CloudBI: Practical Privacy-Preserving Outsourcing of Biometric Identification in the Cloud. - Qian Wang 002; Shengshan Hu; Kui Ren 001; Meiqi He; Minxin Du; Zhibo Wang 001 (ESORICS (2), 2015)

SecHOG: Privacy-Preserving Outsourcing Computation of Histogram of Oriented Gradients in the Cloud. - Qian Wang 002; Jingjun Wang; Shengshan Hu; Qin Zou 001; Kui Ren 001 (AsiaCCS, 2016)

Secure Surfing: Privacy-Preserving Speeded-Up Robust Feature Extractor. - Qian Wang 002; Shengshan Hu; Jingjun Wang; Kui Ren 001 (ICDCS, 2016)

Catch me in the dark: Effective privacy-preserving outsourcing of feature extractions over image data. - Qian Wang 002; Shengshan Hu; Kui Ren 001; Jingjun Wang; Zhibo Wang 001; Minxin Du (INFOCOM, 2016)

Securing Fast Learning! Ridge Regression over Encrypted Big Data. - Shengshan Hu; Qian Wang 002; Jingjun Wang; Sherman S. M. Chow; Qin Zou 001 (Trustcom/BigDataSE/ISPA, 2016)

Securing SIFT: Privacy-Preserving Outsourcing Computation of Feature Extractions Over Encrypted Image Data. - Shengshan Hu; Qian Wang 002; Jingjun Wang; Zhan Qin; Kui Ren 001 (IEEE Trans. Image Process., 2016)

Jamming-Resistant Multiradio Multichannel Opportunistic Spectrum Access in Cognitive Radio Networks. - Qian Wang 002; Kui Ren 001; Peng Ning; Shengshan Hu (IEEE Trans. Veh. Technol., 2016)

Learning privately: Privacy-preserving canonical correlation analysis for cross-media retrieval. - Qian Wang 002; Shengshan Hu; Minxin Du; Jingjun Wang; Kui Ren 001 (INFOCOM, 2017)

Privacy-Preserving Outsourced Feature Extractions in the Cloud: A Survey. - Jingjun Wang; Shengshan Hu; Qian Wang 002; Yutao Ma (IEEE Netw., 2017)

Searching an Encrypted Cloud Meets Blockchain: A Decentralized, Reliable and Fair Realization. - Shengshan Hu; Chengjun Cai; Qian Wang 002; Cong Wang 001; Xiangyang Luo 001; Kui Ren 001 (INFOCOM, 2018)

InPrivate Digging: Enabling Tree-based Distributed Data Mining with Differential Privacy. - Lingchen Zhao; Lihao Ni; Shengshan Hu; Yanjiao Chen; Pan Zhou 001; Fu Xiao 001; Libing Wu (INFOCOM, 2018)

Outsourced Biometric Identification With Privacy. - Shengshan Hu; Minghui Li; Qian Wang 002; Sherman S. M. Chow; Minxin Du (IEEE Trans. Inf. Forensics Secur., 2018)

Adversarial Examples for Automatic Speech Recognition: Attacks and Countermeasures. - Shengshan Hu; Xingcan Shang; Zhan Qin; Minghui Li; Qian Wang 002; Cong Wang 001 (IEEE Commun. Mag., 2019)

VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service. - Lingchen Zhao; Qian Wang 002; Cong Wang 001; Qi Li 002; Chao Shen 001; Xiaodong Lin 001; Shengshan Hu; Minxin Du (CoRR, 2019)

Augmenting Encrypted Search: A Decentralized Service Realization with Enforced Execution. - Shengshan Hu; Chengjun Cai; Qian Wang 002; Cong Wang 001; Minghui Li; Zhibo Wang 001; Dengpan Ye (CoRR, 2019)

Shielding Collaborative Learning: Mitigating Poisoning Attacks through Client-Side Detection. - Lingchen Zhao; Shengshan Hu; Qian Wang 002; Jianlin Jiang; Chao Shen 001; Xiangyang Luo 001 (CoRR, 2019)

Hidden Voice Commands: Attacks and Defenses on the VCS of Autonomous Driving Cars. - Man Zhou 004; Zhan Qin; Xiu Lin; Shengshan Hu; Qian Wang 002; Kui Ren 001 (IEEE Wirel. Commun., 2019)

