Differential Testing of Cross Deep Learning Framework APIs: Revealing Inconsistencies and Vulnerabilities. - Zizhuang Deng; Guozhu Meng; Kai Chen 012; Tong Liu 027; Lu Xiang; Chunyang Chen 001 (USENIX Security Symposium, 2023)

Demystifying RCE Vulnerabilities in LLM-Integrated Apps. - Tong Liu 027; Zizhuang Deng; Guozhu Meng; Yuekang Li; Kai Chen 012 (CCS, 2024)

Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction. - Tong Liu 027; Yingjie Zhang; Zhe Zhao 007; Yinpeng Dong; Guozhu Meng; Kai Chen 012 (USENIX Security Symposium, 2024)

Attack as Detection: Using Adversarial Attack Methods to Detect Abnormal Examples. - Zhe Zhao 007; Guangke Chen; Tong Liu 027; Taishan Li; Fu Song; Jingyi Wang 004; Jun Sun 001 (ACM Trans. Softw. Eng. Methodol., 2024)

Align in Depth: Defending Jailbreak Attacks via Progressive Answer Detoxification. - Yingjie Zhang; Tong Liu 027; Zhe Zhao 007; Guozhu Meng; Kai Chen 012 (CoRR, 2025)

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again. - Tong Liu 027; Guozhu Meng; Peng Zhou; Zizhuang Deng; Shuaiyin Yao; Kai Chen 012 (CoRR, 2025)