Identification of Influential Users in Emerging Online Social Networks Using Cross-site Linking. - Qingyuan Gong; Yang Chen 001; Xinlei He 001; Fei Li 005; Yu Xiao 001; Pan Hui 001; Xin Wang 002; Xiaoming Fu 001 (ChineseCSCW, 2018)

LBSLab: A User Data Collection System in Mobile Environments. - Qingyuan Gong; Xinlei He 001; Qinge Xie; Shihan Lin; Guozhen She; Ruiyu Fang; Rui Han; Yang Chen 001; Yu Xiao 001; Xiaoming Fu 001; Xin Wang 002 (UbiComp/ISWC Adjunct, 2018)

Deep Learning-Based Malicious Account Detection in the Momo Social Network. - Jiaqi Wang; Xinlei He 001; Qingyuan Gong; Yang Chen 001; Tianyi Wang 001; Xin Wang 002 (ICCCN, 2018)

Understanding the behavioral differences between american and german users: A data-driven study. - Chenxi Yang; Yang Chen 001; Qingyuan Gong; Xinlei He 001; Yu Xiao 001; Yuhuan Huang; Xiaoming Fu 001 (Big Data Min. Anal., 2018)

DeepScan: Exploiting Deep Learning for Malicious Account Detection in Location-Based Social Networks. - Qingyuan Gong; Yang Chen 001; Xinlei He 001; Zhou Zhuang; Tianyi Wang 001; Hong Huang 001; Xin Wang 002; Xiaoming Fu 001 (IEEE Commun. Mag., 2018)

On the Influence of Twitter Trolls during the 2016 US Presidential Election. - Nikos Salamanos; Michael J. Jensen; Xinlei He 001; Yang Chen 001; Michael Sirivianos (CoRR, 2019)

Did State-sponsored Trolls Shape the US Presidential Election Discourse? Quantifying Influence on Twitter. - Nikos Salamanos; Michael J. Jensen; Xinlei He 001; Yang Chen 001; Costas Iordanou; Michael Sirivianos (CoRR, 2020)

Quantifying and Mitigating Privacy Risks of Contrastive Learning. - Xinlei He 001; Yang Zhang 016 (CCS, 2021)

Stealing Links from Graph Neural Networks. - Xinlei He 001; Jinyuan Jia 001; Michael Backes 001; Neil Zhenqiang Gong; Yang Zhang 016 (USENIX Security Symposium, 2021)

Node-Level Membership Inference Attacks Against Graph Neural Networks. - Xinlei He 001; Rui Wen 002; Yixin Wu 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2021)

DatingSec: Detecting Malicious Accounts in Dating Apps Using a Content-Based Attention Network. - Xinlei He 001; Qingyuan Gong; Yang Chen 001; Yang Zhang 016; Xin Wang 002; Xiaoming Fu 001 (IEEE Trans. Dependable Secur. Comput., 2021)

Cross-site Prediction on Social Influence for Cold-start Users in Online Social Networks. - Qingyuan Gong; Yang Chen 001; Xinlei He 001; Yu Xiao 001; Pan Hui 001; Xin Wang 002; Xiaoming Fu 001 (ACM Trans. Web, 2021)

SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders. - Tianshuo Cong; Xinlei He 001; Yang Zhang 016 (CCS, 2022)

Auditing Membership Leakages of Multi-Exit Networks. - Zheng Li 023; Yiyong Liu; Xinlei He 001; Ning Yu 006; Michael Backes 001; Yang Zhang 016 (CCS, 2022)

Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning. - Xinlei He 001; Hongbin Liu 005; Neil Zhenqiang Gong; Yang Zhang 016 (ECCV (31), 2022)

On Xing Tian and the Perseverance of Anti-China Sentiment Online. - Xinyue Shen 001; Xinlei He 001; Michael Backes 001; Jeremy Blackburn; Savvas Zannettou; Yang Zhang 016 (ICWSM, 2022)

Model Stealing Attacks Against Inductive Graph Neural Networks. - Yun Shen; Xinlei He 001; Yufei Han 001; Yang Zhang 016 (SP, 2022)

ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models. - Yugeng Liu; Rui Wen 002; Xinlei He 001; Ahmed Salem 001; Zhikun Zhang 001; Michael Backes 001; Emiliano De Cristofaro; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2022)

Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models. - Xinlei He 001; Zheng Li 023; Weilin Xu; Cory Cornelius; Yang Zhang 016 (CoRR, 2022)

