You Can Yak But You Can't Hide. - Carson L. Nemelka; Cameron L. Ballard; Kelvin Liu; Minhui Xue 001; Keith W. Ross (COSN, 2015)

I know where you are: Thwarting privacy protection in location-based social discovery services. - Minhui Xue 001; Yong Liu 013; Keith W. Ross; Haifeng Qian (INFOCOM Workshops, 2015)

Attacks and Defenses in Location-Based Social Networks: A Heuristic Number Theory Approach. - Jiawen Peng; Yan Meng 001; Minhui Xue 001; Xiaojun Hei; Keith W. Ross (SocialSec, 2015)

Data-Driven Privacy Analytics: A WeChat Case Study in Location-Based Social Networks. - Rongrong Wang; Minhui Xue 001; Kelvin Liu; Haifeng Qian (WASA, 2015)

StormDroid: A Streaminglized Machine Learning-Based System for Detecting Android Malware. - Sen Chen 001; Minhui Xue 001; Zhushou Tang; Lihua Xu; Haojin Zhu (AsiaCCS, 2016)

POSTER: Accuracy vs. Time Cost: Detecting Android Malware through Pareto Ensemble Pruning. - Lingling Fan 003; Minhui Xue 001; Sen Chen 001; Lihua Xu; Haojin Zhu (CCS, 2016)

You Can Yak but You Can't Hide: Localizing Anonymous Social Network Users. - Minhui Xue 001; Cameron L. Ballard; Kelvin Liu; Carson L. Nemelka; Yanqiu Wu 002; Keith W. Ross; Haifeng Qian (Internet Measurement Conference, 2016)

Towards adversarial detection of mobile malware: poster. - Sen Chen 001; Minhui Xue 001; Lihua Xu (MobiCom, 2016)

On the Impact of Location Errors on Localization Attacks in Location-Based Social Network Services. - Hanni Cheng; Shiling Mao; Minhui Xue 001; Xiaojun Hei (SpaCCS, 2016)

The Right to be Forgotten in the Media: A Data-Driven Study. - Minhui Xue 001; Gabriel Magno; Evandro Cunha; Virgílio A. F. Almeida; Keith W. Ross (Proc. Priv. Enhancing Technol., 2016)

Thwarting location privacy protection in location-based social discovery services. - Minhui Xue 001; Yong Liu 013; Keith W. Ross; Haifeng Qian (Secur. Commun. Networks, 2016)

Fake reviews tell no tales? Dissecting click farming in content-generated social networks. - Haizhong Zheng; Neng Li; Minhui Xue 001; Suguo Du; Haojin Zhu (ICCC, 2017)

Unleash the Power for Tensor: A Hybrid Malware Detection System Using Ensemble Classifiers. - Jieqiong Hou; Minhui Xue 001; Haifeng Qian (ISPA/IUCC, 2017)

When program analysis meets mobile security: an industrial study of misusing Android internet sockets. - Wenqi Bu; Minhui Xue 001; Lihua Xu; Yajin Zhou; Zhushou Tang; Tao Xie 001 (ESEC/SIGSOFT FSE, 2017)

Revisiting Localization Attacks in Mobile App People-Nearby Services. - Jialin Wang; Hanni Cheng; Minhui Xue 001; Xiaojun Hei (SpaCCS, 2017)

Hardening Malware Detection Systems Against Cyber Maneuvers: An Adversarial Machine Learning Approach. - Sen Chen 001; Minhui Xue 001; Lingling Fan 003; Shuang Hao 001; Lihua Xu; Haojin Zhu (CoRR, 2017)

Characterizing user behaviors in location-based find-and-flirt services: Anonymity and demographics - A WeChat Case Study. - Minhui Xue 001; Limin Yang; Keith W. Ross; Haifeng Qian (Peer-to-Peer Netw. Appl., 2017)

APPCLASSIFIER: Automated App Inference on Encrypted Traffic via Meta Data Analysis. - Chong Xiang 001; Qingrong Chen; Minhui Xue 001; Haojin Zhu (GLOBECOM, 2018)

DeepMutation: Mutation Testing of Deep Learning Systems. - Lei Ma 003; Fuyuan Zhang; Jiyuan Sun; Minhui Xue 001; Bo Li 026; Felix Juefei-Xu; Chao Xie; Li Li 029; Yang Liu 003; Jianjun Zhao 001; Yadong Wang (ISSRE, 2018)

DeepGauge: multi-granularity testing criteria for deep learning systems. - Lei Ma 003; Felix Juefei-Xu; Fuyuan Zhang; Jiyuan Sun; Minhui Xue 001; Bo Li 026; Chunyang Chen 001; Ting Su 001; Li Li 029; Yang Liu 003; Jianjun Zhao 001; Yadong Wang (ASE, 2018)

Smoke Screener or Straight Shooter: Detecting Elite Sybil Attacks in User-Review Social Networks. - Haizhong Zheng; Minhui Xue 001; Hao Lu; Shuang Hao 001; Haojin Zhu; Xiaohui Liang 002; Keith W. Ross (NDSS, 2018)

Are mobile banking apps secure? what can be improved? - Sen Chen 001; Ting Su 001; Lingling Fan 003; Guozhu Meng; Minhui Xue 001; Yang Liu 003; Lihua Xu (ESEC/SIGSOFT FSE, 2018)

FACTS: automated black-box testing of FinTech systems. - Qingshun Wang; Lintao Gu; Minhui Xue 001; Lihua Xu; Wenyu Niu; Liang Dou; Liang He 001; Tao Xie 001 (ESEC/SIGSOFT FSE, 2018)

