Random Walk Based Fake Account Detection in Online Social Networks. - Jinyuan Jia 001; Binghui Wang; Neil Zhenqiang Gong (DSN, 2017)

AttriInfer: Inferring User Attributes in Online Social Networks Using Markov Random Fields. - Jinyuan Jia 001; Binghui Wang; Le Zhang 006; Neil Zhenqiang Gong (WWW, 2017)

AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning. - Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2018)

MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples. - Jinyuan Jia 001; Ahmed Salem 001; Michael Backes 001; Yang Zhang 016; Neil Zhenqiang Gong (CCS, 2019)

Calibrate: Frequency Estimation and Heavy Hitter Identification with Local Differential Privacy via Incorporating Prior Knowledge. - Jinyuan Jia 001; Neil Zhenqiang Gong (INFOCOM, 2019)

Graph-based Security and Privacy Analytics via Collective Classification with Joint Weight Learning and Propagation. - Binghui Wang; Jinyuan Jia 001; Neil Zhenqiang Gong (NDSS, 2019)

Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges. - Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2019)

Structure-Based Sybil Detection in Social Networks via Local Rule-Based Propagation. - Binghui Wang; Jinyuan Jia 001; Le Zhang 006; Neil Zhenqiang Gong (IEEE Trans. Netw. Sci. Eng., 2019)

Defending Against Machine Learning Based Inference Attacks via Adversarial Examples: Opportunities and Challenges. - Jinyuan Jia 001; Neil Zhenqiang Gong (Adaptive Autonomous Secure Cyber Systems, 2020)

Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing. - Jinyuan Jia 001; Xiaoyu Cao; Binghui Wang; Neil Zhenqiang Gong (ICLR, 2020)

Local Model Poisoning Attacks to Byzantine-Robust Federated Learning. - Minghong Fang; Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2020)

Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing. - Jinyuan Jia 001; Binghui Wang; Xiaoyu Cao; Neil Zhenqiang Gong (WWW, 2020)

On Certifying Robustness against Backdoor Attacks via Randomized Smoothing. - Binghui Wang; Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2020)

Certified Robustness of Nearest Neighbors against Data Poisoning Attacks. - Jinyuan Jia 001; Xiaoyu Cao; Neil Zhenqiang Gong (CoRR, 2020)

Provably Secure Federated Learning against Malicious Clients. - Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (AAAI, 2021)

Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks. - Jinyuan Jia 001; Xiaoyu Cao; Neil Zhenqiang Gong (AAAI, 2021)

Semi-Supervised Node Classification on Graphs: Markov Random Fields vs. Graph Neural Networks. - Binghui Wang; Jinyuan Jia 001; Neil Zhenqiang Gong (AAAI, 2021)

IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary. - Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (AsiaCCS, 2021)

Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes. - Jinyuan Jia 001; Binghui Wang; Neil Zhenqiang Gong (AsiaCCS, 2021)

EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning. - Hongbin Liu 005; Jinyuan Jia 001; Wenjie Qu 001; Neil Zhenqiang Gong (CCS, 2021)

PointGuard: Provably Robust 3D Point Cloud Classification. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CVPR, 2021)

Detection Of Malicious DNS and Web Servers using Graph-Based Approaches. - Jinyuan Jia 001; Zheng Dong; Jie Li; Jack W. Stokes (ICASSP, 2021)

On the Intrinsic Differential Privacy of Bagging. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (IJCAI, 2021)

Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation. - Binghui Wang; Jinyuan Jia 001; Xiaoyu Cao; Neil Zhenqiang Gong (KDD, 2021)

Backdoor Attacks to Graph Neural Networks. - Zaixi Zhang; Jinyuan Jia 001; Binghui Wang; Neil Zhenqiang Gong (SACMAT, 2021)

Data Poisoning Attacks to Local Differential Privacy Protocols. - Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2021)

Stealing Links from Graph Neural Networks. - Xinlei He 001; Jinyuan Jia 001; Michael Backes 001; Neil Zhenqiang Gong; Yang Zhang 016 (USENIX Security Symposium, 2021)

10 Security and Privacy Problems in Self-Supervised Learning. - Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CoRR, 2021)

Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks. - Jinyuan Jia 001; Yupei Liu; Xiaoyu Cao; Neil Zhenqiang Gong (AAAI, 2022)

StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning. - Yupei Liu; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CCS, 2022)

Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations. - Jinyuan Jia 001; Binghui Wang; Xiaoyu Cao; Hongbin Liu 005; Neil Zhenqiang Gong (ICLR, 2022)

Deep Neural Network Piration without Accuracy Loss. - Aritra Ray; Jinyuan Jia 001; Sohini Saha; Jayeeta Chaudhuri; Neil Zhenqiang Gong; Krishnendu Chakrabarty (ICMLA, 2022)

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients. - Zaixi Zhang; Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (KDD, 2022)

MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples. - Jinyuan Jia 001; Wenjie Qu 001; Neil Zhenqiang Gong (NeurIPS, 2022)

BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning. - Jinyuan Jia 001; Yupei Liu; Neil Zhenqiang Gong (SP, 2022)

PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning. - Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2022)

Poisoning Attacks to Local Differential Privacy Protocols for Key-Value Data. - Yongji Wu; Xiaoyu Cao; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2022)

StolenEncoder: Stealing Pre-trained Encoders. - Yupei Liu; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CoRR, 2022)

CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning. - Jinghuai Zhang; Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2022)

FLCert: Provably Secure Federated Learning Against Poisoning Attacks. - Xiaoyu Cao; Zaixi Zhang; Jinyuan Jia 001; Neil Zhenqiang Gong (IEEE Trans. Inf. Forensics Secur., 2022)

Privacy Protection via Adversarial Examples. - Jinyuan Jia 001 (2022)

PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees. - Jinghuai Zhang; Jinyuan Jia 001; Hongbin Liu 005; Neil Zhenqiang Gong (CVPR, 2023)

Graph Contrastive Backdoor Attacks. - Hangfan Zhang; Jinghui Chen; Lu Lin 001; Jinyuan Jia 001; Dinghao Wu (ICML, 2023)

Screen Perturbation: Adversarial Attack and Defense on Under-Screen Camera. - Hanting Ye; Guohao Lan; Jinyuan Jia 001; Qing Wang 007 (MobiCom, 2023)

REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service. - Wenjie Qu 001; Jinyuan Jia 001; Neil Zhenqiang Gong (NDSS, 2023)

IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI. - Bochuan Cao; Changjiang Li; Ting Wang 006; Jinyuan Jia 001; Bo Li 026; Jinghui Chen (NeurIPS, 2023)

FedGame: A Game-Theoretic Defense against Backdoor Attacks in Federated Learning. - Jinyuan Jia 001; Zhuowen Yuan; Dinuka Sahabandu; Luyao Niu; Arezoo Rajabi; Bhaskar Ramasubramanian; Bo Li 026; Radha Poovendran (NeurIPS, 2023)

A3FL: Adversarially Adaptive Backdoor Attacks to Federated Learning. - Hangfan Zhang; Jinyuan Jia 001; Jinghui Chen; Lu Lin 001; Dinghao Wu (NeurIPS, 2023)

FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information. - Xiaoyu Cao; Jinyuan Jia 001; Zaixi Zhang; Neil Zhenqiang Gong (SP, 2023)

PORE: Provably Robust Recommender Systems against Data Poisoning Attacks. - Jinyuan Jia 001; Yupei Liu; Yuepeng Hu; Neil Zhenqiang Gong (USENIX Security Symposium, 2023)

On the Safety of Open-Sourced Large Language Models: Does Alignment Really Prevent Them From Being Misused? - Hangfan Zhang; Zhimeng Guo; Huaisheng Zhu; Bochuan Cao; Lu Lin 001; Jinyuan Jia 001; Jinghui Chen; Dinghao Wu (CoRR, 2023)

Prompt Injection Attacks and Defenses in LLM-Integrated Applications. - Yupei Liu; Yuqi Jia; Runpeng Geng; Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2023)

Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications. - Fengqing Jiang; Zhangchen Xu; Luyao Niu; Boxin Wang; Jinyuan Jia 001; Bo Li 026; Radha Poovendran (CoRR, 2023)

SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding. - Zhangchen Xu; Fengqing Jiang; Luyao Niu; Jinyuan Jia 001; Bill Yuchen Lin; Radha Poovendran (ACL (1), 2024)

Jailbreak Open-Sourced Large Language Models via Enforced Decoding. - Hangfan Zhang; Zhimeng Guo; Huaisheng Zhu; Bochuan Cao; Lu Lin 001; Jinyuan Jia 001; Jinghui Chen; Dinghao Wu (ACL (1), 2024)

POSTER: Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications. - Fengqing Jiang; Zhangchen Xu; Luyao Niu; Boxin Wang; Jinyuan Jia 001; Bo Li 026; Radha Poovendran (AsiaCCS, 2024)

Poster: Brave: Byzantine-Resilient and Privacy-Preserving Peer-to-Peer Federated Learning. - Zhangchen Xu; Fengqing Jiang; Luyao Niu; Jinyuan Jia 001; Radha Poovendran (AsiaCCS, 2024)

Distributed Backdoor Attacks on Federated Graph Learning and Certified Defenses. - Yuxin Yang 003; Qiang Li 008; Jinyuan Jia 001; Yuan Hong 001; Binghui Wang (CCS, 2024)

MMCert: Provable Defense Against Adversarial Attacks to Multi-Modal Models. - Yanting Wang; Hongye Fu; Wei Zou; Jinyuan Jia 001 (CVPR, 2024)

Towards General Robustness Verification of MaxPool-Based Convolutional Neural Networks via Tightening Linear Approximation. - Yuan Xiao 003; Shiqing Ma; Juan Zhai; Chunrong Fang; Jinyuan Jia 001; Zhenyu Chen 001 (CVPR, 2024)

Data Poisoning Based Backdoor Attacks to Contrastive Learning. - Jinghuai Zhang; Hongbin Liu 005; Jinyuan Jia 001; Neil Zhenqiang Gong (CVPR, 2024)

