UA-DRN: Unbiased Aggregation of Deep Neural Networks for Regression Ensemble. - Jiawei Li 006; Yiming Li 004; Jiacheng Yang; Taian Guo; Shu-Tao Xia (Aust. J. Intell. Inf. Process. Syst., 2019)

Multinomial Random Forests: Fill the Gap between Theoretical Consistency and Empirical Soundness. - Yiming Li 004; Jiawang Bai; Qingtao Tang; Yong Jiang 001; Chun Li; Shutao Xia (CoRR, 2019)

Rectified Decision Trees: Towards Interpretability, Compression and Empirical Soundness. - Jiawang Bai; Yiming Li 004; Jiawei Li 006; Yong Jiang 001; Shu-Tao Xia (CoRR, 2019)

t-k-means: A k-means Variant with Robustness and Stability. - Yang Zhang 016; Qingtao Tang; Yiming Li 004; Weipéng Huáng; Shutao Xia (CoRR, 2019)

Adversarial Defense Via Local Flatness Regularization. - Jia Xu; Yiming Li 004; Yang Bai; Yong Jiang 001; Shu-Tao Xia (CoRR, 2019)

Targeted Attack for Deep Hashing Based Retrieval. - Jiawang Bai; Bin Chen 011; Yiming Li 004; Dongxian Wu; Weiwei Guo; Shu-Tao Xia; En-Hui Yang (ECCV (1), 2020)

Adversarial Defense Via Local Flatness Regularization. - Jia Xu; Yiming Li 004; Yong Jiang 001; Shu-Tao Xia (ICIP, 2020)

Generalized Local Aggregation for Large Scale Gaussian Process Regression. - Yinghua Gao; Naiqi Li; Ning Ding 002; Yiming Li 004; Tao Dai 001; Shu-Tao Xia (IJCNN, 2020)

Multitask Deep Learning for Edge Intelligence Video Surveillance System. - Jiawei Li 006; Zhilong Zheng; Yiming Li 004; Rubao Ma; Shu-Tao Xia (INDIN, 2020)

Toward Adversarial Robustness via Semi-supervised Robust Training. - Yiming Li 004; Baoyuan Wu; Yan Feng; Yanbo Fan; Yong Jiang 001; Zhifeng Li 001; Shutao Xia (CoRR, 2020)

Rethinking the Trigger of Backdoor Attack. - Yiming Li 004; Tongqing Zhai; Baoyuan Wu; Yong Jiang 001; Zhifeng Li 001; Shutao Xia (CoRR, 2020)

Backdoor Learning: A Survey. - Yiming Li 004; Baoyuan Wu; Yong Jiang 001; Zhifeng Li 001; Shu-Tao Xia (CoRR, 2020)

Rectified Decision Trees: Exploring the Landscape of Interpretable and Effective Machine Learning. - Yiming Li 004; Jiawang Bai; Jiawei Li 006; Xue Yang 003; Yong Jiang 001; Shu-Tao Xia (CoRR, 2020)

Open-sourced Dataset Protection via Backdoor Watermarking. - Yiming Li 004; Ziqi Zhang; Jiawang Bai; Baoyuan Wu; Yong Jiang 001; Shu-Tao Xia (CoRR, 2020)

Backdoor Attack with Sample-Specific Triggers. - Yuezun Li; Yiming Li 004; Baoyuan Wu; Longkang Li; Ran He 001; Siwei Lyu (CoRR, 2020)

TNT: An Interpretable Tree-Network-Tree Learning Framework using Knowledge Distillation. - Jiawei Li 006; Yiming Li 004; Xingchun Xiang; Shu-Tao Xia; Siyi Dong; Yun Cai (Entropy, 2020)

Visual Privacy Protection via Mapping Distortion. - Yiming Li 004; Peidong Liu; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2021)

t-k-means: A ROBUST AND STABLE k-means VARIANT. - Yiming Li 004; Yang Zhang 016; Qingtao Tang; Weipéng Huáng; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2021)

Backdoor Attack Against Speaker Verification. - Tongqing Zhai; Yiming Li 004; Ziqi Zhang; Baoyuan Wu; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2021)

Invisible Backdoor Attack with Sample-Specific Triggers. - Yuezun Li; Yiming Li 004; Baoyuan Wu; Longkang Li; Ran He 001; Siwei Lyu (ICCV, 2021)

Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits. - Jiawang Bai; Baoyuan Wu; Yong Zhang 034; Yiming Li 004; Zhifeng Li 001; Shu-Tao Xia (ICLR, 2021)

Hidden Backdoor Attack against Semantic Segmentation Models. - Yiming Li 004; Yanjie Li; Yalei Lv; Yong Jiang 001; Shu-Tao Xia (CoRR, 2021)

Backdoor Attack in the Physical World. - Yiming Li 004; Tongqing Zhai; Yong Jiang 001; Zhifeng Li 001; Shu-Tao Xia (CoRR, 2021)

Regional Adversarial Training for Better Robust Generalization. - Chuanbiao Song; Yanbo Fan; Yichen Yang 009; Baoyuan Wu; Yiming Li 004; Zhifeng Li 001; Kun He 001 (CoRR, 2021)

Defending against Model Stealing via Verifying Embedded External Features. - Yiming Li 004; Linghui Zhu; Xiaojun Jia; Yong Jiang 001; Shu-Tao Xia; Xiaochun Cao (AAAI, 2022)

Adaptive Local Implicit Image Function for Arbitrary-Scale Super-Resolution. - Hongwei Li; Tao Dai 001; Yiming Li 004; Xueyi Zou; Shu-Tao Xia (ICIP, 2022)

Few-Shot Backdoor Attacks on Visual Object Tracking. - Yiming Li 004; Haoxiang Zhong; Xingjun Ma; Yong Jiang 001; Shu-Tao Xia (ICLR, 2022)

Backdoor Defense via Decoupling the Training Process. - Kunzhe Huang; Yiming Li 004; Baoyuan Wu; Zhan Qin; Kui Ren 001 (ICLR, 2022)

Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection. - Yiming Li 004; Yang Bai; Yong Jiang 001; Yong Yang 001; Shu-Tao Xia; Bo Li (NeurIPS, 2022)

MOVE: Effective and Harmless Ownership Verification via Embedded External Features. - Yiming Li 004; Linghui Zhu; Xiaojun Jia; Yang Bai; Yong Jiang 001; Shu-Tao Xia; Xiaochun Cao (CoRR, 2022)

Black-box Ownership Verification for Dataset Protection via Backdoor Watermarking. - Yiming Li 004; Mingyan Zhu 001; Xue Yang 003; Yong Jiang 001; Shu-Tao Xia (CoRR, 2022)

A Fine-Grained Differentially Private Federated Learning Against Leakage From Gradients. - Linghui Zhu; Xinyi Liu; Yiming Li 004; Xue Yang 003; Shu-Tao Xia; Rongxing Lu (IEEE Internet Things J., 2022)

Multinomial random forest. - Jiawang Bai; Yiming Li 004; Jiawei Li 006; Xue Yang 003; Yong Jiang 001; Shu-Tao Xia (Pattern Recognit., 2022)

Semi-supervised robust training with generalized perturbed neighborhood. - Yiming Li 004; Baoyuan Wu; Yan Feng; Yanbo Fan; Yong Jiang 001; Zhifeng Li 001; Shu-Tao Xia (Pattern Recognit., 2022)

Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization. - Bangyan He; Jian Liu 012; Yiming Li 004; Siyuan Liang; Jingzhi Li 002; Xiaojun Jia; Xiaochun Cao (AAAI, 2023)

Untargeted Backdoor Attack Against Object Detection. - Chengxiao Luo; Yiming Li 004; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2023)

BATT: Backdoor Attack with Transformation-Based Triggers. - Tong Xu; Yiming Li 004; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2023)

Backdoor Defense via Suppressing Model Shortcuts. - Sheng Yang; Yiming Li 004; Yong Jiang 001; Shu-Tao Xia (ICASSP, 2023)

One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training. - Jianshuo Dong; Han Qiu 001; Yiming Li 004; Tianwei Zhang 004; Yuanjie Li; Zeqi Lai; Chao Zhang 008; Shu-Tao Xia (ICCV, 2023)

Towards Robust Model Watermark via Reducing Parametric Vulnerability. - Guanhao Gan; Yiming Li 004; Dongxian Wu; Shu-Tao Xia (ICCV, 2023)

SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency. - Junfeng Guo; Yiming Li 004; Xun Chen; Hanqing Guo; Lichao Sun 001; Cong Liu 005 (ICLR, 2023)

Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand. - Junfeng Guo; Yiming Li 004; Lixu Wang; Shu-Tao Xia; Heng Huang; Cong Liu 005; Bo Li (NeurIPS, 2023)

Defending Against Backdoor Attacks by Layer-wise Feature Analysis. - Najeeb Moharram Jebreel; Josep Domingo-Ferrer; Yiming Li 004 (PAKDD (2), 2023)

BackdoorBox: A Python Toolbox for Backdoor Learning. - Yiming Li 004; Mengxi Ya; Yang Bai; Yong Jiang 001; Shu-Tao Xia (CoRR, 2023)

Backdoor Attack with Sparse and Invisible Trigger. - Yinghua Gao; Yiming Li 004; Xueluan Gong; Shu-Tao Xia; Qian Wang 002 (CoRR, 2023)

Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound. - Hanbo Cai; Pengcheng Zhang 001; Hai Dong; Yan Xiao 002; Stefanos Koffas; Yiming Li 004 (CoRR, 2023)

Black-Box Dataset Ownership Verification via Backdoor Watermarking. - Yiming Li 004; Mingyan Zhu 001; Xue Yang 003; Yong Jiang 001; Tao Wei 002; Shu-Tao Xia (IEEE Trans. Inf. Forensics Secur., 2023)

Not All Samples Are Born Equal: Towards Effective Clean-Label Backdoor Attacks. - Yinghua Gao; Yiming Li 004; Linghui Zhu; Dongxian Wu; Yong Jiang 001; Shu-Tao Xia (Pattern Recognit., 2023)

BadActs: A Universal Backdoor Defense in the Activation Space. - Biao Yi; Sishuo Chen; Yiming Li 004; Tong Li 011; Baolei Zhang; Zheli Liu (ACL (Findings), 2024)

Causal Interventional Prediction System for Robust and Explainable Effect Forecasting. - Zhixuan Chu; Hui Ding; Guang Zeng 001; Shiyu Wang 001; Yiming Li 004 (CIKM, 2024)

Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers. - Sheng Yang; Jiawang Bai; Kuofeng Gao; Yong Yang 001; Yiming Li 004; Shu-Tao Xia (CVPR, 2024)

Which Model Generated This Image? A Model-Agnostic Approach for Origin Attribution. - Fengyuan Liu; Haochen Luo; Yiming Li 004; Philip Torr 001; Jindong Gu (ECCV (62), 2024)

Towards Reliable and Efficient Backdoor Trigger Inversion via Decoupling Benign Features. - Xiong Xu; Kunzhe Huang; Yiming Li 004; Zhan Qin; Kui Ren 001 (ICLR, 2024)

Towards Faithful XAI Evaluation via Generalization-Limited Backdoor Watermark. - Mengxi Ya; Yiming Li 004; Tao Dai 001; Bin Wang 034; Yong Jiang 001; Shu-Tao Xia (ICLR, 2024)

IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency. - Linshan Hou; Ruili Feng; Zhongyun Hua; Wei Luo 001; Leo Yu Zhang; Yiming Li 004 (ICML, 2024)

Purifying Quantization-conditioned Backdoors via Layer-wise Activation Correction with Distribution Approximation. - Boheng Li; Yishuo Cai; Jisong Cai; Yiming Li 004; Han Qiu 001; Run Wang 001; Tianwei Zhang 004 (ICML, 2024)

Defending Against Backdoor Attacks by Layer-wise Feature Analysis (Extended Abstract). - Najeeb Moharram Jebreel; Josep Domingo-Ferrer; Yiming Li 004 (IJCAI, 2024)

ZeroMark: Towards Dataset Ownership Verification without Disclosing Watermark. - Junfeng Guo; Yiming Li 004; Ruibo Chen; Yihan Wu; Chenxi Liu; Heng Huang (NeurIPS, 2024)

Model-agnostic Origin Attribution of Generated Images with Few-shot Examples. - Fengyuan Liu; Haochen Luo; Yiming Li 004; Philip Torr 001; Jindong Gu (CoRR, 2024)

Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers. - Sheng Yang; Jiawang Bai; Kuofeng Gao; Yong Yang 001; Yiming Li 004; Shutao Xia (CoRR, 2024)

