Model Watermarking for Image Processing Networks. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Han Fang; Weiming Zhang 001; Wenbo Zhou; Hao Cui 004; Nenghai Yu (AAAI, 2020)

Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication. - Xiquan Guan; Huamin Feng; Weiming Zhang 001; Hang Zhou 007; Jie Zhang 073; Nenghai Yu (ACM Multimedia, 2020)

Passport-aware Normalization for Deep Model Protection. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Weiming Zhang 001; Gang Hua 001; Nenghai Yu (NeurIPS, 2020)

Initiative Defense against Facial Manipulation. - Qidong Huang; Jie Zhang 073; Wenbo Zhou; Weiming Zhang 001; Nenghai Yu (AAAI, 2021)

Exploring Structure Consistency for Deep Model Watermarking. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Han Fang; Zehua Ma; Weiming Zhang 001; Gang Hua 001; Nenghai Yu (CoRR, 2021)

Poison Ink: Robust and Invisible Backdoor Attack. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Qidong Huang; Gang Hua 001; Weiming Zhang 001; Nenghai Yu (CoRR, 2021)

Deep Template-Based Watermarking. - Han Fang; Dongdong Chen 001; Qidong Huang; Jie Zhang 073; Zehua Ma; Weiming Zhang 001; Nenghai Yu (IEEE Trans. Circuits Syst. Video Technol., 2021)

Tracing Text Provenance via Context-Aware Lexical Substitution. - Xi Yang; Jie Zhang 073; Kejiang Chen; Weiming Zhang 001; Zehua Ma; Feng Wang; Nenghai Yu (AAAI, 2022)

Deep Model Intellectual Property Protection via Deep Watermarking. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Weiming Zhang 001; Huamin Feng; Gang Hua 001; Nenghai Yu (IEEE Trans. Pattern Anal. Mach. Intell., 2022)

Poison Ink: Robust and Invisible Backdoor Attack. - Jie Zhang 073; Dongdong Chen 001; Qidong Huang; Jing Liao 001; Weiming Zhang 001; Huamin Feng; Gang Hua 001; Nenghai Yu (IEEE Trans. Image Process., 2022)

JPEG Robust Invertible Grayscale. - Kunlin Liu; Dongdong Chen 001; Jing Liao 001; Weiming Zhang 001; Hang Zhou 007; Jie Zhang 073; Wenbo Zhou; Nenghai Yu (IEEE Trans. Vis. Comput. Graph., 2022)

DeAR: A Deep-Learning-Based Audio Re-recording Resilient Watermarking. - Chang Liu 089; Jie Zhang 073; Han Fang; Zehua Ma; Weiming Zhang 001; Nenghai Yu (AAAI, 2023)

AutoStegaFont: Synthesizing Vector Fonts for Hiding Information in Documents. - Xi Yang; Jie Zhang 073; Han Fang; Chang Liu 089; Zehua Ma; Weiming Zhang 001; Nenghai Yu (AAAI, 2023)

Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network. - Xiaojian Yuan; Kejiang Chen; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu; Yang Zhang 016 (AAAI, 2023)

ProTegO: Protect Text Content against OCR Extraction Attack. - Yanru He; Kejiang Chen; Guoqiang Chen; Zehua Ma; Kui Zhang; Jie Zhang 073; Huanyu Bian; Han Fang; Weiming Zhang 001; Nenghai Yu (ACM Multimedia, 2023)

Ada3Diff: Defending against 3D Adversarial Point Clouds via Adaptive Diffusion. - Kui Zhang; Hang Zhou 007; Jie Zhang 073; Qidong Huang; Weiming Zhang 001; Nenghai Yu (ACM Multimedia, 2023)

Investigating Neural-based Function Name Reassignment from the Perspective of Binary Code Representation. - Guoqiang Chen; Han Gao; Jie Zhang 073; Yanru He; Shaoyin Cheng; Weiming Zhang 001 (PST, 2023)

Watermarking Text Generated by Black-Box Language Models. - Xi Yang; Kejiang Chen; Weiming Zhang 001; Chang Liu 089; Yuang Qi; Jie Zhang 073; Han Fang; Nenghai Yu (CoRR, 2023)

Aparecium: Revealing Secrets from Physical Photographs. - Zhe Lei; Jie Zhang 073; Jingtao Li; Weiming Zhang 001; Nenghai Yu (CoRR, 2023)

Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking. - Weitao Feng 001; Jiyan He; Jie Zhang 073; Tianwei Zhang 004; Wenbo Zhou; Weiming Zhang 001; Nenghai Yu (CoRR, 2023)

Towards the Vulnerability of Watermarking Artificial Intelligence Generated Content. - Guanlin Li; Yifei Chen; Jie Zhang 073; Jiwei Li 001; Shangwei Guo; Tianwei Zhang 004 (CoRR, 2023)

PrivInfer: Privacy-Preserving Inference for Black-box Large Language Model. - Meng Tong; Kejiang Chen; Yuang Qi; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu (CoRR, 2023)

Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World. - Zhiling Zhang; Jie Zhang 073; Kui Zhang; Wenbo Zhou; Weiming Zhang 001; Nenghai Yu (CoRR, 2023)

FunctionMarker: Watermarking Language Datasets via Knowledge Injection. - Shuai Li; Kejiang Chen; Kunsheng Tang; Wen Huang; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu (CoRR, 2023)

Improving Adversarial Transferability by Stable Diffusion. - Jiayang Liu; Siyu Zhu; Siyuan Liang; Jie Zhang 073; Han Fang; Weiming Zhang 001; Ee-Chien Chang (CoRR, 2023)

Control Risk for Potential Misuse of Artificial Intelligence in Science. - Jiyan He; Weitao Feng 001; Yaosen Min; Jingwei Yi; Kunsheng Tang; Shuai Li; Jie Zhang 073; Kejiang Chen; Wenbo Zhou; Xing Xie 001; Weiming Zhang 001; Nenghai Yu; et al. (CoRR, 2023)

Perceptual Hashing of Deep Convolutional Neural Networks for Model Copy Detection. - Haozhe Chen; Hang Zhou 007; Jie Zhang 073; Dongdong Chen 001; Weiming Zhang 001; Kejiang Chen; Gang Hua 001; Nenghai Yu (ACM Trans. Multim. Comput. Commun. Appl., 2023)

Data-Free Hard-Label Robustness Stealing Attack. - Xiaojian Yuan; Kejiang Chen; Wen Huang; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu (AAAI, 2024)

Detecting Adversarial Examples via Reconstruction-based Semantic Inconsistency. - Chi Zhang; Wenbo Zhou; Kui Zhang; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu (ACM TUR-C, 2024)

GenderCARE: A Comprehensive Framework for Assessing and Reducing Gender Bias in Large Language Models. - Kunsheng Tang; Wenbo Zhou; Jie Zhang 073; Aishan Liu; Gelei Deng; Shuai Li; Peigui Qi; Weiming Zhang 001; Tianwei Zhang 004; Nenghai Yu (CCS, 2024)

Robust-Wide: Robust Watermarking Against Instruction-Driven Image Editing. - Runyi Hu; Jie Zhang 073; Ting Xu 004; Jiwei Li 001; Tianwei Zhang 004 (ECCV (22), 2024)

Attribute-Aware Head Swapping Guided by 3d Modeling. - Wenbo Zhou; Dongdong Chen 001; Jing Liao 001; Jie Zhang 073; Kejiang Chen; Weiming Zhang 001; Nenghai Yu (ICASSP, 2024)

AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA. - Weitao Feng 001; Wenbo Zhou; Jiyan He; Jie Zhang 073; Tianyi Wei; Guanlin Li; Tianwei Zhang 004; Weiming Zhang 001; Nenghai Yu (ICML, 2024)

Transferable Facial Privacy Protection against Blind Face Restoration via Domain-Consistent Adversarial Obfuscation. - Kui Zhang; Hang Zhou 007; Jie Zhang 073; Wenbo Zhou; Weiming Zhang 001; Nenghai Yu (ICML, 2024)

Model X-ray: Detecting Backdoored Models via Decision Boundary. - Yanghao Su; Jie Zhang 073; Ting Xu 004; Tianwei Zhang 004; Weiming Zhang 001; Nenghai Yu (ACM Multimedia, 2024)

Detecting Voice Cloning Attacks via Timbre Watermarking. - Chang Liu 089; Jie Zhang 073; Tianwei Zhang 004; Xi Yang; Weiming Zhang 001; Nenghai Yu (NDSS, 2024)

ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users. - Guanlin Li; Kangjie Chen; Shudong Zhang; Jie Zhang 073; Tianwei Zhang 004 (NeurIPS, 2024)

Model X-ray: Detect Backdoored Models via Decision Boundary. - Yanghao Su; Jie Zhang 073; Ting Xu 004; Tianwei Zhang 004; Weiming Zhang 001; Nenghai Yu (CoRR, 2024)

FaceTracer: Unveiling Source Identities from Swapped Face Images and Videos for Fraud Prevention. - Zhongyi Zhang; Jie Zhang 073; Wenbo Zhou; Xinghui Zhou; Qing Guo 005; Weiming Zhang 001; Tianwei Zhang 004; Nenghai Yu (CoRR, 2024)

SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution. - Runyi Hu; Jie Zhang 073; Yiming Li 004; Jiwei Li 001; Qing Guo 005; Han Qiu 001; Tianwei Zhang 004 (CoRR, 2024)

Reinforcement Learning Enhanced LLMs: A Survey. - Shuhe Wang; Shengyu Zhang 001; Jie Zhang 073; Runyi Hu; Xiaoya Li 001; Tianwei Zhang 004; Jiwei Li 001; Fei Wu 001; Guoyin Wang 002; Eduard H. Hovy (CoRR, 2024)

EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers. - Daiheng Gao; Shilin Lu; Shaw Walters; Wenbo Zhou; Jiaming Chu; Jie Zhang 073; Bang Zhang; Mengxi Jia; Jian Zhao 006; Zhaoxin Fan; Weiming Zhang 001 (CoRR, 2024)

Model Access Control Based on Hidden Adversarial Examples for Automatic Speech Recognition. - Haozhe Chen; Jie Zhang 073; Kejiang Chen; Weiming Zhang 001; Nenghai Yu (IEEE Trans. Artif. Intell., 2024)

A Robust Database Watermarking Scheme That Preserves Statistical Characteristics. - Zhiwen Ren; Han Fang; Jie Zhang 073; Zehua Ma; Ronghao Lin; Weiming Zhang 001; Nenghai Yu (IEEE Trans. Knowl. Data Eng., 2024)

Robust Model Watermarking for Image Processing Networks via Structure Consistency. - Jie Zhang 073; Dongdong Chen 001; Jing Liao 001; Zehua Ma; Han Fang; Weiming Zhang 001; Huamin Feng; Gang Hua 001; Nenghai Yu (IEEE Trans. Pattern Anal. Mach. Intell., 2024)

Dual-verification-based model fingerprints against ambiguity attacks. - Boyao Zhao; Haozhe Chen; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu (Cybersecur., 2024)

Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World. - Zhiling Zhang; Jie Zhang 073; Kui Zhang; Wenbo Zhou; Ting Xu 004; Daiheng Gao; Zixian Guo; Qinglang Guo; Weiming Zhang 001; Nenghai Yu (ICASSP, 2025)

VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking. - Runyi Hu; Jie Zhang 073; Yiming Li 004; Jiwei Li 001; Qing Guo 005; Han Qiu 001; Tianwei Zhang 004 (ICLR, 2025)

On the Vulnerability of Text Sanitization. - Meng Tong; Kejiang Chen; Xiaojian Yuan; Jiayang Liu; Weiming Zhang 001; Nenghai Yu; Jie Zhang 073 (NAACL (Long Papers), 2025)

Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models. - Boheng Li; Yanhao Wei; Yankai Fu; Zhenting Wang; Yiming Li 004; Jie Zhang 073; Run Wang 001; Tianwei Zhang 004 (SP, 2025)

CamLopa: A Hidden Wireless Camera Localization Framework via Signal Propagation Path Analysis. - Xiang Zhang 011; Jie Zhang 073; Zehua Ma; Jinyang Huang; Meng Li 006; Huan Yan; Peng Zhao 024; Zijian Zhang 001; Bin Liu 016; Qing Guo 005; Tianwei Zhang 004; Nenghai Yu (SP, 2025)

