A Domain Experts Centric Approach to Formal Requirements Modeling and V&V of Embedded Control Software. - Weikai Miao; Qianqian Yan; Yihao Huang 001; Jincao Feng; Hanyue Zheng (APSEC, 2019)

Prema: A Tool for Precise Requirements Editing, Modeling and Analysis. - Yihao Huang 001; Jincao Feng; Hanyue Zheng; Jiayi Zhu 002; Shang Wang; Siyuan Jiang; Weikai Miao; Geguang Pu (ASE, 2019)

Amora: Black-box Adversarial Morphing Attack. - Run Wang 001; Felix Juefei-Xu; Xiaofei Xie; Lei Ma 003; Yihao Huang 001; Yang Liu 003 (CoRR, 2019)

FakeSpotter: A Simple yet Robust Baseline for Spotting AI-Synthesized Fake Faces. - Run Wang 001; Felix Juefei-Xu; Lei Ma 003; Xiaofei Xie; Yihao Huang 001; Jian Wang 067; Yang Liu 003 (IJCAI, 2020)

FakePolisher: Making DeepFakes More Detection-Evasive by Shallow Reconstruction. - Yihao Huang 001; Felix Juefei-Xu; Run Wang 001; Qing Guo 005; Lei Ma 003; Xiaofei Xie; Jianwen Li; Weikai Miao; Yang Liu 003; Geguang Pu (ACM Multimedia, 2020)

Amora: Black-box Adversarial Morphing Attack. - Run Wang 001; Felix Juefei-Xu; Qing Guo 005; Yihao Huang 001; Xiaofei Xie; Lei Ma 003; Yang Liu 003 (ACM Multimedia, 2020)

DeepSonar: Towards Effective and Robust Detection of AI-Synthesized Fake Voices. - Run Wang 001; Felix Juefei-Xu; Yihao Huang 001; Qing Guo 005; Xiaofei Xie; Lei Ma 003; Yang Liu 003 (ACM Multimedia, 2020)

FREPA: an automated and formal approach to requirement modeling and analysis in aircraft control domain. - Jincao Feng; Weikai Miao; Hanyue Zheng; Yihao Huang 001; Jianwen Li; Zheng Wang 005; Ting Su 001; Bin Gu 006; Geguang Pu; Mengfei Yang; Jifeng He 001 (ESEC/SIGSOFT FSE, 2020)

FakeLocator: Robust Localization of GAN-Based Face Manipulations via Semantic Segmentation Networks with Bells and Whistles. - Yihao Huang 001; Felix Juefei-Xu; Run Wang 001; Xiaofei Xie; Lei Ma 003; Jianwen Li; Weikai Miao; Yang Liu 003; Geguang Pu (CoRR, 2020)

FakeRetouch: Evading DeepFakes Detection via the Guidance of Deliberate Noise. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Xiaofei Xie; Lei Ma 003; Weikai Miao; Yang Liu 003; Geguang Pu (CoRR, 2020)

AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning. - Yihao Huang 001; Qing Guo 005; Felix Juefei-Xu; Lei Ma 003; Weikai Miao; Yang Liu 003; Geguang Pu (ACM Multimedia, 2021)

AdvBokeh: Learning to Adversarially Defocus Blur. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Weikai Miao; Yang Liu 003; Geguang Pu (CoRR, 2021)

Masked Faces with Faced Masks. - Jiayi Zhu 002; Qing Guo 005; Felix Juefei-Xu; Yihao Huang 001; Yang Liu 003; Geguang Pu (ECCV Workshops (1), 2022)

ALA: Adversarial Lightness Attack via Naturalness-aware Regularizations. - Liangru Sun; Felix Juefei-Xu; Yihao Huang 001; Qing Guo 005; Jiayi Zhu 002; Jincao Feng; Yang Liu 003; Geguang Pu (CoRR, 2022)

FedCross: Towards Accurate Federated Learning via Multi-Model Cross Aggregation. - Ming Hu 003; Peiheng Zhou; Zhihao Yue; Zhiwei Ling; Yihao Huang 001; Yang Liu 003; Mingsong Chen 001 (CoRR, 2022)

GitFL: Adaptive Asynchronous Federated Learning using Version Control. - Ming Hu 003; Zeke Xia; Zhihao Yue; Jun Xia 003; Yihao Huang 001; Yang Liu 003; Mingsong Chen 001 (CoRR, 2022)

Countering Malicious DeepFakes: Survey, Battleground, and Horizon. - Felix Juefei-Xu; Run Wang 001; Yihao Huang 001; Qing Guo 005; Lei Ma 003; Yang Liu 003 (Int. J. Comput. Vis., 2022)

