Recognizing Minimal Facial Sketch by Generating Photorealistic Faces With the Guidance of Descriptive Attributes. - Xiao Yang 028; Hang Su 006; Qin Zhou 002; Xinzhe Li; Shibao Zheng (ICASSP, 2018)

Recognizing Facial Sketches by Generating Photorealistic Faces Guided by Descriptive Attributes. - Xinzhe Li; Xiao Yang 028; Hang Su 006; Qin Zhou 002; Shibao Zheng (IEEE Access, 2018)

Design and Interpretation of Universal Adversarial Patches in Face Detection. - Xiao Yang 028; Fangyun Wei; Hongyang Zhang 001; Xiang Ming; Jun Zhu 001 (CoRR, 2019)

Benchmarking Adversarial Robustness. - Yinpeng Dong; Qi-An Fu; Xiao Yang 028; Tianyu Pang; Hang Su 006; Zihao Xiao 002; Jun Zhu 001 (CoRR, 2019)

Benchmarking Adversarial Robustness on Image Classification. - Yinpeng Dong; Qi-An Fu; Xiao Yang 028; Tianyu Pang; Hang Su 006; Zihao Xiao 002; Jun Zhu 001 (CVPR, 2020)

Design and Interpretation of Universal Adversarial Patches in Face Detection. - Xiao Yang 028; Fangyun Wei; Hongyang Zhang 001; Jun Zhu 001 (ECCV (17), 2020)

Boosting Adversarial Training with Hypersphere Embedding. - Tianyu Pang; Xiao Yang 028; Yinpeng Dong; Taufik Xu; Jun Zhu 001; Hang Su 006 (NeurIPS, 2020)

Boosting Adversarial Training with Hypersphere Embedding. - Tianyu Pang; Xiao Yang 028; Yinpeng Dong; Kun Xu 004; Hang Su 006; Jun Zhu 001 (CoRR, 2020)

Towards Privacy Protection by Generating Adversarial Identity Masks. - Xiao Yang 028; Yinpeng Dong; Tianyu Pang; Jun Zhu 001; Hang Su 006 (CoRR, 2020)

Delving into the Adversarial Robustness on Face Recognition. - Xiao Yang 028; Dingcheng Yang; Yinpeng Dong; Wenjian Yu; Hang Su 006; Jun Zhu 001 (CoRR, 2020)

BayesAdapter: Being Bayesian, Inexpensively and Robustly, via Bayeisan Fine-tuning. - Zhijie Deng; Xiao Yang 028; Hao Zhang 025; Yinpeng Dong; Jun Zhu 001 (CoRR, 2020)

LiBRe: A Practical Bayesian Approach to Adversarial Detection. - Zhijie Deng; Xiao Yang 028; Shizhen Xu; Hang Su 006; Jun Zhu 001 (CVPR, 2021)

Unsupervised Part Segmentation Through Disentangling Appearance and Shape. - Shilong Liu; Lei Zhang 001; Xiao Yang 028; Hang Su 006; Jun Zhu 001 (CVPR, 2021)

Black-box Detection of Backdoor Attacks with Limited Information and Data. - Yinpeng Dong; Xiao Yang 028; Zhijie Deng; Tianyu Pang; Zihao Xiao 002; Hang Su 006; Jun Zhu 001 (ICCV, 2021)

Towards Face Encryption by Generating Adversarial Identity Masks. - Xiao Yang 028; Yinpeng Dong; Tianyu Pang; Hang Su 006; Jun Zhu 001; Yuefeng Chen; Hui Xue 001 (ICCV, 2021)

Bag of Tricks for Adversarial Training. - Tianyu Pang; Xiao Yang 028; Yinpeng Dong; Hang Su 006; Jun Zhu 001 (ICLR, 2021)

Accumulative Poisoning Attacks on Real-time Data. - Tianyu Pang; Xiao Yang 028; Yinpeng Dong; Hang Su 006; Jun Zhu 001 (NeurIPS, 2021)

Query2Label: A Simple Transformer Way to Multi-Label Classification. - Shilong Liu; Lei Zhang 001; Xiao Yang 028; Hang Su 006; Jun Zhu 001 (CoRR, 2021)

Adversarial Semantic Contour for Object Detection. - Yichi Zhang; Zijian Zhu; Xiao Yang 028; Jun Zhu 001 (CoRR, 2021)

Adversarial Attacks on ML Defense Models Competition. - Yinpeng Dong; Qi-An Fu; Xiao Yang 028; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001; Jiayu Tang; Yuefeng Chen; Xiaofeng Mao; Yuan He 011; Hui Xue 001; et al. (CoRR, 2021)

Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness. - Xiao Yang 028; Yinpeng Dong; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001 (CoRR, 2021)

