CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition. - Xuejing Yuan; Yuxuan Chen; Yue Zhao 018; Yunhui Long; Xiaokang Liu; Kai Chen 012; Shengzhi Zhang; Heqing Huang 001; Xiaofeng Wang 006; Carl A. Gunter (USENIX Security Symposium, 2018)

Practical Adversarial Attack Against Object Detector. - Yue Zhao 018; Hong Zhu; Qintao Shen; Ruigang Liang; Kai Chen 012; Shengzhi Zhang (CoRR, 2018)

Seeing isn't Believing: Towards More Robust Adversarial Attack Against Real World Object Detectors. - Yue Zhao 018; Hong Zhu; Ruigang Liang; Qintao Shen; Shengzhi Zhang; Kai Chen 012 (CCS, 2019)

Devil's Whisper: A General Approach for Physical Adversarial Attacks against Commercial Black-box Speech Recognition Devices. - Yuxuan Chen; Xuejing Yuan; Jiangshan Zhang; Yue Zhao 018; Shengzhi Zhang; Kai Chen 012; XiaoFeng Wang 001 (USENIX Security Symposium, 2020)

Using Sonar for Liveness Detection to Protect Smart Speakers against Remote Attackers. - Yeonjoon Lee; Yue Zhao 018; Jiutian Zeng; Kwangwuk Lee; Nan Zhang 018; Faysal Hossain Shezan; Yuan Tian 001; Kai Chen 012; XiaoFeng Wang 001 (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2020)

AI-Lancet: Locating Error-inducing Neurons to Optimize Neural Networks. - Yue Zhao 018; Hong Zhu; Kai Chen 012; Shengzhi Zhang (CCS, 2021)

HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks. - Peizhuo Lv; Pan Li; Shengzhi Zhang; Kai Chen 012; Ruigang Liang; Yue Zhao 018; Yingjiu Li (CoRR, 2021)

LLM Factoscope: Uncovering LLMs' Factual Discernment through Inner States Analysis. - Jinwen He; Yujia Gong; Kai Chen 012; Zijin Lin; Cheng'an Wei; Yue Zhao 018 (CoRR, 2023)

A Robustness-Assured White-Box Watermark in Neural Networks. - Peizhuo Lv; Pan Li; Shengzhi Zhang; Kai Chen 012; Ruigang Liang; Hualong Ma; Yue Zhao 018; Yingjiu Li (IEEE Trans. Dependable Secur. Comput., 2023)

UMA: Facilitating Backdoor Scanning via Unlearning-Based Model Ablation. - Yue Zhao 018; Congyi Li; Kai Chen 012 (AAAI, 2024)

LLM Factoscope: Uncovering LLMs' Factual Discernment through Measuring Inner States. - Jinwen He; Yujia Gong; Zijin Lin; Cheng'an Wei; Yue Zhao 018; Kai Chen 012 (ACL (Findings), 2024)

I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors. - Zijin Lin; Yue Zhao 018; Kai Chen 012; Jinwen He (CCS, 2024)

AE-Morpher: Improve Physical Robustness of Adversarial Objects against LiDAR-based Detectors via Object Reconstruction. - Shenchen Zhu; Yue Zhao 018; Kai Chen 012; Bo Wang; Hualong Ma; Cheng'an Wei (USENIX Security Symposium, 2024)

NeuralSanitizer: Detecting Backdoors in Neural Networks. - Hong Zhu; Yue Zhao 018; Shengzhi Zhang; Kai Chen 012 (IEEE Trans. Inf. Forensics Secur., 2024)