Deep Neural Network Security From a Hardware Perspective. - Tong Zhou 002; Yuheng Zhang; Shijin Duan; Yukui Luo; Xiaolin Xu 001 (NANOARCH, 2021)

ObfuNAS: A Neural Architecture Search-Based DNN Obfuscation Approach. - Tong Zhou 002; Shaolei Ren; Xiaolin Xu 001 (ICCAD, 2022)

MirrorNet: A TEE-Friendly Framework for Secure On-Device DNN Inference. - Ziyu Liu; Yukui Luo; Shijin Duan; Tong Zhou 002; Xiaolin Xu 001 (ICCAD, 2023)

AutoReP: Automatic ReLU Replacement for Fast Private Network Inference. - Hongwu Peng; Shaoyi Huang; Tong Zhou 002; Yukui Luo; Chenghong Wang; Zigeng Wang; Jiahui Zhao; Xi Xie; Ang Li 006; Tony Geng; Kaleel Mahmood; Wujie Wen; et al. (ICCV, 2023)

NNSplitter: An Active Defense Solution for DNN Model via Automated Weight Obfuscation. - Tong Zhou 002; Yukui Luo; Shaolei Ren; Xiaolin Xu 001 (ICML, 2023)

NNSplitter: An Active Defense Solution to DNN Model via Automated Weight Obfuscation. - Tong Zhou 002; Yukui Luo; Shaolei Ren; Xiaolin Xu 001 (CoRR, 2023)

TBNet: A Neural Architectural Defense Framework Facilitating DNN Model Protection in Trusted Execution Environments. - Ziyu Liu; Tong Zhou 002; Yukui Luo; Xiaolin Xu 001 (DAC, 2024)

AdaPI: Facilitating DNN Model Adaptivity for Efficient Private Inference in Edge Computing. - Tong Zhou 002; Jiahui Zhao; Yukui Luo; Xi Xie; Wujie Wen; Caiwen Ding; Xiaolin Xu 001 (ICCAD, 2024)

ArchLock: Locking DNN Transferability at the Architecture Level with a Zero-Cost Binary Predictor. - Tong Zhou 002; Shaolei Ren; Xiaolin Xu 001 (ICLR, 2024)

Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature. - Tong Zhou 002; Xuandong Zhao; Xiaolin Xu 001; Shaolei Ren (NeurIPS, 2024)

Probe-Me-Not: Protecting Pre-trained Encoders from Malicious Probing. - Ruyi Ding; Tong Zhou 002; Lili Su; Aidong Adam Ding; Xiaolin Xu 001; Yunsi Fei (NDSS, 2025)

ProDiF: Protecting Domain-Invariant Features to Secure Pre-Trained Models Against Extraction. - Tong Zhou 002; Shijin Duan; Gaowen Liu; Charles Fleming; Ramana Rao Kompella; Shaolei Ren; Xiaolin Xu 001 (CoRR, 2025)