CFP: Enabling Camera Fingerprint Concealment for Privacy-Preserving Image Sharing. - Zhongjie Ba; Xinyu Zhang 016; Zhan Qin; Kui Ren 001 (ICDCS, 2019)

Learning-based Practical Smartphone Eavesdropping with Built-in Accelerometer. - Zhongjie Ba; Tianhang Zheng; Xinyu Zhang 016; Zhan Qin; Baochun Li; Xue Liu 001; Kui Ren 001 (NDSS, 2020)

An Efficient E2E Crowd Verifiable E-Voting System. - Xinyu Zhang 016; Bingsheng Zhang; Aggelos Kiayias; Thomas Zacharias 001; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2022)

Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence. - Hanbin Hong; Xinyu Zhang 016; Binghui Wang; Zhongjie Ba; Yuan Hong 001 (CCS, 2024)

Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks. - Xinyu Zhang 016; Hanbin Hong; Yuan Hong 001; Peng Huang; Binghui Wang; Zhongjie Ba; Kui Ren 001 (SP, 2024)

PrivacyAsst: Safeguarding User Privacy in Tool-Using Large Language Model Agents. - Xinyu Zhang 016; Huiyu Xu; Zhongjie Ba; Zhibo Wang 001; Yuan Hong 001; Jian Liu 012; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

FLTracer: Accurate Poisoning Attack Provenance in Federated Learning. - Xinyu Zhang 016; Qingyu Liu; Zhongjie Ba; Yuan Hong 001; Tianhang Zheng; Feng Lin 004; Li Lu 008; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation. - Zhongjie Ba; Yitao Zhang; Peng Cheng 007; Bin Gong; Xinyu Zhang 016; Qinglong Wang 003; Kui Ren 001 (CoRR, 2025)