Transferable Adversarial Attacks for Image and Video Object Detection. - Xingxing Wei 001; Siyuan Liang 004; Xiaochun Cao; Jun Zhu 001 (CoRR, 2018)

Transferable Adversarial Attacks for Image and Video Object Detection. - Xingxing Wei 001; Siyuan Liang 004; Ning Chen 002; Xiaochun Cao (IJCAI, 2019)

Efficient Adversarial Attacks for Visual Object Tracking. - Siyuan Liang 004; Xingxing Wei 001; Siyuan Yao; Xiaochun Cao (ECCV (26), 2020)

Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection. - Siyuan Liang 004; Baoyuan Wu; Yanbo Fan; Xingxing Wei 001; Xiaochun Cao (ICCV, 2021)

A Large-Scale Multiple-objective Method for Black-box Attack Against Object Detection. - Siyuan Liang 004; Longkang Li; Yanbo Fan; Xiaojun Jia; Jingzhi Li 002; Baoyuan Wu; Xiaochun Cao (ECCV (4), 2022)

Imitated Detectors: Stealing Knowledge of Black-box Object Detectors. - Siyuan Liang 004; Aishan Liu; Jiawei Liang; Longkang Li; Yang Bai 011; Xiaochun Cao (ACM Multimedia, 2022)

Adaptive Perturbation Generation for Multiple Backdoors Detection. - Yuhang Wang; Huafeng Shi; Rui Min; Ruijia Wu; Siyuan Liang 004; Yichao Wu; Ding Liang; Aishan Liu (CoRR, 2022)

Improving Robust Fairness via Balance Adversarial Training. - Chunyu Sun; Chenye Xu; Chengyuan Yao; Siyuan Liang 004; Yichao Wu; Ding Liang; Xianglong Liu 001; Aishan Liu (CoRR, 2022)

Rethinking Data Augmentation in Knowledge Distillation for Object Detection. - Jiawei Liang; Siyuan Liang 004; Aishan Liu; Mingli Zhu; Danni Yuan; Chenye Xu; Xiaochun Cao (CoRR, 2022)

Exploring the Relationship between Architecture and Adversarially Robust Generalization. - Shiyu Tang; Siyuan Liang 004; Ruihao Gong; Aishan Liu; Xianglong Liu 001; Dacheng Tao (CoRR, 2022)

Learning to Optimize Permutation Flow Shop Scheduling via Graph-based Imitation Learning. - Longkang Li; Siyuan Liang 004; Zihao Zhu 001; Xiaochun Cao; Chris Ding; Hongyuan Zha; Baoyuan Wu (CoRR, 2022)

Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization. - Bangyan He; Jian Liu 012; Yiming Li 004; Siyuan Liang 004; Jingzhi Li 002; Xiaojun Jia; Xiaochun Cao (AAAI, 2023)

Improving Robust Fariness via Balance Adversarial Training. - Chunyu Sun; Chenye Xu; Chengyuan Yao; Siyuan Liang 004; Yichao Wu; Ding Liang; Xianglong Liu 001; Aishan Liu (AAAI, 2023)

Exploring the Relationship Between Architectural Design and Adversarially Robust Generalization. - Aishan Liu; Shiyu Tang; Siyuan Liang 004; Ruihao Gong; Boxi Wu; Xianglong Liu 001; Dacheng Tao (CVPR, 2023)

Face Encryption via Frequency-Restricted Identity-Agnostic Attacks. - Xin Dong 015; Rui Wang 032; Siyuan Liang 004; Aishan Liu; Lihua Jing (ACM Multimedia, 2023)

Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks. - Jun Guo 009; Xingyu Zheng; Aishan Liu; Siyuan Liang 004; Yisong Xiao; Yichao Wu; Xianglong Liu 001 (ACM Multimedia, 2023)

Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation. - Jiawei Liang; Siyuan Liang 004; Aishan Liu; Ke Ma 001; Jingzhi Li 002; Xiaochun Cao (ACM Multimedia, 2023)

