BDPL: A Boundary Differentially Private Layer Against Machine Learning Model Extraction Attacks. - Huadi Zheng; Qingqing Ye 001; Haibo Hu 001; Chengfang Fang; Jie Shi (ESORICS (1), 2019)

Mobile Data Collection and Analysis with Local Differential Privacy. - Ninghui Li; Qingqing Ye 001 (MDM, 2019)

PrivKV: Key-Value Data Collection with Local Differential Privacy. - Qingqing Ye 001; Haibo Hu 001; Xiaofeng Meng 001; Huadi Zheng (IEEE Symposium on Security and Privacy, 2019)

Local Differential Privacy: Tools, Challenges, and Opportunities. - Qingqing Ye 001; Haibo Hu 001 (WISE Workshops, 2019)

Towards Locally Differentially Private Generic Graph Metric Estimation. - Qingqing Ye 001; Haibo Hu 001; Man Ho Au; Xiaofeng Meng 001; Xiaokui Xiao (ICDE, 2020)

Practical Escrow Protocol for Bitcoin. - Xiao Yang 020; Wang Fat Lau; Qingqing Ye 001; Man Ho Au; Joseph K. Liu; Jacob Cheng (IEEE Trans. Inf. Forensics Secur., 2020)

Beyond Value Perturbation: Local Differential Privacy in the Temporal Setting. - Qingqing Ye 001; Haibo Hu 001; Ninghui Li; Xiaofeng Meng 001; Huadi Zheng; Haotian Yan (INFOCOM, 2021)

Collecting High-Dimensional and Correlation-Constrained Data with Local Differential Privacy. - Rong Du 001; Qingqing Ye 001; Yue Fu; Haibo Hu 001 (SECON, 2021)

Unified Proof of Work: Delegating and Solving Customized Computationally Bounded Problems in a Privacy-Preserving Way. - Yue Fu; Qingqing Ye 001; Rong Du 001; Haibo Hu 001 (APWeb/WAIM (3), 2022)

Utility Analysis and Enhancement of LDP Mechanisms in High-Dimensional Space. - Jiawei Duan; Qingqing Ye 001; Haibo Hu 001 (ICDE, 2022)

MExMI: Pool-based Active Model Extraction Crossover Membership Inference. - Yaxin Xiao; Qingqing Ye 001; Haibo Hu 001; Huadi Zheng; Chengfang Fang; Jie Shi (NeurIPS, 2022)

Stateful-CCSH: An Efficient Authentication Scheme for High-Resolution Video Surveillance System. - Li Tang; Qingqing Ye 001; Huadi Zheng; Haibo Hu 001; Ziyang Han; Ngai-Fong Law (IEEE Internet Things J., 2022)

VINCENT: Towards Efficient Exploratory Subgraph Search in Graph Databases. - Kai Huang 011; Qingqing Ye 001; Jing Zhao; Xi Zhao 006; Haibo Hu 001; Xiaofang Zhou 001 (Proc. VLDB Endow., 2022)

Protecting Decision Boundary of Machine Learning Model With Differentially Private Perturbation. - Huadi Zheng; Qingqing Ye 001; Haibo Hu 001; Chengfang Fang; Jie Shi (IEEE Trans. Dependable Secur. Comput., 2022)

Efficient Verifiably Encrypted ECDSA-Like Signatures and Their Applications. - Xiao Yang 020; Mengling Liu; Man Ho Au; Xiapu Luo; Qingqing Ye 001 (IEEE Trans. Inf. Forensics Secur., 2022)

LF-GDPR: A Framework for Estimating Graph Metrics With Local Differential Privacy. - Qingqing Ye 001; Haibo Hu 001; Man Ho Au; Xiaofeng Meng 001; Xiaokui Xiao (IEEE Trans. Knowl. Data Eng., 2022)

SPMAC: Scalable Prefix Verifiable Message Authentication Code for Internet of Things. - Haotian Yan; Haibo Hu 001; Qingqing Ye 001; Li Tang (IEEE Trans. Netw. Serv. Manag., 2022)

Privacy and efficiency guaranteed social subgraph matching. - Kai Huang 011; Haibo Hu 001; Shuigeng Zhou; Jihong Guan; Qingqing Ye 001; Xiaofang Zhou 001 (VLDB J., 2022)

CGP: Centroid-guided Graph Poisoning for Link Inference Attacks in Graph Neural Networks. - Haozhe Tian; Haibo Hu 001; Qingqing Ye 001 (IEEE Big Data, 2023)

Towards Defending Against Byzantine LDP Amplified Gain Attacks. - Yukun Yan; Qingqing Ye 001; Haibo Hu 001; Rui Chen 012; Qilong Han; Leixia Wang (DASFAA (1), 2023)

Differential Aggregation against General Colluding Attackers. - Rong Du 001; Qingqing Ye 001; Yue Fu; Haibo Hu 001; Jin Li 002; Chengfang Fang; Jie Shi (ICDE, 2023)

Stateful Switch: Optimized Time Series Release with Local Differential Privacy. - Qingqing Ye 001; Haibo Hu 001; Kai Huang 011; Man Ho Au; Qiao Xue (INFOCOM, 2023)

3DFed: Adaptive and Extensible Framework for Covert Backdoor Attack in Federated Learning. - Haoyang Li 018; Qingqing Ye 001; Haibo Hu 001; Jin Li 002; Leixia Wang; Chengfang Fang; Jie Shi (SP, 2023)

Efficient and lightweight indexing approach for multi-dimensional historical data in blockchain. - Bikash Chandra Singh; Qingqing Ye 001; Haibo Hu 001; Bin Xiao 001 (Future Gener. Comput. Syst., 2023)

OTKI-F: An efficient memory-secure multi-keyword fuzzy search protocol. - Ziyang Han; Qingqing Ye 001; Haibo Hu 001 (J. Comput. Secur., 2023)

TED: Towards Discovering Top-k Edge-Diversified Patterns in a Graph Database. - Kai Huang 011; Haibo Hu 001; Qingqing Ye 001; Kai Tian; Bolong Zheng; Xiaofang Zhou 001 (Proc. ACM Manag. Data, 2023)

Trajectory Data Collection with Local Differential Privacy. - Yuemin Zhang 001; Qingqing Ye 001; Rui Chen 012; Haibo Hu 001; Qilong Han (Proc. VLDB Endow., 2023)

ReFlat: A Robust Access Pattern Hiding Solution for General Cloud Query Processing Based on K-Isomorphism and Hardware Enclave. - Ziyang Han; Haibo Hu 001; Qingqing Ye 001 (IEEE Trans. Cloud Comput., 2023)

PrivKVM*: Revisiting Key-Value Statistics Estimation With Local Differential Privacy. - Qingqing Ye 001; Haibo Hu 001; Xiaofeng Meng 001; Huadi Zheng; Kai Huang 011; Chengfang Fang; Jie Shi (IEEE Trans. Dependable Secur. Comput., 2023)

Collaborative Sampling for Partial Multi-Dimensional Value Collection Under Local Differential Privacy. - Qiuyu Qian; Qingqing Ye 001; Haibo Hu 001; Kai Huang 011; Tom Tak-Lam Chan; Jin Li 002 (IEEE Trans. Inf. Forensics Secur., 2023)

Synthesizing Realistic Trajectory Data With Differential Privacy. - Xinyue Sun; Qingqing Ye 001; Haibo Hu 001; Yuandong Wang 002; Kai Huang 011; Tianyu Wo; Jie Xu 007 (IEEE Trans. Intell. Transp. Syst., 2023)

DDRM: A Continual Frequency Estimation Mechanism With Local Differential Privacy. - Qiao Xue; Qingqing Ye 001; Haibo Hu 001; Youwen Zhu; Jian Wang 038 (IEEE Trans. Knowl. Data Eng., 2023)

Partial message verification in fog-based industrial Internet of things. - Haotian Yan; Haibo Hu 001; Qingqing Ye 001 (Comput. Secur., 2023)

