Improving Generalization of Deepfake Detection with Domain Adaptive Batch Normalization. - Zixin Yin; Jiakai Wang; Yifu Ding; Yisong Xiao; Jun Guo 009; Renshuai Tao; Haotong Qin (AdvM @ ACM Multimedia, 2021)

Latent Imitator: Generating Natural Individual Discriminatory Instances for Black-Box Fairness Testing. - Yisong Xiao; Aishan Liu; Tianlin Li; Xianglong Liu 001 (ISSTA, 2023)

Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks. - Jun Guo 009; Xingyu Zheng; Aishan Liu; Siyuan Liang; Yisong Xiao; Yichao Wu; Xianglong Liu 001 (ACM Multimedia, 2023)

Benchmarking the Robustness of Quantized Models. - Yisong Xiao; Tianyuan Zhang 004; Shunchang Liu; Haotong Qin (CoRR, 2023)

Benchmarking the Physical-world Adversarial Robustness of Vehicle Detection. - Tianyuan Zhang 004; Yisong Xiao; Xiaoya Zhang; Hao Li; Lu Wang (CoRR, 2023)

Boosting Cross-task Transferability of Adversarial Patches with Visual Relations. - Tony Ma; Songze Li; Yisong Xiao; Shunchang Liu (CoRR, 2023)

RobustMQ: benchmarking robustness of quantized models. - Yisong Xiao; Aishan Liu; Tianyuan Zhang 004; Haotong Qin; Jinyang Guo; Xianglong Liu 001 (Vis. Intell., 2023)

LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions. - Tianyuan Zhang 004; Lu Wang; Hainan Li; Yisong Xiao; Siyuan Liang; Aishan Liu; Xianglong Liu 001; Dacheng Tao (ACM Multimedia, 2024)

LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions. - Tianyuan Zhang 004; Lu Wang; Hainan Li; Yisong Xiao; Siyuan Liang; Aishan Liu; Xianglong Liu 001; Dacheng Tao (CoRR, 2024)

GenderBias-VL: Benchmarking Gender Bias in Vision Language Models via Counterfactual Probing. - Yisong Xiao; Aishan Liu; QianJia Cheng; Zhenfei Yin; Siyuan Liang; Jiapeng Li; Jing Shao; Xianglong Liu 001; Dacheng Tao (CoRR, 2024)

Improving Deepfake Detection Generalization by Invariant Risk Minimization. - Zixin Yin; Jiakai Wang; Yisong Xiao; Hanqing Zhao; Tianlin Li; Wenbo Zhou; Aishan Liu; Xianglong Liu 001 (IEEE Trans. Multim., 2024)

BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks. - Yisong Xiao; Aishan Liu; Xinwei Zhang; Tianyuan Zhang 004; Tianlin Li; Siyuan Liang; Xianglong Liu 001; Yang Liu 088; Dacheng Tao (ICSE, 2025)

Fairness Mediator: Neutralize Stereotype Associations to Mitigate Bias in Large Language Models. - Yisong Xiao; Aishan Liu; Siyuan Liang; Xianglong Liu 001; Dacheng Tao (Proc. ACM Softw. Eng., 2025)

Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models. - Zonghao Ying; Deyue Zhang; Zonglei Jing; Yisong Xiao; Quanchen Zou; Aishan Liu; Siyuan Liang; Xiangzheng Zhang; Xianglong Liu 001; Dacheng Tao (CoRR, 2025)

Pre-trained Trojan Attacks for Visual Recognition. - Aishan Liu; Xianglong Liu 001; Xinwei Zhang; Yisong Xiao; Yuguang Zhou; Siyuan Liang; Jiakai Wang; Xiaochun Cao; Dacheng Tao (Int. J. Comput. Vis., 2025)

PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking. - Quanchen Zou; Zonghao Ying; Moyang Chen; Wenzhuo Xu; Yisong Xiao; Yakai Li; Deyue Zhang; Dongdong Yang; Zhao Liu; Xiangzheng Zhang (CoRR, 2025)