New Publicly Verifiable Computation for Batch Matrix Multiplication. - Xiaoyu Zhang 010; Tao Jiang 017; Kuan-Ching Li; Xiaofeng Chen 001 (GPC, 2017)

Security Analysis of "PSLP: Privacy-Preserving Single-Layer Perceptron Learning for e-Healthcare". - Jingjing Wang; Xiaoyu Zhang 010; Jingjing Guo; Jianfeng Wang 001 (IACR Cryptol. ePrint Arch., 2017)

DedupDUM: Secure and scalable data deduplication with dynamic user management. - Haoran Yuan; Xiaofeng Chen 001; Tao Jiang 017; Xiaoyu Zhang 010; Zheng Yan 002; Yang Xiang 001 (Inf. Sci., 2018)

EPSLP: Efficient and privacy-preserving single-layer perceptron learning in cloud computing. - Jingjing Wang; Xiaoyu Zhang 010; Xiaoling Tao; Jianfeng Wang 001 (J. High Speed Networks, 2018)

Verifiable privacy-preserving single-layer perceptron training scheme in cloud computing. - Xiaoyu Zhang 010; Xiaofeng Chen 001; Jianfeng Wang 001; Zhihui Zhan; Jin Li 002 (Soft Comput., 2018)

Secure Multiparty Learning from Aggregation of Locally Trained Models. - Xu Ma; Cunmei Ji; Xiaoyu Zhang 010; Jianfeng Wang 001; Jin Li 002; Kuan-Ching Li (ML4CS, 2019)

Non-interactive privacy-preserving neural network prediction. - Xu Ma; Xiaofeng Chen 001; Xiaoyu Zhang 010 (Inf. Sci., 2019)

New publicly verifiable computation for batch matrix multiplication. - Xiaoyu Zhang 010; Tao Jiang 017; Kuan-Ching Li; Aniello Castiglione; Xiaofeng Chen 001 (Inf. Sci., 2019)

A High-Recall Membership Inference Attack Based on Confidence-Thresholding Method with Relaxed Assumption. - Lulu Wang; Xiaoyu Zhang 010; Yi Xie 011; Xu Ma; Meixia Miao (ML4CS (2), 2020)

Secure multiparty learning from the aggregation of locally trained models. - Xu Ma; Cunmei Ji; Xiaoyu Zhang 010; Jianfeng Wang 001; Jin Li 002; Kuan-Ching Li; Xiaofeng Chen 001 (J. Netw. Comput. Appl., 2020)

DeepPAR and DeepDPA: Privacy Preserving and Asynchronous Deep Learning for Industrial IoT. - Xiaoyu Zhang 010; Xiaofeng Chen 001; Joseph K. Liu; Yang Xiang 001 (IEEE Trans. Ind. Informatics, 2020)

CECMLP: New Cipher-Based Evaluating Collaborative Multi-layer Perceptron Scheme in Federated Learning. - Yuqi Chen 011; Xiaoyu Zhang 010; Yi Xie 011; Meixia Miao; Xu Ma (ACNS (1), 2021)

Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey. - Xiaoyu Zhang 010; Chao Chen 015; Yi Xie 011; Xiaofeng Chen 001; Jun Zhang 010; Yang Xiang 001 (CoRR, 2021)

Privacy-preserving and verifiable online crowdsourcing with worker updates. - Xiaoyu Zhang 010; Xiaofeng Chen 001; Hongyang Yan; Yang Xiang 001 (Inf. Sci., 2021)

Membership Inference Attacks Against Robust Graph Neural Network. - Zhengyang Liu; Xiaoyu Zhang 010; Chenyang Chen; Shen Lin 006; Jingjin Li (CSS, 2022)

GAME: Generative-Based Adaptive Model Extraction Attack. - Yi Xie 011; Mengdie Huang; Xiaoyu Zhang 010; Changyu Dong; Willy Susilo; Xiaofeng Chen 001 (ESORICS (1), 2022)

Purifier: Plug-and-play Backdoor Mitigation for Pre-trained Models Via Anomaly Activation Suppression. - Xiaoyu Zhang 010; Yulin Jin; Tao Wang 036; Jian Lou 001; Xiaofeng Chen 001 (ACM Multimedia, 2022)

Chameleon DNN Watermarking: Dynamically Public Model Ownership Verification. - Wei Li; Xiaoyu Zhang 010; Shen Lin 006; Xinbo Ban; Xiaofeng Chen 001 (WISA, 2022)

Closed-form Machine Unlearning for Matrix Factorization. - Shuijing Zhang; Jian Lou 001; Li Xiong 001; Xiaoyu Zhang 010; Jing Liu 006 (CIKM, 2023)

ERM-KTP: Knowledge-Level Machine Unlearning via Knowledge Transfer. - Shen Lin 006; Xiaoyu Zhang 010; Chenyang Chen; Xiaofeng Chen 001; Willy Susilo (CVPR, 2023)

Explaining Adversarial Robustness of Neural Networks from Clustering Effect Perspective. - Yulin Jin; Xiaoyu Zhang 010; Jian Lou 001; Xu Ma; Zilong Wang 001; Xiaofeng Chen 001 (ICCV, 2023)

