Multi-view semi-supervised web image classification via co-graph. - Youtian Du; Qian Li 024; Zhongmin Cai; Xiaohong Guan (Neurocomputing, 2013)

Stochastic Batch Augmentation with An Effective Distilled Dynamic Soft Label Regularizer. - Qian Li 024; Qingyuan Hu; Yong Qi; Saiyu Qi; Jie Ma 001; Jian Zhang (IJCAI, 2020)

Multi-level word features based on CNN for fake news detection in cultural communication. - Qian Li 024; Qingyuan Hu; Youshui Lu; Yue Yang; Jingxian Cheng (Pers. Ubiquitous Comput., 2020)

Semi-supervised two-phase familial analysis of Android malware with normalized graph embedding. - Qian Li 024; Qingyuan Hu; Yong Qi; Saiyu Qi; Xinxing Liu; Pengfei Gao (Knowl. Based Syst., 2021)

Adversarial Adaptive Neighborhood With Feature Importance-Aware Convex Interpolation. - Qian Li 024; Yong Qi; Qingyuan Hu; Saiyu Qi; Yun Lin 001; Jin Song Dong (IEEE Trans. Inf. Forensics Secur., 2021)

FLMJR: Improving Robustness of Federated Learning via Model Stability. - Qi Guo; Di Wu 062; Yong Qi; Saiyu Qi; Qian Li 024 (ESORICS (3), 2022)

Stochastic Ghost Batch for Self-distillation with Dynamic Soft Label. - Qian Li 024; Qingyuan Hu; Saiyu Qi; Yong Qi; Di Wu 062; Yun Lin 001; Jin Song Dong (Knowl. Based Syst., 2022)

Correction to: Multi-level word features based on CNN for fake news detection in cultural communication. - Qingyuan Hu; Qian Li 024; Youshui Lu; Yue Yang; Jingxian Cheng (Pers. Ubiquitous Comput., 2022)

End-to-end Face-swapping via Adaptive Latent Representation Learning. - Chenhao Lin; Pengbin Hu; Chao Shen 001; Qian Li 024 (CoRR, 2023)

Quantization Aware Attack: Enhancing the Transferability of Adversarial Attacks across Target Models with Different Quantization Bitwidths. - Yulong Yang 002; Chenhao Lin; Qian Li 024; Chao Shen 001; Dawei Zhou 004; Nannan Wang 001; Tongliang Liu (CoRR, 2023)

Hard Adversarial Example Mining for Improving Robust Fairness. - Chenhao Lin; Xiang Ji; Yulong Yang 002; Qian Li 024; Chao Shen 001; Run Wang 001; Liming Fang 001 (CoRR, 2023)

Exploiting Facial Relationships and Feature Aggregation for Multi-Face Forgery Detection. - Chenhao Lin; Fangbin Yi; Hang Wang; Qian Li 024; Jingyi Deng; Chao Shen 001 (CoRR, 2023)

Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning. - Yulong Yang 002; Chenhao Lin; Xiang Ji; Qiwei Tian; Qian Li 024; Hongshan Yang; Zhibo Wang 001; Chao Shen 001 (CoRR, 2023)

Collapse-Oriented Adversarial Training with Triplet Decoupling for Robust Image Retrieval. - Qiwei Tian; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001 (CoRR, 2023)

Understanding and defending against White-box membership inference attack in deep learning. - Di Wu 062; Saiyu Qi; Yong Qi; Qian Li 024; Bowen Cai 004; Qi Guo; Jingxian Cheng (Knowl. Based Syst., 2023)

Revisiting Gradient Regularization: Inject Robust Saliency-Aware Weight Bias for Adversarial Defense. - Qian Li 024; Qingyuan Hu; Chenhao Lin; Di Wu 062; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2023)

Sensitive region-aware black-box adversarial attacks. - Chenhao Lin; Sicong Han; Jiongli Zhu; Qian Li 024; Chao Shen 001; Youwei Zhang; Xiaohong Guan (Inf. Sci., 2023)

FedMCSA: Personalized federated learning via model components self-attention. - Qi Guo; Yong Qi; Saiyu Qi; Di Wu 062; Qian Li 024 (Neurocomputing, 2023)

Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving. - Junhao Zheng; Chenhao Lin; Jiahao Sun; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (CVPR, 2024)

Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrieval. - Qiwei Tian; Chenhao Lin; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (ICML, 2024)

Fairness in machine learning: definition, testing, debugging, and application. - Xuanqi Gao; Chao Shen 001; Weipeng Jiang; Chenhao Lin; Qian Li 024; Qian Wang 002; Qi Li 002; Xiaohong Guan (Sci. China Inf. Sci., 2024)

A Survey on Adversarial Machine Learning for Code Data: Realistic Threats, Countermeasures, and Interpretations. - Yulong Yang 002; Haoran Fan; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001; Xiaohong Guan (CoRR, 2024)

Towards Gradient-Based Saliency Consensus Training for Adversarial Robustness. - Qian Li 024; Chao Shen 001; Qingyuan Hu; Chenhao Lin; Xiang Ji; Saiyu Qi (IEEE Trans. Dependable Secur. Comput., 2024)

LESSON: Multi-Label Adversarial False Data Injection Attack for Deep Learning Locational Detection. - Jiwei Tian; Chao Shen 001; Buhong Wang; Xiaofang Xia; Meng Zhang 011; Chenhao Lin; Qian Li 024 (IEEE Trans. Dependable Secur. Comput., 2024)

Truth: A Blockchain-Aided Secure Reputation System With Genuine Feedbacks. - Saiyu Qi; Yue Li; Wei Wei 006; Qian Li 024; Qiao Ke; Yong Qi (IEEE Trans. Engineering Management, 2024)

Attention-SA: Exploiting Model-Approximated Data Semantics for Adversarial Attack. - Qian Li 024; Qingyuan Hu; Haoran Fan; Chenhao Lin; Chao Shen 001; Libing Wu (IEEE Trans. Inf. Forensics Secur., 2024)

Exploiting Facial Relationships and Feature Aggregation for Multi-Face Forgery Detection. - Chenhao Lin; Fangbin Yi; Hang Wang; Jingyi Deng; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Exploiting the Adversarial Example Vulnerability of Transfer Learning of Source Code. - Yulong Yang 002; Haoran Fan; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantization. - Yulong Yang 002; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Haoran Fan; Dawei Zhou 004; Nannan Wang 001; Tongliang Liu; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Robust Adversarial Defenses in Federated Learning: Exploring the Impact of Data Heterogeneity. - Qian Li 024; Di Wu 062; Dawei Zhou 004; Chenhao Lin; Shuai Liu 016; Cong Wang 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Hard Adversarial Example Mining for Improving Robust Fairness. - Chenhao Lin; Xiang Ji; Yulong Yang 002; Qian Li 024; Zhengyu Zhao 001; Zhe Peng; Run Wang 001; Liming Fang 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Prediction Inconsistency Helps Achieve Generalizable Detection of Adversarial Examples. - Sicong Han; Chenhao Lin; Zhengyu Zhao 001; Xiyuan Wang; Xinlei He 001; Qian Li 024; Cong Wang 001; Qian Wang 002; Chao Shen 001 (CoRR, 2025)

Adversarial Video Promotion Against Text-to-Video Retrieval. - Qiwei Tian; Chenhao Lin; Zhengyu Zhao 001; Qian Li 024; Shuai Liu 016; Chao Shen 001 (CoRR, 2025)