Using Non-invertible Data Transformations to Build Adversary-Resistant Deep Neural Networks. - Qinglong Wang 003; Wenbo Guo 002; Alexander G. Ororbia II; Xinyu Xing 001; Lin Lin 003; C. Lee Giles; Xue Liu 001; Peng Liu 005; Gang Xiong 001 (CoRR, 2016)

Learning Adversary-Resistant Deep Neural Networks. - Qinglong Wang 003; Wenbo Guo 002; Kaixuan Zhang; Alexander G. Ororbia II; Xinyu Xing 001; C. Lee Giles; Xue Liu 001 (CoRR, 2016)

Random Feature Nullification for Adversary Resistant Deep Architecture. - Qinglong Wang 003; Wenbo Guo 002; Kaixuan Zhang; Xinyu Xing 001; C. Lee Giles; Xue Liu 001 (CoRR, 2016)

Adversary Resistant Deep Neural Networks with an Application to Malware Detection. - Qinglong Wang 003; Wenbo Guo 002; Kaixuan Zhang; Alexander G. Ororbia II; Xinyu Xing 001; Xue Liu 001; C. Lee Giles (KDD, 2017)

Towards Interrogating Discriminative Machine Learning Models. - Wenbo Guo 002; Kaixuan Zhang; Lin Lin 003; Sui Huang; Xinyu Xing 001 (CoRR, 2017)

LEMNA: Explaining Deep Learning based Security Applications. - Wenbo Guo 002; Dongliang Mu; Jun Xu 024; Purui Su; Gang Wang 011; Xinyu Xing 001 (CCS, 2018)

Defending Against Adversarial Samples Without Security through Obscurity. - Wenbo Guo 002; Qinglong Wang 003; Kaixuan Zhang; Alexander G. Ororbia II; Sui Huang; Xue Liu 001; C. Lee Giles; Lin Lin 003; Xinyu Xing 001 (ICDM, 2018)

Explaining Deep Learning Models - A Bayesian Non-parametric Approach. - Wenbo Guo 002; Sui Huang; Yunzhe Tao; Xinyu Xing 001; Lin Lin 003 (NeurIPS, 2018)

Active learning support vector machines with low-rank transformation. - Liang Gong; Wenbo Guo 002; Yupu Yang (Intell. Data Anal., 2018)

RENN: Efficient Reverse Execution with Neural-Network-Assisted Alias Analysis. - Dongliang Mu; Wenbo Guo 002; Alejandro Cuevas; Yueqi Chen 001; Jinxuan Gai; Xinyu Xing 001; Bing Mao 001; Chengyu Song (ASE, 2019)

Building Adversarial Defense with Non-invertible Data Transformations. - Wenbo Guo 002; Dongliang Mu; Ligeng Chen; Jinxuan Gai (PRICAI (3), 2019)

Towards the Detection of Inconsistencies in Public Security Vulnerability Reports. - Ying Dong; Wenbo Guo 002; Yueqi Chen 001; Xinyu Xing 001; Yuqing Zhang; Gang Wang 011 (USENIX Security Symposium, 2019)

DEEPVSA: Facilitating Value-set Analysis with Deep Learning for Postmortem Program Analysis. - Wenbo Guo 002; Dongliang Mu; Xinyu Xing 001; Min Du 003; Dawn Song (USENIX Security Symposium, 2019)

TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems. - Wenbo Guo 002; Lun Wang 001; Xinyu Xing 001; Min Du 003; Dawn Song (CoRR, 2019)

Towards Inspecting and Eliminating Trojan Backdoors in Deep Neural Networks. - Wenbo Guo 002; Lun Wang 001; Yan Xu; Xinyu Xing 001; Min Du 003; Dawn Song (ICDM, 2020)

Robust saliency maps with decoy-enhanced saliency score. - Yang Lu; Wenbo Guo 002; Xinyu Xing 001; William Stafford Noble (CoRR, 2020)

Adversarial Policy Learning in Two-player Competitive Games. - Wenbo Guo 002; Xian Wu 007; Sui Huang; Xinyu Xing 001 (ICML, 2021)

DANCE: Enhancing saliency maps using decoys. - Yang Young Lu; Wenbo Guo 002; Xinyu Xing 001; William Stafford Noble (ICML, 2021)

RNNRepair: Automatic RNN Repair via Model-based Analysis. - Xiaofei Xie; Wenbo Guo 002; Lei Ma 003; Wei Le; Jian Wang 067; Lingjun Zhou; Yang Liu 003; Xinyu Xing 001 (ICML, 2021)

BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning. - Lun Wang 001; Zaynah Javed; Xian Wu 007; Wenbo Guo 002; Xinyu Xing 001; Dawn Song (IJCAI, 2021)

FARE: Enabling Fine-grained Attack Categorization under Low-quality Labeled Data. - Junjie Liang; Wenbo Guo 002; Tongbo Luo; Vasant G. Honavar; Gang Wang 011; Xinyu Xing 001 (NDSS, 2021)

EDGE: Explaining Deep Reinforcement Learning Policies. - Wenbo Guo 002; Xian Wu 007; Usmann Khan; Xinyu Xing 001 (NeurIPS, 2021)