TAPI: Towards Target-Specific and Adversarial Prompt Injection against Code LLMs. - Yuchen Yang; Hongwei Yao; Bingrun Yang; Yiling He; Yiming Li 004; Tianwei Zhang 004; Zhan Qin; Kui Ren 001 (CoRR, 2024)

PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (CoRR, 2024)

Demonstration Attack against In-Context Learning for Code Intelligence. - Yifei Ge; Weisong Sun; Yihang Lou; Chunrong Fang; Yiran Zhang; Yiming Li 004; Xiaofang Zhang; Yang Liu 003; Zhihong Zhao; Zhenyu Chen 001 (CoRR, 2024)

SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI. - Kui Ren 001; Ziqi Yang; Li Lu 008; Jian Liu 012; Yiming Li 004; Jie Wan; Xiaodi Zhao; Xianheng Feng; Shuo Shao 002 (CoRR, 2024)

FLARE: Towards Universal Dataset Purification against Backdoor Attacks. - Linshan Hou; Wei Luo 001; Zhongyun Hua; Songhua Chen; Leo Yu Zhang; Yiming Li 004 (CoRR, 2024)

SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution. - Runyi Hu; Jie Zhang 073; Yiming Li 004; Jiwei Li 001; Qing Guo 005; Han Qiu 001; Tianwei Zhang 004 (CoRR, 2024)

Understanding the Dark Side of LLMs' Intrinsic Self-Correction. - Qingjie Zhang; Han Qiu 001; Di Wang; Haoting Qian; Yiming Li 004; Tianwei Zhang 004; Minlie Huang (CoRR, 2024)

Toward Stealthy Backdoor Attacks Against Speech Recognition via Elements of Sound. - Hanbo Cai; Pengcheng Zhang 001; Hai Dong; Yan Xiao 002; Stefanos Koffas; Yiming Li 004 (IEEE Trans. Inf. Forensics Secur., 2024)

Backdoor Attack With Sparse and Invisible Trigger. - Yinghua Gao; Yiming Li 004; Xueluan Gong; Zhifeng Li 001; Shu-Tao Xia; Qian Wang 002 (IEEE Trans. Inf. Forensics Secur., 2024)

Backdoor Learning: A Survey. - Yiming Li 004; Yong Jiang 001; Zhifeng Li 001; Shu-Tao Xia (IEEE Trans. Neural Networks Learn. Syst., 2024)

Portfolio Selection via Graph-Aware Gaussian Processes With Generalized Gaussian Likelihood. - Naiqi Li; Zhikang Xia; Yiming Li 004; Ercan E. Kuruoglu; Yong Jiang 001; Shu-Tao Xia (IEEE Trans. Artif. Intell., 2024)

Node-Level Graph Regression With Deep Gaussian Process Models. - Naiqi Li; Wenjie Li 008; Yinghua Gao; Yiming Li 004; Jigang Bao; Ercan E. Kuruoglu; Yong Jiang 001; Shu-Tao Xia (IEEE Trans. Artif. Intell., 2024)

Regional Adversarial Training for Better Robust Generalization. - Chuanbiao Song; Yanbo Fan; Aoyang Zhou; Baoyuan Wu; Yiming Li 004; Zhifeng Li 001; Kun He 001 (Int. J. Comput. Vis., 2024)

Understanding the Dark Side of LLMs' Intrinsic Self-Correction. - Qingjie Zhang; Di Wang; Haoting Qian; Yiming Li 004; Tianwei Zhang 004; Minlie Huang; Ke Xu 002; Hewu Li; Liu Yan; Han Qiu 001 (ACL (1), 2025)

SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models. - Zilan Wang; Junfeng Guo; Jiacheng Zhu; Yiming Li 004; Heng Huang; Muhao Chen 001; Zhengzhong Tu (CVPR, 2025)

REFINE: Inversion-Free Backdoor Defense via Model Reprogramming. - Yukun Chen 002; Shuo Shao 002; Enhao Huang; Yiming Li 004; Pin-Yu Chen; Zhan Qin; Kui Ren 001 (ICLR, 2025)

VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking. - Runyi Hu; Jie Zhang 073; Yiming Li 004; Jiwei Li 001; Qing Guo 005; Han Qiu 001; Tianwei Zhang 004 (ICLR, 2025)

Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models. - Biao Yi; Tiansheng Huang; Sishuo Chen; Tong Li 011; Zheli Liu; Zhixuan Chu; Yiming Li 004 (ICLR, 2025)

A Benchmark for Semantic Sensitive Information in LLMs Outputs. - Qingjie Zhang; Han Qiu 001; Di Wang; Yiming Li 004; Tianwei Zhang 004; Wenyu Zhu; Haiqin Weng; Liu Yan; Chao Zhang 008 (ICLR, 2025)

Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution. - Shuo Shao 002; Yiming Li 004; Hongwei Yao; Yiling He; Zhan Qin; Kui Ren 001 (NDSS, 2025)

Prompt Inversion Attack Against Collaborative Inference of Large Language Models. - Wenjie Qu 001; Yuguang Zhou; Yongji Wu; Tingsong Xiao; Binhang Yuan; Yiming Li 004; Jiaheng Zhang (SP, 2025)

Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models. - Boheng Li; Yanhao Wei; Yankai Fu; Zhenting Wang; Yiming Li 004; Jie Zhang 073; Run Wang 001; Tianwei Zhang 004 (SP, 2025)

Evading backdoor defenses: Concealing genuine backdoors through scapegoat strategy. - Yaguan Qian; Zejie Lian; Yiming Li 004; Wei Wang 012; Zhaoquan Gu; Bin Wang 062; Yanchun Zhang (Comput. Secur., 2025)

Towards Sample-Specific Backdoor Attack With Clean Labels via Attribute Trigger. - Mingyan Zhu 001; Yiming Li 004; Junfeng Guo; Tao Wei 002; Shu-Tao Xia; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2025)

FLARE: Toward Universal Dataset Purification Against Backdoor Attacks. - Linshan Hou; Wei Luo 001; Zhongyun Hua; Songhua Chen; Leo Yu Zhang; Yiming Li 004 (IEEE Trans. Inf. Forensics Secur., 2025)

CoAS: Composite Audio Steganography Based on Text and Speech Synthesis. - Yiming Li 004; Kejiang Chen; Yaofei Wang; Xin Zhang; Guanjie Wang; Weiming Zhang 001; Nenghai Yu (IEEE Trans. Inf. Forensics Secur., 2025)

PointNCBW: Toward Dataset Ownership Verification for Point Clouds via Negative Clean-Label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (IEEE Trans. Inf. Forensics Secur., 2025)

ARMOR: Shielding Unlearnable Examples against Data Augmentation. - Xueluan Gong; Yuji Wang; Yanjiao Chen; Haocheng Dong; Yiming Li 004; Mengyuan Sun 001; Shuaike Li; Qian Wang 002; Chen Chen (CoRR, 2025)

FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint. - Shuo Shao 002; Haozhe Zhu; Hongwei Yao; Yiming Li 004; Tianwei Zhang 004; Zhan Qin; Kui Ren 001 (CoRR, 2025)

Safety at Scale: A Comprehensive Survey of Large Model Safety. - Xingjun Ma; Yifeng Gao; Yixu Wang; Ruofan Wang; Xin Wang; Ye Sun; Yifan Ding; Hengyuan Xu; Yunhao Chen; Yunhan Zhao; Hanxun Huang; Yige Li; et al. (CoRR, 2025)

Towards Copyright Protection for Knowledge Bases of Retrieval-augmented Language Models via Ownership Verification with Reasoning. - Junfeng Guo; Yiming Li 004; Ruibo Chen; Yihan Wu; Chenxi Liu; Yanshuo Chen; Heng Huang (CoRR, 2025)

Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models. - Yu He; Boheng Li; Liu Liu; Zhongjie Ba; Wei Dong 001; Yiming Li 004; Zhan Qin; Kui Ren 001; Chun Chen 001 (CoRR, 2025)

CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking. - Yiming Li 004; Kaiying Yan; Shuo Shao 002; Tongqing Zhai; Shu-Tao Xia; Zhan Qin; Dacheng Tao (CoRR, 2025)

PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning. - Yaopeng Wang; Huiyu Xu; Zhibo Wang 001; Jiacheng Du; Zhichao Li; Yiming Li 004; Qiu Wang; Kui Ren 001 (CoRR, 2025)

