An Event-Based Formal Framework for Dynamic Software Update. - Shengwei An; Xiaoxing Ma; Chun Cao; Ping Yu 004; Chang Xu 001 (QRS, 2015)

Verifying Distributed Controllers with Local Invariants. - Yiqun Wang; Shengwei An; Xiaoxing Ma; Chun Cao; Chang Xu 001 (QRS, 2016)

Augmented example-based synthesis using relational perturbation properties. - Shengwei An; Rishabh Singh; Sasa Misailovic; Roopsha Samanta (Proc. ACM Program. Lang., 2020)

Backdoor Scanning for Deep Neural Networks through K-Arm Optimization. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Shengwei An; Qiuling Xu; Siyuan Cheng 005; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2021)

Backdoor Attack through Frequency Domain. - Tong Wang; Yuan Yao 001; Feng Xu 007; Shengwei An; Hanghang Tong; Ting Wang 006 (CoRR, 2021)

Better Trigger Inversion Optimization in Backdoor Scanning. - Guanhong Tao 001; Guangyu Shen; Yingqi Liu; Shengwei An; Qiuling Xu; Shiqing Ma; Pan Li; Xiangyu Zhang 001 (CVPR, 2022)

An Invisible Black-Box Backdoor Attack Through Frequency Domain. - Tong Wang; Yuan Yao 001; Feng Xu 007; Shengwei An; Hanghang Tong; Ting Wang 006 (ECCV (13), 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLP Backdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2022)

MIRROR: Model Inversion for Deep LearningNetwork with High Fidelity. - Guanhong Tao 001; Qiuling Xu; Yingqi Liu; Guangyu Shen; Shengwei An; Jingwei Xu 001; Xiangyu Zhang 001; Yuan Yao 001 (NDSS, 2022)

Piccolo: Exposing Complex Backdoors in NLP Transformer Models. - Yingqi Liu; Guangyu Shen; Guanhong Tao 001; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2022)

Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security. - Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Qiuling Xu; Shengwei An; Zhuo Zhang 002; Xiangyu Zhang 001 (SP, 2022)

Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Qiuling Xu; Zhuo Zhang 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2022)

DECK: Model Hardening for Defending Pervasive Backdoors. - Guanhong Tao 001; Yingqi Liu; Siyuan Cheng 005; Shengwei An; Zhuo Zhang 002; Qiuling Xu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2022)

Confidence Matters: Inspecting Backdoors in Deep Neural Networks via Distribution Transfer. - Tong Wang; Yuan Yao 001; Feng Xu 007; Miao Xu 001; Shengwei An; Ting Wang 006 (CoRR, 2022)

Backdoor Vulnerabilities in Normally Trained Deep Learning Models. - Guanhong Tao 001; Zhenting Wang; Siyuan Cheng 005; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (CoRR, 2022)

MEDIC: Remove Model Backdoors via Importance Driven Cloning. - Qiuling Xu; Guanhong Tao 001; Jean Honorio; Yingqi Liu; Shengwei An; Guangyu Shen; Siyuan Cheng 005; Xiangyu Zhang 001 (CVPR, 2023)

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. - Kaiyuan Zhang 002; Guanhong Tao 001; Qiuling Xu; Siyuan Cheng 005; Shengwei An; Yingqi Liu; Shiwei Feng 002; Guangyu Shen; Pin-Yu Chen; Shiqing Ma; Xiangyu Zhang 001 (ICLR, 2023)

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Shengwei An; Xiangzhe Xu; Shiwei Feng 002; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Shiqing Ma; Xiangyu Zhang 001 (NDSS, 2023)

Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. - Guangyu Shen; Siyuan Cheng 005; Guanhong Tao 001; Kaiyuan Zhang 002; Yingqi Liu; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (NeurIPS, 2023)

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. - Shengwei An; Yuan Yao 001; Qiuling Xu; Shiqing Ma; Guanhong Tao 001; Siyuan Cheng 005; Kaiyuan Zhang 002; Yingqi Liu; Guangyu Shen; Ian Kelk; Xiangyu Zhang 001 (SP, 2023)

PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In Binary Code Analysis. - Zhuo Zhang 002; Guanhong Tao 001; Guangyu Shen; Shengwei An; Qiuling Xu; Yingqi Liu; Yapeng Ye; Yaoxuan Wu; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Hard-label Black-box Universal Adversarial Patch Attack. - Guanhong Tao 001; Shengwei An; Siyuan Cheng 005; Guangyu Shen; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. - Shengwei An; Sheng-Yen Chou; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Guangyu Shen; Siyuan Cheng 005; Shiqing Ma; Pin-Yu Chen; Tsung-Yi Ho; Xiangyu Zhang 001 (AAAI, 2024)

Inspecting Prediction Confidence for Detecting Black-Box Backdoor Attacks. - Tong Wang; Yuan Yao 001; Feng Xu 007; Miao Xu 001; Shengwei An; Ting Wang 006 (AAAI, 2024)

Exploring Inherent Backdoors in Deep Learning Models. - Guanhong Tao 001; Siyuan Cheng 005; Zhenting Wang; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (ACSAC, 2024)

Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Shengwei An; Shiwei Feng 002; Xiangzhe Xu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2024)

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. - Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Hanxi Guo; Shiqing Ma; Xiangyu Zhang 001 (ECCV (62), 2024)

OdScan: Backdoor Scanning for Object Detection Models. - Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Kaiyuan Zhang 002; Zhuo Zhang 002; Shengwei An; Xiangzhe Xu; Yingqi Li; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Exploring the Orthogonality and Linearity of Backdoor Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Shengwei An; Anuran Makur; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. - Shengwei An; Lu Yan; Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (USENIX Security Symposium, 2024)

Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. - Guangyu Shen; Siyuan Cheng 005; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Lu Yan; Zhuo Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2024)

CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Bruno Ribeiro 001; Shengwei An; Pin-Yu Chen; Xiangyu Zhang 001; Ninghui Li (NDSS, 2025)

BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. - Guangyu Shen; Siyuan Cheng 005; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Hanxi Guo; Lu Yan; Xiaolong Jin 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2025)

SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Hanxi Guo; Yuetian Chen; Zian Su; Shengwei An; Yuntao Du 002; Charles Fleming; Ashish Kundu; Xiangyu Zhang 001; Ninghui Li (CoRR, 2025)

MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation. - Lu Yan; Zhuo Zhang 002; Xiangzhe Xu; Shengwei An; Guangyu Shen; Zhou Xuan; Xuan Chen; Xiangyu Zhang 001 (CoRR, 2025)