FakeLocator: Robust Localization of GAN-Based Face Manipulations. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Yang Liu 003; Geguang Pu (IEEE Trans. Inf. Forensics Secur., 2022)

Evading DeepFake Detectors via Adversarial Statistical Consistency. - Yang Hou; Qing Guo 005; Yihao Huang 001; Xiaofei Xie; Lei Ma 003; Jianjun Zhao 001 (CVPR, 2023)

ALA: Naturalness-aware Adversarial Lightness Attack. - Yihao Huang 001; Liangru Sun; Qing Guo 005; Felix Juefei-Xu; Jiayi Zhu 002; Jincao Feng; Yang Liu 003; Geguang Pu (ACM Multimedia, 2023)

GitFL: Uncertainty-Aware Real-Time Asynchronous Federated Learning Using Version Control. - Ming Hu 003; Zeke Xia; Dengke Yan; Zhihao Yue; Jun Xia 003; Yihao Huang 001; Yang Liu 003; Mingsong Chen 001 (RTSS, 2023)

Zero-Day Backdoor Attack against Text-to-Image Diffusion Models via Personalization. - Yihao Huang 001; Qing Guo 005; Felix Juefei-Xu (CoRR, 2023)

FedMR: Federated Learning via Model Recombination. - Ming Hu 003; Zhihao Yue; Zhiwei Ling; Yihao Huang 001; Cheng Chen 015; Xian Wei; Yang Liu 003; Mingsong Chen 001 (CoRR, 2023)

On the Robustness of Segment Anything. - Yihao Huang 001; Yue Cao; Tianlin Li; Felix Juefei-Xu; Di Lin 002; Ivor W. Tsang; Yang Liu 003; Qing Guo 005 (CoRR, 2023)

Towards Better Fairness-Utility Trade-off: A Comprehensive Measurement-Based Reinforcement Learning Framework. - Simiao Zhang; Jitao Bai; Menghong Guan; Yihao Huang 001; Yueling Zhang; Jun Sun 001; Geguang Pu (CoRR, 2023)

Protect Federated Learning Against Backdoor Attacks via Data-Free Trigger Generation. - Yanxin Yang; Ming Hu 003; Yue Cao; Jun Xia 003; Yihao Huang 001; Yang Liu 003; Mingsong Chen 001 (CoRR, 2023)

AdapterFL: Adaptive Heterogeneous Federated Learning for Resource-constrained Mobile Computing Systems. - Ruixuan Liu; Ming Hu 003; Zeke Xia; Jun Xia 003; Pengyu Zhang; Yihao Huang 001; Yang Liu 003; Mingsong Chen 001 (CoRR, 2023)

TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation. - Xiaojun Jia; Jindong Gu; Yihao Huang 001; Simeng Qin; Qing Guo 005; Yang Liu 003; Xiaochun Cao (CoRR, 2023)

A Mutation-Based Method for Multi-Modal Jailbreaking Attack Detection. - Xiaoyu Zhang 013; Cen Zhang; Tianlin Li; Yihao Huang 001; Xiaojun Jia; Xiaofei Xie; Yang Liu 003; Chao Shen 001 (CoRR, 2023)

Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Jie Zhang 002; Yutong Wu 009; Ming Hu 003; Tianlin Li; Geguang Pu; Yang Liu 003 (AAAI, 2024)

Cosalpure: Learning Concept from Group Images for Robust Co-Saliency Detection. - Jiayi Zhu 002; Qing Guo 005; Felix Juefei-Xu; Yihao Huang 001; Yang Liu 003; Geguang Pu (CVPR, 2024)

CFP: A Reinforcement Learning Framework for Comprehensive Fairness-Performance Trade-Off in Machine Learning. - Simiao Zhang; Jitao Bai; Menghong Guan; Yueling Zhang; Jun Sun 001; Yihao Huang 001; Jiaping Wang; Chengcheng Wan 001; Ting Su 001; Geguang Pu (ICANN (1), 2024)

Architecture-Agnostic Iterative Black-Box Certified Defense Against Adversarial Patches. - Di Yang; Yihao Huang 001; Qing Guo 005; Felix Juefei-Xu; Ming Hu 003; Yang Liu 003; Geguang Pu (ICASSP, 2024)

FedCross: Towards Accurate Federated Learning via Multi-Model Cross-Aggregation. - Ming Hu 003; Peiheng Zhou; Zhihao Yue; Zhiwei Ling; Yihao Huang 001; Anran Li 001; Yang Liu 003; Xiang Lian 001; Mingsong Chen 001 (ICDE, 2024)

RUNNER: Responsible UNfair NEuron Repair for Enhancing Deep Neural Network Fairness. - Tianlin Li; Yue Cao; Jian Zhang 087; Shiqian Zhao; Yihao Huang 001; Aishan Liu; Qing Guo 005; Yang Liu 003 (ICSE, 2024)

