The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks. - Yuheng Zhang; Ruoxi Jia 001; Hengzhi Pei; Wenxiao Wang 002; Bo Li 026; Dawn Song (CVPR, 2020)

REFIT: A Unified Watermark Removal Framework For Deep Learning Systems With Limited Data. - Xinyun Chen; Wenxiao Wang 002; Chris Bender; Yiming Ding; Ruoxi Jia 001; Bo Li 026; Dawn Song (AsiaCCS, 2021)

On Feature Decorrelation in Self-Supervised Learning. - Tianyu Hua; Wenxiao Wang 002; Zihui Xue; Sucheng Ren; Yue Wang 041; Hang Zhao (ICCV, 2021)

DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing. - Wenxiao Wang 002; Tianhao Wang 013; Lun Wang 001; Nanqing Luo; Pan Zhou; Dawn Song; Ruoxi Jia 001 (Proc. Priv. Enhancing Technol., 2021)

Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation. - Wenxiao Wang 002; Alexander Levine 001; Soheil Feizi (ICML, 2022)

Lethal Dose Conjecture on Data Poisoning. - Wenxiao Wang 002; Alexander Levine 001; Soheil Feizi (NeurIPS, 2022)

Spuriosity Rankings: Sorting Data for Spurious Correlation Robustness. - Mazda Moayeri; Wenxiao Wang 002; Sahil Singla 002; Soheil Feizi (CoRR, 2022)

Temporal Robustness against Data poisoning. - Wenxiao Wang 002; Soheil Feizi (NeurIPS, 2023)

Spuriosity Rankings: Sorting Data to Measure and Mitigate Biases. - Mazda Moayeri; Wenxiao Wang 002; Sahil Singla 002; Soheil Feizi (NeurIPS, 2023)

Can AI-Generated Text be Reliably Detected? - Vinu Sankar Sadasivan; Aounon Kumar; Sriram Balasubramanian; Wenxiao Wang 002; Soheil Feizi (CoRR, 2023)

Adversarial Robustness of Learning-based Static Malware Classifiers. - Shoumik Saha; Wenxiao Wang 002; Yigitcan Kaya; Soheil Feizi (CoRR, 2023)

On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks. - Wenxiao Wang 002; Soheil Feizi (CoRR, 2023)

Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks. - Mehrdad Saberi; Vinu Sankar Sadasivan; Keivan Rezaei; Aounon Kumar; Atoosa Malemir Chegini; Wenxiao Wang 002; Soheil Feizi (ICLR, 2024)

DRSM: De-Randomized Smoothing on Malware Classifier Providing Certified Robustness. - Shoumik Saha; Wenxiao Wang 002; Yigitcan Kaya; Soheil Feizi; Tudor Dumitras (ICLR, 2024)

Towards Fundamentally Scalable Model Selection: Asymptotically Fast Update and Selection. - Wenxiao Wang 002; Weiming Zhuang; Lingjuan Lyu (CoRR, 2024)

Can AI-Generated Text be Reliably Detected? Stress Testing AI Text Detectors Under Various Attacks. - Vinu Sankar Sadasivan; Aounon Kumar; Sriram Balasubramanian; Wenxiao Wang 002; Soheil Feizi (Trans. Mach. Learn. Res., 2025)

Chain-of-Defensive-Thought: Structured Reasoning Elicits Robustness in Large Language Models against Reference Corruption. - Wenxiao Wang 002; Parsa Hosseini; Soheil Feizi (CoRR, 2025)

Gaming Tool Preferences in Agentic LLMs. - Kazem Faghih; Wenxiao Wang 002; Yize Cheng; Siddhant Bharti; Gaurang Sriramanan; Sriram Balasubramanian; Parsa Hosseini; Soheil Feizi (CoRR, 2025)

DyePack: Provably Flagging Test Set Contamination in LLMs Using Backdoors. - Yize Cheng; Wenxiao Wang 002; Mazda Moayeri; Soheil Feizi (CoRR, 2025)