Modeling Privacy Leakage Risks in Large-Scale Social Networks. - Suguo Du; Xiaolong Li; Jinli Zhong; Lu Zhou; Minhui Xue 001; Haojin Zhu; Limin Sun 001 (IEEE Access, 2018)

Automated poisoning attacks and defenses in malware detection systems: An adversarial machine learning approach. - Sen Chen 001; Minhui Xue 001; Lingling Fan 003; Shuang Hao 001; Lihua Xu; Haojin Zhu; Bo Li 026 (Comput. Secur., 2018)

DeepGauge: Comprehensive and Multi-Granularity Testing Criteria for Gauging the Robustness of Deep Learning Systems. - Lei Ma 003; Felix Juefei-Xu; Jiyuan Sun; Chunyang Chen 001; Ting Su 001; Fuyuan Zhang; Minhui Xue 001; Bo Li 026; Li Li 029; Yang Liu 003; Jianjun Zhao 001; Yadong Wang (CoRR, 2018)

Sensing the Chinese Diaspora: How Mobile Apps Can Provide Insights into Global Migration Flows. - Minhui Xue 001; Alexandru Grigoras; Heather Lee; Keith W. Ross (CoRR, 2018)

AUSERA: Large-Scale Automated Security Risk Assessment of Global Mobile Banking Apps. - Sen Chen 001; Guozhu Meng; Ting Su 001; Lingling Fan 003; Yinxing Xue; Yang Liu 003; Lihua Xu; Minhui Xue 001; Bo Li 026; Shuang Hao 001 (CoRR, 2018)

Combinatorial Testing for Deep Learning Systems. - Lei Ma 003; Fuyuan Zhang; Minhui Xue 001; Bo Li 026; Yang Liu 003; Jianjun Zhao 001; Yadong Wang (CoRR, 2018)

Coverage-Guided Fuzzing for Deep Neural Networks. - Xiaofei Xie; Lei Ma 003; Felix Juefei-Xu; Hongxu Chen 001; Minhui Xue 001; Bo Li 026; Yang Liu 003; Jianjun Zhao 001; Jianxiong Yin; Simon See (CoRR, 2018)

Secure Deep Learning Engineering: A Software Quality Assurance Perspective. - Lei Ma 003; Felix Juefei-Xu; Minhui Xue 001; Qiang Hu; Sen Chen 001; Bo Li 026; Yang Liu 003; Jianjun Zhao 001; Jianxiong Yin; Simon See (CoRR, 2018)

Differentially Private Data Generative Models. - Qingrong Chen; Chong Xiang 001; Minhui Xue 001; Bo Li 026; Nikita Borisov; Dali Kaafar; Haojin Zhu (CoRR, 2018)

Sensing the Chinese Diaspora: How Mobile Apps Can Provide Insights Into Global Migration Flows. - Minhui Xue 001; Xin Yuan 004; Heather Lee; Keith W. Ross (ICDM Workshops, 2019)

DeepHunter: a coverage-guided fuzz testing framework for deep neural networks. - Xiaofei Xie; Lei Ma 003; Felix Juefei-Xu; Minhui Xue 001; Hongxu Chen 001; Yang Liu 003; Jianjun Zhao 001; Bo Li 026; Jianxiong Yin; Simon See (ISSTA, 2019)

No-jump-into-latency in China's internet!: toward last-mile hop count based IP geo-localization. - Chong Xiang 001; Xinyu Wang 004; Qingrong Chen; Minhui Xue 001; Zhaoyu Gao; Haojin Zhu; Cailian Chen; Qiuhua Fan (IWQoS, 2019)

Measuring and Analyzing Search Engine Poisoning of Linguistic Collisions. - Matthew Joslin; Neng Li; Shuang Hao 001; Minhui Xue 001; Haojin Zhu (IEEE Symposium on Security and Privacy, 2019)

DeepCT: Tomographic Combinatorial Testing for Deep Learning Systems. - Lei Ma 003; Felix Juefei-Xu; Minhui Xue 001; Bo Li 026; Li Li 029; Yang Liu 003; Jianjun Zhao 001 (SANER, 2019)

Securing android applications via edge assistant third-party library detection. - Zhushou Tang; Minhui Xue 001; Guozhu Meng; Chengguo Ying; Yugeng Liu; Jianan He; Haojin Zhu; Yang Liu 003 (Comput. Secur., 2019)

The Audio Auditor: Participant-Level Membership Inference in Voice-Based IoT. - Yuantian Miao; Benjamin Zi Hao Zhao; Minhui Xue 001; Chao Chen 015; Lei Pan 002; Jun Zhang 010; Dali Kaafar; Yang Xiang 001 (CoRR, 2019)

Invisible Backdoor Attacks Against Deep Neural Networks. - Shaofeng Li 001; Benjamin Zi Hao Zhao; Jiahao Yu 001; Minhui Xue 001; Dali Kaafar; Haojin Zhu (CoRR, 2019)

PALOR: Poisoning Attacks Against Logistic Regression. - Jialin Wen; Benjamin Zi Hao Zhao; Minhui Xue 001; Haifeng Qian (ACISP, 2020)

Quality Assessment of Online Automated Privacy Policy Generators: An Empirical Study. - Ruoxi Sun 001; Minhui Xue 001 (EASE, 2020)

An empirical assessment of security risks of global Android banking apps. - Sen Chen 001; Lingling Fan 003; Guozhu Meng; Ting Su 001; Minhui Xue 001; Yinxing Xue; Yang Liu 003; Lihua Xu (ICSE, 2020)

An Automated Assessment of Android Clipboards. - Wei Wang 334; Ruoxi Sun 001; Minhui Xue 001; Damith C. Ranasinghe (ASE, 2020)