Adversarial Policy Training against Deep Reinforcement Learning. - Xian Wu 007; Wenbo Guo 002; Hua Wei; Xinyu Xing 001 (USENIX Security Symposium, 2021)

CADE: Detecting and Explaining Concept Drift Samples for Security Applications. - Limin Yang; Wenbo Guo 002; Qingying Hao; Arridhana Ciptadi; Ali Ahmadzadeh; Xinyu Xing 001; Gang Wang 011 (USENIX Security Symposium, 2021)

Are Shortest Rationales the Best Explanations for Human Understanding? - Hua Shen 005; Tongshuang Wu; Wenbo Guo 002; Ting-Hao Kenneth Huang (ACL (2), 2022)

In Search of netUnicorn: A Data-Collection Platform to Develop Generalizable ML Models for Network Security Problems. - Roman Beltiukov; Wenbo Guo 002; Arpit Gupta; Walter Willinger (CCS, 2023)

BIRD: Generalizable Backdoor Detection and Removal for Deep Reinforcement Learning. - Xuan Chen; Wenbo Guo 002; Guanhong Tao 001; Xiangyu Zhang 001; Dawn Song (NeurIPS, 2023)

StateMask: Explaining Deep Reinforcement Learning through State Mask. - Zelei Cheng; Xian Wu 007; Jiahao Yu 001; Wenhai Sun; Wenbo Guo 002; Xinyu Xing 001 (NeurIPS, 2023)

From Grim Reality to Practical Solution: Malware Classification in Real-World Noise. - Xian Wu 007; Wenbo Guo 002; Jia Yan; Baris Coskun; Xinyu Xing 001 (SP, 2023)

PATROL: Provable Defense against Adversarial Policy in Two-player Games. - Wenbo Guo 002; Xian Wu 007; Lun Wang 001; Xinyu Xing 001; Dawn Song (USENIX Security Symposium, 2023)

Unique Identification of 50, 000+ Virtual Reality Users from Head & Hand Motion Data. - Vivek Nair; Wenbo Guo 002; Justus Mattern; Rui Wang 110; James F. O'Brien; Louis B. Rosenberg; Dawn Song (USENIX Security Symposium, 2023)

AIRS: Explanation for Deep Reinforcement Learning based Security Applications. - Jiahao Yu 001; Wenbo Guo 002; Qi Qin; Gang Wang 011; Ting Wang 006; Xinyu Xing 001 (USENIX Security Symposium, 2023)

Inferring Private Personal Attributes of Virtual Reality Users from Head and Hand Motion Data. - Vivek Nair; Christian Rack; Wenbo Guo 002; Rui Wang 110; Shuixian Li; Brandon Huang; Atticus Cull; James F. O'Brien; Louis B. Rosenberg; Dawn Song (CoRR, 2023)

Berkeley Open Extended Reality Recordings 2023 (BOXRR-23): 4.7 Million Motion Capture Recordings from 105, 852 Extended Reality Device Users. - Vivek Nair; Wenbo Guo 002; Rui Wang 110; James F. O'Brien; Louis B. Rosenberg; Dawn Song (CoRR, 2023)

netFound: Foundation Model for Network Security. - Satyandra Guthula; Navya Battula; Roman Beltiukov; Wenbo Guo 002; Arpit Gupta (CoRR, 2023)

Deep Motion Masking for Secure, Usable, and Scalable Real-Time Anonymization of Virtual Reality Motion Data. - Vivek Nair; Wenbo Guo 002; James F. O'Brien; Louis B. Rosenberg; Dawn Song (CoRR, 2023)

A NetAI Manifesto (Part II): Less Hubris, more Humility. - Walter Willinger; Arpit Gupta; Roman Beltiukov; Wenbo Guo 002 (SIGMETRICS Perform. Evaluation Rev., 2023)

FORAY: Towards Effective Attack Synthesis against Deep Logical Vulnerabilities in DeFi Protocols. - Hongbo Wen; Hanzhi Liu; Jiaxin Song; Yanju Chen; Wenbo Guo 002; Yu Feng 001 (CCS, 2024)

SHINE: Shielding Backdoors in Deep Reinforcement Learning. - Zhuowen Yuan; Wenbo Guo 002; Jinyuan Jia 001; Bo Li 026; Dawn Song (ICML, 2024)

TextGuard: Provable Defense against Backdoor Attacks on Text Classification. - Hengzhi Pei; Jinyuan Jia 001; Wenbo Guo 002; Bo Li 026; Dawn Song (NDSS, 2024)

Data Free Backdoor Attacks. - Bochuan Cao; Jinyuan Jia 001; Chuxuan Hu; Wenbo Guo 002; Zhen Xiang; Jinghui Chen; Bo Li 026; Dawn Song (NeurIPS, 2024)

When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search. - Xuan Chen; Yuzhou Nie; Wenbo Guo 002; Xiangyu Zhang 001 (NeurIPS, 2024)

BandFuzz: A Practical Framework for Collaborative Fuzzing with Reinforcement Learning. - Wenxuan Shi; Hongwei Li; Jiahao Yu 001; Wenbo Guo 002; Xinyu Xing 001 (SBFT@ICSE, 2024)

