Towards Reactive Acoustic Jamming for Personal Voice Assistants. - Peng Cheng 007; Ibrahim Ethem Bagci; Jeff Yan; Utz Roedig (MPS@CCS, 2018)

Smart Speaker Privacy Control - Acoustic Tagging for Personal Voice Assistants. - Peng Cheng 007; Ibrahim Ethem Bagci; Jeff Yan; Utz Roedig (IEEE Symposium on Security and Privacy Workshops, 2019)

SonarSnoop: active acoustic side-channel attacks. - Peng Cheng 007; Ibrahim Ethem Bagci; Utz Roedig; Jeff Yan (Int. J. Inf. Sec., 2020)

Acoustic-channel attack and defence methods for personal voice assistants. - Peng Cheng 007 (2020)

Adversarial Command Detection Using Parallel Speech Recognition Systems. - Peng Cheng 007; M. S. Arun Sankar 001; Ibrahim Ethem Bagci; Utz Roedig (CyberICPS/SECPRE/ADIoT/SPOSE/CPS4CIP/CDT&SECOMANE@ESORICS, 2021)

Personal Voice Assistant Security and Privacy - A Survey. - Peng Cheng 007; Utz Roedig (Proc. IEEE, 2022)

InfoMasker: Preventing Eavesdropping Using Phoneme-Based Noise. - Peng Huang; Yao Wei 002; Peng Cheng 007; Zhongjie Ba; Li Lu 008; Feng Lin 004; Fan Zhang 010; Kui Ren 001 (NDSS, 2023)

Transferring Audio Deepfake Detection Capability across Languages. - Zhongjie Ba; Qing Wen; Peng Cheng 007; Yuwei Wang 009; Feng Lin 004; Li Lu 008; Zhenguang Liu (WWW, 2023)

Masked Diffusion Models are Fast Learners. - Jiachen Lei; Peng Cheng 007; Zhongjie Ba; Kui Ren 001 (CoRR, 2023)

SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution. - Zhongjie Ba; Jieming Zhong; Jiachen Lei; Peng Cheng 007; Qinglong Wang 003; Zhan Qin; Zhibo Wang 001; Kui Ren 001 (CCS, 2024)

ALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features. - Peng Cheng 007; Yuwei Wang 009; Peng Huang; Zhongjie Ba; Xiaodong Lin 001; Feng Lin 004; Li Lu 008; Kui Ren 001 (SP, 2024)

UniAP: Protecting Speech Privacy With Non-Targeted Universal Adversarial Perturbations. - Peng Cheng 007; Yuexin Wu; Yuan Hong 001; Zhongjie Ba; Feng Lin 004; Li Lu 008; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Indelible "Footprints" of Inaudible Command Injection. - Zhongjie Ba; Bin Gong; Yuwei Wang 009; Yuxuan Liu; Peng Cheng 007; Feng Lin 004; Li Lu 008; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Phoneme-Based Proactive Anti-Eavesdropping With Controlled Recording Privilege. - Peng Huang; Yao Wei 002; Peng Cheng 007; Zhongjie Ba; Li Lu 008; Feng Lin 004; Yang Wang; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation. - Zhongjie Ba; Yitao Zhang; Peng Cheng 007; Bin Gong; Xinyu Zhang 016; Qinglong Wang 003; Kui Ren 001 (CoRR, 2025)

Imperceptible but Forgeable: Practical Invisible Watermark Forgery via Diffusion Models. - Ziping Dong; Chao Shuai; Zhongjie Ba; Peng Cheng 007; Zhan Qin; Qinglong Wang 003; Kui Ren 001 (CoRR, 2025)

ContextCache: Context-Aware Semantic Cache for Multi-Turn Queries in Large Language Models. - Jianxin Yan; Wangze Ni; Lei Chen; Xuemin Lin 001; Peng Cheng 007; Zhan Qin; Kui Ren 001 (CoRR, 2025)