Adversarial Camouflage: Hiding Physical-World Attacks With Natural Styles. - Ranjie Duan; Xingjun Ma; Yisen Wang 001; James Bailey 001; A. Kai Qin; Yun Yang 001 (CVPR, 2020)

Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink. - Ranjie Duan; Xiaofeng Mao; A. Kai Qin; Yuefeng Chen; Shaokai Ye; Yuan He 011; Yun Yang 001 (CVPR, 2021)

AdvDrop: Adversarial Attack to DNNs by Dropping Information. - Ranjie Duan; Yuefeng Chen; Dantong Niu; Yun Yang 001; A. Kai Qin; Yuan He 011 (ICCV, 2021)

Towards Robust Vision Transformer. - Xiaofeng Mao; Gege Qi; Yuefeng Chen; Xiaodan Li; Ranjie Duan; Shaokai Ye; Yuan He 011; Hui Xue 001 (CVPR, 2022)

Enhance the Visual Representation via Discrete Adversarial Training. - Xiaofeng Mao; Yuefeng Chen; Ranjie Duan; Yao Zhu; Gege Qi; Shaokai Ye; Xiaodan Li; Rong Zhang 006; Hui Xue 001 (NeurIPS, 2022)

Inequality phenomenon in l∞-adversarial training, and its unrealized threats. - Ranjie Duan; Yuefeng Chen; Yao Zhu; Xiaojun Jia; Rong Zhang 006; Hui Xue 001 (ICLR, 2023)

Robust Automatic Speech Recognition via WavAugment Guided Phoneme Adversarial Training. - Gege Qi; Yuefeng Chen; Xiaofeng Mao; Xiaojun Jia; Ranjie Duan; Rong Zhang 006; Hui Xue 001 (INTERSPEECH, 2023)

Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging. - Xiaojun Jia; Yuefeng Chen; Xiaofeng Mao; Ranjie Duan; Jindong Gu; Rong Zhang 006; Hui Xue 001; Xiaochun Cao (CoRR, 2023)

Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillation. - Shiji Zhao; Ranjie Duan; Xizhe Wang; Xingxing Wei (NeurIPS, 2024)

RT-Attack: Jailbreaking Text-to-Image Models via Random Token. - Sensen Gao; Xiaojun Jia; Yihao Huang 001; Ranjie Duan; Jindong Gu; Yang Liu 003; Qing Guo 005 (CoRR, 2024)

MRJ-Agent: An Effective Jailbreak Agent for Multi-Round Dialogue. - Fengxiang Wang; Ranjie Duan; Peng Xiao; Xiaojun Jia; Yuefeng Chen; Chongwen Wang; Jialing Tao; Hang Su 006; Jun Zhu 001; Hui Xue 001 (CoRR, 2024)

PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization. - Ruoxi Cheng; Yizhong Ding; Shuirong Cao; Ranjie Duan; Xiaoshuang Jia; Shaowei Yuan; Zhiqiang Wang; Xiaojun Jia (CoRR, 2024)

Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models. - Ma Teng; Xiaojun Jia; Ranjie Duan; Li Xinfeng; Yihao Huang 001; Chu Zhixuan; Yang Liu 003; Wenqi Ren (CoRR, 2024)

Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging. - Xiaojun Jia; Yuefeng Chen; Xiaofeng Mao; Ranjie Duan; Jindong Gu; Rong Zhang 006; Hui Xue 001; Yang Liu 003; Xiaochun Cao (IEEE Trans. Inf. Forensics Secur., 2024)

DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Models. - Jianyu Liu; Hangyu Guo; Ranjie Duan; Xingyuan Bu; Yancheng He; Shilong Li; Hui Huang 021; Jiaheng Liu; Yucheng Wang; Chenchen Jing; Xingwei Qu; Xiao Zhang; et al. (NAACL (Long Papers), 2025)

RobustPrompt: Learning to defend against adversarial attacks with adaptive visual prompts. - Chang Liu 077; Wenzhao Xiang 001; Yinpeng Dong; Xingxing Zhang 001; Liyuan Wang; Ranjie Duan; Shibao Zheng; Hang Su 006 (Pattern Recognit. Lett., 2025)

Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency. - Shiji Zhao; Ranjie Duan; Fengxiang Wang; Chi Chen; Caixin Kang; Jialing Tao; YueFeng Chen; Hui Xue 001; Xingxing Wei (CoRR, 2025)

Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink. - Yining Wang; Mi Zhang 001; Junjie Sun; Chenyue Wang; Min Yang 002; Hui Xue 001; Jialing Tao; Ranjie Duan; Jiexi Liu 005 (CoRR, 2025)

STAIR: Improving Safety Alignment with Introspective Reasoning. - Yichi Zhang; Siyuan Zhang; Yao Huang; Zeyu Xia; Zhengwei Fang; Xiao Yang; Ranjie Duan; Dong Yan; Yinpeng Dong; Jun Zhu (CoRR, 2025)

DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Models. - Jianyu Liu; Hangyu Guo; Ranjie Duan; Xingyuan Bu; Yancheng He; Shilong Li; Hui Huang 021; Jiaheng Liu; Yucheng Wang; Chenchen Jing; Xingwei Qu; Xiao Zhang; et al. (CoRR, 2025)

Enhancing Adversarial Robustness of Vision Language Models via Adversarial Mixture Prompt Tuning. - Shiji Zhao; Qihui Zhu; Shukun Xiong; Shouwei Ruan; Yize Fan; Ranjie Duan; Qing Guo; Xingxing Wei (CoRR, 2025)

The Eye of Sherlock Holmes: Uncovering User Private Attribute Profiling via Vision-Language Model Agentic Framework. - Feiran Liu; Yuzhe Zhang; Xinyi Huang; Yinan Peng; Xinfeng Li; Lixu Wang; Yutong Shen; Ranjie Duan; Simeng Qin; Xiaojun Jia; Qingsong Wen; Wei Dong (CoRR, 2025)

Towards Class-wise Fair Adversarial Training via Anti-Bias Soft Label Distillation. - Shiji Zhao; Chi Chen; Ranjie Duan; Xizhe Wang; Xingxing Wei (CoRR, 2025)