Security analysis and adaptive false data injection against multi-sensor fusion localization for autonomous driving. - Linqing Hu; Junqi Zhang; Jie Zhang 073; Shaoyin Cheng; Yuyi Wang 001; Weiming Zhang 001; Nenghai Yu (Inf. Fusion, 2025)

InferDPT: Privacy-Preserving Inference for Closed-Box Large Language Models. - Meng Tong; Kejiang Chen; Jie Zhang 073; Yuang Qi; Weiming Zhang 001; Nenghai Yu; Tianwei Zhang 004; Zhikun Zhang 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Picky LLMs and Unreliable RMs: An Empirical Study on Safety Alignment after Instruction Tuning. - Guanlin Li; Kangjie Chen; Shangwei Guo; Jie Zhang 073; Han Qiu 001; Chao Zhang 008; Guoyin Wang 002; Tianwei Zhang 004; Jiwei Li 001 (CoRR, 2025)

Exploiting Vulnerabilities in Speech Translation Systems through Targeted Adversarial Attacks. - Chang Liu 089; Haolin Wu; Xi Yang; Kui Zhang; Cong Wu 003; Weiming Zhang 001; Nenghai Yu; Tianwei Zhang 004; Qing Guo 005; Jie Zhang 073 (CoRR, 2025)

Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing. - Shuai Li; Jie Zhang 073; Yuang Qi; Kejiang Chen; Tianwei Zhang 004; Weiming Zhang 001; Nenghai Yu (CoRR, 2025)

Mask Image Watermarking. - Runyi Hu; Jie Zhang 073; Shiqian Zhao; Nils Lukas; Jiwei Li 001; Qing Guo 005; Han Qiu 001; Tianwei Zhang 004 (CoRR, 2025)

A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment. - Kun Wang 056; Guibin Zhang; Zhenhong Zhou; Jiahao Wu; Miao Yu; Shiqian Zhao; Chenlong Yin; Jinhu Fu; Yibo Yan; Hanjun Luo; Liang Lin; Zhihao Xu; et al. (CoRR, 2025)

Inception: Jailbreak the Memory Mechanism of Text-to-Image Generation Systems. - Shiqian Zhao; Jiayang Liu; Yiming Li 004; Runyi Hu; Xiaojun Jia; Wenshu Fan; Xinfeng Li; Jie Zhang 073; Wei Dong 001; Tianwei Zhang 004; Luu Anh Tuan (CoRR, 2025)

Holmes: Automated Fact Check with Large Language Models. - Haoran Ou; Gelei Deng; Xingshuo Han; Jie Zhang 073; Xinlei He 001; Han Qiu 001; Shangwei Guo; Tianwei Zhang 004 (CoRR, 2025)

IRCopilot: Automated Incident Response with Large Language Models. - Xihuan Lin; Jie Zhang 073; Gelei Deng; Tianzhe Liu; Xiaolong Liu 001; Changcai Yang; Tianwei Zhang 004; Qing Guo 005; Riqing Chen (CoRR, 2025)

BURN: Backdoor Unlearning via Adversarial Boundary Analysis. - Yanghao Su; Jie Zhang 073; Yiming Li 004; Tianwei Zhang 004; Qing Guo 005; Weiming Zhang 001; Nenghai Yu; Nils Lukas; Wenbo Zhou (CoRR, 2025)

PoseGuard: Pose-Guided Generation with Safety Guardrails. - Kongxin Wang; Jie Zhang 073; Peigui Qi; Kunsheng Tang; Tianwei Zhang 004; Wenbo Zhou (CoRR, 2025)

Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models. - Shiqian Zhao; Chong Wang 013; Yiming Li 004; Yihao Huang 001; Wenjie Qu 001; Siew-Kei Lam; Yi Xie 011; Kangjie Chen; Jie Zhang 073; Tianwei Zhang 004 (CoRR, 2025)

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems. - Yutong Wu 009; Jie Zhang 073; Yiming Li 004; Chao Zhang 008; Qing Guo 005; Nils Lukas; Tianwei Zhang 004 (CoRR, 2025)