Twisted edwards-form elliptic curve cryptography for 8-bit AVR-based sensor nodes. - Dalin Chu; Johann Großschädl; Zhe Liu 001; Volker Müller 001; Yang Zhang 016 (AsiaPKC@AsiaCCS, 2013)

Event Prediction with Community Leaders. - Jun Pang 001; Yang Zhang 016 (ARES, 2015)

Distance and Friendship: A Distance-Based Model for Link Prediction in Social Networks. - Yang Zhang 016; Jun Pang 001 (APWeb, 2015)

Inferring Friendship from Check-in Data of Location-Based Social Networks. - Ran Cheng; Jun Pang 001; Yang Zhang 016 (ASONAM, 2015)

Cryptographic Protocols for Enforcing Relationship-Based Access Control Policies. - Jun Pang 001; Yang Zhang 016 (COMPSAC, 2015)

Location Prediction: Communities Speak Louder than Friends. - Jun Pang 001; Yang Zhang 016 (COSN, 2015)

Community-Driven Social Influence Analysis and Applications. - Yang Zhang 016; Jun Pang 001 (ICWE, 2015)

A Logical Approach to Restricting Access in Online Social Networks. - Marcos Cramer; Jun Pang 001; Yang Zhang 016 (SACMAT, 2015)

Exploring Communities for Effective Location Prediction. - Jun Pang 001; Yang Zhang 016 (WWW (Companion Volume), 2015)

A new access control scheme for Facebook-style social networks. - Jun Pang 001; Yang Zhang 016 (Comput. Secur., 2015)

Modeling City Locations as Complex Networks: An initial study. - Lu Zhou; Yang Zhang 016; Jun Pang 001; Cheng-Te Li (COMPLEX NETWORKS, 2016)

An Empirical Study on User Access Control in Online Social Networks. - Minyue Ni; Yang Zhang 016; Weili Han; Jun Pang 001 (SACMAT, 2016)

On Impact of Weather on Human Mobility in Cities. - Jun Pang 001; Polina Zablotskaia; Yang Zhang 016 (WISE (2), 2016)

walk2friends: Inferring Social Links from Mobility Profiles. - Michael Backes 001; Mathias Humbert; Jun Pang 001; Yang Zhang 016 (CCS, 2017)

Semantic Annotation for Places in LBSN through Graph Embedding. - Yan Wang 014; Zongxu Qin; Jun Pang 001; Yang Zhang 016; Jin Xin (CIKM, 2017)

Quantifying Location Sociality. - Jun Pang 001; Yang Zhang 016 (HT, 2017)

DeepCity: A Feature Learning Framework for Mining Location Check-Ins. - Jun Pang 001; Yang Zhang 016 (ICWSM, 2017)

Does #like4like indeed provoke more likes? - Yang Zhang 016; Minyue Ni; Weili Han; Jun Pang 001 (WI, 2017)

CTRL+Z: Recovering Anonymized Social Graphs. - Yang Zhang 016; Mathias Humbert; Bartlomiej Surma; Praveen Manoharan 001; Jilles Vreeken; Michael Backes 001 (CoRR, 2017)

Dissecting Privacy Risks in Biomedical Data. - Pascal Berrang; Mathias Humbert; Yang Zhang 016; Irina Lehmann; Roland Eils; Michael Backes 001 (EuroS&P, 2018)

Self -Paced Mixture of T Distribution Model. - Yang Zhang 016; Qingtao Tang; Li Niu 002; Tao Dai 001; Xi Xiao; Shu-Tao Xia (ICASSP, 2018)

You Are Where You App: An Assessment on Location Privacy of Social Applications. - Fanghua Zhao; Linan Gao; Yang Zhang 016; Zeyu Wang 005; Bo Wang; Shanqing Guo (ISSRE, 2018)

Tagvisor: A Privacy Advisor for Sharing Hashtags. - Yang Zhang 016; Mathias Humbert; Tahleen A. Rahman; Cheng-Te Li; Jun Pang 001; Michael Backes 001 (WWW, 2018)

ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. - Ahmed Salem 001; Yang Zhang 016; Mathias Humbert; Mario Fritz; Michael Backes 001 (CoRR, 2018)

How to prove your model belongs to you: a blind-watermark based framework to protect intellectual property of DNN. - Zheng Li 023; Chengyu Hu; Yang Zhang 016; Shanqing Guo (ACSAC, 2019)

