BIRD: Generalizable Backdoor Detection and Removal for Deep Reinforcement Learning. - Xuan Chen 003; Wenbo Guo 002; Guanhong Tao 001; Xiangyu Zhang 001; Dawn Song (NeurIPS, 2023)

ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. - Lu Yan; Zhuo Zhang 002; Guanhong Tao 001; Kaiyuan Zhang 002; Xuan Chen 003; Guangyu Shen; Xiangyu Zhang 001 (NeurIPS, 2023)

When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search. - Xuan Chen 003; Yuzhou Nie; Wenbo Guo 002; Xiangyu Zhang 001 (NeurIPS, 2024)

RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs. - Xuan Chen 003; Yuzhou Nie; Lu Yan; Yunshu Mao; Wenbo Guo 002; Xiangyu Zhang 001 (CoRR, 2024)

DIGIMON: Diagnosis and Mitigation of Sampling Skew for Reinforcement Learning based Meta-Planner in Robot Navigation. - Shiwei Feng 002; Xuan Chen 003; Zhiyuan Cheng 010; Zikang Xiong; Yifei Gao; Siyuan Cheng 005; Sayali Kate; Xiangyu Zhang 001 (CoRR, 2024)

ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs. - Lu Yan; Siyuan Cheng 005; Xuan Chen 003; Kaiyuan Zhang 002; Guangyu Shen; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2024)

System Prompt Hijacking via Permutation Triggers in LLM Supply Chains. - Lu Yan; Siyuan Cheng 005; Xuan Chen 003; Kaiyuan Zhang 002; Guangyu Shen; Xiangyu Zhang 001 (ACL (Findings), 2025)

EffiTune: Diagnosing and Mitigating Training Inefficiency for Parameter Tuner in Robot Navigation System. - Shiwei Feng 002; Xuan Chen 003; Zikang Xiong; Zhiyuan Cheng 010; Yifei Gao; Siyuan Cheng 005; Sayali Kate; Xiangyu Zhang 001 (IROS, 2025)

TAI3: Testing Agent Integrity in Interpreting User Intent. - Shiwei Feng 002; Xiangzhe Xu; Xuan Chen 003; Kaiyuan Zhang 002; Syed Yusuf Ahmed; Zian Su; Mingwei Zheng; Xiangyu Zhang 001 (NeurIPS, 2025)

IntenTest: Stress Testing for Intent Integrity in API-Calling LLM Agents. - Shiwei Feng 002; Xiangzhe Xu; Xuan Chen 003; Kaiyuan Zhang 002; Syed Yusuf Ahmed; Zian Su; Mingwei Zheng; Xiangyu Zhang 001 (CoRR, 2025)

MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation. - Lu Yan; Zhuo Zhang 002; Xiangzhe Xu; Shengwei An; Guangyu Shen; Zhou Xuan; Xuan Chen 003; Xiangyu Zhang 001 (CoRR, 2025)

ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants. - Xiangzhe Xu; Guangyu Shen; Zian Su; Siyuan Cheng 005; Hanxi Guo; Lu Yan; Xuan Chen 003; Jiasheng Jiang; Xiaolong Jin 002; Chengpeng Wang 001; Zhuo Zhang 002; Xiangyu Zhang 001 (CoRR, 2025)

Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving. - Xuan Chen 003; Shiwei Feng 002; Zikang Xiong; Shengwei An; Yunshu Mao; Lu Yan; Guanhong Tao 001; Wenbo Guo 002; Xiangyu Zhang 001 (CoRR, 2025)

When the Specification Emerges: Benchmarking Faithfulness Loss in Long-Horizon Coding Agents. - Lu Yan; Xuan Chen 003; Xiangyu Zhang 001 (CoRR, 2026)

Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety. - Xuan Chen 003; Lu Yan; Ruqi Zhang; Xiangyu Zhang 001 (CoRR, 2026)

Diagnosing Live Within-Policy Instruction Conflicts in LLM Agents with Witnessed Resolution Profiles. - Lu Yan; Xuan Chen 003; Xiangyu Zhang 001 (CoRR, 2026)