Exploring the Eastern Frontier: A First Look at Mobile App Tracking in China. - Zhaohua Wang; Zhenyu Li 001; Minhui Xue 001; Gareth Tyson (PAM, 2020)

VenueTrace: a privacy-by-design COVID-19 digital contact tracing solution: poster abstract. - Ruoxi Sun 001; Wei Wang 334; Minhui Xue 001; Gareth Tyson; Damith C. Ranasinghe (SenSys, 2020)

iOS, Your OS, Everybody's OS: Vetting and Analyzing Network Services of iOS Applications. - Zhushou Tang; Ke Tang; Minhui Xue 001; Yuan Tian 001; Sen Chen 001; Muhammad Ikram 001; Tielei Wang; Haojin Zhu (USENIX Security Symposium, 2020)

Vetting Security and Privacy of Global COVID-19 Contact Tracing Applications. - Ruoxi Sun 001; Wei Wang 334; Minhui Xue 001; Gareth Tyson; Seyit Camtepe; Damith Ranasinghe (CoRR, 2020)

With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Online Regression Models. - Jialin Wen; Benjamin Zi Hao Zhao; Minhui Xue 001; Haifeng Qian (CoRR, 2020)

Deep Learning Backdoors. - Shaofeng Li 001; Shiqing Ma; Minhui Xue 001; Benjamin Zi Hao Zhao (CoRR, 2020)

Oriole: Thwarting Privacy Against Trustworthy Deep Learning Models. - Liuqiao Chen; Hu Wang 005; Benjamin Zi Hao Zhao; Minhui Xue 001; Haifeng Qian (ACISP, 2021)

Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference. - Xiaotao Feng; Ruoxi Sun 001; Xiaogang Zhu 001; Minhui Xue 001; Sheng Wen; Dongxi Liu; Surya Nepal; Yang Xiang 001 (CCS, 2021)

TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing. - Aoting Hu; Renjie Xie; Zhigang Lu 001; Aiqun Hu; Minhui Xue 001 (CCS, 2021)

Hidden Backdoors in Human-Centric Language Models. - Shaofeng Li 001; Hui Liu; Tian Dong; Benjamin Zi Hao Zhao; Minhui Xue 001; Haojin Zhu; Jialiang Lu (CCS, 2021)

Understanding and Detecting Mobile Ad Fraud Through the Lens of Invalid Traffic. - Suibin Sun; Le Yu; Xiaokuan Zhang; Minhui Xue 001; Ren Zhou; Haojin Zhu; Shuang Hao 001; Xiaodong Lin 001 (CCS, 2021)

Dissecting Click Fraud Autonomy in the Wild. - Tong Zhu; Yan Meng 001; Haotian Hu; Xiaokuan Zhang; Minhui Xue 001; Haojin Zhu (CCS, 2021)

An Empirical Assessment of Global COVID-19 Contact Tracing Applications. - Ruoxi Sun 001; Wei Wang 334; Minhui Xue 001; Gareth Tyson; Seyit Camtepe; Damith C. Ranasinghe (ICSE, 2021)

Explainability-based Backdoor Attacks Against Graph Neural Networks. - Jing Xu 028; Minhui (Jason) Xue; Stjepan Picek (WiseML@WiSec, 2021)

Delayed Rewards Calibration via Reward Empirical Sufficiency. - Yixuan Liu; Hu Wang 005; Xiaowei Wang; Xiaoyue Sun; Liuyue Jiang; Minhui Xue 001 (CoRR, 2021)

Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography. - Olivia Byrnes; Wendy La; Hu Wang 005; Congbo Ma; Minhui Xue 001; Qi Wu 001 (CoRR, 2021)

NatiDroid: Cross-Language Android Permission Specification. - Chaoran Li; Xiao Chen 002; Ruoxi Sun 001; Jason Xue 002; Sheng Wen; Muhammad Ejaz Ahmed; Seyit Camtepe; Yang Xiang 001 (CoRR, 2021)

Exposing Weaknesses of Malware Detectors with Explainability-Guided Evasion Attacks. - Wei Wang 334; Ruoxi Sun 001; Tian Dong; Shaofeng Li 001; Minhui Xue 001; Gareth Tyson; Haojin Zhu (CoRR, 2021)

The Audio Auditor: User-Level Membership Inference in Internet of Things Voice Services. - Yuantian Miao; Minhui Xue 001; Chao Chen 015; Lei Pan 002; Jun Zhang 010; Benjamin Zi Hao Zhao; Dali Kaafar; Yang Xiang 001 (Proc. Priv. Enhancing Technol., 2021)

GUI-Squatting Attack: Automated Generation of Android Phishing Apps. - Sen Chen 001; Lingling Fan 003; Chunyang Chen 001; Minhui Xue 001; Yang Liu 003; Lihua Xu (IEEE Trans. Dependable Secur. Comput., 2021)

Invisible Backdoor Attacks on Deep Neural Networks Via Steganography and Regularization. - Shaofeng Li 001; Minhui Xue 001; Benjamin Zi Hao Zhao; Haojin Zhu; Xinpeng Zhang 001 (IEEE Trans. Dependable Secur. Comput., 2021)

With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression Models. - Jialin Wen; Benjamin Zi Hao Zhao; Minhui Xue 001; Alina Oprea; Haifeng Qian (IEEE Trans. Inf. Forensics Secur., 2021)

Statically Detecting Adversarial Malware through Randomised Chaining. - Matthew Crawford; Wei Wang 334; Ruoxi Sun 001; Minhui Xue 001 (ACSW, 2022)

Dissecting Malware in the Wild. - Hamish Spencer; Wei Wang 334; Ruoxi Sun 001; Minhui Xue 001 (ACSW, 2022)

Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations. - Zirui Peng; Shaofeng Li 001; Guoxing Chen; Cheng Zhang 014; Haojin Zhu; Minhui Xue 001 (CVPR, 2022)

Path Transitions Tell More: Optimizing Fuzzing Schedules via Runtime Program States. - Kunpeng Zhang; Xi Xiao; Xiaogang Zhu 001; Ruoxi Sun 001; Minhui Xue 001; Sheng Wen (ICSE, 2022)

M$^4$I: Multi-modal Models Membership Inference. - Pingyi Hu; Zihan Wang; Ruoxi Sun 001; Hu Wang 005; Minhui Xue 001 (NeurIPS, 2022)

Cross-language Android permission specification. - Chaoran Li; Xiao Chen 002; Ruoxi Sun 001; Minhui Xue 001; Sheng Wen; Muhammad Ejaz Ahmed; Seyit Camtepe; Yang Xiang 001 (ESEC/SIGSOFT FSE, 2022)

M^4I: Multi-modal Models Membership Inference. - Pingyi Hu; Zihan Wang; Ruoxi Sun 001; Hu Wang 005; Minhui Xue 001 (CoRR, 2022)

Backdoors Against Natural Language Processing: A Review. - Shaofeng Li 001; Tian Dong; Benjamin Zi Hao Zhao; Minhui Xue 001; Suguo Du; Haojin Zhu (IEEE Secur. Priv., 2022)

TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems. - Bao Gia Doan; Minhui Xue 001; Shiqing Ma; Ehsan Abbasnejad; Damith C. Ranasinghe (IEEE Trans. Inf. Forensics Secur., 2022)

Breaking Neural Reasoning Architectures With Metamorphic Relation-Based Adversarial Examples. - Alvin Chan; Lei Ma 003; Felix Juefei-Xu; Yew-Soon Ong; Xiaofei Xie; Minhui Xue 001; Yang Liu 003 (IEEE Trans. Neural Networks Learn. Syst., 2022)

Deep Learning Backdoors. - Shaofeng Li 001; Shiqing Ma; Minhui Xue 001; Benjamin Zi Hao Zhao (Security and Artificial Intelligence, 2022)

Towards Better ML-Based Software Services: An Investigation of Source Code Engineering Impact. - Yanli Li; Chongbin Ye; Huaming Chen; Shiping Chen 001; Minhui Xue 001; Jun Shen 001 (SSE, 2023)

Unraveling Threat Intelligence Through the Lens of Malicious URL Campaigns. - Mahathir Almashor; M. Ejaz Ahmed; Benjamin Pick; Jason Xue 002; Sharif Abuadbba; Raj Gaire 001; Shuo Wang 012; Seyit Camtepe; Surya Nepal (AINTEC, 2023)

POSTER: ML-Compass: A Comprehensive Assessment Framework for Machine Learning Models. - Zhibo Jin; Zhiyu Zhu; Hongsheng Hu; Minhui Xue 001; Huaming Chen (AsiaCCS, 2023)

FVW: Finding Valuable Weight on Deep Neural Network for Model Pruning. - Zhiyu Zhu; Huaming Chen; Zhibo Jin; Xinyi Wang 005; Jiayu Zhang 001; Minhui Xue 001; Qinghua Lu 001; Jun Shen 001; Kim-Kwang Raymond Choo (CIKM, 2023)

Demystifying Uneven Vulnerability of Link Stealing Attacks against Graph Neural Networks. - He Zhang 012; Bang Wu; Shuo Wang 012; Xiangwen Yang; Minhui Xue 001; Shirui Pan; Xingliang Yuan (ICML, 2023)

RAI2: Responsible Identity Audit Governing the Artificial Intelligence. - Tian Dong; Shaofeng Li 001; Guoxing Chen; Minhui Xue 001; Haojin Zhu; Zhen Liu 008 (NDSS, 2023)

The "Beatrix" Resurrections: Robust Backdoor Detection via Gram Matrices. - Wanlun Ma; Derui Wang; Ruoxi Sun 001; Minhui Xue 001; Sheng Wen; Yang Xiang 001 (NDSS, 2023)

DOITRUST: Dissecting On-chain Compromised Internet Domains via Graph Learning. - Shuo Wang 012; Mahathir Almashor; Alsharif Abuadbba; Ruoxi Sun 001; Minhui Xue 001; Calvin Wang; Raj Gaire 001; Surya Nepal; Seyit Camtepe (NDSS, 2023)

PPA: Preference Profiling Attack Against Federated Learning. - Chunyi Zhou; Yansong Gao 001; Anmin Fu; Kai Chen 012; Zhiyang Dai; Zhi Zhang 001; Minhui Xue 001; Yuqing Zhang 001 (NDSS, 2023)

Flow-Attention-based Spatio-Temporal Aggregation Network for 3D Mask Detection. - Yuxin Cao; Yian Li; Yumeng Zhu; Derui Wang; Minhui Xue 001 (NeurIPS, 2023)

Towards Minimising Perturbation Rate for Adversarial Machine Learning with Pruning. - Zhiyu Zhu; Jiayu Zhang 001; Zhibo Jin; Xinyi Wang 005; Minhui Xue 001; Jun Shen 001; Kim-Kwang Raymond Choo; Huaming Chen (ECML/PKDD (1), 2023)

Mate! Are You Really Aware? An Explainability-Guided Testing Framework for Robustness of Malware Detectors. - Ruoxi Sun 001; Minhui Xue 001; Gareth Tyson; Tian Dong; Shaofeng Li 001; Shuo Wang 012; Haojin Zhu; Seyit Camtepe; Surya Nepal (ESEC/SIGSOFT FSE, 2023)