Unrestricted Adversarial Attacks on ImageNet Competition. - Yuefeng Chen; Xiaofeng Mao; Yuan He 011; Hui Xue 001; Chao Li; Yinpeng Dong; Qi-An Fu; Xiao Yang 028; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001; et al. (CoRR, 2021)

Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks. - Xiao Yang 028; Yinpeng Dong; Tianyu Pang; Hang Su 006; Jun Zhu 001 (ECCV (4), 2022)

Exploring Memorization in Adversarial Training. - Yinpeng Dong; Ke Xu; Xiao Yang 028; Tianyu Pang; Zhijie Deng; Hang Su 006; Jun Zhu 001 (ICLR, 2022)

DAB-DETR: Dynamic Anchor Boxes are Better Queries for DETR. - Shilong Liu; Feng Li 040; Hao Zhang 097; Xiao Yang 028; Xianbiao Qi; Hang Su 006; Jun Zhu 001; Lei Zhang 001 (ICLR, 2022)

Robustness and Accuracy Could Be Reconcilable by (Proper) Definition. - Tianyu Pang; Min Lin; Xiao Yang 028; Jun Zhu 001; Shuicheng Yan (ICML, 2022)

Controllable Evaluation and Generation of Physical Adversarial Patch on Face Recognition. - Xiao Yang 028; Yinpeng Dong; Tianyu Pang; Zihao Xiao 002; Hang Su 006; Jun Zhu 001 (CoRR, 2022)

Towards generalizable detection of face forgery via self-guided model-agnostic learning. - Xiao Yang 028; Shilong Liu; Yinpeng Dong; Hang Su 006; Lei Zhang 001; Jun Zhu 001 (Pattern Recognit. Lett., 2022)

Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Driving. - Yinpeng Dong; Caixin Kang; Jinlai Zhang; Zijian Zhu; Yikai Wang 001; Xiao Yang 028; Hang Su 006; Xingxing Wei 001; Jun Zhu 001 (CVPR, 2023)

Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition. - Xiao Yang 028; Chang Liu 077; Longlong Xu; Yikai Wang 001; Yinpeng Dong; Ning Chen 002; Hang Su 006; Jun Zhu 001 (CVPR, 2023)

Root Pose Decomposition Towards Generic Non-rigid 3D Reconstruction with Monocular Videos. - Yikai Wang 001; Yinpeng Dong; Fuchun Sun 001; Xiao Yang 028 (ICCV, 2023)

On Evaluating Adversarial Robustness of Large Vision-Language Models. - Yunqing Zhao; Tianyu Pang; Chao Du; Xiao Yang 028; Chongxuan Li; Ngai-Man Cheung; Min Lin (NeurIPS, 2023)

A Recipe for Watermarking Diffusion Models. - Yunqing Zhao; Tianyu Pang; Chao Du; Xiao Yang 028; Ngai-Man Cheung; Min Lin (CoRR, 2023)

How Robust is Google's Bard to Adversarial Image Attacks? - Yinpeng Dong; Huanran Chen; Jiawei Chen; Zhengwei Fang; Xiao Yang 028; Yichi Zhang; Yu Tian; Hang Su 006; Jun Zhu 001 (CoRR, 2023)

AdvFAS: A robust face anti-spoofing framework against adversarial examples. - Jiawei Chen; Xiao Yang 028; Heng Yin; Mingzhi Ma; Bihui Chen; Jianteng Peng; Yandong Guo; Zhaoxia Yin; Hang Su 006 (Comput. Vis. Image Underst., 2023)

Towards Transferable Targeted 3D Adversarial Attack in the Physical World. - Yao Huang; Yinpeng Dong; Shouwei Ruan; Xiao Yang 028; Hang Su 006; Xingxing Wei 001 (CVPR, 2024)

Rethinking Model Ensemble in Transfer-based Adversarial Attacks. - Huanran Chen; Yichi Zhang; Yinpeng Dong; Xiao Yang 028; Hang Su 006; Jun Zhu 001 (ICLR, 2024)

Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches. - Lingxuan Wu; Xiao Yang 028; Yinpeng Dong; Liuwei Xie; Hang Su 006; Jun Zhu 001 (ICLR, 2024)

Robust Classification via a Single Diffusion Model. - Huanran Chen; Yinpeng Dong; Zhengyi Wang; Xiao Yang 028; Chengqi Duan; Hang Su 006; Jun Zhu 001 (ICML, 2024)

Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior. - Shuyu Cheng; Yibo Miao; Yinpeng Dong; Xiao Yang 028; Xiao-Shan Gao; Jun Zhu 001 (ICML, 2024)

Diffusion Models are Certifiably Robust Classifiers. - Huanran Chen; Yinpeng Dong; Shitong Shao; Zhongkai Hao; Xiao Yang 028; Hang Su 006; Jun Zhu 001 (NeurIPS, 2024)