X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection. - Aishan Liu; Jun Guo 009; Jiakai Wang; Siyuan Liang 004; Renshuai Tao; Wenbo Zhou 004; Cong Liu 006; Xianglong Liu 001; Dacheng Tao (USENIX Security Symposium, 2023)

SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation. - Bangyan He; Xiaojun Jia; Siyuan Liang 004; Tianrui Lou; Yang Liu 003; Xiaochun Cao (CoRR, 2023)

Privacy-Enhancing Face Obfuscation Guided by Semantic-Aware Attribution Maps. - Jingzhi Li 002; Hua Zhang 008; Siyuan Liang 004; Pengwen Dai; Xiaochun Cao (IEEE Trans. Inf. Forensics Secur., 2023)

Learning to Optimize Permutation Flow Shop Scheduling via Graph-Based Imitation Learning. - Longkang Li; Siyuan Liang 004; Zihao Zhu 001; Chris Ding; Hongyuan Zha; Baoyuan Wu (AAAI, 2024)

Does Few-Shot Learning Suffer from Backdoor Attacks? - Xinwei Liu; Xiaojun Jia; Jindong Gu; Yuan Xun; Siyuan Liang 004; Xiaochun Cao (AAAI, 2024)

BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning. - Siyuan Liang 004; Mingli Zhu; Aishan Liu; Baoyuan Wu; Xiaochun Cao; Ee-Chien Chang (CVPR, 2024)

Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Clouds. - Tianrui Lou; Xiaojun Jia; Jindong Gu; Li Liu 002; Siyuan Liang 004; Bangyan He; Xiaochun Cao (CVPR, 2024)

Less is More: Fewer Interpretable Region via Submodular Subset Selection. - Ruoyu Chen 001; Hua Zhang 008; Siyuan Liang 004; Jingzhi Li 002; Xiaochun Cao (ICLR, 2024)

Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection. - Jiawei Liang; Siyuan Liang 004; Aishan Liu; Xiaojun Jia; Junhao Kuang; Xiaochun Cao (ICLR, 2024)

Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis. - Xianda Zhang; Siyuan Liang 004; Chengyang Li (ICPR (24), 2024)

LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions. - Tianyuan Zhang 004; Lu Wang; Hainan Li; Yisong Xiao; Siyuan Liang 004; Aishan Liu; Xianglong Liu 001; Dacheng Tao (ACM Multimedia, 2024)

Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learning. - Xinwei Liu; Xiaojun Jia; Yuan Xun; Siyuan Liang 004; Xiaochun Cao (ACM Multimedia, 2024)

Towards Robust Physical-world Backdoor Attacks on Lane Detection. - Xinwei Zhang 010; Aishan Liu; Tianyuan Zhang 004; Siyuan Liang 004; Xianglong Liu 001 (ACM Multimedia, 2024)

Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack. - Mingli Zhu; Siyuan Liang 004; Baoyuan Wu (NeurIPS, 2024)

VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models. - Jiawei Liang; Siyuan Liang 004; Man Luo; Aishan Liu; Dongchen Han; Ee-Chien Chang; Xiaochun Cao (CoRR, 2024)

Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs. - Xiaoxia Li; Siyuan Liang 004; Jiyi Zhang; Han Fang; Aishan Liu; Ee-Chien Chang (CoRR, 2024)

Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning. - Siyuan Liang 004; Kuanrong Liu; Jiajun Gong; Jiawei Liang; Yuan Xun; Ee-Chien Chang; Xiaochun Cao (CoRR, 2024)

Object Detectors in the Open Environment: Challenges, Solutions, and Outlook. - Siyuan Liang 004; Wei Wang 010; Ruoyu Chen 001; Aishan Liu; Boxi Wu; Ee-Chien Chang; Xiaochun Cao; Dacheng Tao (CoRR, 2024)