Inception: Jailbreak the Memory Mechanism of Text-to-Image Generation Systems. - Shiqian Zhao; Jiayang Liu; Yiming Li 004; Runyi Hu; Xiaojun Jia; Wenshu Fan; Xinfeng Li; Jie Zhang 073; Wei Dong 001; Tianwei Zhang 004; Luu Anh Tuan (CoRR, 2025)

Towards Dataset Copyright Evasion Attack against Personalized Text-to-Image Diffusion Models. - Kuofeng Gao; Yufei Zhu; Yiming Li 004; Jiawang Bai; Yong Yang 001; Zhifeng Li 001; Shu-Tao Xia (CoRR, 2025)

BitHydra: Towards Bit-flip Inference Cost Attack against Large Language Models. - Xiaobei Yan; Yiming Li 004; Zhaoxin Fan; Han Qiu 001; Tianwei Zhang 004 (CoRR, 2025)

Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment. - Xiaojun Jia; Sensen Gao; Simeng Qin; Tianyu Pang; Chao Du; Yihao Huang 001; Xinfeng Li; Yiming Li 004; Bo Li; Yang Liu 003 (CoRR, 2025)

CertDW: Towards Certified Dataset Ownership Verification via Conformal Prediction. - Ting Qiao; Yiming Li 004; Jianbin Li; Yingjia Wang; Leyi Qi; Junfeng Guo; Ruili Feng; Dacheng Tao (CoRR, 2025)

MOVE: Effective and Harmless Ownership Verification via Embedded External Features. - Yiming Li 004; Linghui Zhu; Xiaojun Jia; Yang Bai; Yong Jiang 001; Shu-Tao Xia; Xiaochun Cao; Kui Ren 001 (IEEE Trans. Pattern Anal. Mach. Intell., 2025)

Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features. - Linghui Zhu; Yiming Li 004; Haiqin Weng; Yan Liu; Tianwei Zhang 004; Shu-Tao Xia; Zhi Wang 001 (CoRR, 2025)

Rethinking Data Protection in the (Generative) Artificial Intelligence Era. - Yiming Li 004; Shuo Shao 002; Yu He; Junfeng Guo; Tianwei Zhang 004; Zhan Qin; Pin-Yu Chen; Michael Backes 001; Philip Torr 001; Dacheng Tao; Kui Ren 001 (CoRR, 2025)

DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective. - Shuo Shao 002; Yiming Li 004; Mengren Zheng; Zhiyang Hu; Yukun Chen 002; Boheng Li; Yu He; Junfeng Guo; Tianwei Zhang 004; Dacheng Tao; Zhan Qin (CoRR, 2025)

BURN: Backdoor Unlearning via Adversarial Boundary Analysis. - Yanghao Su; Jie Zhang 073; Yiming Li 004; Tianwei Zhang 004; Qing Guo 005; Weiming Zhang 001; Nenghai Yu; Nils Lukas; Wenbo Zhou (CoRR, 2025)

Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning. - Boheng Li; Renjie Gu; Junjie Wang; Leyi Qi; Yiming Li 004; Run Wang 001; Zhan Qin; Tianwei Zhang 004 (CoRR, 2025)

DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling. - Boheng Li; Junjie Wang; Yiming Li 004; Zhiyang Hu; Leyi Qi; Jianshuo Dong; Run Wang 001; Han Qiu 001; Zhan Qin; Tianwei Zhang 004 (CoRR, 2025)

BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit. - Biao Yi; Zekun Fei; Jianing Geng; Tong Li 011; Lihai Nie; Zheli Liu; Yiming Li 004 (CoRR, 2025)

Coward: Toward Practical Proactive Federated Backdoor Defense via Collision-based Watermark. - Wenjie Li 008; Siying Gu; Yiming Li 004; Kangjie Chen; Zhili Chen; Tianwei Zhang 004; Shu-Tao Xia; Dacheng Tao (CoRR, 2025)

Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models. - Shiqian Zhao; Chong Wang 013; Yiming Li 004; Yihao Huang 001; Wenjie Qu 001; Siew-Kei Lam; Yi Xie 011; Kangjie Chen; Jie Zhang 073; Tianwei Zhang 004 (CoRR, 2025)

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems. - Yutong Wu 009; Jie Zhang 073; Yiming Li 004; Chao Zhang 008; Qing Guo 005; Nils Lukas; Tianwei Zhang 004 (CoRR, 2025)