Fast and Scalable VMM Live Upgrade in Large Cloud Infrastructure. - Xiantao Zhang; Xiao Zheng; Zhi Wang 004; Qi Li 002; Junkang Fu; Yang Zhang 016; Yibin Shen (ASPLOS, 2019)

MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples. - Jinyuan Jia 001; Ahmed Salem 001; Michael Backes 001; Yang Zhang 016; Neil Zhenqiang Gong (CCS, 2019)

Fairwalk: Towards Fair Graph Embedding. - Tahleen A. Rahman; Bartlomiej Surma; Michael Backes 001; Yang Zhang 016 (IJCAI, 2019)

MBeacon: Privacy-Preserving Beacons for DNA Methylation Data. - Inken Hagestedt; Yang Zhang 016; Mathias Humbert; Pascal Berrang; Haixu Tang; XiaoFeng Wang 001; Michael Backes 001 (NDSS, 2019)

ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. - Ahmed Salem 001; Yang Zhang 016; Mathias Humbert; Pascal Berrang; Mario Fritz; Michael Backes 001 (NDSS, 2019)

A Graph-Based Approach to Explore Relationship Between Hashtags and Images. - Zhiqiang Zhong 001; Yang Zhang 016; Jun Pang 001 (WISE, 2019)

Language in Our Time: An Empirical Analysis of Hashtags. - Yang Zhang 016 (WWW, 2019)

t-k-means: A k-means Variant with Robustness and Stability. - Yang Zhang 016; Qingtao Tang; Yiming Li 004; Weipéng Huáng; Shutao Xia (CoRR, 2019)

GAN-Leaks: A Taxonomy of Membership Inference Attacks against GANs. - Dingfan Chen; Ning Yu 006; Yang Zhang 016; Mario Fritz (CoRR, 2019)

An active learning-based approach for location-aware acquaintance inference. - Bo-Heng Chen; Cheng-Te Li; Kun-Ta Chuang; Jun Pang 001; Yang Zhang 016 (Knowl. Inf. Syst., 2019)

GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models. - Dingfan Chen; Ning Yu 006; Yang Zhang 016; Mario Fritz (CCS, 2020)

LEAF: A Faster Secure Search Algorithm via Localization, Extraction, and Reconstruction. - Rui Wen 002; Yu Yu 001; Xiang Xie; Yang Zhang 016 (CCS, 2020)

Membership Inference Against DNA Methylation Databases. - Inken Hagestedt; Mathias Humbert; Pascal Berrang; Irina Lehmann; Roland Eils; Michael Backes 001; Yang Zhang 016 (EuroS&P, 2020)

Towards Plausible Graph Anonymization. - Yang Zhang 016; Mathias Humbert; Bartlomiej Surma; Praveen Manoharan 001; Jilles Vreeken; Michael Backes 001 (NDSS, 2020)

Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning. - Ahmed Salem 001; Apratim Bhattacharya; Michael Backes 001; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2020)

NeuLP: An End-to-End Deep-Learning Model for Link Prediction. - Zhiqiang Zhong 001; Yang Zhang 016; Jun Pang 001 (WISE (1), 2020)

Everything About You: A Multimodal Approach towards Friendship Inference in Online Social Networks. - Tahleen A. Rahman; Mario Fritz; Michael Backes 001; Yang Zhang 016 (CoRR, 2020)

"Go eat a bat, Chang!": An Early Look on the Emergence of Sinophobic Behavior on Web Communities in the Face of COVID-19. - Leonard Schild; Chen Ling 004; Jeremy Blackburn; Gianluca Stringhini; Yang Zhang 016; Savvas Zannettou (CoRR, 2020)

BadNL: Backdoor Attacks Against NLP Models. - Xiaoyi Chen; Ahmed Salem 001; Michael Backes 001; Shiqing Ma; Yang Zhang 016 (CoRR, 2020)

Label-Leaks: Membership Inference Attack with Label. - Zheng Li 023; Yang Zhang 016 (CoRR, 2020)

Privacy Analysis of Deep Learning in the Wild: Membership Inference Attacks against Transfer Learning. - Yang Zou; Zhikun Zhang 001; Michael Backes 001; Yang Zhang 016 (CoRR, 2020)

BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models. - Ahmed Salem 001; Yannick Sautter; Michael Backes 001; Mathias Humbert; Yang Zhang 016 (CoRR, 2020)

Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks. - Ahmed Salem 001; Michael Backes 001; Yang Zhang 016 (CoRR, 2020)

BadNL: Backdoor Attacks against NLP Models with Semantic-preserving Improvements. - Xiaoyi Chen; Ahmed Salem 001; Dingfan Chen; Michael Backes 001; Shiqing Ma; Qingni Shen; Zhonghai Wu; Yang Zhang 016 (ACSAC, 2021)

When Machine Unlearning Jeopardizes Privacy. - Min Chen 032; Zhikun Zhang 001; Tianhao Wang 001; Michael Backes 001; Mathias Humbert; Yang Zhang 016 (CCS, 2021)

Quantifying and Mitigating Privacy Risks of Contrastive Learning. - Xinlei He 001; Yang Zhang 016 (CCS, 2021)

Membership Leakage in Label-Only Exposures. - Zheng Li 023; Yang Zhang 016 (CCS, 2021)

Membership Inference Attacks Against Recommender Systems. - Minxing Zhang; Zhaochun Ren; Zihan Wang 002; Pengjie Ren; Zhumin Chen; Pengfei Hu 001; Yang Zhang 016 (CCS, 2021)

MLCapsule: Guarded Offline Deployment of Machine Learning as a Service. - Lucjan Hanzlik; Yang Zhang 016; Kathrin Grosse; Ahmed Salem 001; Maximilian Augustin; Michael Backes 001; Mario Fritz (CVPR Workshops, 2021)

t-k-means: A ROBUST AND STABLE k-means VARIANT. - Yiming Li 004; Yang Zhang 016; Qingtao Tang; Weipéng Huáng; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2021)

PrivSyn: Differentially Private Data Synthesis. - Zhikun Zhang 001; Tianhao Wang 001; Ninghui Li; Jean Honorio; Michael Backes 001; Shibo He; Jiming Chen 001; Yang Zhang 016 (USENIX Security Symposium, 2021)

Stealing Links from Graph Neural Networks. - Xinlei He 001; Jinyuan Jia 001; Michael Backes 001; Neil Zhenqiang Gong; Yang Zhang 016 (USENIX Security Symposium, 2021)

"Go eat a bat, Chang!": On the Emergence of Sinophobic Behavior on Web Communities in the Face of COVID-19. - Fatemeh Tahmasbi; Leonard Schild; Chen Ling 004; Jeremy Blackburn; Gianluca Stringhini; Yang Zhang 016; Savvas Zannettou (WWW, 2021)

Node-Level Membership Inference Attacks Against Graph Neural Networks. - Xinlei He 001; Rui Wen 002; Yixin Wu 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2021)

On exploring feature representation learning of items to forecast their rise and fall in social media. - Cheng-Te Li; Hsin-Yu Chen; Yang Zhang 016 (J. Intell. Inf. Syst., 2021)

DatingSec: Detecting Malicious Accounts in Dating Apps Using a Content-Based Attention Network. - Xinlei He 001; Qingyuan Gong; Yang Chen 001; Yang Zhang 016; Xin Wang 002; Xiaoming Fu 001 (IEEE Trans. Dependable Secur. Comput., 2021)

Graph Unlearning. - Min Chen 032; Zhikun Zhang 001; Tianhao Wang 001; Michael Backes 001; Mathias Humbert; Yang Zhang 016 (CCS, 2022)

SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders. - Tianshuo Cong; Xinlei He 001; Yang Zhang 016 (CCS, 2022)

On the Privacy Risks of Cell-Based NAS Architectures. - Hai Huang 014; Zhikun Zhang 001; Yun Shen; Michael Backes 001; Qi Li 002; Yang Zhang 016 (CCS, 2022)

Auditing Membership Leakages of Multi-Exit Networks. - Zheng Li 023; Yiyong Liu; Xinlei He 001; Ning Yu 006; Michael Backes 001; Yang Zhang 016 (CCS, 2022)

Membership Inference Attacks by Exploiting Loss Trajectory. - Yiyong Liu; Zhengyu Zhao 001; Michael Backes 001; Yang Zhang 016 (CCS, 2022)

Finding MNEMON: Reviving Memories of Node Embeddings. - Yun Shen; Yufei Han 001; Zhikun Zhang 001; Min Chen 032; Ting Yu 001; Michael Backes 001; Yang Zhang 016; Gianluca Stringhini (CCS, 2022)