Secure Traffic Monitoring With Spatio-Temporal Metadata Protection Using Oblivious RAM. - Li Tang; Qingqing Ye 001; Haibo Hu 001; Man Ho Au (IEEE Trans. Intell. Transp. Syst., 2023)

LDP-Purifier: Defending against Poisoning Attacks in Local Differential Privacy. - Leixia Wang; Qingqing Ye 001; Haibo Hu 001; Xiaofeng Meng 001; Kai Huang 011 (DASFAA (4), 2024)

Interactive Trimming Against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach. - Yue Fu; Qingqing Ye 001; Rong Du 001; Haibo Hu 001 (ICDE, 2024)

FRESH: Towards Efficient Graph Queries in an Outsourced Graph. - Kai Huang 011; Yunqi Li; Qingqing Ye 001; Yao Tian; Xi Zhao 006; Yue Cui 001; Haibo Hu 001; Xiaofang Zhou 001 (ICDE, 2024)

PrivShape: Extracting Shapes in Time Series Under User-Level Local Differential Privacy. - Yulian Mao; Qingqing Ye 001; Haibo Hu 001; Qi Wang 012; Kai Huang 011 (ICDE, 2024)

Differentially Private Graph Neural Networks for Link Prediction. - Xun Ran; Qingqing Ye 001; Haibo Hu 001; Xin Huang 001; Jianliang Xu; Jie Fu 003 (ICDE, 2024)

LDPRecover: Recovering Frequencies from Poisoning Attacks Against Local Differential Privacy. - Xinyue Sun; Qingqing Ye 001; Haibo Hu 001; Jiawei Duan; Tianyu Wo; Jie Xu 007; Renyu Yang (ICDE, 2024)

Time-Specific Integrity Service in MQTT Protocol. - Haotian Yan; Haibo Hu 001; Qingqing Ye 001 (IPSN, 2024)

Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models. - Zi Liang; Haibo Hu 001; Qingqing Ye 001; Yaxin Xiao; Haoyang Li 018 (CoRR, 2024)

Alignment-Aware Model Extraction Attacks on Large Language Models. - Zi Liang; Qingqing Ye 001; Yanyun Wang 003; Sen Zhang 002; Yaxin Xiao; Ronghua Li; Jianliang Xu; Haibo Hu 001 (CoRR, 2024)

New Paradigm of Adversarial Training: Breaking Inherent Trade-Off between Accuracy and Robustness via Dummy Classes. - Yanyun Wang 003; Li Liu 036; Zi Liang; Qingqing Ye 001; Haibo Hu 001 (CoRR, 2024)

Differential Privacy for Time Series: A Survey. - Yulian Mao; Qingqing Ye 001; Qi Wang 012; Haibo Hu 001 (IEEE Data Eng. Bull., 2024)

DWSSA: Alleviating over-smoothness for deep Graph Neural Networks. - Qirong Zhang; Jin Li 032; Qingqing Ye 001; Yuxi Lin; Xinlong Chen; Yang-Geng Fu (Neural Networks, 2024)

A Federated Learning Framework Based on Differentially Private Continuous Data Release. - Jianping Cai; Ximeng Liu; Qingqing Ye 001; Yang Liu 165; Yuyang Wang (IEEE Trans. Dependable Secur. Comput., 2024)

Boosting Accuracy of Differentially Private Continuous Data Release for Federated Learning. - Jianping Cai; Qingqing Ye 001; Haibo Hu 001; Ximeng Liu; Yanggeng Fu (IEEE Trans. Inf. Forensics Secur., 2024)

RFTrack: Stealthy Location Inference and Tracking Attack on Wi-Fi Devices. - Ronghua Li; Haibo Hu 001; Qingqing Ye 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Generating Location Traces With Semantic- Constrained Local Differential Privacy. - Xinyue Sun; Qingqing Ye 001; Haibo Hu 001; Jiawei Duan; Qiao Xue; Tianyu Wo; Weizhe Zhang; Jie Xu 007 (IEEE Trans. Inf. Forensics Secur., 2024)

DeepMark: A Scalable and Robust Framework for DeepFake Video Detection. - Li Tang; Qingqing Ye 001; Haibo Hu 001; Qiao Xue; Yaxin Xiao; Jin Li 002 (ACM Trans. Priv. Secur., 2024)