Optimizing Privacy-Preserving Outsourced Convolutional Neural Network Predictions. - Minghui Li; Sherman S. M. Chow; Shengshan Hu; Yuejing Yan; Minxin Du; Zhibo Wang 001 (CoRR, 2020)

Feature-Indistinguishable Attack to Circumvent Trapdoor-Enabled Defense. - Chaoxiang He; Bin Benjamin Zhu; Xiaojing Ma 002; Hai Jin 001; Shengshan Hu (CCS, 2021)

AdvHash: Set-to-set Targeted Attack on Deep Hashing with One Single Adversarial Patch. - Shengshan Hu; Yechao Zhang; Xiaogeng Liu; Leo Yu Zhang; Minghui Li; Hai Jin 001 (ACM Multimedia, 2021)

Shielding Federated Learning: A New Attack Approach and Its Defense. - Wei Wan; Jianrong Lu; Shengshan Hu; Leo Yu Zhang; Xiaobing Pei (WCNC, 2021)

Self-Supervised Adversarial Example Detection by Disentangled Representation. - Zhaoxi Zhang; Leo Yu Zhang; Xufei Zheng; Shengshan Hu; Jinyu Tian 001; Jiantao Zhou 001 (CoRR, 2021)

Challenges and approaches for mitigating byzantine attacks in federated learning. - Shengshan Hu; Jianrong Lu; Wei Wan; Leo Yu Zhang (CoRR, 2021)

Augmenting Encrypted Search: A Decentralized Service Realization with Enforced Execution. - Shengshan Hu; Chengjun Cai; Qian Wang 002; Cong Wang 001; Zhibo Wang 001; Dengpan Ye (IEEE Trans. Dependable Secur. Comput., 2021)

Towards Private and Scalable Cross-Media Retrieval. - Shengshan Hu; Leo Yu Zhang; Qian Wang 002; Zhan Qin; Cong Wang 001 (IEEE Trans. Dependable Secur. Comput., 2021)

Shielding Collaborative Learning: Mitigating Poisoning Attacks Through Client-Side Detection. - Lingchen Zhao; Shengshan Hu; Qian Wang 002; Jianlin Jiang; Chao Shen 001; Xiangyang Luo 001; Pengfei Hu 001 (IEEE Trans. Dependable Secur. Comput., 2021)

BOSSA: A Decentralized System for Proofs of Data Retrievability and Replication. - Dian Chen 004; Haobo Yuan; Shengshan Hu; Qian Wang 002; Cong Wang 001 (IEEE Trans. Parallel Distributed Syst., 2021)

Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer. - Shengshan Hu; Xiaogeng Liu; Yechao Zhang; Minghui Li; Leo Yu Zhang; Hai Jin 001; Libing Wu (CVPR, 2022)

Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting. - Qi Zhong; Leo Yu Zhang; Shengshan Hu; Longxiang Gao; Jun Zhang 010; Yong Xiang 001 (ICME, 2022)

Shielding Federated Learning: Robust Aggregation with Adaptive Client Selection. - Wei Wan; Shengshan Hu; Jianrong Lu; Leo Yu Zhang; Hai Jin 001; Yuanyuan He 002 (IJCAI, 2022)

Towards Privacy-Preserving Neural Architecture Search. - Fuyi Wang; Leo Yu Zhang; Lei Pan 002; Shengshan Hu; Robin Doss (ISCC, 2022)

BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label. - Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Leo Yu Zhang; Yifeng Zheng 001; Yuanyuan He 002; Hai Jin 001 (ACM Multimedia, 2022)

Shielding Federated Learning: Mitigating Byzantine Attacks with Less Constraints. - Minghui Li; Wei Wan; Jianrong Lu; Shengshan Hu; Junyu Shi; Leo Yu Zhang; Man Zhou 004; Yifeng Zheng 001 (MSN, 2022)

Challenges and Approaches for Mitigating Byzantine Attacks in Federated Learning. - Junyu Shi; Wei Wan; Shengshan Hu; Jianrong Lu; Leo Yu Zhang (TrustCom, 2022)

Evaluating Membership Inference Through Adversarial Robustness. - Zhaoxi Zhang; Leo Yu Zhang; Xufei Zheng; Bilal Hussain Abbasi; Shengshan Hu (Comput. J., 2022)