Why So Toxic?: Measuring and Triggering Toxic Behavior in Open-Domain Chatbots. - Wai Man Si; Michael Backes 001; Jeremy Blackburn; Emiliano De Cristofaro; Gianluca Stringhini; Savvas Zannettou; Yang Zhang 016 (CCS, 2022)

Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning. - Xinlei He 001; Hongbin Liu 005; Neil Zhenqiang Gong; Yang Zhang 016 (ECCV (31), 2022)

Dynamic Backdoor Attacks Against Machine Learning Models. - Ahmed Salem 001; Rui Wen 002; Michael Backes 001; Shiqing Ma; Yang Zhang 016 (EuroS&P, 2022)

On Xing Tian and the Perseverance of Anti-China Sentiment Online. - Xinyue Shen 001; Xinlei He 001; Michael Backes 001; Jeremy Blackburn; Savvas Zannettou; Yang Zhang 016 (ICWSM, 2022)

Get a Model! Model Hijacking Attack Against Machine Learning Models. - Ahmed Salem 001; Michael Backes 001; Yang Zhang 016 (NDSS, 2022)

Property Inference Attacks Against GANs. - Junhao Zhou; Yufei Chen 001; Chao Shen 001; Yang Zhang 016 (NDSS, 2022)

Amplifying Membership Exposure via Data Poisoning. - Yufei Chen 001; Chao Shen 001; Yun Shen; Cong Wang 001; Yang Zhang 016 (NeurIPS, 2022)

Model Stealing Attacks Against Inductive Graph Neural Networks. - Yun Shen; Xinlei He 001; Yufei Han 001; Yang Zhang 016 (SP, 2022)

Teacher Model Fingerprinting Attacks Against Transfer Learning. - Yufei Chen 001; Chao Shen 001; Cong Wang 001; Yang Zhang 016 (USENIX Security Symposium, 2022)

Inference Attacks Against Graph Neural Networks. - Zhikun Zhang 001; Min Chen 032; Michael Backes 001; Yun Shen; Yang Zhang 016 (USENIX Security Symposium, 2022)

ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models. - Yugeng Liu; Rui Wen 002; Xinlei He 001; Ahmed Salem 001; Zhikun Zhang 001; Michael Backes 001; Emiliano De Cristofaro; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2022)

Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models. - Xinlei He 001; Zheng Li 023; Weilin Xu; Cory Cornelius; Yang Zhang 016 (CoRR, 2022)

PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Model. - Haiming Wang; Zhikun Zhang 001; Tianhao Wang 001; Shibo He; Michael Backes 001; Jiming Chen 001; Yang Zhang 016 (CoRR, 2022)

Membership Inference Attacks Against Text-to-image Generation Models. - Yixin Wu 001; Ning Yu 006; Zheng Li 023; Michael Backes 001; Yang Zhang 016 (CoRR, 2022)

Backdoor Attacks in the Supply Chain of Masked Image Modeling. - Xinyue Shen 001; Xinlei He 001; Zheng Li 023; Yun Shen; Michael Backes 001; Yang Zhang 016 (CoRR, 2022)

DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Diffusion Models. - Zeyang Sha; Zheng Li 023; Ning Yu 006; Yang Zhang 016 (CoRR, 2022)

Fine-Tuning Is All You Need to Mitigate Backdoor Attacks. - Zeyang Sha; Xinlei He 001; Pascal Berrang; Mathias Humbert; Yang Zhang 016 (CoRR, 2022)

FairSR: Fairness-aware Sequential Recommendation through Multi-Task Learning with Preference Graph Embeddings. - Cheng-Te Li; Cheng Hsu; Yang Zhang 016 (ACM Trans. Intell. Syst. Technol., 2022)

Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network. - Xiaojian Yuan; Kejiang Chen; Jie Zhang 073; Weiming Zhang 001; Nenghai Yu; Yang Zhang 016 (AAAI, 2023)

NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models. - Kai Mei; Zheng Li 023; Zhenting Wang; Yang Zhang 016; Shiqing Ma (ACL (1), 2023)

Differentially Private Resource Allocation. - Joann Qiongna Chen; Tianhao Wang 001; Zhikun Zhang 001; Yang Zhang 016; Somesh Jha; Zhou Li 001 (ACSAC, 2023)

Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models. - Yiting Qu; Xinyue Shen 001; Xinlei He 001; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CCS, 2023)

DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Models. - Zeyang Sha; Zheng Li 023; Ning Yu 006; Yang Zhang 016 (CCS, 2023)

Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders. - Zeyang Sha; Xinlei He 001; Ning Yu 006; Michael Backes 001; Yang Zhang 016 (CVPR, 2023)

Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning? - Rui Wen 002; Zhengyu Zhao 001; Zhuoran Liu 001; Michael Backes 001; Tianhao Wang 001; Yang Zhang 016 (ICLR, 2023)

Data Poisoning Attacks Against Multimodal Encoders. - Ziqing Yang 002; Xinlei He 001; Zheng Li 023; Michael Backes 001; Mathias Humbert; Pascal Berrang; Yang Zhang 016 (ICML, 2023)

Generated Graph Detection. - Yihan Ma 001; Zhikun Zhang 001; Ning Yu 006; Xinlei He 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (ICML, 2023)

Backdoor Attacks Against Dataset Distillation. - Yugeng Liu; Zheng Li 023; Michael Backes 001; Yun Shen; Yang Zhang 016 (NDSS, 2023)

On the Evolution of (Hateful) Memes by Means of Multimodal Contrastive Learning. - Yiting Qu; Xinlei He 001; Shannon Pierson; Michael Backes 001; Yang Zhang 016; Savvas Zannettou (SP, 2023)

FACE-AUDITOR: Data Auditing in Facial Recognition Systems. - Min Chen 032; Zhikun Zhang 001; Tianhao Wang 001; Michael Backes 001; Yang Zhang 016 (USENIX Security Symposium, 2023)

UnGANable: Defending Against GAN-based Face Manipulation. - Zheng Li 023; Ning Yu 006; Ahmed Salem 001; Michael Backes 001; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2023)

Two-in-One: A Model Hijacking Attack Against Text Generation Models. - Wai Man Si; Michael Backes 001; Yang Zhang 016; Ahmed Salem 001 (USENIX Security Symposium, 2023)

PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Models. - Haiming Wang; Zhikun Zhang 001; Tianhao Wang 001; Shibo He; Michael Backes 001; Jiming Chen 001; Yang Zhang 016 (USENIX Security Symposium, 2023)

A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots. - Boyang Zhang; Xinlei He 001; Yun Shen; Tianhao Wang 001; Yang Zhang 016 (USENIX Security Symposium, 2023)

From Visual Prompt Learning to Zero-Shot Transfer: Mapping Is All You Need. - Ziqing Yang 002; Zeyang Sha; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPT. - Xinyue Shen 001; Zeyuan Chen; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

Watermarking Diffusion Model. - Yugeng Liu; Zheng Li 023; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Vision-language models boost food composition compilation. - Peihua Ma; Yixin Wu 001; Ning Yu 006; Yang Zhang 016; Michael Backes 001; Qin Wang; Cheng-I Wei (CoRR, 2023)

Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis. - Yihan Ma 001; Zhengyu Zhao 001; Xinlei He 001; Zheng Li 023; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

Mondrian: Prompt Abstraction Attack Against Large Language Models for Cheaper API Pricing. - Wai Man Si; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

You Are How You Walk: Quantifying Privacy Risks in Step Count Data. - Bartlomiej Surma; Tahleen A. Rahman; Monique M. B. Breteler; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models. - Yugeng Liu; Tianshuo Cong; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Prompt Backdoors in Visual Prompt Learning. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning. - Rui Wen 002; Tianhao Wang 001; Michael Backes 001; Yang Zhang 016; Ahmed Salem 001 (CoRR, 2023)

On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts. - Yixin Wu 001; Ning Yu 006; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Comprehensive Assessment of Toxicity in ChatGPT. - Boyang Zhang; Xinyue Shen 001; Wai Man Si; Zeyang Sha; Zeyuan Chen; Ahmed Salem 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

FAKEPCD: Fake Point Cloud Detection via Source Attribution. - Yiting Qu; Zhikun Zhang 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (AsiaCCS, 2024)

MGTBench: Benchmarking Machine-Generated Text Detection. - Xinlei He 001; Xinyue Shen 001; Zeyuan Chen; Michael Backes 001; Yang Zhang 016 (CCS, 2024)