LDPTube: Theoretical Utility Benchmark and Enhancement for LDP Mechanisms in High-Dimensional Space. - Jiawei Duan; Qingqing Ye 001; Haibo Hu 001; Xinyue Sun (IEEE Trans. Knowl. Data Eng., 2024)

PUTS: Privacy-Preserving and Utility-Enhancing Framework for Trajectory Synthesization. - Xinyue Sun; Qingqing Ye 001; Haibo Hu 001; Jiawei Duan; Qiao Xue; Tianyu Wo; Jie Xu 007 (IEEE Trans. Knowl. Data Eng., 2024)

DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release. - Jie Fu 003; Qingqing Ye 001; Haibo Hu 001; Zhili Chen; Lulu Wang; Kuncan Wang; Xun Ran (Proc. VLDB Endow., 2024)

TED$^+$+: Towards Discovering Top-k Edge-Diversified Patterns in a Graph Database. - Kai Huang 011; Yue Cui 001; Qingqing Ye 001; Yan Zhao 008; Xi Zhao 006; Yao Tian; Kai Zheng 001; Haibo Hu 001; Xiaofang Zhou 001 (IEEE Trans. Knowl. Data Eng., 2024)

Utility-Aware Time Series Data Release With Anomalies Under TLDP. - Yulian Mao; Qingqing Ye 001; Qi Wang 012; Haibo Hu 001 (IEEE Trans. Mob. Comput., 2024)

PriPL-Tree: Accurate Range Query for Arbitrary Distribution under Local Differential Privacy. - Leixia Wang; Qingqing Ye 001; Haibo Hu 001; Xiaofeng Meng 001 (Proc. VLDB Endow., 2024)

LDPGuard: Defenses Against Data Poisoning Attacks to Local Differential Privacy Protocols. - Kai Huang 011; Gaoya Ouyang; Qingqing Ye 001; Haibo Hu 001; Bolong Zheng; Xi Zhao 006; Ruiyuan Zhang; Xiaofang Zhou 001 (IEEE Trans. Knowl. Data Eng., 2024)

EPS$^{2}$2: Privacy Preserving Set-Valued Data Analysis in the Shuffle Model. - Leixia Wang; Qingqing Ye 001; Haibo Hu 001; Xiaofeng Meng 001 (IEEE Trans. Knowl. Data Eng., 2024)

A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks. - Haoyang Li 018; Li Bai 004; Qingqing Ye 001; Haibo Hu 001; Yaxin Xiao; Huadi Zheng; Jianliang Xu (AAAI, 2025)

Exploring Intrinsic Alignments Within Text Corpus. - Zi Liang; Pinghui Wang; Ruofei Zhang; Haibo Hu 001; Shuo Zhang; Qingqing Ye 001; Nuo Xu; Yaxin Xiao; Chen Zhang; Lizhen Cui (AAAI, 2025)

"Yes, My LoRD." Guiding Language Model Extraction with Locality Reinforced Distillation. - Zi Liang; Qingqing Ye 001; Yanyun Wang 003; Sen Zhang 002; Yaxin Xiao; Ronghua Li; Jianliang Xu; Haibo Hu 001 (ACL (1), 2025)

Dual Utilization of Perturbation for Stream Data Publication Under Local Differential Privacy. - Rong Du 001; Qingqing Ye 001; Yaxin Xiao; Liantong Yu; Yue Fu; Haibo Hu 001 (ICDE, 2025)

Analyzing and Optimizing Perturbation of DP-SGD Geometrically. - Jiawei Duan; Haibo Hu 001; Qingqing Ye 001; Xinyue Sun (ICDE, 2025)

Data Poisoning Attacks to Local Differential Privacy Protocols for Graphs. - Xi He; Kai Huang 011; Qingqing Ye 001; Haibo Hu 001 (ICDE, 2025)

PrivIM: Differentially Private Graph Neural Networks for Influence Maximization. - Renxuan Hou; Qingqing Ye 001; Xun Ran; Sen Zhang 002; Haibo Hu 001 (ICDE, 2025)

