Towards Feature Space Adversarial Attack. - Qiuling Xu; Guanhong Tao 001; Siyuan Cheng 005; Lin Tan 001; Xiangyu Zhang 001 (CoRR, 2020)

Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification. - Siyuan Cheng 005; Yingqi Liu; Shiqing Ma; Xiangyu Zhang 001 (AAAI, 2021)

Towards Feature Space Adversarial Attack by Style Perturbation. - Qiuling Xu; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (AAAI, 2021)

Backdoor Scanning for Deep Neural Networks through K-Arm Optimization. - Guangyu Shen; Yingqi Liu; Guanhong Tao 001; Shengwei An; Qiuling Xu; Siyuan Cheng 005; Shiqing Ma; Xiangyu Zhang 001 (ICML, 2021)

DECK: Model Hardening for Defending Pervasive Backdoors. - Guanhong Tao 001; Yingqi Liu; Siyuan Cheng 005; Shengwei An; Zhuo Zhang 002; Qiuling Xu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2022)

Backdoor Vulnerabilities in Normally Trained Deep Learning Models. - Guanhong Tao 001; Zhenting Wang; Siyuan Cheng 005; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (CoRR, 2022)

Detecting Backdoors in Pre-trained Encoders. - Shiwei Feng 002; Guanhong Tao 001; Siyuan Cheng 005; Guangyu Shen; Xiangzhe Xu; Yingqi Liu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2023)

MEDIC: Remove Model Backdoors via Importance Driven Cloning. - Qiuling Xu; Guanhong Tao 001; Jean Honorio; Yingqi Liu; Shengwei An; Guangyu Shen; Siyuan Cheng 005; Xiangyu Zhang 001 (CVPR, 2023)

FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. - Kaiyuan Zhang 002; Guanhong Tao 001; Qiuling Xu; Siyuan Cheng 005; Shengwei An; Yingqi Liu; Shiwei Feng 002; Guangyu Shen; Pin-Yu Chen; Shiqing Ma; Xiangyu Zhang 001 (ICLR, 2023)

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis. - Xiangzhe Xu; Shiwei Feng 002; Yapeng Ye; Guangyu Shen; Zian Su; Siyuan Cheng 005; Guanhong Tao 001; Qingkai Shi; Zhuo Zhang 002; Xiangyu Zhang 001 (ISSTA, 2023)

BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Shengwei An; Xiangzhe Xu; Shiwei Feng 002; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Shiqing Ma; Xiangyu Zhang 001 (NDSS, 2023)

Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. - Guangyu Shen; Siyuan Cheng 005; Guanhong Tao 001; Kaiyuan Zhang 002; Yingqi Liu; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (NeurIPS, 2023)

PEM: Representing Binary Program Semantics for Similarity Analysis via a Probabilistic Execution Model. - Xiangzhe Xu; Zhou Xuan; Shiwei Feng 002; Siyuan Cheng 005; Yapeng Ye; Qingkai Shi; Guanhong Tao 001; Le Yu; Zhuo Zhang 002; Xiangyu Zhang 001 (ESEC/SIGSOFT FSE, 2023)

ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. - Shengwei An; Yuan Yao 001; Qiuling Xu; Shiqing Ma; Guanhong Tao 001; Siyuan Cheng 005; Kaiyuan Zhang 002; Yingqi Liu; Guangyu Shen; Ian Kelk; Xiangyu Zhang 001 (SP, 2023)

Hard-label Black-box Universal Adversarial Patch Attack. - Guanhong Tao 001; Shengwei An; Siyuan Cheng 005; Guangyu Shen; Xiangyu Zhang 001 (USENIX Security Symposium, 2023)

LmPa: Improving Decompilation by Synergy of Large Language Model and Program Analysis. - Xiangzhe Xu; Zhuo Zhang 002; Shiwei Feng 002; Yapeng Ye; Zian Su; Nan Jiang 012; Siyuan Cheng 005; Lin Tan 001; Xiangyu Zhang 001 (CoRR, 2023)

Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (CoRR, 2023)

Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. - Shengwei An; Sheng-Yen Chou; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Guangyu Shen; Siyuan Cheng 005; Shiqing Ma; Pin-Yu Chen; Tsung-Yi Ho; Xiangyu Zhang 001 (AAAI, 2024)

Exploring Inherent Backdoors in Deep Learning Models. - Guanhong Tao 001; Siyuan Cheng 005; Zhenting Wang; Shiqing Ma; Shengwei An; Yingqi Liu; Guangyu Shen; Zhuo Zhang 002; Yunshu Mao; Xiangyu Zhang 001 (ACSAC, 2024)

Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. - Siyuan Cheng 005; Guanhong Tao 001; Yingqi Liu; Guangyu Shen; Shengwei An; Shiwei Feng 002; Xiangzhe Xu; Kaiyuan Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CVPR, 2024)

UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. - Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Hanxi Guo; Shiqing Ma; Xiangyu Zhang 001 (ECCV (62), 2024)

ROCAS: Root Cause Analysis of Autonomous Driving Accidents via Cyber-Physical Co-mutation. - Shiwei Feng 002; Yapeng Ye; Qingkai Shi; Zhiyuan Cheng 010; Xiangzhe Xu; Siyuan Cheng 005; Hongjun Choi; Xiangyu Zhang 001 (ASE, 2024)

BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens. - Hanxi Guo; Siyuan Cheng 005; Xiaolong Jin 002; Zhuo Zhang 002; Kaiyuan Zhang 002; Guanhong Tao 001; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2024)

OdScan: Backdoor Scanning for Object Detection Models. - Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Kaiyuan Zhang 002; Zhuo Zhang 002; Shengwei An; Xiangzhe Xu; Yingqi Li; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

Exploring the Orthogonality and Linearity of Backdoor Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Guanhong Tao 001; Shengwei An; Anuran Makur; Shiqing Ma; Xiangyu Zhang 001 (SP, 2024)

On Large Language Models' Resilience to Coercive Interrogation. - Zhuo Zhang 002; Guangyu Shen; Guanhong Tao 001; Siyuan Cheng 005; Xiangyu Zhang 001 (SP, 2024)

Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. - Shengwei An; Lu Yan; Siyuan Cheng 005; Guangyu Shen; Kaiyuan Zhang 002; Qiuling Xu; Guanhong Tao 001; Xiangyu Zhang 001 (USENIX Security Symposium, 2024)

Opening A Pandora's Box: Things You Should Know in the Era of Custom GPTs. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2024)

Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. - Guangyu Shen; Siyuan Cheng 005; Kaiyuan Zhang 002; Guanhong Tao 001; Shengwei An; Lu Yan; Zhuo Zhang 002; Shiqing Ma; Xiangyu Zhang 001 (CoRR, 2024)

DIGIMON: Diagnosis and Mitigation of Sampling Skew for Reinforcement Learning based Meta-Planner in Robot Navigation. - Shiwei Feng 002; Xuan Chen; Zhiyuan Cheng 010; Zikang Xiong; Yifei Gao; Siyuan Cheng 005; Sayali Kate; Xiangyu Zhang 001 (CoRR, 2024)

ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2024)

System Prompt Hijacking via Permutation Triggers in LLM Supply Chains. - Lu Yan; Siyuan Cheng 005; Xuan Chen; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (ACL (Findings), 2025)

CO-SPY: Combining Semantic and Pixel Features to Detect Synthetic Images by AI. - Siyuan Cheng 005; Lingjuan Lyu; Zhenting Wang; Xiangyu Zhang 001; Vikash Sehwag (CVPR, 2025)

CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. - Kaiyuan Zhang 002; Siyuan Cheng 005; Guangyu Shen; Bruno Ribeiro 001; Shengwei An; Pin-Yu Chen; Xiangyu Zhang 001; Ninghui Li (NDSS, 2025)

Unleashing the Power of Generative Model in Recovering Variable Names from Stripped Binary. - Xiangzhe Xu; Zhuo Zhang 002; Zian Su; Ziyang Huang; Shiwei Feng 002; Yapeng Ye; Nan Jiang 012; Danning Xie; Siyuan Cheng 005; Lin Tan 001; Xiangyu Zhang 001 (NDSS, 2025)

A Systematic Threat Modeling of LLM Applications. - Guanhong Tao 001; Siyuan Cheng 005; Zhuo Zhang 002; Junmin Zhu; Guangyu Shen; Wanjing Han; Mu Zhang 001; Xiangyu Zhang 001 (SIGSOFT FSE Companion, 2025)

BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. - Guangyu Shen; Siyuan Cheng 005; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Hanxi Guo; Lu Yan; Xiaolong Jin 002; Shengwei An; Shiqing Ma; Xiangyu Zhang 001 (SP, 2025)

SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks. - Kaiyuan Zhang 002; Siyuan Cheng 005; Hanxi Guo; Yuetian Chen; Zian Su; Shengwei An; Yuntao Du 002; Charles Fleming; Ashish Kundu; Xiangyu Zhang 001; Ninghui Li (CoRR, 2025)

CodeMirage: A Multi-Lingual Benchmark for Detecting AI-Generated and Paraphrased Source Code from Production-Level LLMs. - Hanxi Guo; Siyuan Cheng 005; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (CoRR, 2025)