Environmental Matching Attack Against Unmanned Aerial Vehicles Object Detection. - Dehong Kong; Siyuan Liang 004; Wenqi Ren (CoRR, 2024)

LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions. - Tianyuan Zhang 004; Lu Wang; Hainan Li; Yisong Xiao; Siyuan Liang 004; Aishan Liu; Xianglong Liu 001; Dacheng Tao (CoRR, 2024)

Revisiting Backdoor Attacks against Large Vision-Language Models. - Siyuan Liang 004; Jiawei Liang; Tianyu Pang; Chao Du; Aishan Liu; Ee-Chien Chang; Xiaochun Cao (CoRR, 2024)

Compromising Embodied Agents with Contextual Backdoor Attacks. - Aishan Liu; Yuguang Zhou; Xianglong Liu 001; Tianyuan Zhang 004; Siyuan Liang 004; Jiakai Wang; Yanjun Pu; Tianlin Li; Junqi Zhang; Wenbo Zhou 004; Qing Guo 005; Dacheng Tao (CoRR, 2024)

Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving. - Tianyuan Zhang 004; Lu Wang; Jiaqi Kang; Xinwei Zhang 010; Siyuan Liang 004; Yuwei Chen; Aishan Liu; Xianglong Liu 001 (CoRR, 2024)

Adversarial Backdoor Defense in CLIP. - Junhao Kuang; Siyuan Liang 004; Jiawei Liang; Kuanrong Liu; Xiaochun Cao (CoRR, 2024)

CleanerCLIP: Fine-grained Counterfactual Semantic Augmentation for Backdoor Defense in Contrastive Learning. - Yuan Xun; Siyuan Liang 004; Xiaojun Jia; Xinwei Liu; Xiaochun Cao (CoRR, 2024)

Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats. - Kuanrong Liu; Siyuan Liang 004; Jiawei Liang; Pengwen Dai; Xiaochun Cao (CoRR, 2024)

Interpreting Object-level Foundation Models via Visual Precision Search. - Ruoyu Chen 001; Siyuan Liang 004; Jingzhi Li 002; Shiming Liu; Maosen Li; Zheng Huang; Hua Zhang 008; Xiaochun Cao (CoRR, 2024)

Visual Adversarial Attack on Vision-Language Models for Autonomous Driving. - Tianyuan Zhang 004; Lu Wang; Xinwei Zhang 010; Yitong Zhang; Boyi Jia; Siyuan Liang 004; Shengshan Hu; Qiang Fu 006; Aishan Liu; Xianglong Liu 001 (CoRR, 2024)

CopyrightShield: Spatial Similarity Guided Backdoor Defense against Copyright Infringement in Diffusion Models. - Zhixiang Guo; Siyuan Liang 004; Aishan Liu; Dacheng Tao (CoRR, 2024)

Red Pill and Blue Pill: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning. - Siyuan Liang 004; Jiajun Gong; Tianmeng Fang; Aishan Liu; Tao Wang 012; Xianglong Liu 001; Xiaochun Cao; Dacheng Tao; Ee-Chien Chang (CoRR, 2024)

Patch is enough: naturalistic adversarial patch against vision-language pre-training models. - Dehong Kong; Siyuan Liang 004; Xiaopeng Zhu; Yuansheng Zhong; Wenqi Ren (Vis. Intell., 2024)

ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models. - Xuxu Liu; Siyuan Liang 004; Mengya Han; Yong Luo 002; Aishan Liu; Xiantao Cai; Zheng He 001; Dacheng Tao (ACL (1), 2025)

Interpreting Object-level Foundation Models via Visual Precision Search. - Ruoyu Chen 001; Siyuan Liang 004; Jingzhi Li 002; Shiming Liu; Maosen Li; Zhen Huang 006; Hua Zhang 008; Xiaochun Cao (CVPR, 2025)

Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift. - Siyuan Liang 004; Jiawei Liang; Tianyu Pang; Chao Du; Aishan Liu; Mingli Zhu; Xiaochun Cao; Dacheng Tao (CVPR, 2025)

Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models. - Zonghao Ying; Deyue Zhang; Zonglei Jing; Yisong Xiao; Quanchen Zou; Aishan Liu; Siyuan Liang 004; Xiangzheng Zhang; Xianglong Liu 001; Dacheng Tao (EMNLP (Findings), 2025)

CopyrightShield: Enhancing Diffusion Model Security Against Copyright Infringement Attacks. - Zhixiang Guo; Siyuan Liang 004; Aishan Liu; Dacheng Tao (ICCV, 2025)

Gradient-Reweighted Adversarial Camouflage for Physical Object Detection Evasion. - Jiawei Liang; Siyuan Liang 004; Tianrui Lou; Ming Zhang; Wenjin Li; Dunqiu Fan; Xiaochun Cao (ICCV, 2025)

3D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation. - Tianrui Lou; Xiaojun Jia; Siyuan Liang 004; Jiawei Liang; Ming Zhang; Yanjun Xiao; Xiaochun Cao (ICCV, 2025)

Towards a 3D Transfer-Based Black-Box Attack via Critical Feature Guidance. - Shuchao Pang; Zhenghan Chen; Shen Zhang; Liming Lu; Siyuan Liang 004; Anan Du; Yongbin Zhou (ICCV, 2025)

NoVo: Norm Voting off Hallucinations with Attention Heads in Large Language Models. - Zheng Yi Ho; Siyuan Liang 004; Sen Zhang 006; Yibing Zhan; Dacheng Tao (ICLR, 2025)

ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks. - Zhiyao Ren; Siyuan Liang 004; Aishan Liu; Dacheng Tao (ICML, 2025)

BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks. - Yisong Xiao; Aishan Liu; Xinwei Zhang 010; Tianyuan Zhang 004; Tianlin Li; Siyuan Liang 004; Xianglong Liu 001; Yang Liu 088; Dacheng Tao (ICSE, 2025)

Physical Adversarial Camouflage Through Gradient Calibration and Regularization. - Jiawei Liang; Siyuan Liang 004; Jianjie Huang; Chenxi Si; Ming Zhang; Xiaochun Cao (IJCAI, 2025)

MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving. - Aishan Liu; Jiakai Wang; Tianyuan Zhang 004; Hainan Li; Jiangfan Liu 001; Siyuan Liang 004; Yilong Ren; Xianglong Liu 001; Dacheng Tao (ACM Multimedia, 2025)

Manipulating Multimodal Agents via Cross-Modal Prompt Injection. - Le Wang 014; Zonghao Ying; Tianyuan Zhang 004; Siyuan Liang 004; Shengshan Hu; Mingchuan Zhang; Aishan Liu; Xianglong Liu 001 (ACM Multimedia, 2025)

Bridging the Task Gap: Multi-task Adversarial Transferability in CLIP and Its Derivatives. - Kuanrong Liu; Siyuan Liang 004; Cheng Qian; Ming Zhang; Xiaochun Cao (PRCV (4), 2025)

Fairness Mediator: Neutralize Stereotype Associations to Mitigate Bias in Large Language Models. - Yisong Xiao; Aishan Liu; Siyuan Liang 004; Xianglong Liu 001; Dacheng Tao (Proc. ACM Softw. Eng., 2025)

FOADA: Toward Robust Open-World Mobile App Fingerprinting. - Jiajun Gong; Guotao Meng; Wei Cai; Siyuan Liang 004; Tao Wang 012; Ee-Chien Chang (IEEE Trans. Inf. Forensics Secur., 2025)

Hard-Label Black-Box Adversarial Attacks for Implicit Scene Interactions. - Muxue Liang; Chuan Wang 002; Siyuan Liang 004; Aishan Liu; Yanan Cao 006; Qingyong Li; Zeming Liu; Liang Yang 002; Xiaochun Cao (IEEE Trans. Inf. Forensics Secur., 2025)

Compromising LLM Driven Embodied Agents With Contextual Backdoor Attacks. - Aishan Liu; Yuguang Zhou; Xianglong Liu 001; Tianyuan Zhang 004; Siyuan Liang 004; Jiakai Wang; Yanjun Pu; Tianlin Li; Junqi Zhang; Wenbo Zhou 004; Qing Guo 005; Dacheng Tao (IEEE Trans. Inf. Forensics Secur., 2025)

CleanerCLIP: Fine-Grained Counterfactual Semantic Augmentation for Backdoor Defense in Contrastive Learning. - Yuan Xun; Siyuan Liang 004; Xiaojun Jia; Xinwei Liu; Jun Chen 035; Xiaochun Cao (IEEE Trans. Inf. Forensics Secur., 2025)

Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt. - Zonghao Ying; Aishan Liu; Tianyuan Zhang 004; Zhengmin Yu; Siyuan Liang 004; Xianglong Liu 001; Dacheng Tao (IEEE Trans. Inf. Forensics Secur., 2025)

CogMorph: Cognitive Morphing Attacks for Text-to-Image Models. - Zonglei Jing; Zonghao Ying; Le Wang 014; Siyuan Liang 004; Aishan Liu; Xianglong Liu 001; Dacheng Tao (CoRR, 2025)

Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving. - Lu Wang; Tianyuan Zhang 004; Yang Qu; Siyuan Liang 004; Yuwei Chen; Aishan Liu; Xianglong Liu 001; Dacheng Tao (CoRR, 2025)

Adversarial Training for Multimodal Large Language Models against Jailbreak Attacks. - Liming Lu; Shuchao Pang; Siyuan Liang 004; Haotian Zhu; Xiyu Zeng; Aishan Liu; Yunhuai Liu; Yongbin Zhou (CoRR, 2025)

Lie Detector: Unified Backdoor Detection via Cross-Examination Framework. - Xuan Wang 029; Siyuan Liang 004; Dongping Liao; Han Fang; Aishan Liu; Xiaochun Cao; Yu-liang Lu; Ee-Chien Chang; Xitong Gao (CoRR, 2025)

Less is More: Efficient Black-box Attribution via Minimal Interpretable Subset Selection. - Ruoyu Chen 001; Siyuan Liang 004; Jingzhi Li 002; Shiming Liu; Li Liu 002; Hua Zhang 008; Xiaochun Cao (CoRR, 2025)

Natural Reflection Backdoor Attack on Vision Language Model for Autonomous Driving. - Ming Liu; Siyuan Liang 004; Koushik Howlader; Liwen Wang; Dacheng Tao; Wensheng Zhang 002 (CoRR, 2025)

Jailbreaking the Text-to-Video Generative Models. - Jiayang Liu; Siyuan Liang 004; Shiqian Zhao; Rongcheng Tu; Wenbo Zhou 004; Xiaochun Cao; Dacheng Tao; Siew Kei Lam (CoRR, 2025)

No Query, No Access. - Wenqiang Wang; Siyuan Liang 004; Yangshijie Zhang; Xiaojun Jia; Hao Lin; Xiaochun Cao (CoRR, 2025)

SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs. - Shuhan Xu; Siyuan Liang 004; Hongling Zheng; Yong Luo 002; Aishan Liu; Dacheng Tao (CoRR, 2025)

Robust Anti-Backdoor Instruction Tuning in LVLMs. - Yuan Xun; Siyuan Liang 004; Xiaojun Jia; Xinwei Liu; Xiaochun Cao (CoRR, 2025)

Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025. - Zonghao Ying; Siyang Wu; Run Hao; Peng Ying; Shixuan Sun; Pengyu Chen; Junze Chen; Hao Du; Kaiwen Shen; Shangkun Wu; Jiwei Wei; Shiyuan He; et al. (CoRR, 2025)