Multi-Class Item Mining Under Local Differential Privacy. - Yulian Mao; Qingqing Ye 001; Rong Du 001; Qi Wang 012; Kai Huang 011; Haibo Hu 001 (ICDE, 2025)

Structure-Preference Enabled Graph Embedding Generation Under Differential Privacy. - Sen Zhang 002; Qingqing Ye 001; Haibo Hu 001 (ICDE, 2025)

AdvSGM: Differentially Private Graph Learning via Adversarial Skip-Gram Model. - Sen Zhang 002; Qingqing Ye 001; Haibo Hu 001; Jianliang Xu (ICDE, 2025)

PrivDPR: Synthetic Graph Publishing with Deep PageRank under Differential Privacy. - Sen Zhang 002; Haibo Hu 001; Qingqing Ye 001; Jianliang Xu (KDD (1), 2025)

From Randomized Response to Randomized Index: Answering Subset Counting Queries with Local Differential Privacy. - Qingqing Ye 001; Liantong Yu; Kai Huang 011; Xiaokui Xiao; Weiran Liu; Haibo Hu 001 (SP, 2025)

FUNU: Boosting Machine Unlearning Efficiency by Filtering Unnecessary Unlearning. - Zitong Li; Qingqing Ye 001; Haibo Hu 001 (WWW, 2025)

MER-Inspector: Assessing Model Extraction Risks from An Attack-Agnostic Perspective. - Xinwei Zhang 002; Haibo Hu 001; Qingqing Ye 001; Li Bai 004; Huadi Zheng (WWW, 2025)

Secure bi-attribute index: Batch membership tests over the non-sensitive attribute. - Yue Fu; Qingqing Ye 001; Rong Du 001; Haibo Hu 001 (Comput. Secur., 2025)

Multi-hop sanitizable signature for collaborative edge computing. - Haotian Yan; Haibo Hu 001; Qingqing Ye 001; Jianliang Xu (J. Comput. Secur., 2025)

RMR: A Relative Membership Risk Measure for Machine Learning Models. - Li Bai 004; Haibo Hu 001; Qingqing Ye 001; Jianliang Xu; Jin Li 002; Chengfang Fang; Jie Shi (IEEE Trans. Dependable Secur. Comput., 2025)

Top-k Discovery Under Local Differential Privacy: An Adaptive Sampling Approach. - Rong Du 001; Qingqing Ye 001; Yue Fu; Haibo Hu 001; Kai Huang 011 (IEEE Trans. Dependable Secur. Comput., 2025)

Unlocking High-Fidelity Learning: Towards Neuron-Grained Model Extraction. - Yaxin Xiao; Haibo Hu 001; Qingqing Ye 001; Li Tang; Zi Liang; Huadi Zheng (IEEE Trans. Dependable Secur. Comput., 2025)

ProVFL: Property Inference Attacks Against Vertical Federated Learning. - Li Bai 004; Xinwei Zhang 002; Sen Zhang 002; Qingqing Ye 001; Haibo Hu 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Enhancing Federated Learning With Differentially Private Continuous Data Release via k-Ary Trees. - Jianping Cai; Tianqing Zhu; Qingqing Ye 001; Zuobin Ying; Wanlei Zhou 001 (IEEE Trans. Inf. Forensics Secur., 2025)

DPDeno: A Post-Processing Framework for Releasing Differentially Private Spatio-Temporal Mobility Features. - Xinyue Sun; Xiaoyu Liu; Qingqing Ye 001; Haibo Hu 001; Renyu Yang; Hui He; Weizhe Zhang (IEEE Trans. Inf. Forensics Secur., 2025)

Fine-tuning is Not Fine: Mitigating Backdoor Attacks in GNNs with Limited Clean Data. - Jiale Zhang 001; Bosen Rao; Chengcheng Zhu; Xiaobing Sun 001; Qingming Li; Haibo Hu 001; Xiapu Luo; Qingqing Ye 001; Shouling Ji (CoRR, 2025)

