AdvHash: Set-to-set Targeted Attack on Deep Hashing with One Single Adversarial Patch. - Shengshan Hu; Yechao Zhang; Xiaogeng Liu; Leo Yu Zhang; Minghui Li; Hai Jin 001 (ACM Multimedia, 2021)

Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer. - Shengshan Hu; Xiaogeng Liu; Yechao Zhang; Minghui Li; Leo Yu Zhang; Hai Jin 001; Libing Wu (CVPR, 2022)

Towards Efficient Data-Centric Robust Machine Learning with Noise-based Augmentation. - Xiaogeng Liu; Haoyu Wang; Yechao Zhang; Fangzhou Wu; Shengshan Hu (CoRR, 2022)

Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency. - Xiaogeng Liu; Minghui Li; Haoyu Wang; Shengshan Hu; Dengpan Ye; Hai Jin 001; Libing Wu; Chaowei Xiao (CVPR, 2023)

PointCRT: Detecting Backdoor in 3D Point Cloud via Corruption Robustness. - Shengshan Hu; Wei Liu 004; Minghui Li; Yechao Zhang; Xiaogeng Liu; Xianlong Wang 001; Leo Yu Zhang; Junhui Hou (ACM Multimedia, 2023)

Why Does Little Robustness Help? Understanding Adversarial Transferability From Surrogate Training. - Yechao Zhang; Shengshan Hu; Leo Yu Zhang; Junyu Shi; Minghui Li; Xiaogeng Liu; Wei Wan; Hai Jin 001 (CoRR, 2023)

DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions. - Fangzhou Wu; Xiaogeng Liu; Chaowei Xiao (CoRR, 2023)

AdaShield : Safeguarding Multimodal Large Language Models from Structure-Based Attack via Adaptive Shield Prompting. - Yu Wang; Xiaogeng Liu; Yu Li; Muhao Chen 001; Chaowei Xiao (ECCV (20), 2024)

AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models. - Xiaogeng Liu; Nan Xu; Muhao Chen 001; Chaowei Xiao (ICLR, 2024)

Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability. - Yechao Zhang; Shengshan Hu; Leo Yu Zhang; Junyu Shi; Minghui Li; Xiaogeng Liu; Wei Wan; Hai Jin 001 (SP, 2024)

Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models. - Zhiyuan Yu 001; Xiaogeng Liu; Shunning Liang; Zach Cameron; Chaowei Xiao; Ning Zhang 017 (USENIX Security Symposium, 2024)

Automatic and Universal Prompt Injection Attacks against Large Language Models. - Xiaogeng Liu; Zhiyuan Yu 001; Yizhe Zhang; Ning Zhang 017; Chaowei Xiao (CoRR, 2024)

JailBreakV-28K: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks. - Weidi Luo; Siyuan Ma; Xiaogeng Liu; Xiaoyu Guo; Chaowei Xiao (CoRR, 2024)

Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Characte. - Siyuan Ma; Weidi Luo; Yu Wang; Xiaogeng Liu; Muhao Chen 001; Bo Li 026; Chaowei Xiao (CoRR, 2024)

InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models. - Hao Li; Xiaogeng Liu; Chaowei Xiao (CoRR, 2024)

PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free. - Hao Li; Xiaogeng Liu; Ning Zhang; Chaowei Xiao (ACL (1), 2025)

AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection. - Weidi Luo; Shenghong Dai; Xiaogeng Liu; Suman Banerjee 001; Huan Sun 001; Muhao Chen 001; Chaowei Xiao (ACL (1), 2025)

AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs. - Xiaogeng Liu; Peiran Li; G. Edward Suh; Yevgeniy Vorobeychik; Zhuoqing Mao 001; Somesh Jha; Patrick McDaniel; Huan Sun 001; Bo Li 026; Chaowei Xiao (ICLR, 2025)

MuirBench: A Comprehensive Benchmark for Robust Multi-image Understanding. - Fei Wang 060; Xingyu Fu; James Y. Huang; Zekun Li 007; Qin Liu 010; Xiaogeng Liu; Mingyu Derek Ma; Nan Xu; Wenxuan Zhou; Kai Zhang 008; Tianyi Lorena Yan; Wenjie Jacky Mo; et al. (ICLR, 2025)

Can Watermarks be Used to Detect LLM IP Infringement For Free? - Zhengyue Zhao; Xiaogeng Liu; Somesh Jha; Patrick McDaniel; Bo Li 026; Chaowei Xiao (ICLR, 2025)

RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process. - Peiran Wang; Xiaogeng Liu; Chaowei Xiao (NAACL (Findings), 2025)

CVE-Bench: Benchmarking LLM-based Software Engineering Agent's Ability to Repair Real-World CVE Vulnerabilities. - Peiran Wang; Xiaogeng Liu; Chaowei Xiao (NAACL (Long Papers), 2025)

Doxing via the Lens: Revealing Privacy Leakage in Image Geolocation for Agentic Multi-Modal Large Reasoning Model. - Weidi Luo; Qiming Zhang; Tianyu Lu; Xiaogeng Liu; Yue Zhao 016; Zhen Xiang; Chaowei Xiao (CoRR, 2025)

OET: Optimization-based prompt injection Evaluation Toolkit. - Jinsheng Pan; Xiaogeng Liu; Chaowei Xiao (CoRR, 2025)

DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agents. - Hao Li; Xiaogeng Liu; Hung-Chun Chiu; Dianqi Li; Ning Zhang; Chaowei Xiao (CoRR, 2025)

MetaAgent: Automatically Constructing Multi-Agent Systems Based on Finite State Machines. - Yaolun Zhang; Xiaogeng Liu; Chaowei Xiao (CoRR, 2025)