Towards Transferable Adversarial Examples Using Meta Learning. - Mingyuan Fan 003; Jia-Li Yin; Ximeng Liu; Wenzhong Guo (ICA3PP (1), 2021)

Combating False Sense of Security: Breaking the Defense of Adversarial Training Via Non-Gradient Adversarial Attack. - Mingyuan Fan 003; Yang Liu 118; Cen Chen 001; Shengxing Yu; Wenzhong Guo; Ximeng Liu (ICASSP, 2022)

Backdoor Defense with Machine Unlearning. - Yang Liu 118; Mingyuan Fan 003; Cen Chen 001; Ximeng Liu; Zhuo Ma 001; Li Wang 056; Jianfeng Ma 001 (INFOCOM, 2022)

Dynamically Selected Mixup Machine Unlearning. - Zhiwen Zhou; Ximeng Liu; Jiayin Li; Junxi Ruan; Mingyuan Fan 003 (TrustCom, 2022)

Enhance transferability of adversarial examples with model architecture. - Mingyuan Fan 003; Wenzhong Guo; Shengxing Yu; Zuobin Ying; Ximeng Liu (CoRR, 2022)

Case-Aware Adversarial Training. - Mingyuan Fan 003; Yang Liu 118; Wenzhong Guo; Ximeng Liu; Jianhua Li 002 (CoRR, 2022)

Defense against Backdoor Attacks via Identifying and Purifying Bad Neurons. - Mingyuan Fan 003; Yang Liu 118; Cen Chen 001; Ximeng Liu; Wenzhong Guo (CoRR, 2022)

MaskBlock: Transferable Adversarial Examples with Bayes Approach. - Mingyuan Fan 003; Cen Chen 001; Ximeng Liu; Wenzhong Guo (CoRR, 2022)

Refiner: Data Refining against Gradient Leakage Attacks in Federated Learning. - Mingyuan Fan 003; Cen Chen 001; Chengyu Wang 001; Wenmeng Zhou; Jun Huang 007; Ximeng Liu; Wenzhong Guo (CoRR, 2022)

Toward Evaluating the Reliability of Deep-Neural-Network-Based IoT Devices. - Mingyuan Fan 003; Yang Liu 118; Cen Chen 001; Shengxing Yu; Wenzhong Guo; Li Wang 056; Ximeng Liu (IEEE Internet Things J., 2022)

Rethinking the Evaluation of Deep Neural Network Robustness. - Mingyuan Fan 003; Fuyi Wang; Bosheng Yan (ADMA (4), 2023)

On the Robustness of Split Learning Against Adversarial Attacks. - Mingyuan Fan 003; Cen Chen 001; Chengyu Wang 001; Wenmeng Zhou; Jun Huang 007 (ECAI, 2023)

Enhance Transferability of Adversarial Examples with Model Architecture. - Mingyuan Fan 003; Wenzhong Guo; Zuobin Ying; Ximeng Liu (ICASSP, 2023)

On the Trustworthiness Landscape of State-of-the-art Generative Models: A Comprehensive Survey. - Mingyuan Fan 003; Cen Chen 001; Chengyu Wang 001; Jun Huang 007 (CoRR, 2023)

Flatness-aware Adversarial Attack. - Mingyuan Fan 003; Xiaodan Li; Cen Chen 001; Yinggui Wang (CoRR, 2023)

SGFL-Attack: A Similarity-Guidance Strategy for Hard-Label Textual Adversarial Attack Based on Feedback Learning. - Panjia Qiu; Guanghao Zhou; Mingyuan Fan 003; Cen Chen 001; Yaliang Li; Wenming Zhou (CIKM, 2024)

LST2A: Lexical-Syntactic Targeted Adversarial Attack for Texts. - Guanghao Zhou; Panjia Qiu; Mingyuan Fan 003; Cen Chen 001; Yaliang Li; Wenmeng Zhou (CIKM, 2024)

FedMCP: Parameter-Efficient Federated Learning with Model-Contrastive Personalization. - Qianyi Zhao; Chen Qu 001; Cen Chen 001; Mingyuan Fan 003; Yanhao Wang 001 (ICPADS, 2024)

Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness. - Mingyuan Fan 003; Xiaodan Li; Cen Chen 001; Wenmeng Zhou; Yaliang Li (NeurIPS, 2024)

Guardian: Guarding against Gradient Leakage with Provable Defense for Federated Learning. - Mingyuan Fan 003; Yang Liu 118; Cen Chen 001; Chengyu Wang 001; Minghui Qiu; Wenmeng Zhou (WSDM, 2024)

SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images. - Mingyuan Fan 003; Yang Liu 118; Cen Chen 001; Ximeng Liu (CoRR, 2024)

EIUP: A Training-Free Approach to Erase Non-Compliant Concepts Conditioned on Implicit Unsafe Prompts. - Die Chen; Zhiwen Li; Mingyuan Fan 003; Cen Chen 001; Wenmeng Zhou; Yaliang Li (CoRR, 2024)

Privacy-Enhancing and Robust Backdoor Defense for Federated Learning on Heterogeneous Data. - Zekai Chen; Shengxing Yu; Mingyuan Fan 003; Ximeng Liu; Robert H. Deng (IEEE Trans. Inf. Forensics Secur., 2024)

Bad-PFL: Exploiting Backdoor Attacks against Personalized Federated Learning. - Mingyuan Fan 003; Zhanyi Hu; Fuyi Wang; Cen Chen 001 (ICLR, 2025)

Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models. - Die Chen; Zhiwen Li; Mingyuan Fan 003; Cen Chen 001; Wenmeng Zhou; Yanhao Wang 001; Yaliang Li (ICLR, 2025)

Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions. - Zhiwen Li; Die Chen; Mingyuan Fan 003; Cen Chen 001; Yaliang Li; Yanhao Wang 001; Wenmeng Zhou (WWW, 2025)

Bad-PFL: Exploring Backdoor Attacks against Personalized Federated Learning. - Mingyuan Fan 003; Zhanyi Hu; Fuyi Wang; Cen Chen 001 (CoRR, 2025)

CCJA: Context-Coherent Jailbreak Attack for Aligned Large Language Models. - Guanghao Zhou; Panjia Qiu; Mingyuan Fan 003; Cen Chen 001; Mingyuan Chu; Xin Zhang; Jun Zhou 011 (CoRR, 2025)

Exploiting Pre-Trained Models and Low-Frequency Preference for Cost-Effective Transfer-based Attack. - Mingyuan Fan 003; Cen Chen 001; Chengyu Wang 001; Jun Huang 007 (ACM Trans. Knowl. Discov. Data, 2025)

On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook. - Mingyuan Fan 003; Chengyu Wang 001; Cen Chen 001; Yang Liu 118; Jun Huang 007 (Int. J. Comput. Vis., 2025)