Towards Efficient Data-Centric Robust Machine Learning with Noise-based Augmentation. - Xiaogeng Liu; Haoyu Wang; Yechao Zhang; Fangzhou Wu; Shengshan Hu (CoRR, 2022)

Optimizing Privacy-Preserving Outsourced Convolutional Neural Network Predictions. - Minghui Li; Sherman S. M. Chow; Shengshan Hu; Yuejing Yan; Chao Shen 001; Qian Wang 002 (IEEE Trans. Dependable Secur. Comput., 2022)

PointCA: Evaluating the Robustness of 3D Point Cloud Completion Models against Adversarial Examples. - Shengshan Hu; Junwei Zhang; Wei Liu 004; Junhui Hou; Minghui Li; Leo Yu Zhang; Hai Jin 001; Lichao Sun 001 (AAAI, 2023)

Masked Language Model Based Textual Adversarial Example Detection. - Xiaomei Zhang 001; Zhaoxi Zhang; Qi Zhong; Xufei Zheng; Yanjun Zhang; Shengshan Hu; Leo Yu Zhang (AsiaCCS, 2023)

Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency. - Xiaogeng Liu; Minghui Li; Haoyu Wang; Shengshan Hu; Dengpan Ye; Hai Jin 001; Libing Wu; Chaowei Xiao (CVPR, 2023)

Benchmarking and Analyzing Robust Point Cloud Recognition: Bag of Tricks for Defending Adversarial Examples. - Qiufan Ji; Lin Wang 025; Cong Shi 004; Shengshan Hu; Yingying Chen 001; Lichao Sun 001 (ICCV, 2023)

Downstream-agnostic Adversarial Examples. - Ziqi Zhou 001; Shengshan Hu; Ruizhi Zhao; Qian Wang 002; Leo Yu Zhang; Junhui Hou; Hai Jin 001 (ICCV, 2023)

Voice Guard: Protecting Voice Privacy with Strong and Imperceptible Adversarial Perturbation in the Time Domain. - Jingyang Li; Dengpan Ye; Long Tang; Chuanxi Chen; Shengshan Hu (IJCAI, 2023)

Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning. - Hangtao Zhang; Zeming Yao; Leo Yu Zhang; Shengshan Hu; Chao Chen 015; Alan Wee-Chung Liew; Zhetao Li (IJCAI, 2023)

PointCRT: Detecting Backdoor in 3D Point Cloud via Corruption Robustness. - Shengshan Hu; Wei Liu 004; Minghui Li; Yechao Zhang; Xiaogeng Liu; Xianlong Wang 001; Leo Yu Zhang; Junhui Hou (ACM Multimedia, 2023)

A Four-Pronged Defense Against Byzantine Attacks in Federated Learning. - Wei Wan; Shengshan Hu; Minghui Li; Jianrong Lu; Longling Zhang; Leo Yu Zhang; Hai Jin 001 (ACM Multimedia, 2023)

AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning. - Ziqi Zhou 001; Shengshan Hu; Minghui Li; Hangtao Zhang; Yechao Zhang; Hai Jin 001 (ACM Multimedia, 2023)

Feature Extraction Matters More: Universal Deepfake Disruption through Attacking Ensemble Feature Extractors. - Long Tang; Dengpan Ye; Zhenhao Lu; Yunming Zhang; Shengshan Hu; Yue Xu; Chuanxi Chen (CoRR, 2023)

Why Does Little Robustness Help? Understanding Adversarial Transferability From Surrogate Training. - Yechao Zhang; Shengshan Hu; Leo Yu Zhang; Junyu Shi; Minghui Li; Xiaogeng Liu; Wei Wan; Hai Jin 001 (CoRR, 2023)

Corrupting Convolution-based Unlearnable Datasets with Pixel-based Image Transformations. - Xianlong Wang 001; Shengshan Hu; Minghui Li; Zhifei Yu; Ziqi Zhou 001; Leo Yu Zhang; Hai Jin 001 (CoRR, 2023)

Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation. - Di Mi; Yanjun Zhang; Leo Yu Zhang; Shengshan Hu; Qi Zhong; Haizhuan Yuan; Shirui Pan (AAAI, 2024)

Revisiting Gradient Pruning: A Dual Realization for Defending against Gradient Attacks. - Lulu Xue; Shengshan Hu; Ruizhi Zhao; Leo Yu Zhang; Shengqing Hu; Lichao Sun 001; Dezhong Yao 002 (AAAI, 2024)