Backdoor Attacks in the Supply Chain of Masked Image Modeling. - Xinyue Shen 001; Xinlei He 001; Zheng Li 023; Yun Shen; Michael Backes 001; Yang Zhang 016 (CoRR, 2022)

Fine-Tuning Is All You Need to Mitigate Backdoor Attacks. - Zeyang Sha; Xinlei He 001; Pascal Berrang; Mathias Humbert; Yang Zhang 016 (CoRR, 2022)

Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models. - Yiting Qu; Xinyue Shen 001; Xinlei He 001; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CCS, 2023)

Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders. - Zeyang Sha; Xinlei He 001; Ning Yu 006; Michael Backes 001; Yang Zhang 016 (CVPR, 2023)

Data Poisoning Attacks Against Multimodal Encoders. - Ziqing Yang 002; Xinlei He 001; Zheng Li 023; Michael Backes 001; Mathias Humbert; Pascal Berrang; Yang Zhang 016 (ICML, 2023)

Generated Graph Detection. - Yihan Ma 001; Zhikun Zhang 001; Ning Yu 006; Xinlei He 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (ICML, 2023)

On the Evolution of (Hateful) Memes by Means of Multimodal Contrastive Learning. - Yiting Qu; Xinlei He 001; Shannon Pierson; Michael Backes 001; Yang Zhang 016; Savvas Zannettou (SP, 2023)

A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots. - Boyang Zhang; Xinlei He 001; Yun Shen; Tianhao Wang 001; Yang Zhang 016 (USENIX Security Symposium, 2023)

Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis. - Yihan Ma 001; Zhengyu Zhao 001; Xinlei He 001; Zheng Li 023; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

Trimming Mobile Applications for Bandwidth-Challenged Networks in Developing Regions. - Qinge Xie; Qingyuan Gong; Xinlei He 001; Yang Chen 001; Xin Wang 002; Haitao Zheng 001; Ben Y. Zhao (IEEE Trans. Mob. Comput., 2023)

Privacy risk assessment of emerging machine learning paradigms. - Xinlei He 001 (2023)

MGTBench: Benchmarking Machine-Generated Text Detection. - Xinlei He 001; Xinyue Shen 001; Zeyuan Chen; Michael Backes 001; Yang Zhang 016 (CCS, 2024)

Have You Merged My Model? On The Robustness of Large Language Model IP Protection Methods Against Model Merging. - Tianshuo Cong; Delong Ran; Zesen Liu; Xinlei He 001; Jinyuan Liu; Yichen Gong; Qi Li 002; Anyu Wang 001; Xiaoyun Wang 001 (LAMPS@CCS, 2024)

Test-Time Poisoning Attacks Against Test-Time Adaptation Models. - Tianshuo Cong; Xinlei He 001; Yun Shen; Yang Zhang 016 (SP, 2024)

You Only Prompt Once: On the Capabilities of Prompt Learning on Large Language Models to Tackle Toxic Content. - Xinlei He 001; Savvas Zannettou; Yun Shen; Yang Zhang 016 (SP, 2024)

SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models. - Boyang Zhang; Zheng Li 023; Ziqing Yang 002; Xinlei He 001; Michael Backes 001; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2024)

Hidden Question Representations Tell Non-Factuality Within and Across Large Language Models. - Yanling Wang; Haoyang Li; Hao Zou; Jing Zhang 001; Xinlei He 001; Qi Li 002; Ke Xu 002 (CoRR, 2024)

JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models. - Delong Ran; Jinyuan Liu; Yichen Gong; Jingyi Zheng; Xinlei He 001; Tianshuo Cong; Anyu Wang 001 (CoRR, 2024)

Jailbreak Attacks and Defenses Against Large Language Models: A Survey. - Sibo Yi; Yule Liu; Zhen Sun 001; Tianshuo Cong; Xinlei He 001; Jiaxing Song; Ke Xu 002; Qi Li 002 (CoRR, 2024)

On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks. - Zesen Liu; Tianshuo Cong; Xinlei He 001; Qi Li 002 (CoRR, 2024)

Membership Inference Attack Against Masked Image Modeling. - Zheng Li 023; Xinlei He 001; Ning Yu 006; Yang Zhang 016 (CoRR, 2024)

