, 2025

LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems.

[BibT_eX]

[DOI]

CoRR, December, 2025

EffiReason-Bench: A Unified Benchmark for Evaluating and Advancing Efficient Reasoning in Large Language Models.

[BibT_eX]

[DOI]

CoRR, November, 2025

EditMark: Watermarking Large Language Models based on Model Editing.

[BibT_eX]

[DOI]

CoRR, October, 2025

CREST-Search: Comprehensive Red-teaming for Evaluating Safety Threats in Large Language Models Powered by Web Search.

[BibT_eX]

[DOI]

CoRR, October, 2025

Knowledge-Aware Modeling with Frequency Adaptive Learning for Battery Health Prognostics.

[BibT_eX]

[DOI]

CoRR, October, 2025

SynBench: A Benchmark for Differentially Private Text Generation.

[BibT_eX]

[DOI]

Yidan Sun

Viktor Schlegel

Srinivasan Nandakumar

CoRR, September, 2025

Oyster-I: Beyond Refusal - Constructive Safety Alignment for Responsible Language Models.

[BibT_eX]

[DOI]

CoRR, September, 2025

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems.

[BibT_eX]

[DOI]

CoRR, August, 2025

PoseGuard: Pose-Guided Generation with Safety Guardrails.

[BibT_eX]

[DOI]

CoRR, August, 2025

BURN: Backdoor Unlearning via Adversarial Boundary Analysis.

[BibT_eX]

[DOI]

CoRR, July, 2025

IRCopilot: Automated Incident Response with Large Language Models.

[BibT_eX]

[DOI]

CoRR, May, 2025

Holmes: Automated Fact Check with Large Language Models.

[BibT_eX]

[DOI]

CoRR, May, 2025

Inception: Jailbreak the Memory Mechanism of Text-to-Image Generation Systems.

[BibT_eX]

[DOI]

CoRR, April, 2025

A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment.

[BibT_eX]

[DOI]

CoRR, April, 2025

Exploiting Vulnerabilities in Speech Translation Systems through Targeted Adversarial Attacks.

[BibT_eX]

[DOI]

CoRR, March, 2025

SSD: A State-based Stealthy Backdoor Attack For Navigation System in UAV Route Planning.

[BibT_eX]

[DOI]

CoRR, February, 2025

CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models.

[BibT_eX]

[DOI]

CoRR, February, 2025

Picky LLMs and Unreliable RMs: An Empirical Study on Safety Alignment after Instruction Tuning.

[BibT_eX]

[DOI]

CoRR, February, 2025

Clean Image May Be Dangerous: Data Poisoning Attacks Against Deep Hashing.

[BibT_eX]

[DOI]

IEEE Trans. Multim., 2025

Synthesizing Glyph Vectors for Practical Information Hiding in Documents.

[BibT_eX]

[DOI]

IEEE Trans. Dependable Secur. Comput., 2025

InferDPT: Privacy-Preserving Inference for Closed-Box Large Language Models.

[BibT_eX]

[DOI]

IEEE Trans. Dependable Secur. Comput., 2025

Security analysis and adaptive false data injection against multi-sensor fusion localization for autonomous driving.

[BibT_eX]

[DOI]

Inf. Fusion, 2025

The Ghost Navigator: Revisiting the Hidden Vulnerability of Localization in Autonomous Driving.

[BibT_eX]

[DOI]

Proceedings of the 34th USENIX Security Symposium, 2025

When Translators Refuse to Translate: A Novel Attack to Speech Translation Systems.

[BibT_eX]

[DOI]

Proceedings of the 34th USENIX Security Symposium, 2025

DiffLoc: WiFi Hidden Camera Localization Based on Electromagnetic Diffraction.

[BibT_eX]

[DOI]

Proceedings of the 34th USENIX Security Symposium, 2025

CamLopa: A Hidden Wireless Camera Localization Framework via Signal Propagation Path Analysis.

[BibT_eX]

[DOI]

Proceedings of the IEEE Symposium on Security and Privacy, 2025

Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models.

[BibT_eX]

[DOI]

Proceedings of the IEEE Symposium on Security and Privacy, 2025

Mask Image Watermarking.

[BibT_eX]

[DOI]

Proceedings of the Advances in Neural Information Processing Systems 38: Annual Conference on Neural Information Processing Systems 2025, 2025

On the Vulnerability of Text Sanitization.

[BibT_eX]

[DOI]

Proceedings of the 2025 Conference of the Nations of the Americas Chapter of the Association for Computational Linguistics: Human Language Technologies, 2025

Learning from Heterogeneity: Generalizing Dynamic Facial Expression Recognition via Distributionally Robust Optimization.

[BibT_eX]

[DOI]

Proceedings of the 33rd ACM International Conference on Multimedia, 2025

EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers.

[BibT_eX]

[DOI]

Proceedings of the Forty-second International Conference on Machine Learning, 2025

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems.

[BibT_eX]

[DOI]

Proceedings of the Forty-second International Conference on Machine Learning, 2025

A Watermark Updating Framework for Multi-stage Image Content Distribution.

[BibT_eX]

[DOI]

Proceedings of the IEEE International Conference on Multimedia and Expo, 2025

Aparecium: Revealing Secrets from Physical Photographs.

[BibT_eX]

[DOI]

Proceedings of the IEEE International Conference on Multimedia and Expo, 2025

VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking.

[BibT_eX]

[DOI]

Proceedings of the Thirteenth International Conference on Learning Representations, 2025

SignaShield: Guarding Your Signature via Font Style Watermarking.

[BibT_eX]

[DOI]

Proceedings of the 11th International Conference on Computing and Artificial Intelligence, 2025

Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World.

[BibT_eX]

[DOI]

Proceedings of the 2025 IEEE International Conference on Acoustics, 2025

Evaluating Differentially Private Generation of Domain-Specific Text.

[BibT_eX]

[DOI]

Yidan Sun

Viktor Schlegel

Srinivasan Kolumam Nandakumar

Proceedings of the 34th ACM International Conference on Information and Knowledge Management, 2025

SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models.

[BibT_eX]

[DOI]

Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, 2025

Oedipus: LLM-enchanced Reasoning CAPTCHA Solver.

[BibT_eX]

[DOI]

Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, 2025

An LLM-Empowered Adaptive Evolutionary Algorithm for Multi-Component Deep Learning Systems.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Ninth AAAI Conference on Artificial Intelligence, 2025

2024

Dual-verification-based model fingerprints against ambiguity attacks.

[BibT_eX]

[DOI]

Cybersecur., December, 2024

Robust Model Watermarking for Image Processing Networks via Structure Consistency.

[BibT_eX]

[DOI]

IEEE Trans. Pattern Anal. Mach. Intell., October, 2024

A Robust Database Watermarking Scheme That Preserves Statistical Characteristics.

[BibT_eX]

[DOI]

IEEE Trans. Knowl. Data Eng., June, 2024

Model Access Control Based on Hidden Adversarial Examples for Automatic Speech Recognition.

[BibT_eX]

[DOI]

IEEE Trans. Artif. Intell., March, 2024

EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers.

[BibT_eX]

[DOI]

CoRR, 2024

Reinforcement Learning Enhanced LLMs: A Survey.

[BibT_eX]

[DOI]

CoRR, 2024

SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution.

[BibT_eX]

[DOI]

CoRR, 2024

Model X-ray: Detect Backdoored Models via Decision Boundary.

[BibT_eX]

[DOI]

CoRR, 2024

ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users.

[BibT_eX]

[DOI]

Proceedings of the Advances in Neural Information Processing Systems 37: Annual Conference on Neural Information Processing Systems 2024, 2024

Detecting Voice Cloning Attacks via Timbre Watermarking.

[BibT_eX]

[DOI]

Proceedings of the 31st Annual Network and Distributed System Security Symposium, 2024

CBVS: A Large-Scale Chinese Image-Text Benchmark for Real-World Short Video Search Scenarios.

[BibT_eX]

[DOI]

Proceedings of the 1st Workshop on Multimodal Search and Recommendations (MMSR 2024) co-located with 33rd ACM International Conference on Information and Knowledge Management (CIKM 2024), 2024

<i>Model X-ray</i>: Detecting Backdoored Models via Decision Boundary.

[BibT_eX]

[DOI]

Proceedings of the 32nd ACM International Conference on Multimedia, MM 2024, Melbourne, VIC, Australia, 28 October 2024, 2024

Transferable Facial Privacy Protection against Blind Face Restoration via Domain-Consistent Adversarial Obfuscation.

[BibT_eX]

[DOI]

Proceedings of the Forty-first International Conference on Machine Learning, 2024

AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA.

[BibT_eX]

[DOI]

Proceedings of the Forty-first International Conference on Machine Learning, 2024

Attribute-Aware Head Swapping Guided by 3d Modeling.