MUter: Machine Unlearning on Adversarially Trained Models. - Junxu Liu; Mingsheng Xue; Jian Lou 001; Xiaoyu Zhang 010; Li Xiong 001; Zhan Qin (ICCV, 2023)

ACQ: Few-shot Backdoor Defense via Activation Clipping and Quantizing. - Yulin Jin; Xiaoyu Zhang 010; Jian Lou 001; Xiaofeng Chen 001 (ACM Multimedia, 2023)

B2Opt: Learning to Optimize Black-box Optimization with Little Budget. - Xiaobin Li; Kai Wu 003; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006 (CoRR, 2023)

Pre-trained transformer for adversarial purification. - Kai Wu 003; Yujian Betterest Li; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006 (CoRR, 2023)

A survey on privacy inference attacks and defenses in cloud-based Deep Neural Network. - Xiaoyu Zhang 010; Chao Chen 015; Yi Xie 011; Xiaofeng Chen 001; Jun Zhang 010; Yang Xiang 001 (Comput. Stand. Interfaces, 2023)

Automated Loss function Search for Class-imbalanced Node Classification. - Xinyu Guo; Kai Wu 003; Xiaoyu Zhang 010; Jing Liu 006 (ICML, 2024)

GDR-GMA: Machine Unlearning via Direction-Rectified and Magnitude-Adjusted Gradients. - Shen Lin 006; Xiaoyu Zhang 010; Willy Susilo; Xiaofeng Chen 001; Jun Liu 036 (ACM Multimedia, 2024)

Balancing Generalization and Robustness in Adversarial Training via Steering through Clean and Adversarial Gradient Directions. - Haoyu Tong; Xiaoyu Zhang 010; Yulin Jin; Jian Lou 001; Kai Wu 003; Xiaofeng Chen 001 (ACM Multimedia, 2024)

Pretrained Optimization Model for Zero-Shot Black Box Optimization. - Xiaobin Li; Kai Wu 003; Yujian Betterest Li; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006 (NeurIPS, 2024)

Rapid Plug-in Defenders. - Kai Wu 003; Yujian Betterest Li; Jian Lou 001; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006 (NeurIPS, 2024)

GLHF: General Learned Evolutionary Algorithm Via Hyper Functions. - Xiaobin Li; Kai Wu 003; Yujian Betterest Li; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006 (CoRR, 2024)

MaskArmor: Confidence masking-based defense mechanism for GNN against MIA. - Chenyang Chen; Xiaoyu Zhang 010; Hongyi Qiu; Jian Lou 001; Zhengyang Liu; Xiaofeng Chen 001 (Inf. Sci., 2024)

MODA: Model Ownership Deprivation Attack in Asynchronous Federated Learning. - Xiaoyu Zhang 010; Shen Lin 006; Chao Chen 015; Xiaofeng Chen 001 (IEEE Trans. Dependable Secur. Comput., 2024)

B2Opt: Learning to Optimize Black-box Optimization with Little Budget. - Xiaobin Li; Kai Wu 003; Xiaoyu Zhang 010; Handing Wang (AAAI, 2025)

Zeroth-Order Federated Private Tuning for Pretrained Large Language Models. - Xiaoyu Zhang 010; Yong Lin; Meixia Miao; Jian Lou 001; Jin Li 002; Xiaofeng Chen 001 (ACISP (3), 2025)

TSGGuide: Recommendation Guide for Multivariate Time Series Generation. - Beining Zhang; Kai Wu 003; Xiaoyu Zhang 010; Handing Wang; Jing Liu 006; Bei Wang; Kai Wang (WWW (Companion Volume), 2025)

MPGStack: Membership Privacy Protection on Graph Data via Model Stacking. - Chenyang Chen; Xiaoyu Zhang 010; Shen Lin 006; Xiaofeng Chen 001 (IEEE Trans. Dependable Secur. Comput., 2025)

DuplexGuard: Safeguarding Deletion Right in Machine Unlearning via Duplex Watermarking. - Xiaoyu Zhang 010; Chenyang Zhang; Jian Lou 001; Kai Wu 003; Zilong Wang 001; Xiaofeng Chen 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Purifier$^{+}$: Plug-and-Play Backdoor Mitigation for Pre-Trained Models via Activation Alignment. - Xiaoyu Zhang 010; Yulin Jin; Haoyu Tong; Jian Lou 001; Kai Wu 003; Xiaofeng Chen 001 (IEEE Trans. Multim., 2025)

DeepAW: A Customized DNN Watermarking Scheme Against Unreliable Participants. - Shen Lin 006; Xiaoyu Zhang 010; Xu Ma; Xiaofeng Chen 001; Willy Susilo (IEEE Trans. Netw. Sci. Eng., 2025)

Mitigating Data Scarcity in Time Series Analysis: A Foundation Model with Series-Symbol Data Generation. - Wenxuan Wang; Kai Wu 003; Yujian Betterest Li; Dan Wang; Xiaoyu Zhang 010; Jing Liu 006 (CoRR, 2025)