Clean-label Backdoor Attack against Deep Hashing based Retrieval. - Kuofeng Gao; Jiawang Bai; Bin Chen 011; Dongxian Wu; Shu-Tao Xia (CoRR, 2021)

Hardly Perceptible Trojan Attack Against Neural Networks with Bit Flips. - Jiawang Bai; Kuofeng Gao; Dihong Gong; Shu-Tao Xia; Zhifeng Li 001; Wei Liu 005 (ECCV (5), 2022)

Practical protection against video data leakage via universal adversarial head. - Jiawang Bai; Bin Chen 011; Kuofeng Gao; Xuan Wang 002; Shu-Tao Xia (Pattern Recognit., 2022)

Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning. - Kuofeng Gao; Jiawang Bai; Bin Chen 011; Dongxian Wu; Shu-Tao Xia (BMVC, 2023)

Backdoor Defense via Adaptively Splitting Poisoned Dataset. - Kuofeng Gao; Yang Bai; Jindong Gu; Yong Yang 001; Shu-Tao Xia (CVPR, 2023)

BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP. - Jiawang Bai; Kuofeng Gao; Shaobo Min; Shu-Tao Xia; Zhifeng Li 001; Wei Liu 005 (CVPR, 2024)

Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers. - Sheng Yang; Jiawang Bai; Kuofeng Gao; Yong Yang 001; Yiming Li 004; Shu-Tao Xia (CVPR, 2024)

Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images. - Kuofeng Gao; Yang Bai; Jindong Gu; Shu-Tao Xia; Philip Torr 001; Zhifeng Li 001; Wei Liu 005 (ICLR, 2024)

FMM-Attack: A Flow-based Multi-modal Adversarial Attack on Video-based LLMs. - Jinmin Li; Kuofeng Gao; Yang Bai; Jingyun Zhang; Shutao Xia; Yisen Wang 001 (CoRR, 2024)

Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples. - Kuofeng Gao; Jindong Gu; Yang Bai; Shu-Tao Xia; Philip Torr 001; Wei Liu 005; Zhifeng Li 001 (CoRR, 2024)

Adversarial Robustness for Visual Grounding of Multimodal Large Language Models. - Kuofeng Gao; Yang Bai; Jiawang Bai; Yong Yang 001; Shu-Tao Xia (CoRR, 2024)

Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers. - Sheng Yang; Jiawang Bai; Kuofeng Gao; Yong Yang 001; Yiming Li 004; Shutao Xia (CoRR, 2024)

Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas. - Chengyuan Deng; Yiqun Duan; Xin Jin; Heng Chang; Yijun Tian 001; Han Liu; Henry Peng Zou; Yiqiao Jin; Yijia Xiao; Yichen Wang; Shenghao Wu; Zongxing Xie; et al. (CoRR, 2024)

Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs. - Jinmin Li; Kuofeng Gao; Yang Bai; Jingyun Zhang; Shu-Tao Xia (CoRR, 2024)

PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (CoRR, 2024)

Embedding Self-Correction as an Inherent Ability in Large Language Models for Enhanced Mathematical Reasoning. - Kuofeng Gao; Huanqia Cai; Qingyao Shuai; Dihong Gong; Zhifeng Li 001 (CoRR, 2024)

Denial-of-Service Poisoning Attacks against Large Language Models. - Kuofeng Gao; Tianyu Pang; Chao Du; Yong Yang 001; Shu-Tao Xia; Min Lin (CoRR, 2024)

Imperceptible and Robust Backdoor Attack in 3D Point Cloud. - Kuofeng Gao; Jiawang Bai; Baoyuan Wu; Mengxi Ya; Shu-Tao Xia (IEEE Trans. Inf. Forensics Secur., 2024)

Benchmarking Open-ended Audio Dialogue Understanding for Large Audio-Language Models. - Kuofeng Gao; Shutao Xia; Ke Xu; Philip Torr 001; Jindong Gu (ACL (1), 2025)

VLMInferSlow: Evaluating the Efficiency Robustness of Large Vision-Language Models as a Service. - Xiasi Wang; Tianliang Yao; Simin Chen; Runqi Wang; Lei Ye; Kuofeng Gao; Yi Huang; Yuan Yao (ACL (1), 2025)

QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language. - Qingsong Zou; Jingyu Xiao; Qing Li 006; Zhi Yan 009; Yuhang Wang; Li Xu; Wenxuan Wang; Kuofeng Gao; Ruoyu Li 003; Yong Jiang 001 (ACL (Findings), 2025)

Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations. - Haitong Liu; Kuofeng Gao; Yang Bai; Jinmin Li; Jinxiao Shan; Tao Dai 001; Shu-Tao Xia (CVPR, 2025)

PointNCBW: Toward Dataset Ownership Verification for Point Clouds via Negative Clean-Label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (IEEE Trans. Inf. Forensics Secur., 2025)

Making Them a Malicious Database: Exploiting Query Code to Jailbreak Aligned Large Language Models. - Qingsong Zou; Jingyu Xiao; Qing Li 006; Zhi Yan 009; Yuhang Wang; Li Xu; Wenxuan Wang; Kuofeng Gao; Ruoyu Li 003; Yong Jiang 001 (CoRR, 2025)

Towards Dataset Copyright Evasion Attack against Personalized Text-to-Image Diffusion Models. - Kuofeng Gao; Yufei Zhu; Yiming Li 004; Jiawang Bai; Yong Yang 001; Zhifeng Li 001; Shu-Tao Xia (CoRR, 2025)

Your Language Model Can Secretly Write Like Humans: Contrastive Paraphrase Attacks on LLM-Generated Text Detectors. - Hao Fang 011; Jiawei Kong; Tianqu Zhuang; Yixiang Qiu; Kuofeng Gao; Bin Chen 011; Shu-Tao Xia; Yaowei Wang 001; Min Zhang 005 (CoRR, 2025)

Wolf Hidden in Sheep's Conversations: Toward Harmless Data-Based Backdoor Attacks for Jailbreaking Large Language Models. - Jiawei Kong; Hao Fang 011; Xiaochen Yang; Kuofeng Gao; Bin Chen 011; Shu-Tao Xia; Yaowei Wang 001; Min Zhang 005 (CoRR, 2025)

Grounding Language with Vision: A Conditional Mutual Information Calibrated Decoding Strategy for Reducing Hallucinations in LVLMs. - Hao Fang 011; Changle Zhou; Jiawei Kong; Kuofeng Gao; Bin Chen 011; Tao Liang; Guojun Ma; Shu-Tao Xia (CoRR, 2025)