StyleFool: Fooling Video Classification Systems via Style Transfer. - Yuxin Cao; Xi Xiao; Ruoxi Sun 001; Derui Wang; Minhui Xue 001; Sheng Wen (SP, 2023)

PublicCheck: Public Integrity Verification for Services of Run-time Deep Models. - Shuo Wang 012; Sharif Abuadbba; Sidharth Agarwal; Kristen Moore; Ruoxi Sun 001; Minhui Xue 001; Surya Nepal; Seyit Camtepe; Salil S. Kanhere (SP, 2023)

RAI4IoE: Responsible AI for Enabling the Internet of Energy. - Minhui Xue 001; Surya Nepal; Ling Liu; Subbu Sethuvenkatraman; Xingliang Yuan; Carsten Rudolph; Ruoxi Sun 001; Greg Eisenhauer (TPS-ISA, 2023)

Detecting Union Type Confusion in Component Object Model. - Yuxing Zhang; Xiaogang Zhu 001; Daojing He; Minhui Xue 001; Shouling Ji; Mohammad Sayad Haghighi; Sheng Wen; Zhiniang Peng (USENIX Security Symposium, 2023)

Not Seen, Not Heard in the Digital World! Measuring Privacy Practices in Children's Apps. - Ruoxi Sun 001; Minhui Xue 001; Gareth Tyson; Shuo Wang 012; Seyit Camtepe; Surya Nepal (WWW, 2023)

AgrEvader: Poisoning Membership Inference against Byzantine-robust Federated Learning. - Yanjun Zhang; Guangdong Bai; Mahawaga Arachchige Pathum Chamikara; Mengyao Ma; Liyue Shen; Jingwei Wang 003; Surya Nepal; Minhui Xue 001; Long Wang; Joseph K. Liu (WWW, 2023)

Copyright Protection and Accountability of Generative AI: Attack, Watermarking and Attribution. - Haonan Zhong; Jiamin Chang; Ziyue Yang; Tingmin Wu; Mahawaga Arachchige Pathum Chamikara; Chehara Pathmabandu; Minhui Xue 001 (WWW (Companion Volume), 2023)

VeriDIP: Verifying Ownership of Deep Neural Networks through Privacy Leakage Fingerprints. - Aoting Hu; Zhigang Lu 001; Renjie Xie; Minhui Xue 001 (CoRR, 2023)

Unleashing Cheapfakes through Trojan Plugins of Large Language Models. - Tian Dong; Guoxing Chen; Shaofeng Li 001; Minhui Xue 001; Rayne Holland; Yan Meng 001; Zhen Liu 008; Haojin Zhu (CoRR, 2023)

Reinforcement Unlearning. - Dayong Ye; Tianqing Zhu; Congcong Zhu; Derui Wang; Jason Xue 002; Sheng Shen 005; Wanlei Zhou 001 (CoRR, 2023)

An Explainability-Guided Testing Framework for Robustness of Malware Detectors. - Ruoxi Sun 001; Minhui Xue 001; Gareth Tyson; Tian Dong; Shaofeng Li 001; Shuo Wang 012; Haojin Zhu; Seyit Camtepe; Surya Nepal (Zenodo, 2023)

An Explainability-Guided Testing Framework for Robustness of Malware Detectors. - Ruoxi Sun 001; Minhui Xue 001; Gareth Tyson; Tian Dong; Shaofeng Li 001; Shuo Wang 012; Haojin Zhu; Seyit Camtepe; Surya Nepal (Zenodo, 2023)

Data Hiding With Deep Learning: A Survey Unifying Digital Watermarking and Steganography. - Zihan Wang; Olivia Byrnes; Hu Wang 005; Ruoxi Sun 001; Congbo Ma; Huaming Chen; Qi Wu 001; Minhui Xue 001 (IEEE Trans. Comput. Soc. Syst., 2023)

LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer. - Yuxin Cao; Ziyu Zhao; Xi Xiao; Derui Wang; Minhui Xue 001; Jin Lu (AAAI, 2024)

Efficient Constrained K-center Clustering with Background Knowledge. - Longkun Guo; Chaoqi Jia; Kewen Liao; Zhigang Lu 001; Minhui Xue 001 (AAAI, 2024)

MFABA: A More Faithful and Accelerated Boundary-Based Attribution Method for Deep Neural Networks. - Zhiyu Zhu; Huaming Chen; Jiayu Zhang 001; Xinyi Wang 005; Zhibo Jin; Minhui Xue 001; Dongxiao Zhu; Kim-Kwang Raymond Choo (AAAI, 2024)

LAMPS '24: ACM CCS Workshop on Large AI Systems and Models with Privacy and Safety Analysis. - Bo Li 026; Wenyuan Xu 001; Jieshan Chen; Yang Zhang 016; Minhui Xue 001; Shuo Wang 012; Guangdong Bai; Xingliang Yuan (CCS, 2024)

Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense. - Hua Ma; Shang Wang; Yansong Gao 001; Zhi Zhang 001; Huming Qiu; Minhui Xue 001; Alsharif Abuadbba; Anmin Fu; Surya Nepal; Derek Abbott (CCS, 2024)

Learning with Mixture of Prototypes for Out-of-Distribution Detection. - Haodong Lu 002; Dong Gong; Shuo Wang 012; Jason Xue 002; Lina Yao 001; Kristen Moore (ICLR, 2024)

AttEXplore: Attribution for Explanation with model parameters eXploration. - Zhiyu Zhu; Huaming Chen; Jiayu Zhang 001; Xinyi Wang 005; Zhibo Jin; Jason Xue 002; Flora D. Salim (ICLR, 2024)