GuideEnricher: Protecting the Anonymity of Ethereum Mixing Service Users with Deep Reinforcement Learning. - Ravindu De Silva; Wenbo Guo 002; Nicola Ruaro; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2024)

Deep Motion Masking for Secure, Usable, and Scalable Real-Time Anonymization of Ecological Virtual Reality Motion Data. - Vivek Nair; Wenbo Guo 002; James F. O'Brien; Louis B. Rosenberg; Dawn Song (VR Workshops, 2024)

Inferring Private Personal Attributes of Virtual Reality Users from Ecologically Valid Head and Hand Motion Data. - Vivek Nair; Christian Rack; Wenbo Guo 002; Rui Wang 110; Shuixian Li; Brandon Huang; Atticus Cull; James F. O'Brien; Marc Erich Latoschik; Louis B. Rosenberg; Dawn Song (VR Workshops, 2024)

TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models. - Yuzhou Nie; Yanting Wang; Jinyuan Jia 001; Michael J. De Lucia; Nathaniel D. Bastian; Wenbo Guo 002; Dawn Song (CoRR, 2024)

Enhancing Jailbreak Attack Against Large Language Models through Silent Tokens. - Jiahao Yu 001; Haozheng Luo; Jerry Yao-Chieh Hu; Wenbo Guo 002; Han Liu 001; Xinyu Xing 001 (CoRR, 2024)

RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs. - Xuan Chen; Yuzhou Nie; Lu Yan; Yunshu Mao; Wenbo Guo 002; Xiangyu Zhang 001 (CoRR, 2024)

BlockFound: Customized blockchain foundation model for anomaly detection. - Jiahao Yu 001; Xian Wu 007; Hao Liu; Wenbo Guo 002; Xinyu Xing 001 (CoRR, 2024)

SecCodePLT: A Unified Platform for Evaluating the Security of Code GenAI. - Yu Yang 011; Yuzhou Nie; Zhun Wang; Yuheng Tang; Wenbo Guo 002; Bo Li 026; Dawn Song (CoRR, 2024)

PrivAgent: Agentic-based Red-teaming for LLM Privacy Leakage. - Yuzhou Nie; Zhun Wang; Ye Yu; Xian Wu 007; Xuandong Zhao; Wenbo Guo 002; Dawn Song (CoRR, 2024)

Berkeley Open Extended Reality Recordings 2023 (BOXRR-23): 4.7 Million Motion Capture Recordings from 105,000 XR Users. - Vivek Nair; Wenbo Guo 002; Rui Wang 110; James F. O'Brien; Louis B. Rosenberg; Dawn Song (IEEE Trans. Vis. Comput. Graph., 2024)

F-Fidelity: A Robust Framework for Faithfulness Evaluation of Explainable AI. - Xu Zheng 003; Farhad Shirani 001; Zhuomin Chen; Chaohao Lin; Wei Cheng 002; Wenbo Guo 002; Dongsheng Luo (ICLR, 2025)

PatchPilot: A Stable and Cost-Efficient Agentic Patching Framework. - Hongwei Li; Yuheng Tang; Shiqi Wang 032; Wenbo Guo 002 (CoRR, 2025)

MELON: Indirect Prompt Injection Defense via Masked Re-execution and Tool Comparison. - Kaijie Zhu; Xianjun Yang; Jindong Wang 001; Wenbo Guo 002; William Yang Wang (CoRR, 2025)

Frontier AI's Impact on the Cybersecurity Landscape. - Wenbo Guo 002; Yujin Potter; Tianneng Shi; Zhun Wang; Andy Zhang; Dawn Song (CoRR, 2025)

Progent: Programmable Privilege Control for LLM Agents. - Tianneng Shi; Jingxuan He; Zhun Wang; Linyu Wu; Hongwei Li; Wenbo Guo 002; Dawn Song (CoRR, 2025)

AGENTFUZZER: Generic Black-Box Fuzzing for Indirect Prompt Injection against LLM Agents. - Zhun Wang; Vincent Siu; Zhe Ye; Tianneng Shi; Yuzhou Nie; Xuandong Zhao; Chenguang Wang 001; Wenbo Guo 002; Dawn Song (CoRR, 2025)

Co-PatcheR: Collaborative Software Patching with Component(s)-specific Small Reasoning Models. - Yuheng Tang; Hongwei Li; Kaijie Zhu; Michael Yang; Yangruibo Ding; Wenbo Guo 002 (CoRR, 2025)

BandFuzz: An ML-powered Collaborative Fuzzing Framework. - Wenxuan Shi; Hongwei Li; Jiahao Yu 001; Xinqian Sun; Wenbo Guo 002; Xinyu Xing 001 (CoRR, 2025)

PromptArmor: Simple yet Effective Prompt Injection Defenses. - Tianneng Shi; Kaijie Zhu; Zhun Wang; Yuqi Jia; Will Cai; Weida Liang; Haonan Wang; Hend Alzahrani; Joshua Lu; Kenji Kawaguchi; Basel Alomair; Xuandong Zhao; et al. (CoRR, 2025)