Improving Robustness of 3D Point Cloud Recognition from a Fourier Perspective. - Yibo Miao; Yinpeng Dong; Jinlai Zhang; Lijia Yu; Xiao Yang 028; Xiao-Shan Gao (NeurIPS, 2024)

MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models. - Yichi Zhang; Yao Huang; Yitong Sun 002; Chang Liu 077; Zhe Zhao; Zhengwei Fang; Yifan Wang; Huanran Chen; Xiao Yang 028; Xingxing Wei 001; Hang Su 006; Yinpeng Dong; et al. (NeurIPS, 2024)

Your Diffusion Model is Secretly a Certifiably Robust Classifier. - Huanran Chen; Yinpeng Dong; Shitong Shao; Zhongkai Hao; Xiao Yang 028; Hang Su 006; Jun Zhu 001 (CoRR, 2024)

BSPA: Exploring Black-box Stealthy Prompt Attacks against Image Generators. - Yu Tian; Xiao Yang 028; Yinpeng Dong; Heming Yang 004; Hang Su 006; Jun Zhu 001 (CoRR, 2024)

FaceCat: Enhancing Face Recognition Security with a Unified Generative Model Framework. - Jiawei Chen; Xiao Yang 028; Yinpeng Dong; Hang Su 006; Jianteng Peng; Zhaoxia Yin (CoRR, 2024)

AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization. - Jiawei Chen; Xiao Yang 028; Zhengwei Fang; Yu Tian; Yinpeng Dong; Zhaoxia Yin; Hang Su 006 (CoRR, 2024)

Benchmarking Trustworthiness of Multimodal Large Language Models: A Comprehensive Study. - Yichi Zhang; Yao Huang; Yitong Sun 002; Chang Liu 077; Zhe Zhao; Zhengwei Fang; Yifan Wang; Huanran Chen; Xiao Yang 028; Xingxing Wei 001; Hang Su 006; Yinpeng Dong; et al. (CoRR, 2024)

Efficient Adversarial Attack Strategy Against 3D Object Detection in Autonomous Driving Systems. - Hai Chen; Huanqian Yan; Xiao Yang 028; Hang Su 006; Shu Zhao; Fulan Qian (IEEE Trans. Intell. Transp. Syst., 2024)

AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization via Multi-LLMs. - Jiawei Chen; Xiao Yang 028; Zhengwei Fang; Yu Tian; Yinpeng Dong; Zhaoxia Yin; Hang Su 006 (NAACL (Findings), 2025)

CamoEnv: Transferable and environment-consistent adversarial camouflage in autonomous driving. - Zijian Zhu; Xiao Yang 028; Hang Su 006; Shibao Zheng (Pattern Recognit. Lett., 2025)

Face3DAdv: Exploiting Robust Adversarial 3D Patches on Physical Face Recognition. - Xiao Yang 028; Longlong Xu; Tianyu Pang; Yinpeng Dong; Yikai Wang 001; Hang Su 006; Jun Zhu 001 (Int. J. Comput. Vis., 2025)

A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking. - Chang Liu 077; Yinpeng Dong; Wenzhao Xiang 001; Xiao Yang 028; Hang Su 006; Jun Zhu 001; Yuefeng Chen; Yuan He 011; Hui Xue 001; Shibao Zheng (Int. J. Comput. Vis., 2025)

ANF: Crafting Transferable Adversarial Point Clouds via Adversarial Noise Factorization. - Hai Chen; Shu Zhao; Xiao Yang 028; Huanqian Yan; Yuan He 011; Hui Xue 001; Fulan Qian; Hang Su 006 (IEEE Trans. Big Data, 2025)

MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environments. - Xiao Yang 028; Jiawei Chen; Jun Luo; Zhengwei Fang; Yinpeng Dong; Hang Su 006; Jun Zhu 001 (CoRR, 2025)

Exploring the Secondary Risks of Large Language Models. - Jiawei Chen; Zhengwei Fang; Xiao Yang 028; Chao Yu; Zhaoxia Yin; Hang Su 006 (CoRR, 2025)

A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents. - Hang Su 006; Jun Luo; Chang Liu 077; Xiao Yang 028; Yichi Zhang; Yinpeng Dong; Jun Zhu 001 (CoRR, 2025)

Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation. - Yichi Zhang; Yao Huang; Yifan Wang; Yitong Sun 002; Chang Liu 077; Zhe Zhao; Zhengwei Fang; Huanran Chen; Xiao Yang 028; Xingxing Wei 001; Hang Su 006; Yinpeng Dong; et al. (CoRR, 2025)

Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments. - Xiao Yang 028; Lingxuan Wu; Lizhong Wang; Chengyang Ying; Hang Su 006; Jun Zhu 001 (IEEE Trans. Pattern Anal. Mach. Intell., 2025)