Is Aggregation the Only Choice? Federated Learning via Layer-wise Model Recombination. - Ming Hu 003; Zhihao Yue; Xiaofei Xie; Cheng Chen 015; Yihao Huang 001; Xian Wei; Xiang Lian 001; Yang Liu 003; Mingsong Chen 001 (KDD, 2024)

Improving Robustness of LiDAR-Camera Fusion Model against Weather Corruption from Fusion Strategy Perspective. - Yihao Huang 001; Kaiyuan Yu; Qing Guo 005; Felix Juefei-Xu; Xiaojun Jia; Tianlin Li; Geguang Pu; Yang Liu 003 (CoRR, 2024)

MIP: CLIP-based Image Reconstruction from PEFT Gradients. - Peiheng Zhou; Ming Hu 003; Xiaofei Xie; Yihao Huang 001; Kangjie Chen; Mingsong Chen 001 (CoRR, 2024)

Semantic-guided Prompt Organization for Universal Goal Hijacking against LLMs. - Yihao Huang 001; Chong Wang 013; Xiaojun Jia; Qing Guo 005; Felix Juefei-Xu; Jian Zhang 087; Geguang Pu; Yang Liu 003 (CoRR, 2024)

Text Modality Oriented Image Feature Extraction for Detecting Diffusion-based DeepFake. - Di Yang; Yihao Huang 001; Qing Guo 005; Felix Juefei-Xu; Xiaojun Jia; Run Wang 001; Geguang Pu; Yang Liu 003 (CoRR, 2024)

NeuSemSlice: Towards Effective DNN Model Maintenance via Neuron-level Semantic Slicing. - Shide Zhou; Tianlin Li; Yihao Huang 001; Ling Shi 002; Kailong Wang 001; Yang Liu 003; Haoyu Wang 001 (CoRR, 2024)

RT-Attack: Jailbreaking Text-to-Image Models via Random Token. - Sensen Gao; Xiaojun Jia; Yihao Huang 001; Ranjie Duan; Jindong Gu; Yang Liu 003; Qing Guo 005 (CoRR, 2024)

Investigating Coverage Criteria in Large Language Models: An In-Depth Study Through Jailbreak Attacks. - Shide Zhou; Tianlin Li; Kailong Wang 001; Yihao Huang 001; Ling Shi 002; Yang Liu 003; Haoyu Wang 001 (CoRR, 2024)

Efficient and Effective Universal Adversarial Attack against Vision-Language Pre-training Models. - Fan Yang; Yihao Huang 001; Kailong Wang 001; Ling Shi 002; Geguang Pu; Yang Liu 003; Haoyu Wang 001 (CoRR, 2024)

Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack. - Xiaojun Jia; Sensen Gao; Qing Guo 005; Ke Ma 001; Yihao Huang 001; Simeng Qin; Yang Liu 003; Ivor W. Tsang; Xiaochun Cao (CoRR, 2024)

Global Challenge for Safe and Secure LLMs Track 1. - Xiaojun Jia; Yihao Huang 001; Yang Liu 003; Peng Yan Tan; Weng Kuan Yau; Mun-Thye Mak; Xin Ming Sim; Wee Siong Ng; See-Kiong Ng; Hanqing Liu; Lifeng Zhou; Huanqian Yan; et al. (CoRR, 2024)

Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models. - Ma Teng; Xiaojun Jia; Ranjie Duan; Li Xinfeng; Yihao Huang 001; Chu Zhixuan; Yang Liu 003; Wenqi Ren (CoRR, 2024)

What External Knowledge is Preferred by LLMs? Characterizing and Exploring Chain of Evidence in Imperfect Context. - Zhiyuan Chang; Mingyang Li; Xiaojun Jia; Junjie Wang 001; Yuekai Huang; Qing Wang 001; Yihao Huang 001; Yang Liu 003 (CoRR, 2024)

Concept Guided Co-saliency Objection Detection. - Jiayi Zhu 002; Qing Guo 005; Felix Juefei-Xu; Yihao Huang 001; Yang Liu 003; Geguang Pu (CoRR, 2024)

Historical Embedding-Guided Efficient Large-Scale Federated Graph Learning. - Anran Li 001; Yuanyuan Chen; Jian Zhang 087; Mingfei Cheng; Yihao Huang 001; Yueming Wu 001; Anh Tuan Luu; Han Yu 001 (Proc. ACM Manag. Data, 2024)

Texture Re-Scalable Universal Adversarial Perturbation. - Yihao Huang 001; Qing Guo 005; Felix Juefei-Xu; Ming Hu 003; Xiaojun Jia; Xiaochun Cao; Geguang Pu; Yang Liu 003 (IEEE Trans. Inf. Forensics Secur., 2024)