Stealing Watermarks of Large Language Models via Mixed Integer Programming. - Zhaoxi Zhang; Xiaomei Zhang 001; Yanjun Zhang; Leo Yu Zhang; Chao Chen 015; Shengshan Hu; Asif Gill; Shirui Pan (ACSAC, 2024)

ViDTA: Enhanced Drug-Target Affinity Prediction via Virtual Graph Nodes and Attention-based Feature Fusion. - Minghui Li; Zikang Guo; Yang Wu; Peijin Guo; Yao Shi; Shengshan Hu; Wei Wan; Shengqing Hu (BIBM, 2024)

ECLIPSE: Expunging Clean-Label Indiscriminate Poisons via Sparse Diffusion Purification. - Xianlong Wang 001; Shengshan Hu; Yechao Zhang; Ziqi Zhou 001; Leo Yu Zhang; Peng Xu 003; Wei Wan; Hai Jin 001 (ESORICS (1), 2024)

PointAPA: Towards Availability Poisoning Attacks in 3D Point Clouds. - Xianlong Wang 001; Minghui Li; Peng Xu 003; Wei Liu 004; Leo Yu Zhang; Shengshan Hu; Yanjun Zhang (ESORICS (1), 2024)

MISA: Unveiling the Vulnerabilities in Split Federated Learning. - Wei Wan; Yuxuan Ning; Shengshan Hu; Lulu Xue; Minghui Li; Leo Yu Zhang; Hai Jin 001 (ICASSP, 2024)

Stealthy Backdoor Attack Towards Federated Automatic Speaker Verification. - Longling Zhang; Lyqi Liu; Dan Meng; Jun Wang; Shengshan Hu (ICASSP, 2024)

DarkFed: A Data-Free Backdoor Attack in Federated Learning. - Minghui Li; Wei Wan; Yuxuan Ning; Shengshan Hu; Lulu Xue; Leo Yu Zhang; Yichen Wang (IJCAI, 2024)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness in the Physical World. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (IJCAI, 2024)

Transferable Adversarial Facial Images for Privacy Protection. - Minghui Li; Jiangxiong Wang; Hao Zhang; Ziqi Zhou 001; Shengshan Hu; Xiaobing Pei (ACM Multimedia, 2024)

Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need. - Xianlong Wang 001; Minghui Li; Wei Liu 004; Hangtao Zhang; Shengshan Hu; Yechao Zhang; Ziqi Zhou 001; Hai Jin 001 (NeurIPS, 2024)

DarkSAM: Fooling Segment Anything Model to Segment Nothing. - Ziqi Zhou 001; Yufei Song; Minghui Li; Shengshan Hu; Xianlong Wang 001; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (NeurIPS, 2024)

Robust Backdoor Detection for Deep Learning via Topological Evolution Dynamics. - Xiaoxing Mo; Yechao Zhang; Leo Yu Zhang; Wei Luo 001; Nan Sun 002; Shengshan Hu; Shang Gao 003; Yang Xiang 001 (SP, 2024)

Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability. - Yechao Zhang; Shengshan Hu; Leo Yu Zhang; Junyu Shi; Minghui Li; Xiaogeng Liu; Wei Wan; Hai Jin 001 (SP, 2024)

Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples. - Ziqi Zhou 001; Minghui Li; Wei Liu 004; Shengshan Hu; Yechao Zhang; Wei Wan; Lulu Xue; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (SP, 2024)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (CoRR, 2024)

Variational Bayes for Federated Continual Learning. - Dezhong Yao 002; Sanmu Li; Yutong Dai 002; Zhiqiang Xu 003; Shengshan Hu; Peilin Zhao; Lichao Sun 001 (CoRR, 2024)

Large Language Model Watermark Stealing With Mixed Integer Programming. - Zhaoxi Zhang; Xiaomei Zhang 001; Yanjun Zhang; Leo Yu Zhang; Chao Chen 015; Shengshan Hu; Asif Gill; Shirui Pan (CoRR, 2024)

BadRobot: Jailbreaking LLM-based Embodied AI in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Shengshan Hu; Leo Yu Zhang (CoRR, 2024)

TrojanRobot: Backdoor Attacks Against Robotic Manipulation in the Physical World. - Xianlong Wang 001; Hewen Pan; Hangtao Zhang; Minghui Li; Shengshan Hu; Ziqi Zhou 001; Lulu Xue; Peijin Guo; Yichen Wang; Wei Wan; Aishan Liu; Leo Yu Zhang (CoRR, 2024)

Visual Adversarial Attack on Vision-Language Models for Autonomous Driving. - Tianyuan Zhang 004; Lu Wang; Xinwei Zhang; Yitong Zhang; Boyi Jia; Siyuan Liang; Shengshan Hu; Qiang Fu 006; Aishan Liu; Xianglong Liu 001 (CoRR, 2024)

PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation. - Yufei Song; Ziqi Zhou 001; Minghui Li; Xianlong Wang 001; Menghao Deng; Wei Wan; Shengshan Hu; Leo Yu Zhang (CoRR, 2024)

Depriving the Survival Space of Adversaries Against Poisoned Gradients in Federated Learning. - Jianrong Lu; Shengshan Hu; Wei Wan; Minghui Li; Leo Yu Zhang; Lulu Xue; Hai Jin 001 (IEEE Trans. Inf. Forensics Secur., 2024)

FingerPattern: Securing Pattern Lock via Fingerprint-Dependent Friction Sound. - Man Zhou 004; Yuting Zhou; Shuao Su; Qian Wang 002; Qi Li 002; Shengshan Hu; Chunwu Yu; Zhengxiong Li (IEEE Trans. Mob. Comput., 2024)

Towards Threshold Anonymous Announcement With Batch Verification for Cooperative Intelligent Transport Systems. - Yanping Wang; Leo Yu Zhang; Xiaosong Zhang 001; Xiaofen Wang; Fuyi Wang; Shengshan Hu; Robin Doss (IEEE Trans. Veh. Technol., 2024)

NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors. - Ziqi Zhou 001; Bowen Li; Yufei Song; Zhifei Yu; Shengshan Hu; Wei Wan; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (AAAI, 2025)

Detecting and Corrupting Convolution-based Unlearnable Examples. - Minghui Li; Xianlong Wang 001; Zhifei Yu; Shengshan Hu; Ziqi Zhou 001; Longling Zhang; Leo Yu Zhang (AAAI, 2025)

Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature. - Yichen Wang; Yuxuan Chou; Ziqi Zhou 001; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li (AAAI, 2025)

Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization. - Yechao Zhang; Yingzhe Xu; Junyu Shi; Leo Yu Zhang; Shengshan Hu; Minghui Li; Yanjun Zhang (AAAI, 2025)

sf SEBioID: Secure and Efficient Biometric Identification with Two-Party Computation. - Fuyi Wang; Jinzhi Ouyang; Leo Yu Zhang; Lei Pan 002; Shengshan Hu; Robin Doss; Jianying Zhou 001 (ACNS (3), 2025)

Test-Time Backdoor Detection for Object Detection Models. - Hangtao Zhang; Yichen Wang; Shihui Yan; Chenyu Zhu; Ziqi Zhou 001; Linshan Hou; Shengshan Hu; Minghui Li; Yanjun Zhang; Leo Yu Zhang (CVPR, 2025)

An Efficient Residual-based Low-dose PET Reconstruction with Spatial-Frequency Integration. - Minghui Li; Lei Yu; Hewen Pan; Shengqing Hu; Longling Zhang; Shengshan Hu; Wei Wan; Peijin Guo (ICASSP, 2025)

PB-UAP: Hybride Universal Adversarial Attack for Image Segmentation. - Yufei Song; Ziqi Zhou 001; Minghui Li; Xianlong Wang 001; Hangtao Zhang; Menghao Deng; Wei Wan; Shengshan Hu; Leo Yu Zhang (ICASSP, 2025)

FedLTH: A Privacy-preserving Federated Learning Framework with Model Pruning on Edge Clients. - Heyu Zhang; Yulai Xie; Shengshan Hu; Miao He; Peisong He; Jun Zheng; Dan Feng 001 (ICDCS, 2025)

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Changgan Yin; Minghui Li; Lulu Xue; Yichen Wang; Shengshan Hu; Aishan Liu; Peijin Guo; Leo Yu Zhang (ICLR, 2025)