Effects of Exponential Gaussian Distribution on (Double Sampling) Randomized Smoothing. - Youwei Shu; Xi Xiao; Derui Wang; Yuxin Cao; Siji Chen; Jason Xue 002; Linyi Li 001; Bo Li 026 (ICML, 2024)

Iterative Search Attribution for Deep Neural Networks. - Zhiyu Zhu; Huaming Chen; Xinyi Wang 005; Jiayu Zhang 001; Zhibo Jin; Jason Xue 002; Jun Shen 001 (ICML, 2024)

A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services. - Hongsheng Hu; Shuo Wang 012; Jiamin Chang; Haonan Zhong; Ruoxi Sun 001; Shuang Hao 001; Haojin Zhu; Minhui Xue 001 (NDSS, 2024)

GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks. - Bang Wu; He Zhang 012; Xiangwen Yang; Shuo Wang 012; Minhui Xue 001; Shirui Pan; Xingliang Yuan (NDSS, 2024)

ShapFuzz: Efficient Fuzzing via Shapley-Guided Byte Selection. - Kunpeng Zhang; Xiaogang Zhu 001; Xi Xiao; Minhui Xue 001; Chao Zhang 008; Sheng Wen (NDSS, 2024)

Utilizing Large Language Models with Human Feedback Integration for Generating Dedicated Warning for Phishing Emails. - Quan Hong Nguyen; Tingmin Wu; Van Nguyen 002; Xingliang Yuan; Jason Xue 002; Carsten Rudolph (SecTL@AsiaCCS, 2024)

LocalStyleFool: Regional Video Style Transfer Attack Using Segment Anything Model. - Yuxin Cao; Jinghao Li; Xi Xiao; Derui Wang; Minhui Xue 001; Hao Ge; Wei Liu; Guangwu Hu (SP (Workshops), 2024)

DeepTheft: Stealing DNN Model Architectures through Power Side Channel. - Yansong Gao 001; Huming Qiu; Zhi Zhang 001; Binghui Wang; Hua Ma; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Surya Nepal (SP, 2024)

Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning. - Hongsheng Hu; Shuo Wang 012; Tian Dong; Minhui Xue 001 (SP, 2024)

LACMUS: Latent Concept Masking for General Robustness Enhancement of DNNs. - Shuo Wang 012; Hongsheng Hu; Jiamin Chang; Benjamin Zi Hao Zhao; Minhui Xue 001 (SP, 2024)

CORELOCKER: Neuron-level Usage Control. - Zihan Wang; Zhongkui Ma; Xinguo Feng; Ruoxi Sun 001; Hu Wang 005; Minhui Xue 001; Guangdong Bai (SP, 2024)

Securing Graph Neural Networks in MLaaS: A Comprehensive Realization of Query-based Integrity Verification. - Bang Wu; Xingliang Yuan; Shuo Wang 012; Qi Li 002; Minhui Xue 001; Shirui Pan (SP, 2024)

Bounded and Unbiased Composite Differential Privacy. - Kai Zhang; Yanjun Zhang; Ruoxi Sun 001; Pei-Wei Tsai; Muneeb Ul Hassan 001; Xin Yuan 004; Minhui Xue 001; Jinjun Chen (SP, 2024)

Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection. - Shaofeng Li 001; Xinyu Wang 004; Minhui Xue 001; Haojin Zhu; Zhi Zhang 001; Yansong Gao 001; Wen Wu 003; Xuemin (Sherman) Shen (USENIX Security Symposium, 2024)

Being Transparent is Merely the Beginning: Enforcing Purpose Limitation with Polynomial Approximation. - Shuofeng Liu; Zihan Wang; Minhui Xue 001; Long Wang; Yuanchao Zhang; Guangdong Bai (USENIX Security Symposium, 2024)

DNN-GP: Diagnosing and Mitigating Model's Faults Using Latent Concepts. - Shuo Wang 012; Hongsheng Hu; Jiamin Chang; Benjamin Zi Hao Zhao; Qi Alfred Chen; Minhui Xue 001 (USENIX Security Symposium, 2024)

dp-promise: Differentially Private Diffusion Probabilistic Models for Image Synthesis. - Haichen Wang; Shuchao Pang; Zhigang Lu 001; Yihang Rao; Yongbin Zhou; Minhui Xue 001 (USENIX Security Symposium, 2024)

PPVR: A Privacy-Preserving Approach for User Behaviors in VR. - Ruoxi Sun 001; Hanwen Wang; Minhui Xue 001; Hsiang-Ting Chen (VR Workshops, 2024)

A Graph-Based Approach for Software Functionality Classification on the Web. - Yinhao Jiang; Michael Bewong; Arash Mahboubi; Sajal Halder; Md. Rafiqul Islam 001; Md Zahidul Islam 001; Ryan H. L. Ip; Praveen Gauravaram; Jason Xue 002 (WISE (5), 2024)

GEES: Enabling Location Privacy-Preserving Energy Saving in Multi-Access Edge Computing. - Ziqi Wang 008; Xiaoyu Xia 001; Minhui Xue 001; Ibrahim Khalil 001; Minghui Liwang; Xun Yi (WWW, 2024)

The Invisible Game on the Internet: A Case Study of Decoding Deceptive Patterns. - Zewei Shi; Ruoxi Sun 001; Jieshan Chen; Jiamou Sun; Minhui Xue 001 (WWW (Companion Volume), 2024)

Cardinality Counting in "Alcatraz": A Privacy-aware Federated Learning Approach. - Nan Wu; Xin Yuan 004; Shuo Wang 012; Hongsheng Hu; Minhui Xue 001 (WWW, 2024)

