Integration of Static and Dynamic Code Stylometry Analysis for Programmer De-anonymization. - Ningfei Wang; Shouling Ji; Ting Wang 006 (AISec@CCS, 2018)

Interpretable Deep Learning under Fire. - Xinyang Zhang 001; Ningfei Wang; Shouling Ji; Hua Shen; Ting Wang 006 (CoRR, 2018)

Rendered Private: Making GLSL Execution Uniform to Prevent WebGL-based Browser Fingerprinting. - Shujiang Wu; Song Li 006; Yinzhi Cao; Ningfei Wang (USENIX Security Symposium, 2019)

Interpretable Deep Learning under Fire. - Xinyang Zhang 001; Ningfei Wang; Hua Shen; Shouling Ji; Xiapu Luo; Ting Wang 006 (USENIX Security Symposium, 2020)

Security of Deep Learning based Lane Keeping System under Physical-World Adversarial Attack. - Takami Sato; Junjie Shen 001; Ningfei Wang; Yunhan Jack Jia; Xue Lin 001; Qi Alfred Chen (CoRR, 2020)

Hold Tight and Never Let Go: Security of Deep Learning based Automated Lane Centering under Physical-World Attack. - Takami Sato; Junjie Shen 001; Ningfei Wang; Yunhan Jack Jia; Xue Lin 001; Qi Alfred Chen (CoRR, 2020)

Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks. - Yulong Cao; Ningfei Wang; Chaowei Xiao; Dawei Yang; Jin Fang; Ruigang Yang; Qi Alfred Chen; Mingyan Liu; Bo Li 026 (SP, 2021)

Demo: Security of Camera-based Perception for Autonomous Driving under Adversarial Attack. - Christopher DiPalma; Ningfei Wang; Takami Sato; Qi Alfred Chen (SP (Workshops), 2021)

Demo: Security of Deep Learning based Automated Lane Centering under Physical-World Attack. - Takami Sato; Junjie Shen 001; Ningfei Wang; Yunhan Jack Jia; Xue Lin 001; Qi Alfred Chen (SP (Workshops), 2021)

Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack. - Takami Sato; Junjie Shen 001; Ningfei Wang; Yunhan Jia; Xue Lin 001; Qi Alfred Chen (USENIX Security Symposium, 2021)

Poster: On the System-Level Effectiveness of Physical Object-Hiding Adversarial Attack in Autonomous Driving. - Ningfei Wang; Yunpeng Luo; Takami Sato; Kaidi Xu; Qi Alfred Chen (CCS, 2022)

SoK: On the Semantic AI Security in Autonomous Driving. - Junjie Shen 001; Ningfei Wang; Ziwen Wan; Yunpeng Luo; Takami Sato; Zhisheng Hu; Xinyang Zhang 001; Shengjian Guo; Zhenyu Zhong; Kang Li 001; Ziming Zhao 001; Chunming Qiao; et al. (CoRR, 2022)

Invited: Waving the Double-Edged Sword: Building Resilient CAVs with Edge and Cloud Computing. - Xiangguo Liu; Yunpeng Luo; Anthony Goeckner; Trishna Chakraborty; Ruochen Jiao; Ningfei Wang; Yixuan Wang 001; Takami Sato; Qi Alfred Chen; Qi Zhu 002 (DAC, 2023)

Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack. - Ningfei Wang; Yunpeng Luo; Takami Sato; Kaidi Xu; Qi Alfred Chen (ICCV, 2023)

WIP: Towards the Practicality of the Adversarial Attack on Object Tracking in Autonomous Driving. - Chen Ma; Ningfei Wang; Qi Alfred Chen; Chao Shen 001 (VehicleSec, 2023)

Intriguing Properties of Diffusion Models: A Large-Scale Dataset for Evaluating Natural Attack Capability in Text-to-Image Generative Models. - Takami Sato; Justin Yue; Nanze Chen; Ningfei Wang; Qi Alfred Chen (CoRR, 2023)

SlowTrack: Increasing the Latency of Camera-Based Perception in Autonomous Driving Using Adversarial Examples. - Chen Ma; Ningfei Wang; Qi Alfred Chen; Chao Shen 001 (AAAI, 2024)

Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models. - Takami Sato; Justin Yue; Nanze Chen; Ningfei Wang; Qi Alfred Chen (CVPR, 2024)

Towards Robustness Analysis of E-Commerce Ranking System. - Ningfei Wang; Yupin Huang; Han Cheng; Jiri Gesi; Xiaojie Wang 003; Vivek Mittal (WWW (Companion Volume), 2024)

Towards Robustness Analysis of E-Commerce Ranking System. - Ningfei Wang; Yupin Huang; Han Cheng; Jiri Gesi; Xiaojie Wang; Vivek Mittal (CoRR, 2024)

ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving. - Chen Ma; Ningfei Wang; Zhengyu Zhao 001; Qian Wang 002; Qi Alfred Chen; Chao Shen 001 (CoRR, 2024)

Revisiting Physical-World Adversarial Attack on Traffic Sign Recognition: A Commercial Systems Perspective. - Ningfei Wang; Shaoyuan Xie; Takami Sato; Yunpeng Luo; Kaidi Xu; Qi Alfred Chen (NDSS, 2025)