Watermarking Pre-trained Encoders in Contrastive Learning. - Yutong Wu 009; Han Qiu 001; Tianwei Zhang 004; Jiwei Li 001; Meikang Qiu (ICDIS, 2022)

Computation and Data Efficient Backdoor Attacks. - Yutong Wu 009; Xingshuo Han; Han Qiu 001; Tianwei Zhang 004 (ICCV, 2023)

Backdooring Textual Inversion for Concept Censorship. - Yutong Wu 009; Jie Zhang 002; Florian Kerschbaum; Tianwei Zhang 004 (CoRR, 2023)

Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models. - Yihao Huang 001; Felix Juefei-Xu; Qing Guo 005; Jie Zhang 002; Yutong Wu 009; Ming Hu 003; Tianlin Li; Geguang Pu; Yang Liu 003 (AAAI, 2024)

You Only Query Once: An Efficient Label-Only Membership Inference Attack. - Yutong Wu 009; Han Qiu 001; Shangwei Guo; Jiwei Li 001; Tianwei Zhang 004 (ICLR, 2024)

Backdooring Multimodal Learning. - Xingshuo Han; Yutong Wu 009; Qingjie Zhang; Yuan Zhou 005; