HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks. - Peizhuo Lv; Pan Li; Shengzhi Zhang; Kai Chen 012; Ruigang Liang; Yue Zhao 018; Yingjiu Li (CoRR, 2021)

DBIA: Data-free Backdoor Injection Attack against Transformer Networks. - Peizhuo Lv; Hualong Ma; Jiachen Zhou; Ruigang Liang; Kai Chen 012; Shengzhi Zhang; Yunfei Yang 001 (CoRR, 2021)

A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information. - Pan Li; Peizhuo Lv; Shenchen Zhu; Ruigang Liang; Kai Chen 012 (CoRR, 2022)

Invisible Backdoor Attacks Using Data Poisoning in Frequency Domain. - Chang Yue; Peizhuo Lv; Ruigang Liang; Kai Chen 012 (ECAI, 2023)

DBIA: Data-Free Backdoor Attack Against Transformer Networks. - Peizhuo Lv; Hualong Ma; Jiachen Zhou; Ruigang Liang; Kai Chen 012; Shengzhi Zhang; Yunfei Yang 001 (ICME, 2023)

A Data-free Backdoor Injection Approach in Neural Networks. - Peizhuo Lv; Chang Yue; Ruigang Liang; Yunfei Yang 001; Shengzhi Zhang; Hualong Ma; Kai Chen 012 (USENIX Security Symposium, 2023)

Aliasing Backdoor Attacks on Pre-trained Models. - Cheng'an Wei; Yeonjoon Lee; Kai Chen 012; Guozhu Meng; Peizhuo Lv (USENIX Security Symposium, 2023)

A Robustness-Assured White-Box Watermark in Neural Networks. - Peizhuo Lv; Pan Li; Shengzhi Zhang; Kai Chen 012; Ruigang Liang; Hualong Ma; Yue Zhao 018; Yingjiu Li (IEEE Trans. Dependable Secur. Comput., 2023)

DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models. - Jiachen Zhou; Peizhuo Lv; Yibing Lan; Guozhu Meng; Kai Chen 012; Hualong Ma (AAAI, 2024)

SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-Supervised Learning. - Peizhuo Lv; Pan Li; Shenchen Zhu; Shengzhi Zhang; Kai Chen 012; Ruigang Liang; Chang Yue; Fan Xiang; Yuling Cai; Hualong Ma; Yingjun Zhang; Guozhu Meng (NDSS, 2024)

KGDist: A Prompt-Based Distillation Attack against LMs Augmented with Knowledge Graphs. - Hualong Ma; Peizhuo Lv; Kai Chen 012; Jiachen Zhou (RAID, 2024)

MEA-Defender: A Robust Watermark against Model Extraction Attack. - Peizhuo Lv; Hualong Ma; Kai Chen 012; Jiachen Zhou; Shengzhi Zhang; Ruigang Liang; Shenchen Zhu; Pan Li; Yingjun Zhang (SP, 2024)

PersonaMark: Personalized LLM watermarking for model protection and user attribution. - Yuehan Zhang; Peizhuo Lv; Yinpeng Liu; Yongqiang Ma; Wei Lu 019; Xiaofeng Wang 006; Xiaozhong Liu; Jiawei Liu 002 (CoRR, 2024)

RepeatLeakage: Leak Prompts from Repeating as Large Language Model Is a Good Repeater. - Yu Peng; Lijie Zhang; Peizhuo Lv; Kai Chen (AAAI, 2025)

A Model Stealing Attack Against Multi-Exit Networks. - Pan Li; Peizhuo Lv; Kai Chen 012; Shengzhi Zhang; Yuling Cai; Fan Xiang (ICASSP, 2025)

RAG-WM: An Efficient Black-Box Watermarking Approach for Retrieval-Augmented Generation of Large Language Models. - Peizhuo Lv; Mengjie Sun; Hao Wang 034; Xiaofeng Wang 006; Shengzhi Zhang; Yuxuan Chen; Kai Chen 012; Limin Sun 001 (CoRR, 2025)

LoRAGuard: An Effective Black-box Watermarking Approach for LoRAs. - Peizhuo Lv; Yiran Xiahou; Congyi Li; Mengjie Sun; Shengzhi Zhang; Kai Chen 012; Yingjun Zhang (CoRR, 2025)

Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution. - Zhicheng Zhang; Peizhuo Lv; Mengke Wan; Jiang Fang; Diandian Guo; Yezeng Chen; Yinlong Liu; Wei Ma; Jiyan Sun; Liru Geng (CoRR, 2025)