SoK: Certified Robustness for Deep Neural Networks. - Linyi Li 001; Xiangyu Qi; Tao Xie 001; Bo Li 026 (CoRR, 2020)

Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks. - Nezihe Merve Gürel; Xiangyu Qi; Luka Rimanic; Ce Zhang 001; Bo Li 026 (ICML, 2021)

Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting. - Xiangyu Qi; Jifeng Zhu; Chulin Xie; Yong Yang (CoRR, 2021)

Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks. - Xiangyu Qi; Tinghao Xie; Ruizhe Pan; Jifeng Zhu; Yong Yang; Kai Bu (CVPR, 2022)

Circumventing Backdoor Defenses That Are Based on Latent Separability. - Xiangyu Qi; Tinghao Xie; Saeed Mahloujifar; Prateek Mittal (CoRR, 2022)

Fight Poison with Poison: Detecting Backdoor Poison Samples via Decoupling Benign Correlations. - Xiangyu Qi; Tinghao Xie; Saeed Mahloujifar; Prateek Mittal (CoRR, 2022)

Revisiting the Assumption of Latent Separability for Backdoor Defenses. - Xiangyu Qi; Tinghao Xie; Yiming Li; Saeed Mahloujifar; Prateek Mittal (ICLR, 2023)

Uncovering Adversarial Risks of Test-Time Adaptation. - Tong Wu; Feiran Jia; Xiangyu Qi; Jiachen T. Wang; Vikash Sehwag; Saeed Mahloujifar; Prateek Mittal (ICML, 2023)

Towards A Proactive ML Approach for Detecting Backdoor Poison Samples. - Xiangyu Qi; Tinghao Xie; Jiachen T. Wang; Tong Wu; Saeed Mahloujifar; Prateek Mittal (USENIX Security Symposium, 2023)

Visual Adversarial Examples Jailbreak Large Language Models. - Xiangyu Qi; Kaixuan Huang; Ashwinee Panda; Mengdi Wang; Prateek Mittal (CoRR, 2023)

Visual Adversarial Examples Jailbreak Aligned Large Language Models. - Xiangyu Qi; Kaixuan Huang; Ashwinee Panda; Peter Henderson 002; Mengdi Wang; Prateek Mittal (AAAI, 2024)

Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To! - Xiangyu Qi; Yi Zeng 005; Tinghao Xie; Pin-Yu Chen; Ruoxi Jia 001; Prateek Mittal; Peter Henderson 002 (ICLR, 2024)

BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection. - Tinghao Xie; Xiangyu Qi; Ping He; Yiming Li; Jiachen T. Wang; Prateek Mittal (ICLR, 2024)

Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications. - Boyi Wei; Kaixuan Huang; Yangsibo Huang; Tinghao Xie; Xiangyu Qi; Mengzhou Xia; Prateek Mittal; Mengdi Wang; Peter Henderson 002 (ICML, 2024)

BackdoorAlign: Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment. - Jiongxiao Wang; Jiazhao Li; Yiquan Li; Xiangyu Qi; Junjie Hu 001; Sharon Li 001; Patrick McDaniel; Muhao Chen 001; Bo Li 026; Chaowei Xiao (NeurIPS, 2024)

Mitigating Fine-tuning Jailbreak Attack with Backdoor Enhanced Alignment. - Jiongxiao Wang; Jiazhao Li; Yiquan Li; Xiangyu Qi; Junjie Hu 001; Yixuan Li 001; Patrick McDaniel; Muhao Chen 001; Bo Li 026; Chaowei Xiao (CoRR, 2024)

AI Risk Management Should Incorporate Both Safety and Security. - Xiangyu Qi; Yangsibo Huang; Yi Zeng 005; Edoardo Debenedetti; Jonas Geiping; Luxi He; Kaixuan Huang; Udari Madhushani; Vikash Sehwag; Weijia Shi; Boyi Wei; Tinghao Xie; et al. (CoRR, 2024)

Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks. - Chen Xiong; Xiangyu Qi; Pin-Yu Chen; Tsung-Yi Ho (CoRR, 2024)

SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal Behaviors. - Tinghao Xie; Xiangyu Qi; Yi Zeng 005; Yangsibo Huang; Udari Madhushani Sehwag; Kaixuan Huang; Luxi He; Boyi Wei; Dacheng Li; Ying Sheng 007; Ruoxi Jia 001; Bo Li 026; et al. (CoRR, 2024)

Lottery Ticket Adaptation: Mitigating Destructive Interference in LLMs. - Ashwinee Panda; Berivan Isik; Xiangyu Qi; Sanmi Koyejo; Tsachy Weissman; Prateek Mittal (CoRR, 2024)

Libra-Leaderboard: Towards Responsible AI through a Balanced Leaderboard of Safety and Capability. - Haonan Li 002; Xudong Han; Zenan Zhai; Honglin Mu; Hao Wang; Zhenxuan Zhang; Yilin Geng; Shom Lin; Renxi Wang; Artem Shelmanov; Xiangyu Qi; Yuxia Wang; et al. (CoRR, 2024)

Computer-Vision-Based Sensing Technologies for Livestock Body Dimension Measurement: A Survey. - Weihong Ma; Yi Sun; Xiangyu Qi; Xianglong Xue; Kaixuan Chang; Zhankang Xu; Mingyu Li; Rong Wang 009; Rui Meng; Qifeng Li (Sensors, 2024)

Defensive Prompt Patch: A Robust and Generalizable Defense of Large Language Models against Jailbreak Attacks. - Chen Xiong; Xiangyu Qi; Pin-Yu Chen; Tsung-Yi Ho (ACL (Findings), 2025)

Safety Alignment Should be Made More Than Just a Few Tokens Deep. - Xiangyu Qi; Ashwinee Panda; Kaifeng Lyu; Xiao Ma 010; Subhrajit Roy; Ahmad Beirami; Prateek Mittal; Peter Henderson 002 (ICLR, 2025)

On Evaluating the Durability of Safeguards for Open-Weight LLMs. - Xiangyu Qi; Boyi Wei; Nicholas Carlini; Yangsibo Huang; Tinghao Xie; Luxi He; Matthew Jagielski; Milad Nasr; Prateek Mittal; Peter Henderson 002 (ICLR, 2025)

SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal. - Tinghao Xie; Xiangyu Qi; Yi Zeng 005; Yangsibo Huang; Udari Madhushani Sehwag; Kaixuan Huang; Luxi He; Boyi Wei; Dacheng Li; Ying Sheng 007; Ruoxi Jia 001; Bo Li 026; et al. (ICLR, 2025)

OrbitText: A Hybrid Prediction System for Efficient and Effortless Text Entry in Virtual Reality. - Zihao Li; Dongdong Weng; Xiaonuo Dongye; Jie Hao; Xiangyu Qi (VR Workshops, 2025)

The Deployment of End-to-End Audio Language Models Should Take into Account the Principle of Least Privilege. - Luxi He; Xiangyu Qi; Michel Liao; Inyoung Cheong; Prateek Mittal; Danqi Chen 001; Peter Henderson 002 (CoRR, 2025)

Drone object detection incorporating multi-head mixed self-attention and dynamic regression mapping loss function. - Qinghua Su; Jianhong Mu; Sheng Xu; Kaizheng Wan; Xiangyu Qi; Zhichao Zhang; Juntao Li (J. Real Time Image Process., 2025)