Multi-Modality Representation Learning for Antibody-Antigen Interactions Prediction. - Peijin Guo; Minghui Li; Hewen Pan; Ruixiang Huang; Lulu Xue; Shengqing Hu; Zikang Guo; Wei Wan; Shengshan Hu (ICME, 2025)

Uncertainty-Aware Metabolic Stability Prediction with Dual-View Contrastive Learning. - Peijin Guo; Minghui Li; Hewen Pan; Bowen Chen; Yang Wu; Zikang Guo; Leo Yu Zhang; Shengshan Hu; Shengqing Hu (ECML/PKDD (3), 2025)

Secure Transfer Learning: Training Clean Model Against Backdoor in Pre-Trained Encoder and Downstream Dataset. - Yechao Zhang; Yuxuan Zhou; Tianyu Li; Minghui Li; Shengshan Hu; Wei Luo 001; Leo Yu Zhang (SP, 2025)

DarkHash: A Data-Free Backdoor Attack Against Deep Hashing. - Ziqi Zhou 001; Menghao Deng; Yufei Song; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li; Leo Yu Zhang; Dezhong Yao 002 (IEEE Trans. Inf. Forensics Secur., 2025)

Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks. - Xiaomei Zhang 001; Zhaoxi Zhang; Yanjun Zhang; Xufei Zheng; Leo Yu Zhang; Shengshan Hu; Shirui Pan (CoRR, 2025)

Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets. - Yechao Zhang; Yuxuan Zhou; Tianyu Li; Minghui Li; Shengshan Hu; Wei Luo 001; Leo Yu Zhang (CoRR, 2025)

Manipulating Multimodal Agents via Cross-Modal Prompt Injection. - Le Wang; Zonghao Ying; Tianyuan Zhang 004; Siyuan Liang; Shengshan Hu; Mingchuan Zhang; Aishan Liu; Xianglong Liu 001 (CoRR, 2025)

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM. - Lei Yu; Yechao Zhang; Ziqi Zhou 001; Yang Wu; Wei Wan; Minghui Li; Shengshan Hu; Pei Xiaobing; Jing Wang (CoRR, 2025)

Towards Reliable Forgetting: A Survey on Machine Unlearning Verification, Challenges, and Future Directions. - Lulu Xue; Shengshan Hu; Wei Lu; Yan Shen; Dongxu Li; Peijin Guo; Ziqi Zhou 001; Minghui Li; Yanjun Zhang; Leo Yu Zhang (CoRR, 2025)

Transferable Direct Prompt Injection via Activation-Guided MCMC Sampling. - Minghui Li; Hao Zhang; Yechao Zhang; Wei Wan; Shengshan Hu; pei Xiaobing; Jing Wang (CoRR, 2025)

ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents. - Yichen Wang; Hangtao Zhang; Hewen Pan; Ziqi Zhou 001; Xianlong Wang 001; Peijin Guo; Lulu Xue; Shengshan Hu; Minghui Li; Leo Yu Zhang (CoRR, 2025)

MARS: A Malignity-Aware Backdoor Defense in Federated Learning. - Wei Wan; Yuxuan Ning; Zhicong Huang; Cheng Hong 001; Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Tianqing Zhu; Wanlei Zhou 001; Leo Yu Zhang (CoRR, 2025)

Towards Real-World Deepfake Detection: A Diverse In-the-wild Dataset of Forgery Faces. - Junyu Shi; Minghui Li; Junguo Zuo; Zhifei Yu; Yipeng Lin; Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Wei Wan; Yinzhe Xu; Leo Yu Zhang (CoRR, 2025)

SegTrans: Transferable Adversarial Examples for Segmentation Models. - Yufei Song; Ziqi Zhou 001; Qi Lu; Hangtao Zhang; Yifan Hu; Lulu Xue; Shengshan Hu; Minghui Li; Leo Yu Zhang (CoRR, 2025)

Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2. - Ziqi Zhou 001; Yifan Hu; Yufei Song; Zijing Li; Shengshan Hu; Leo Yu Zhang; Dezhong Yao 002; Long Zheng; Hai Jin 001 (CoRR, 2025)

HiF-DTA: Hierarchical Feature Learning Network for Drug-Target Affinity Prediction. - Minghui Li; Yuanhang Wang; Peijin Guo; Wei Wan; Shengshan Hu; Shengqing Hu (CoRR, 2025)