LAMPS '24: ACM CCS Workshop on Large AI Systems and Models with Privacy and Safety Analysis. - Bo Li 026; Wenyuan Xu 001; Jieshan Chen; Yang Zhang 016; Minhui Xue 001; Shuo Wang 012; Guangdong Bai; Xingliang Yuan (CCS, 2024)

SeqMIA: Sequential-Metric Based Membership Inference Attack. - Hao Li 092; Zheng Li 023; Siyuan Wu; Chengrui Hu; Yutong Ye 002; Min Zhang 043; Dengguo Feng; Yang Zhang 016 (CCS, 2024)

ZeroFake: Zero-Shot Detection of Fake Images Generated and Edited by Text-to-Image Generation Models. - Zeyang Sha; Yicong Tan; Mingjie Li 007; Michael Backes 001; Yang Zhang 016 (CCS, 2024)

"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models. - Xinyue Shen 001; Zeyuan Chen; Michael Backes 001; Yun Shen; Yang Zhang 016 (CCS, 2024)

Membership Inference Attacks Against In-Context Learning. - Rui Wen 002; Zheng Li 023; Michael Backes 001; Yang Zhang 016 (CCS, 2024)

Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolution. - Yixin Wu 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (CCS, 2024)

BadMerging: Backdoor Attacks Against Model Merging. - Jinghuai Zhang; Jianfeng Chi; Zheng Li 023; Kunlin Cai; Yang Zhang 016; Yuan Tian 001 (CCS, 2024)

Inside the Black Box: Detecting Data Leakage in Pre-Trained Language Encoders. - Yuan Xin; Zheng Li 023; Ning Yu 006; Dingfan Chen; Mario Fritz; Michael Backes 001; Yang Zhang 016 (ECAI, 2024)

Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models. - Junjie Chu 002; Zeyang Sha; Michael Backes 001; Yang Zhang 016 (EMNLP, 2024)

ModSCAN: Measuring Stereotypical Bias in Large Vision-Language Models from Vision and Language Modalities. - Yukun Jiang 001; Zheng Li 023; Xinyue Shen 001; Yugeng Liu; Michael Backes 001; Yang Zhang 016 (EMNLP, 2024)

The Death and Life of Great Prompts: Analyzing the Evolution of LLM Prompts from the Structural Perspective. - Yihan Ma 001; Xinyue Shen 001; Yixin Wu 001; Boyang Zhang; Michael Backes 001; Yang Zhang 016 (EMNLP, 2024)

Detection and Attribution of Models Trained on Generated Data. - Ge Han; Ahmed Salem 001; Zheng Li 023; Shanqing Guo; Michael Backes 001; Yang Zhang 016 (ICASSP, 2024)

Games and Beyond: Analyzing the Bullet Chats of Esports Livestreaming. - Yukun Jiang 001; Xinyue Shen 001; Rui Wen 002; Zeyang Sha; Junjie Chu 002; Yugeng Liu; Michael Backes 001; Yang Zhang 016 (ICWSM, 2024)

Composite Backdoor Attacks Against Large Language Models. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (NAACL-HLT (Findings), 2024)

Test-Time Poisoning Attacks Against Test-Time Adaptation Models. - Tianshuo Cong; Xinlei He 001; Yun Shen; Yang Zhang 016 (SP, 2024)

You Only Prompt Once: On the Capabilities of Prompt Learning on Large Language Models to Tackle Toxic Content. - Xinlei He 001; Savvas Zannettou; Yun Shen; Yang Zhang 016 (SP, 2024)

Prompt Stealing Attacks Against Text-to-Image Generation Models. - Xinyue Shen 001; Yiting Qu; Michael Backes 001; Yang Zhang 016 (USENIX Security Symposium, 2024)

Quantifying Privacy Risks of Prompts in Visual Prompt Learning. - Yixin Wu 001; Rui Wen 002; Michael Backes 001; Pascal Berrang; Mathias Humbert; Yun Shen; Yang Zhang 016 (USENIX Security Symposium, 2024)

SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models. - Boyang Zhang; Zheng Li 023; Ziqing Yang 002; Xinlei He 001; Michael Backes 001; Mario Fritz; Yang Zhang 016 (USENIX Security Symposium, 2024)

Instruction Backdoor Attacks Against Customized LLMs. - Rui Zhang 086; Hongwei Li 001; Rui Wen 002; Wenbo Jiang 001; Yuan Zhang 006; Michael Backes 001; Yun Shen; Yang Zhang 016 (USENIX Security Symposium, 2024)