Privacy-Preserving and Fairness-Aware Federated Learning for Critical Infrastructure Protection and Resilience. - Yanjun Zhang; Ruoxi Sun 001; Liyue Shen; Guangdong Bai; Minhui Xue 001; Mark Huasong Meng; Xue Li 001; Ryan K. L. Ko; Surya Nepal (WWW, 2024)

Provably Unlearnable Examples. - Derui Wang; Minhui Xue 001; Bo Li 026; Seyit Camtepe; Liming Zhu 001 (CoRR, 2024)

Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems. - Yuxin Cao; Yumeng Zhu; Derui Wang; Sheng Wen; Minhui Xue 001; Jin Lu; Hao Ge (CoRR, 2024)

Reconstruction of Differentially Private Text Sanitization via Large Language Models. - Shuchao Pang; Zhigang Lu 001; Haichen Wang; Peng Fu; Yongbin Zhou; Minhui Xue 001; Bo Li 026 (CoRR, 2024)

AI-Compass: A Comprehensive and Effective Multi-module Testing Tool for AI Systems. - Zhiyu Zhu; Zhibo Jin; Hongsheng Hu; Minhui Xue 001; Ruoxi Sun 001; Seyit Camtepe; Praveen Gauravaram; Huaming Chen (CoRR, 2024)

SoK: Unifying Cybersecurity and Cybersafety of Multimodal Foundation Models with an Information Theory Approach. - Ruoxi Sun 001; Jiamin Chang; Hammond Pearce; Chaowei Xiao; Bo Li 026; Qi Wu 001; Surya Nepal; Minhui Xue 001 (CoRR, 2024)

Adaptive Rank, Reduced Forgetting: Knowledge Retention in Continual Learning Vision-Language Models with Dynamic Rank-Selective LoRA. - Haodong Lu 002; Chongyang Zhao 003; Minhui Xue 001; Lina Yao 001; Kristen Moore; Dong Gong (CoRR, 2024)

Private Synthetic Data Generation in Small Memory. - Rayne Holland; Seyit Camtepe; Chandra Thapa; Minhui (Jason) Xue (CoRR, 2024)

${ sf VeriDIP}$VeriDIP: Verifying Ownership of Deep Neural Networks Through Privacy Leakage Fingerprints. - Aoting Hu; Zhigang Lu 001; Renjie Xie; Minhui Xue 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Quantization Backdoors to Deep Learning Commercial Frameworks. - Hua Ma; Huming Qiu; Yansong Gao 001; Zhi Zhang 001; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Jiliang Zhang 002; Said F. Al-Sarawi; Derek Abbott (IEEE Trans. Dependable Secur. Comput., 2024)

The "Code" of Ethics: A Holistic Audit of AI Code Generators. - Wanlun Ma; Yiliao Song; Minhui Xue 001; Sheng Wen; Yang Xiang 001 (IEEE Trans. Dependable Secur. Comput., 2024)

NTD: Non-Transferability Enabled Deep Learning Backdoor Detection. - Yinshan Li; Hua Ma; Zhi Zhang 001; Yansong Gao 001; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Yifeng Zheng; Said F. Al-Sarawi; Derek Abbott (IEEE Trans. Inf. Forensics Secur., 2024)

The Invisible Game on the Internet: A Case Study of Decoding Deceptive Patterns. - Zewei Shi; Ruoxi Sun 001; Jieshan Chen; Jiamou Sun; Minhui Xue 001 (Zenodo, 2024)

Try to Poison My Deep Learning Data? Nowhere to Hide Your Trajectory Spectrum! - Yansong Gao 001; Huaibing Peng; Hua Ma; Zhi Zhang 001; Shuo Wang 012; Rayne Holland; Anmin Fu; Minhui Xue 001; Derek Abbott (NDSS, 2025)

The Philosopher's Stone: Trojaning Plugins of Large Language Models. - Tian Dong; Minhui Xue 001; Guoxing Chen; Rayne Holland; Yan Meng 001; Shaofeng Li 001; Zhen Liu 008; Haojin Zhu (NDSS, 2025)

Provably Unlearnable Data Examples. - Derui Wang; Minhui Xue 001; Bo Li 026; Seyit Camtepe; Liming Zhu 001 (NDSS, 2025)

Reinforcement Unlearning. - Dayong Ye; Tianqing Zhu; Congcong Zhu; Derui Wang; Kun Gao 006; Zewei Shi; Sheng Shen 005; Wanlei Zhou 001; Minhui Xue 001 (NDSS, 2025)

GAP-Diff: Protecting JPEG-Compressed Images from Diffusion-based Facial Customization. - Haotian Zhu; Shuchao Pang; Zhigang Lu 001; Yongbin Zhou; Minhui Xue 001 (NDSS, 2025)

Edge Unlearning is Not "on Edge"! an Adaptive Exact Unlearning System on Resource-Constrained Devices. - Xiaoyu Xia 001; Ziqi Wang 008; Ruoxi Sun 001; Bowen Liu 002; Ibrahim Khalil 001; Minhui Xue 001 (SP, 2025)

Codebreaker: Dynamic Extraction Attacks on Code Language Models. - Changzhou Han; Zehang Deng; Wanlun Ma; Xiaogang Zhu 001; Minhui Xue 001; Tianqing Zhu; Sheng Wen; Yang Xiang 001 (SP, 2025)

Modifier Unlocked: Jailbreaking Text-to-Image Models Through Prompts. - Shuofeng Liu; Mengyao Ma; Minhui Xue 001; Guangdong Bai (SP, 2025)