Natural & Adversarial Bokeh Rendering via Circle-of-Confusion Predictive Network. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Geguang Pu; Yang Liu 003 (IEEE Trans. Multim., 2024)

Dodging DeepFake Detection via Implicit Spatial-Domain Notch Filtering. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Yang Liu 003; Geguang Pu (IEEE Trans. Circuits Syst. Video Technol., 2024)

Perception-Guided Jailbreak Against Text-to-Image Models. - Yihao Huang 001; Le Liang; Tianlin Li; Xiaojun Jia; Run Wang 001; Weikai Miao; Geguang Pu; Yang Liu 003 (AAAI, 2025)

Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization. - Yihao Huang 001; Chong Wang 013; Xiaojun Jia; Qing Guo 005; Felix Juefei-Xu; Jian Zhang 087; Yang Liu 003; Geguang Pu (ACL (1), 2025)

Improved Techniques for Optimization-Based Jailbreaking on Large Language Models. - Xiaojun Jia; Tianyu Pang; Chao Du; Yihao Huang 001; Jindong Gu; Yang Liu 003; Xiaochun Cao; Min Lin (ICLR, 2025)

Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks. - Shide Zhou; Tianlin Li; Kailong Wang 001; Yihao Huang 001; Ling Shi 002; Yang Liu 003; Haoyu Wang 001 (ICSE, 2025)

PATFinger: Prompt-Adapted Transferable Fingerprinting against Unauthorized Multimodal Dataset Usage. - Wenyi Zhang; Ju Jia; Xiaojun Jia; Yihao Huang 001; Xinfeng Li; Cong Wu 003; Lina Wang 001 (SIGIR, 2025)

Scale-Invariant Adversarial Attack Against Arbitrary-Scale Super-Resolution. - Yihao Huang 001; Xin Luo; Qing Guo 005; Felix Juefei-Xu; Xiaojun Jia; Weikai Miao; Geguang Pu; Yang Liu 003 (IEEE Trans. Inf. Forensics Secur., 2025)

PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models. - Lingzhi Yuan; Xinfeng Li; Chejian Xu; Guanhong Tao 001; Xiaojun Jia; Yihao Huang 001; Wei Dong; Yang Liu 003; XiaoFeng Wang 001; Bo Li (CoRR, 2025)

Evolution-based Region Adversarial Prompt Learning for Robustness Enhancement in Vision-Language Models. - Xiaojun Jia; Sensen Gao; Simeng Qin; Ke Ma 001; Xinfeng Li; Yihao Huang 001; Wei Dong; Yang Liu 003; Xiaochun Cao (CoRR, 2025)

Privacy Protection Against Personalized Text-to-Image Synthesis via Cross-image Consistency Constraints. - Guanyu Wang 005; Kailong Wang 001; Yihao Huang 001; Mingyi Zhou; Zhang Qing cnwatcher; Geguang Pu; Li Li 029 (CoRR, 2025)

A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment. - Kun Wang 056; Guibin Zhang; Zhenhong Zhou; Jiahao Wu; Miao Yu; Shiqian Zhao; Chenlong Yin; Jinhu Fu; Yibo Yan; Hanjun Luo; Liang Lin; Zhihao Xu; et al. (CoRR, 2025)

A Vision for Auto Research with LLM Agents. - Chengwei Liu; Chong Wang 013; Jiayue Cao; Jingquan Ge; Kun Wang 042; Lvye Zhang; Ming-Ming Cheng; Penghai Zhao; Tianlin Li; Xiaojun Jia; Xiang Li 041; Xinfeng Li; et al. (CoRR, 2025)

Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment. - Xiaojun Jia; Sensen Gao; Simeng Qin; Tianyu Pang; Chao Du; Yihao Huang 001; Xinfeng Li; Yiming Li 004; Bo Li; Yang Liu 003 (CoRR, 2025)

Time-variant Image Inpainting via Interactive Distribution Transition Estimation. - Yun Xing; Qing Guo 005; Xiaohong Li 001; Yihao Huang 001; Xiaofeng Cao 002; Di Lin 002; Ivor W. Tsang; Lei Ma 003 (CoRR, 2025)

Seeing It Before It Happens: In-Generation NSFW Detection for Diffusion-Based Text-to-Image Models. - Fan Yang; Yihao Huang 001; Jiayi Zhu 002; Ling Shi 002; Geguang Pu; Jin Song Dong; Kailong Wang 001 (CoRR, 2025)

Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models. - Shiqian Zhao; Chong Wang 013; Yiming Li 004; Yihao Huang 001; Wenjie Qu 001; Siew-Kei Lam; Yi Xie 011; Kangjie Chen; Jie Zhang 073; Tianwei Zhang 004 (CoRR, 2025)