Generated Distributions Are All You Need for Membership Inference Attacks Against Generative Models. - Minxing Zhang; Ning Yu 006; Rui Wen 002; Michael Backes 001; Yang Zhang 016 (WACV, 2024)

Conversation Reconstruction Attack Against GPT Models. - Junjie Chu 002; Zeyang Sha; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

Comprehensive Assessment of Jailbreak Attacks Against LLMs. - Junjie Chu 002; Yugeng Liu; Ziqing Yang 002; Xinyue Shen 001; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

Rapid Adoption, Hidden Risks: The Dual Impact of Large Language Model Customization. - Rui Zhang 086; Hongwei Li 001; Rui Wen 002; Wenbo Jiang 001; Yuan Zhang 006; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2024)

Prompt Stealing Attacks Against Large Language Models. - Zeyang Sha; Yang Zhang 016 (CoRR, 2024)

VGMShield: Mitigating Misuse of Video Generative Models. - Yan Pang; Yang Zhang 016; Tianhao Wang 001 (CoRR, 2024)

Efficient Data-Free Model Stealing with Label Diversity. - Yiyong Liu; Rui Wen 002; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images. - Yiting Qu; Xinyue Shen 001; Yixin Wu 001; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CoRR, 2024)

Voice Jailbreak Attacks Against GPT-4o. - Xinyue Shen 001; Yixin Wu 001; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

SOS! Soft Prompt Attack Against Open-Source Large Language Models. - Ziqing Yang 002; Michael Backes 001; Yang Zhang 016; Ahmed Salem 001 (CoRR, 2024)

ICLGuard: Controlling In-Context Learning Behavior for Applicability Authorization. - Wai Man Si; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification. - Boyang Zhang; Yicong Tan; Yun Shen; Ahmed Salem 001; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CoRR, 2024)

Vera Verto: Multimodal Hijacking Attack. - Minxing Zhang; Ahmed Salem 001; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

Membership Inference Attack Against Masked Image Modeling. - Zheng Li 023; Xinlei He 001; Ning Yu 006; Yang Zhang 016 (CoRR, 2024)

Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data. - Atilla Akkus; Mingjie Li 007; Junjie Chu 002; Michael Backes 001; Yang Zhang 016; Sinem Sav (CoRR, 2024)

ModSCAN: Measuring Stereotypical Bias in Large Vision-Language Models from Vision and Language Modalities. - Yukun Jiang 001; Zheng Li 023; Xinyue Shen 001; Yugeng Liu; Michael Backes 001; Yang Zhang 016 (CoRR, 2024)

On the Generalization Ability of Machine-Generated Text Detectors. - Yule Liu; Zhiyuan Zhong; Yifan Liao; Zhen Sun 001; Jingyi Zheng; Jiaheng Wei; Qingyuan Gong; Fenghua Tong; Yang Chen 001; Yang Zhang 016; Xinlei He 001 (CoRR, 2024)

Link Stealing Attacks Against Inductive Graph Neural Networks. - Yixin Wu 001; Xinlei He 001; Pascal Berrang; Mathias Humbert; Michael Backes 001; Neil Zhenqiang Gong; Yang Zhang 016 (Proc. Priv. Enhancing Technol., 2024)

VeriTrain: Validating MLaaS Training Efforts via Anomaly Detection. - Xiaokuan Zhang; Yang Zhang 016; Yinqian Zhang (IEEE Trans. Dependable Secur. Comput., 2024)

When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs. - Xinyue Shen 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (ACL (1), 2025)

Are We in the AI-Generated Text World Already? Quantifying and Monitoring AIGT on Social Media. - Zhen Sun 001; Zongmin Zhang; Xinyue Shen 001; Ziyi Zhang; Yule Liu; Michael Backes 001; Yang Zhang 016; Xinlei He 001 (ACL (1), 2025)

JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs. - Junjie Chu 002; Yugeng Liu; Ziqing Yang 002; Xinyue Shen 001; Michael Backes 001; Yang Zhang 016 (ACL (1), 2025)

SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation. - Mingjie Li 007; Wai Man Si; Michael Backes 001; Yang Zhang 016; Yisen Wang 001 (ICLR, 2025)

Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm? - Rui Wen 002; Michael Backes 001; Yang Zhang 016 (NDSS, 2025)

Towards Understanding Unsafe Video Generation. - Yan Pang; Aiping Xiong; Yang Zhang 016; Tianhao Wang 001 (NDSS, 2025)

