Towards Privacy and Security of Deep Learning Systems: A Survey. - Yingzhe He; Guozhu Meng; Kai Chen 012; Xingbo Hu; Jinwen He (CoRR, 2019)

DRMI: A Dataset Reduction Technology based on Mutual Information for Black-box Attacks. - Yingzhe He; Guozhu Meng; Kai Chen 012; Xingbo Hu; Jinwen He (USENIX Security Symposium, 2021)

DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks. - Yingzhe He; Guozhu Meng; Kai Chen 012; Jinwen He; Xingbo Hu (CoRR, 2021)

Towards Security Threats of Deep Learning Systems: A Survey. - Yingzhe He; Guozhu Meng; Kai Chen 012; Xingbo Hu; Jinwen He (IEEE Trans. Software Eng., 2022)

ADBM: Adversarial diffusion bridge model for reliable adversarial purification. - Xiao Li; Wenxuan Sun; Huanran Chen; Qiongxiu Li; Yining Liu; Yingzhe He; Jie Shi; Xiaolin Hu (CoRR, 2024)

ADBM: Adversarial Diffusion Bridge Model for Reliable Adversarial Purification. - Xiao Li; Wenxuan Sun; Huanran Chen; Qiongxiu Li; Yingzhe He; Jie Shi; Xiaolin Hu (ICLR, 2025)

PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection. - Xiao Li; Yiming Zhu; Yifan Huang; Wei Zhang; Yingzhe He; Jie Shi; Xiaolin Hu (CoRR, 2025)

Disrupting Semantic and Abstract Features for Better Adversarial Transferability. - Yuyang Luo; Xiaosen Wang; Zhijin Ge; Yingzhe He (CoRR, 2025)

Principal Component Analysis-Based Optimal Feature Design for GNSS Spoofing Detection. - Shuai Zhang; Chao Sun; Ying Xu; Lu Bai 008; Wenquan Feng; Xin Wen; Yingzhe He; Nanzhu Liu (IEEE Commun. Lett., 2025)