Federated Heavy Hitter Analytics with Local Differential Privacy. - Yuemin Zhang 001; Qingqing Ye 001; Haibo Hu 001 (Proc. ACM Manag. Data, 2025)

Privacy for Free: Leveraging Local Differential Privacy Perturbed Data from Multiple Services. - Rong Du 001; Qingqing Ye 001; Yue Fu; Haibo Hu 001 (Proc. VLDB Endow., 2025)

Technical Report: Full Version of Analyzing and Optimizing Perturbation of DP-SGD Geometrically. - Jiawei Duan; Haibo Hu 001; Qingqing Ye 001; Xinyue Sun (CoRR, 2025)

Membership Inference Attacks and Defenses in Federated Learning: A Survey. - Li Bai 004; Haibo Hu 001; Qingqing Ye 001; Haoyang Li 018; Leixia Wang; Jianliang Xu (ACM Comput. Surv., 2025)

A Novel Modeling Approach for Cumulative Belief Rule-Base With Joint Optimization and Rule Synthesis. - Long-Hao Yang; Dan-Ning Yu; Fei-Fei Ye; Haibo Hu 001; Qingqing Ye 001 (IEEE Trans. Syst. Man Cybern. Syst., 2025)

OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models. - Xiaoyu Xu; Minxin Du; Qingqing Ye 001; Haibo Hu 001 (CoRR, 2025)

Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks? - Zi Liang; Haibo Hu 001; Qingqing Ye 001; Yaxin Xiao; Ronghua Li (CoRR, 2025)

Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs. - Xiaoyu Xu; Xiang Yue; Yang Liu 165; Qingqing Ye 001; Haibo Hu 001; Minxin Du (CoRR, 2025)

PrivRM: A Framework for Range Mean Estimation under Local Differential Privacy. - Liantong Yu; Qingqing Ye 001; Rong Du 001 (Proc. ACM Manag. Data, 2025)

How Much Do Large Language Model Cheat on Evaluation? Benchmarking Overestimation under the One-Time-Pad-Based Framework. - Zi Liang; Liantong Yu; Shiyu Zhang; Qingqing Ye 001; Haibo Hu 001 (CoRR, 2025)

Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy. - Yaxin Xiao; Qingqing Ye 001; Li Hu; Huadi Zheng; Haibo Hu 001; Zi Liang; Haoyang Li 018; Yijie Jiao (CoRR, 2025)

WiFinger: Fingerprinting Noisy IoT Event Traffic Using Packet-level Sequence Matching. - Ronghua Li; Shinan Liu; Haibo Hu 001; Qingqing Ye 001; Nick Feamster (CoRR, 2025)

A Survey on Securing Image-Centric Edge Intelligence. - Li Tang; Haibo Hu 001; Moncef Gabbouj; Qingqing Ye 001; Yang Xiang 001; Jin Li 002; Lang Li (ACM Trans. Multim. Comput. Commun. Appl., 2025)

Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Data. - Zi Liang; Qingqing Ye 001; Xiang-Yang Alex Liu; Yanyun Wang 003; Jianliang Xu; Haibo Hu 001 (CoRR, 2025)

Decision Potential Surface: A Theoretical and Practical Approximation of LLM's Decision Boundary. - Zi Liang; Zhiyao Wu; Haoyang Shang; Yulin Jin; Qingqing Ye 001; Huadi Zheng; Peizhao Hu; Haibo Hu 001 (CoRR, 2025)

Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts. - Li Bai 004; Qingqing Ye 001; Xinwei Zhang 002; Sen Zhang 002; Zi Liang; Jianliang Xu; Haibo Hu 001 (CoRR, 2025)

Analyzing and Enhancing LDP Perturbation Mechanisms in Federated Learning. - Jiawei Duan; Qingqing Ye 001; Haibo Hu 001; Xinyue Sun (IEEE Trans. Knowl. Data Eng., 2025)

GeoRecover: Recovery From Poisoning Attacks for LDP-Enabled Spatial Density Aggregation. - Xinyue Sun; Qingqing Ye 001; Haibo Hu 001; Jiawei Duan; Hui He; Weizhe Zhang (IEEE Trans. Knowl. Data Eng., 2025)