Automatic Dataset Construction (ADC): Sample Collection, Data Curation, and Beyond. - Minghao Liu 009; Zonglin Di; Jiaheng Wei; Zhongruo Wang; Hengxiang Zhang; Ruixuan Xiao; Haoyu Wang 001; Jinlong Pang; Hao Chen 102; Ankit Shah 001; Hongxin Wei; Xinlei He 001; et al. (CoRR, 2024)

Quantized Delta Weight Is Safety Keeper. - Yule Liu; Zhen Sun 001; Xinlei He 001; Xinyi Huang 001 (CoRR, 2024)

Privacy-Preserving Federated Learning via Homomorphic Adversarial Networks. - Wenhan Dong; Chao Lin; Xinlei He 001; Xinyi Huang 001; Shengmin Xu (CoRR, 2024)

On the Generalization Ability of Machine-Generated Text Detectors. - Yule Liu; Zhiyuan Zhong; Yifan Liao; Zhen Sun 001; Jingyi Zheng; Jiaheng Wei; Qingyuan Gong; Fenghua Tong; Yang Chen 001; Yang Zhang 016; Xinlei He 001 (CoRR, 2024)

Link Stealing Attacks Against Inductive Graph Neural Networks. - Yixin Wu 001; Xinlei He 001; Pascal Berrang; Mathias Humbert; Michael Backes 001; Neil Zhenqiang Gong; Yang Zhang 016 (Proc. Priv. Enhancing Technol., 2024)

Safety Misalignment Against Large Language Models. - Yichen Gong; Delong Ran; Xinlei He 001; Tianshuo Cong; Anyu Wang 001; Xiaoyun Wang 001 (Zenodo, 2024)

CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers. - Jingyi Zheng; Tianyi Hu; Tianshuo Cong; Xinlei He 001 (AAAI, 2025)

Are We in the AI-Generated Text World Already? Quantifying and Monitoring AIGT on Social Media. - Zhen Sun 001; Zongmin Zhang; Xinyue Shen 001; Ziyi Zhang; Yule Liu; Michael Backes 001; Yang Zhang 016; Xinlei He 001 (ACL (1), 2025)

Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models. - Sibo Yi; Tianshuo Cong; Xinlei He 001; Qi Li 002; Jiaxing Song (ACL (Findings), 2025)

Safety Misalignment Against Large Language Models. - Yichen Gong; Delong Ran; Xinlei He 001; Tianshuo Cong; Anyu Wang 001; Xiaoyun Wang 001 (NDSS, 2025)

PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning. - Zhen Sun 001; Tianshuo Cong; Yule Liu; Chenhao Lin; Xinlei He 001; Rongmao Chen; Xingshuo Han; Xinyi Huang 001 (SP, 2025)

A Comprehensive Study of Privacy Risks in Curriculum Learning. - Joann Qiongna Chen; Xinlei He 001; Zheng Li 023; Yang Zhang 016; Zhou Li 001 (Proc. Priv. Enhancing Technol., 2025)

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning. - Heyi Zhang; Yule Liu; Xinlei He 001; Jun Wu 001; Tianshuo Cong; Xinyi Huang 001 (CoRR, 2025)

The Rising Threat to Emerging AI-Powered Search Engines. - Zeren Luo; Zifan Peng; Yule Liu; Zhen Sun 001; Mingchen Li; Jingyi Zheng; Xinlei He 001 (CoRR, 2025)

An Improved Privacy and Utility Analysis of Differentially Private SGD with Bounded Domain and Smooth Losses. - Hao Liang; Wanrong Zhang 001; Xinlei He 001; Kaishun Wu; Hong Xing (CoRR, 2025)

Behind the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models. - Sibo Yi; Tianshuo Cong; Xinlei He 001; Qi Li 002; Jiaxing Song (CoRR, 2025)

FC-Attack: Jailbreaking Large Vision-Language Models via Auto-Generated Flowcharts. - Ziyi Zhang; Zhen Sun 001; Zongmin Zhang; Jihui Guo; Xinlei He 001 (CoRR, 2025)

TH-Bench: Evaluating Evading Attacks via Humanizing AI Text on Machine-Generated Text Detectors. - Jingyi Zheng; Junfeng Wang; Zhen Sun 001; Wenhan Dong; Yule Liu; Xinlei He 001 (CoRR, 2025)

Thought Manipulation: External Thought Can Be Efficient for Large Reasoning Models. - Yule Liu; Jingyi Zheng; Zhen Sun 001; Zifan Peng; Wenhan Dong; Zeyang Sha; Shiwen Cui; Weiqiang Wang; Xinlei He 001 (CoRR, 2025)