Screen Hijack: Visual Poisoning of VLM Agents in Mobile Environments. - Xuan Wang 029; Siyuan Liang 004; Zhe Liu; Yi Yu 011; Yuliang Lu; Xiaochun Cao; Ee-Chien Chang; Xitong Gao (CoRR, 2025)

AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions. - Aishan Liu; Zonghao Ying; Le Wang 014; Junjie Mu; Jinyang Guo 002; Jiakai Wang; Yuqing Ma; Siyuan Liang 004; Mingchuan Zhang; Xianglong Liu 001; Dacheng Tao (CoRR, 2025)

Pre-trained Trojan Attacks for Visual Recognition. - Aishan Liu; Xianglong Liu 001; Xinwei Zhang 010; Yisong Xiao; Yuguang Zhou; Siyuan Liang 004; Jiakai Wang; Xiaochun Cao; Dacheng Tao (Int. J. Comput. Vis., 2025)

SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents. - Siyuan Liang 004; Tianmeng Fang; Zhe Liu; Aishan Liu; Yan Xiao 002; Jinyuan He; Ee-Chien Chang; Xiaochun Cao (CoRR, 2025)

VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models. - Jiawei Liang; Siyuan Liang 004; Aishan Liu; Xiaochun Cao (Int. J. Comput. Vis., 2025)

PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation. - Zonglei Jing; Xiao Yang; Xiaoqian Li; Siyuan Liang 004; Aishan Liu; Mingchuan Zhang; Xianglong Liu 001 (CoRR, 2025)

Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving. - Tianyuan Zhang 004; Ting Jin; Lu Wang; Jiangfan Liu 001; Siyuan Liang 004; Mingchuan Zhang; Aishan Liu; Xianglong Liu 001 (CoRR, 2025)

SMA: Who Said That? Auditing Membership Leakage in Semi-Black-box RAG Controlling. - Shixuan Sun; Siyuan Liang 004; Ruoyu Chen 001; Jianjie Huang; Jingzhi Li 002; Xiaochun Cao (CoRR, 2025)

Universal Camouflage Attack on Vision-Language Models for Autonomous Driving. - Dehong Kong; Sifan Yu; Siyuan Liang 004; Jiawei Liang; Jianhou Gan; Aishan Liu; Wenqi Ren (CoRR, 2025)

FERD: Fairness-Enhanced Data-Free Robustness Distillation. - Zhengxiao Li; Liming Lu; Xu Zheng; Siyuan Liang 004; Zhenghan Chen; Yongbin Zhou; Shuchao Pang (CoRR, 2025)

SafeSteer: Adaptive Subspace Steering for Efficient Jailbreak Defense in Vision-Language Models. - Xiyu Zeng; Siyuan Liang 004; Liming Lu; Haotian Zhu; Enguang Liu; Jisheng Dang; Yongbin Zhou; Shuchao Pang (CoRR, 2025)

RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulation. - Enguang Liu; Siyuan Liang 004; Liming Lu; Xiyu Zeng; Xiaochun Cao; Aishan Liu; Shuchao Pang (CoRR, 2025)

Text Adversarial Attacks with Dynamic Outputs. - Wenqiang Wang; Siyuan Liang 004; Yan Xiao 002; Xiaochun Cao (CoRR, 2025)

Explaining multimodal LLMs via intra-modal token interactions. - Jiawei Liang; Ruoyu Chen 001; Xianghao Jiao; Siyuan Liang 004; Shiming Liu; Qunli Zhang; Zheng Hu; Xiaochun Cao (CoRR, 2025)

Where MLLMs Attend and What They Rely On: Explaining Autoregressive Token Generation. - Ruoyu Chen 001; Xiaoqing Guo; Kangwei Liu 003; Siyuan Liang 004; Shiming Liu; Qunli Zhang; Hua Zhang 008; Xiaochun Cao (CoRR, 2025)

