Enhancing statistical charts: toward better data visualization and analysis. - Xiaonan Luo; Yuan Yuan 012; Kaiyuan Zhang 002; Jiazhi Xia; Zhiguang Zhou; Liang Chang 003; Tianlong Gu (J. Vis., 2019)

DRGraph: An Efficient Graph Layout Algorithm for Large-scale Graphs by Dimensionality Reduction. - Minfeng Zhu 001; Wei Chen 001; Yuanzhe Hu; Yuxuan Hou; Liangjun Liu; Kaiyuan Zhang 002 (IEEE Trans. Vis. Comput. Graph., 2021)

Detecting Backdoors in Pre-trained Encoders. - Shiwei Feng 002; Guanhong Tao 001; Siyuan Cheng 005; Guangyu Shen; Xiangzhe Xu; Yingqi Liu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2023)

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. - Kaiyuan Zhang 002; Guanhong Tao 001; Qiuling Xu; Siyuan Cheng 005; Shengwei An; Yingqi Liu; Shiwei Feng 002; Guangyu Shen; Pin-Yu Chen; Shiqing Ma; Xiangyu Zhang 001 (ICLR, 2023)

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Shengwei An; Xiangzhe Xu; Shiwei Feng 002; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Shiqing Ma; Xiangyu Zhang 001 (NDSS, 2023)

Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. - Guangyu Shen; Siyuan Cheng 005; Guanhong Tao 001; Kaiyuan Zhang 002; Yingqi Liu; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (NeurIPS, 2023)

ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. - Lu Yan; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Xuan Chen; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2023)

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. - Shengwei An; Yuan Yao 001; Qiuling Xu; Shiqing Ma; Guanhong Tao 001; Siyuan Cheng 005; Kaiyuan Zhang 002; Yingqi Liu; Guangyu Shen; Ian Kelk; Xiangyu Zhang 001 (SP, 2023)

Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract. - Zhuo Zhang 002; Zhiqiang Lin 001; Marcelo Morales; Xiangyu Zhang 001; Kaiyuan Zhang 002 (USENIX Security Symposium, 2023)

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. - Shengwei An; Sheng-Yen Chou; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Guangyu Shen; Siyuan Cheng 005; Shiqing Ma; Pin-Yu Chen; Tsung-Yi Ho; Xiangyu Zhang 001 (AAAI, 2024)

Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Shengwei An; Shiwei Feng 002; Xiangzhe Xu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2024)

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. - Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Hanxi Guo; Shiqing Ma; Xiangyu Zhang 001 (ECCV (62), 2024)

BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens. - Hanxi Guo; Siyuan Cheng 005; Xiaolong Jin 002; Zhuo Zhang 002; Kaiyuan Zhang 002; Guanhong Tao 001; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2024)

Source Code Foundation Models are Transferable Binary Analysis Knowledge Bases. - Zian Su; Xiangzhe Xu; Ziyang Huang; Kaiyuan Zhang 002; Xiangyu Zhang 001 (NeurIPS, 2024)

OdScan: Backdoor Scanning for Object Detection Models. - Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Kaiyuan Zhang 002; Zhuo Zhang 002; Shengwei An; Xiangzhe Xu; Yingqi Li; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Exploring the Orthogonality and Linearity of Backdoor Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Shengwei An; Anuran Makur; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. - Shengwei An; Lu Yan; Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (USENIX Security Symposium, 2024)

Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. - Guangyu Shen; Siyuan Cheng 005; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Lu Yan; Zhuo Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2024)

ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2024)

ProSec: Fortifying Code LLMs with Proactive Security Alignment. - Xiangzhe Xu; Zian Su; Jinyao Guo; Kaiyuan Zhang 002; Zhenting Wang; Xiangyu Zhang 001 (CoRR, 2024)

System Prompt Hijacking via Permutation Triggers in LLM Supply Chains. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (ACL (Findings), 2025)

CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Bruno Ribeiro 001; Shengwei An; Pin-Yu Chen; Xiangyu Zhang 001; Ninghui Li (NDSS, 2025)

BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. - Guangyu Shen; Siyuan Cheng 005; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Hanxi Guo; Lu Yan; Xiaolong Jin 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2025)

μKE: Matryoshka Unstructured Knowledge Editing of Large Language Models. - Zian Su; Ziyang Huang; Kaiyuan Zhang 002; Xiangyu Zhang 001 (CoRR, 2025)

LLM Agents Should Employ Security Principles. - Kaiyuan Zhang 002; Zian Su; Pin-Yu Chen; Elisa Bertino; Xiangyu Zhang 001; Ninghui Li (CoRR, 2025)

IntenTest: Stress Testing for Intent Integrity in API-Calling LLM Agents. - Shiwei Feng 002; Xiangzhe Xu; Xuan Chen; Kaiyuan Zhang 002; Syed Yusuf Ahmed; Zian Su; Mingwei Zheng; Xiangyu Zhang 001 (CoRR, 2025)

SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Hanxi Guo; Yuetian Chen; Zian Su; Shengwei An; Yuntao Du 002; Charles Fleming; Ashish Kundu; Xiangyu Zhang 001; Ninghui Li (CoRR, 2025)

CodeMirage: A Multi-Lingual Benchmark for Detecting AI-Generated and Paraphrased Source Code from Production-Level LLMs. - Hanxi Guo; Siyuan Cheng 005; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2025)

Cascading and Proxy Membership Inference Attacks. - Yuntao Du 002; Jiacheng Li; Yuetian Chen; Kaiyuan Zhang 002; Zhizhen Yuan; Hanshen Xiao; Bruno Ribeiro 001; Ninghui Li (CoRR, 2025)