[BibT_eX]

[DOI]

Proceedings of the IEEE International Conference on Acoustics, 2024

Robust-Wide: Robust Watermarking Against Instruction-Driven Image Editing.

[BibT_eX]

[DOI]

Proceedings of the Computer Vision - ECCV 2024, 2024

GenderCARE: A Comprehensive Framework for Assessing and Reducing Gender Bias in Large Language Models.

[BibT_eX]

[DOI]

Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2024

Detecting Adversarial Examples via Reconstruction-based Semantic Inconsistency.

[BibT_eX]

[DOI]

Proceedings of the ACM Turing Award Celebration Conference 2024, 2024

Data-Free Hard-Label Robustness Stealing Attack.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Eighth AAAI Conference on Artificial Intelligence, 2024

2023

Perceptual Hashing of Deep Convolutional Neural Networks for Model Copy Detection.

[BibT_eX]

[DOI]

ACM Trans. Multim. Comput. Commun. Appl., 2023

Control Risk for Potential Misuse of Artificial Intelligence in Science.

[BibT_eX]

[DOI]

CoRR, 2023

Improving Adversarial Transferability by Stable Diffusion.

[BibT_eX]

[DOI]

CoRR, 2023

FunctionMarker: Watermarking Language Datasets via Knowledge Injection.

[BibT_eX]

[DOI]

CoRR, 2023

Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World.

[BibT_eX]

[DOI]

CoRR, 2023

PrivInfer: Privacy-Preserving Inference for Black-box Large Language Model.

[BibT_eX]

[DOI]

CoRR, 2023

Towards the Vulnerability of Watermarking Artificial Intelligence Generated Content.

[BibT_eX]

[DOI]

CoRR, 2023

Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking.

[BibT_eX]

[DOI]

CoRR, 2023

Aparecium: Revealing Secrets from Physical Photographs.

[BibT_eX]

[DOI]

CoRR, 2023

Watermarking Text Generated by Black-Box Language Models.

[BibT_eX]

[DOI]

CoRR, 2023

Investigating Neural-based Function Name Reassignment from the Perspective of Binary Code Representation.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual International Conference on Privacy, Security and Trust, 2023

Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion.

[BibT_eX]

[DOI]

Proceedings of the 31st ACM International Conference on Multimedia, 2023

ProTegO: Protect Text Content against OCR Extraction Attack.

[BibT_eX]

[DOI]

Proceedings of the 31st ACM International Conference on Multimedia, 2023

Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Seventh AAAI Conference on Artificial Intelligence, 2023

AutoStegaFont: Synthesizing Vector Fonts for Hiding Information in Documents.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Seventh AAAI Conference on Artificial Intelligence, 2023

DeAR: A Deep-Learning-Based Audio Re-recording Resilient Watermarking.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Seventh AAAI Conference on Artificial Intelligence, 2023

2022

JPEG Robust Invertible Grayscale.

[BibT_eX]

[DOI]

IEEE Trans. Vis. Comput. Graph., 2022

Poison Ink: Robust and Invisible Backdoor Attack.

[BibT_eX]

[DOI]

IEEE Trans. Image Process., 2022

Deep Model Intellectual Property Protection via Deep Watermarking.

[BibT_eX]

[DOI]

IEEE Trans. Pattern Anal. Mach. Intell., 2022

Tracing Text Provenance via Context-Aware Lexical Substitution.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Sixth AAAI Conference on Artificial Intelligence, 2022

2021

Deep Template-Based Watermarking.

[BibT_eX]

[DOI]

IEEE Trans. Circuits Syst. Video Technol., 2021

Poison Ink: Robust and Invisible Backdoor Attack.

[BibT_eX]

[DOI]

CoRR, 2021

Exploring Structure Consistency for Deep Model Watermarking.

[BibT_eX]

[DOI]

CoRR, 2021

Initiative Defense against Facial Manipulation.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Fifth AAAI Conference on Artificial Intelligence, 2021

2020

Passport-aware Normalization for Deep Model Protection.

[BibT_eX]

[DOI]

Proceedings of the Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020, 2020

Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication.

[BibT_eX]

[DOI]

Proceedings of the MM '20: The 28th ACM International Conference on Multimedia, 2020

Model Watermarking for Image Processing Networks.

[BibT_eX]

[DOI]

Proceedings of the Thirty-Fourth AAAI Conference on Artificial Intelligence, 2020

Jie Zhang

Timeline

Legend:

Links

Online presence:

On csauthors.net:

Bibliography

Loading...