Certifiably Robust Image Watermark. - Zhengyuan Jiang; Moyang Guo; Yuepeng Hu; Jinyuan Jia 001; Neil Zhenqiang Gong (ECCV (77), 2024)

GNNCert: Deterministic Certification of Graph Neural Networks against Adversarial Perturbations. - Zaishuo Xia; Han Yang; Binghui Wang; Jinyuan Jia 001 (ICLR, 2024)

Graph Neural Network Explanations are Fragile. - Jiate Li; Meng Pang; Yun Dong; Jinyuan Jia 001; Binghui Wang (ICML, 2024)

SHINE: Shielding Backdoors in Deep Reinforcement Learning. - Zhuowen Yuan; Wenbo Guo 002; Jinyuan Jia 001; Bo Li 026; Dawn Song (ICML, 2024)

TextGuard: Provable Defense against Backdoor Attacks on Text Classification. - Hengzhi Pei; Jinyuan Jia 001; Wenbo Guo 002; Bo Li 026; Dawn Song (NDSS, 2024)

Data Free Backdoor Attacks. - Bochuan Cao; Jinyuan Jia 001; Chuxuan Hu; Wenbo Guo 002; Zhen Xiang; Jinghui Chen; Bo Li 026; Dawn Song (NeurIPS, 2024)

Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning. - Hongbin Liu 005; Wenjie Qu 001; Jinyuan Jia 001; Neil Zhenqiang Gong (SP (Workshops), 2024)

FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models. - Yanting Wang; Wei Zou; Jinyuan Jia 001 (SP, 2024)

Formalizing and Benchmarking Prompt Injection Attacks and Defenses. - Yupei Liu; Yuqi Jia; Runpeng Geng; Jinyuan Jia 001; Neil Zhenqiang Gong (USENIX Security Symposium, 2024)

ACE: A Model Poisoning Attack on Contribution Evaluation Methods in Federated Learning. - Zhangchen Xu; Fengqing Jiang; Luyao Niu; Jinyuan Jia 001; Bo Li 026; Radha Poovendran (USENIX Security Symposium, 2024)

Brave: Byzantine-Resilient and Privacy-Preserving Peer-to-Peer Federated Learning. - Zhangchen Xu; Fengqing Jiang; Luyao Niu; Jinyuan Jia 001; Radha Poovendran (CoRR, 2024)

Provably Robust Multi-bit Watermarking for AI-generated Text via Error Correction Code. - Wenjie Qu 001; Dong Yin; Zixin He; Wei Zou; Tianyang Tao; Jinyuan Jia 001; Jiaheng Zhang (CoRR, 2024)

PoisonedRAG: Knowledge Poisoning Attacks to Retrieval-Augmented Generation of Large Language Models. - Wei Zou; Runpeng Geng; Binghui Wang; Jinyuan Jia 001 (CoRR, 2024)

TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models. - Yuzhou Nie; Yanting Wang; Jinyuan Jia 001; Michael J. De Lucia; Nathaniel D. Bastian; Wenbo Guo 002; Dawn Song (CoRR, 2024)

Evaluating Large Language Model based Personal Information Extraction and Countermeasures. - Yupei Liu; Yuqi Jia; Jinyuan Jia 001; Neil Zhenqiang Gong (CoRR, 2024)

Defending Deep Regression Models against Backdoor Attacks. - Lingyu Du; Yupei Liu; Jinyuan Jia 001; Guohao Lan (CoRR, 2024)

PrivateGaze: Preserving User Privacy in Black-box Mobile Gaze Tracking Services. - Lingyu Du; Jinyuan Jia 001; Xucong Zhang; Guohao Lan (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2024)

TrojanDec: Data-free Detection of Trojan Inputs in Self-supervised Learning. - Yupei Liu; Yanting Wang; Jinyuan Jia 001 (AAAI, 2025)

Provably Robust Explainable Graph Neural Networks against Graph Perturbation Attacks. - Jiate Li; Meng Pang; Yun Dong; Jinyuan Jia 001; Binghui Wang (ICLR, 2025)

Stealing Training Graphs from Graph Neural Networks. - Minhua Lin; Enyan Dai; Junjie Xu; Jinyuan Jia 001; Xiang Zhang 001; Suhang Wang (KDD (1), 2025)

SecureGaze: Defending Gaze Estimation Against Backdoor Attacks. - Lingyu Du; Yupei Liu; Jinyuan Jia 001; Guohao Lan (SenSys, 2025)

DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks. - Yupei Liu; Yuqi Jia; Jinyuan Jia 001; Dawn Song; Neil Zhenqiang Gong (SP, 2025)

A Critical Evaluation of Defenses against Prompt Injection Attacks. - Yuqi Jia; Zedian Shao; Yupei Liu; Jinyuan Jia 001; Dawn Song; Neil Zhenqiang Gong (CoRR, 2025)

TracLLM: A Generic Framework for Attributing Long Context LLMs. - Yanting Wang; Wei Zou; Runpeng Geng; Jinyuan Jia 001 (CoRR, 2025)