Humanizing LLMs: A Survey of Psychological Measurements with Tools, Datasets, and Human-Agent Applications. - Wenhan Dong; Yuemeng Zhao; Zhen Sun 001; Yule Liu; Zifan Peng; Jingyi Zheng; Zongmin Zhang; Ziyi Zhang; Jun Wu 001; Ruiming Wang; Shengmin Xu; Xinyi Huang 001; et al. (CoRR, 2025)

Holmes: Automated Fact Check with Large Language Models. - Haoran Ou; Gelei Deng; Xingshuo Han; Jie Zhang 073; Xinlei He 001; Han Qiu 001; Shangwei Guo; Tianwei Zhang 004 (CoRR, 2025)

"I Can See Forever!": Evaluating Real-time VideoLLMs for Assisting Individuals with Visual Impairments. - Ziyi Zhang; Zhen Sun 001; Zongmin Zhang; Zifan Peng; Yuemeng Zhao; Zichun Wang; Zeren Luo; Ruiting Zuo; Xinlei He 001 (CoRR, 2025)

GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection. - Zhijie Deng; Chris Yuhao Liu; Zirui Pang; Xinlei He 001; Lei Feng 006; Qi Xuan; Zhaowei Zhu; Jiaheng Wei (CoRR, 2025)

RePPL: Recalibrating Perplexity by Uncertainty in Semantic Propagation and Language Generation for Explainable QA Hallucination Detection. - Yiming Huang; Junyan Zhang; Zihao Wang; Biquan Bie; Xuming Hu; Yi R. (May) Fung; Xinlei He 001 (CoRR, 2025)

An Empirical Study of the Anchoring Effect in LLMs: Existence, Mechanism, and Potential Mitigations. - Yiming Huang; Biquan Bie; Zuqiu Na; Weilin Ruan; Songxin Lei; Yutao Yue; Xinlei He 001 (CoRR, 2025)

FragFake: A Dataset for Fine-Grained Detection of Edited Images with Vision Language Models. - Zhen Sun 001; Ziyi Zhang; Zeren Luo; Zeyang Sha; Tianshuo Cong; Zheng Li; Shiwen Cui; Weiqiang Wang; Jiaheng Wei; Xinlei He 001; Qi Li 002; Qian Wang 002 (CoRR, 2025)

JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models. - Zifan Peng; Yule Liu; Zhen Sun 001; Mingchen Li; Zeren Luo; Jingyi Zheng; Wenhan Dong; Xinlei He 001; Xuechao Wang; Yingjie Xue; Shengmin Xu; Xinyi Huang 001 (CoRR, 2025)

Evaluation Hallucination in Multi-Round Incomplete Information Lateral-Driven Reasoning Tasks. - Wenhan Dong; Tianyi Hu; Jingyi Zheng; Zhen Sun 001; Yuemeng Zhao; Yule Liu; Xinlei He 001; Xinyi Huang 001 (CoRR, 2025)

Prediction Inconsistency Helps Achieve Generalizable Detection of Adversarial Examples. - Sicong Han; Chenhao Lin; Zhengyu Zhao 001; Xiyuan Wang; Xinlei He 001; Qian Li 024; Cong Wang 001; Qian Wang 002; Chao Shen 001 (CoRR, 2025)

Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation. - Zhiyuan Zhong; Zhen Sun 001; Yepang Liu 001; Xinlei He 001; Guanhong Tao 001 (CoRR, 2025)

GasAgent: A Multi-Agent Framework for Automated Gas Optimization in Smart Contracts. - Jingyi Zheng; Zifan Peng; Yule Liu; Junfeng Wang; Yifan Liao; Wenhan Dong; Xinlei He 001 (CoRR, 2025)

LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models. - Delong Ran; Xinlei He 001; Tianshuo Cong; Anyu Wang 001; Qi Li 002; Xiaoyun Wang 001 (CoRR, 2025)

ZPD-SCA: Unveiling the Blind Spots of LLMs in Assessing Students' Cognitive Abilities. - Wenhan Dong; Zhen Sun 001; Yuemeng Zhao; Zifan Peng; Jun Wu 001; Jingyi Zheng; Yule Liu; Xinlei He 001; Yu Wang; Ruiming Wang; Xinyi Huang 001; Lei Mo (CoRR, 2025)