50 Shades of Deceptive Patterns: A Unified Taxonomy, Multimodal Detection, and Security Implications. - Zewei Shi; Ruoxi Sun 001; Jieshan Chen; Jiamou Sun; Minhui Xue 001; Yansong Gao 001; Feng Liu 003; Xingliang Yuan (WWW, 2025)

AI Model Modulation with Logits Redistribution. - Zihan Wang; Zhongkui Ma; Xinguo Feng; Zhiyang Mei; Ethan Ma; Derui Wang; Minhui Xue 001; Guangdong Bai (WWW, 2025)

Leakage-Resilient and Carbon-Neutral Aggregation Featuring the Federated AI-Enabled Critical Infrastructure. - Zehang Deng; Ruoxi Sun 001; Minhui Xue 001; Sheng Wen; Seyit Camtepe; Surya Nepal; Yang Xiang 001 (IEEE Trans. Dependable Secur. Comput., 2025)

On Security Weaknesses and Vulnerabilities in Deep Learning Systems. - Zhongzheng Lai; Huaming Chen; Ruoxi Sun 001; Yu Zhang 177; Minhui Xue 001; Dong Yuan 001 (IEEE Trans. Dependable Secur. Comput., 2025)

PriDM: Effective and Universal Private Data Recovery via Diffusion Models. - Shuchao Pang; Yihang Rao; Zhigang Lu 001; Haichen Wang; Yongbin Zhou; Minhui Xue 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Iterative Window Mean Filter: Thwarting Diffusion-Based Adversarial Purification. - Hanrui Wang 005; Ruoxi Sun 001; Cunjian Chen; Minhui Xue 001; Lay-Ki Soon; Shuo Wang 012; Zhe Jin (IEEE Trans. Dependable Secur. Comput., 2025)

BazzAFL: Moving Fuzzing Campaigns Towards Bugs via Grouping Bug-Oriented Seeds. - Kai Ye; Xiaogang Zhu 001; Xi Xiao; Sheng Wen; Minhui Xue 001; Yang Xiang 001 (IEEE Trans. Dependable Secur. Comput., 2025)

QUEEN: Query Unlearning Against Model Extraction. - Huajie Chen; Tianqing Zhu; Lefeng Zhang; Bo Liu 001; Derui Wang; Wanlei Zhou 001; Minhui Xue 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Decaf: Data Distribution Decompose Attack Against Federated Learning. - Zhiyang Dai; Yansong Gao 001; Chunyi Zhou; Anmin Fu; Zhi Zhang 001; Minhui Xue 001; Yifeng Zheng; Yuqing Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Hardening LLM Fine-Tuning: From Differentially Private Data Selection to Trustworthy Model Quantization. - Zehang Deng; Ruoxi Sun 001; Jason Xue 002; Wanlun Ma; Sheng Wen; Surya Nepal; Yang Xiang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

TrapNet: Model Inversion Defense via Trapdoor. - Wanlun Ma; Derui Wang; Yiliao Song; Minhui Xue 001; Sheng Wen; Zhengdao Li; Yang Xiang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

TruVRF: Toward Triple-Granularity Verification on Machine Unlearning. - Chunyi Zhou; Yansong Gao 001; Anmin Fu; Kai Chen 012; Zhi Zhang 001; Minhui Xue 001; Zhiyang Dai; Shouling Ji; Yuqing Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization. - Derui Wang; Kristen Moore; Diksha Goel; Minjune Kim; Gang Li 009; Yang Li 182; Robin Ram Mohan Doss; Minhui Xue 001; Bo Li 026; Seyit Camtepe; Liming Zhu 001 (Zenodo, 2025)

Bones of Contention: Exploring Query-Efficient Attacks Against Skeleton Recognition Systems. - Yuxin Cao; Kai Ye; Derui Wang; Minhui Xue 001; Hao Ge; Chenxiong Qian; Jin Song Dong (CoRR, 2025)

CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization. - Derui Wang; Kristen Moore; Diksha Goel; Minjune Kim; Gang Li 009; Yang Li 182; Robin Doss; Minhui Xue 001; Bo Li 026; Seyit Camtepe; Liming Zhu 001 (CoRR, 2025)

From Pixels to Trajectory: Universal Adversarial Example Detection via Temporal Imprints. - Yansong Gao 001; Huaibing Peng; Hua Ma; Zhiyang Dai; Shuo Wang 012; Hongsheng Hu; Anmin Fu; Minhui Xue 001 (CoRR, 2025)

Whispering Under the Eaves: Protecting User Privacy Against Commercial and LLM-powered Automatic Speech Recognition Systems. - Weifei Jin; Yuxin Cao; Junjie Su; Derui Wang; Yedi Zhang; Minhui (Jason) Xue; Jie Hao 001; Jin Song Dong; Yixian Yang (CoRR, 2025)

What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift. - Jiamin Chang; Haoyang Li; Hammond Pearce; Ruoxi Sun 001; Bo Li 026; Minhui Xue 001 (CoRR, 2025)

Continual Learning on CLIP via Incremental Prompt Tuning with Intrinsic Textual Anchors. - Haodong Lu 002; Xinyu Zhang 017; Kristen Moore; Minhui Xue 001; Lina Yao 001; Anton van den Hengel; Dong Gong (CoRR, 2025)

Private Synthetic Data Generation in Bounded Memory. - Rayne Holland; Seyit Camtepe; Chandra Thapa; Minhui Xue 001 (Proc. ACM Manag. Data, 2025)

Little By Little: Continual Learning via Self-Activated Sparse Mixture-of-Rank Adaptive Learning. - Haodong Lu 002; Chongyang Zhao 003; Minhui Xue 001; Lina Yao 001; Kristen Moore; Dong Gong (CoRR, 2025)