An Intelligent Badminton Handle With Multinode MEMS Sensors for Explainable Motion Recognition. - Jian Li 063; Yibo Fan; Ruoyu Chen 001; Siyuan Liang 004; Yifei Feng; Ying He; Yuliang Zhao (IEEE Internet Things J., 2025)

Review of Hallucination Understanding in Large Language and Vision Models. - Zheng Yi Ho; Siyuan Liang 004; Dacheng Tao (CoRR, 2025)

Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing. - Yisong Xiao; Aishan Liu; Siyuan Liang 004; Zonghao Ying; Xianglong Liu 001; Dacheng Tao (CoRR, 2025)

GenderBias-VL: Benchmarking Gender Bias in Vision Language Models via Counterfactual Probing. - Yisong Xiao; Xianglong Liu 001; QianJia Cheng; Zhenfei Yin; Siyuan Liang 004; Jiapeng Li; Jing Shao; Aishan Liu; Dacheng Tao (Int. J. Comput. Vis., 2025)

Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles. - Jiangfan Liu 001; Yongkang Guo; Fangzhi Zhong; Tianyuan Zhang 004; Zonglei Jing; Siyuan Liang 004; Jiakai Wang; Mingchuan Zhang; Aishan Liu; Xianglong Liu 001 (AAAI, 2026)

SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs. - Shuhan Xu; Siyuan Liang 004; Hongling Zheng; Aishan Liu; Xinbiao Wang; Yong Luo 002; Fu Lin; Leszek Rutkowski; Dacheng Tao (AAAI, 2026)

WFCAT: Augmenting Website Fingerprinting With Channel-Wise Attention on Timing Features. - Jiajun Gong; Wei Cai; Siyuan Liang 004; Zhong Guan; Tao Wang 012; Ee-Chien Chang (IEEE Trans. Dependable Secur. Comput., 2026)

CogMorph: Cognitive Morphing Attacks for Text-to-Image Models. - Zonglei Jing; Zonghao Ying; Le Wang 014; Siyuan Liang 004; Xiaoqian Li; Mingchuan Zhang; Aishan Liu; Xianglong Liu 001; Dacheng Tao (IEEE Trans. Dependable Secur. Comput., 2026)

TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning. - Siyuan Liang 004; Jiajun Gong; Tianmeng Fang; Aishan Liu; Tao Wang 012; Xiaochun Cao; Dacheng Tao; Ee-Chien Chang (IEEE Trans. Inf. Forensics Secur., 2026)

Towards Reliable Medical LLMs: Benchmarking and Enhancing Confidence Estimation of Large Language Models in Medical Consultation. - Zhiyao Ren; Yibing Zhan; Siyuan Liang 004; Guozheng Ma; Baosheng Yu; Dacheng Tao (CoRR, 2026)

SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models. - Zonghao Ying; Aishan Liu; Siyuan Liang 004; Lei Huang 015; Jinyang Guo 002; Wenbo Zhou 004; Xianglong Liu 001; Dacheng Tao (Int. J. Comput. Vis., 2026)

BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning. - Siyuan Liang 004; Yongcheng Jing; Yingjie Wang; Jiaxing Huang; Ee-Chien Chang; Dacheng Tao (CoRR, 2026)

When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models. - Zhixiang Guo; Siyuan Liang 004; Andras Balogh; Noah Lunberry; Rong-Cheng Tu; Márk Jelasity; Dacheng Tao (CoRR, 2026)

CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models. - Shuhan Xu; Siyuan Liang 004; Hongling Zheng; Yong Luo 002; Han Hu 003; Lefei Zhang; Dacheng Tao (CoRR, 2026)

R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting. - Tianrui Lou; Siyuan Liang 004; Jiawei Liang; Yuze Gao; Xiaochun Cao (CoRR, 2026)

T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models. - Siyuan Liang 004; Jiayang Liu; Jiecheng Zhai; Tianmeng Fang; Rongcheng Tu; Aishan Liu; Xiaochun Cao; Dacheng Tao (Int. J. Comput. Vis., 2026)