GPTracker: A Large-Scale Measurement of Misused GPTs. - Xinyue Shen 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (SP, 2025)

On the Effectiveness of Prompt Stealing Attacks on In-the-Wild Prompts. - Yicong Tan; Xinyue Shen 001; Yun Shen; Michael Backes 001; Yang Zhang 016 (SP, 2025)

A Comprehensive Study of Privacy Risks in Curriculum Learning. - Joann Qiongna Chen; Xinlei He 001; Zheng Li 023; Yang Zhang 016; Zhou Li 001 (Proc. Priv. Enhancing Technol., 2025)

White-box Membership Inference Attacks against Diffusion Models. - Yan Pang; Tianhao Wang 001; Xuhui Kang; Mengdi Huai; Yang Zhang 016 (Proc. Priv. Enhancing Technol., 2025)

Preface: Security and safety of data in cloud computing. - Dengguo Feng; Jian Ren; Yang Zhang 016 (Secur. Saf., 2025)

Advancing membership inference attacks: The present and the future. - Zheng Li 023; Yang Zhang 016 (Secur. Saf., 2025)

AIPAG/DHAttack: DHAttack. - Hao Li 092; Zheng Li 023; Siyuan Wu; Yutong Ye 002; Min Zhang 043; Dengguo Feng; Yang Zhang 016 (Zenodo, 2025)

HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns. - Xinyue Shen 001; Yixin Wu 001; Yiting Qu; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (Zenodo, 2025)

HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns. - Xinyue Shen 001; Yixin Wu 001; Yiting Qu; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (Zenodo, 2025)

On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts. - Yixin Wu 001; Ning Yu 006; Michael Backes 001; Yun Shen; Yang Zhang 016 (Zenodo, 2025)

On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts. - Yixin Wu 001; Ning Yu 006; Michael Backes 001; Yun Shen; Yang Zhang 016 (Zenodo, 2025)

HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns. - Xinyue Shen 001; Yixin Wu 001; Yiting Qu; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CoRR, 2025)

AIPAG/DHAttack: v2. - Hao Li 092; Zheng Li 023; Siyuan Wu; Yutong Ye 002; Min Zhang 043; Dengguo Feng; Yang Zhang 016 (Zenodo, 2025)

Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications. - Yixin Wu 001; Ziqing Yang 002; Yun Shen; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Peering Behind the Shield: Guardrail Identification in Large Language Models. - Ziqing Yang 002; Yixin Wu 001; Rui Wen 002; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Safety at Scale: A Comprehensive Survey of Large Model Safety. - Xingjun Ma; Yifeng Gao; Yixu Wang; Ruofan Wang; Xin Wang; Ye Sun; Yifan Ding; Hengyuan Xu; Yunhao Chen; Yunhan Zhao; Hanxun Huang; Yige Li; et al. (CoRR, 2025)

Fairness and/or Privacy on Social Graphs. - Bartlomiej Surma; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

The Challenge of Identifying the Origin of Black-Box Large Language Models. - Ziqing Yang 002; Yixin Wu 001; Yun Shen; Wei Dai; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

The Ripple Effect: On Unforeseen Complications of Backdoor Attacks. - Rui Zhang 086; Yun Shen; Hongwei Li 001; Wenbo Jiang 001; Hanxiao Chen 001; Yuan Zhang 006; Guowen Xu; Yang Zhang 016 (CoRR, 2025)

SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark. - Rui Wen 002; Yiyong Liu; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Watermarking LLM-Generated Datasets in Downstream Tasks. - Yugeng Liu; Tianshuo Cong; Michael Backes 001; Zheng Li 023; Yang Zhang 016 (CoRR, 2025)

Excessive Reasoning Attack on Reasoning LLMs. - Wai Man Si; Mingjie Li 007; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Amplifying Machine Learning Attacks Through Strategic Compositions. - Yugeng Liu; Zheng Li 023; Hai Huang 014; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities. - Yiting Qu; Michael Backes 001; Yang Zhang 016 (CoRR, 2025)

Hate in Plain Sight: On the Risks of Moderating AI-Generated Hateful Illusions. - Yiting Qu; Ziqing Yang 002; Yihan Ma 001; Michael Backes 001; Savvas Zannettou; Yang Zhang 016 (CoRR, 2025)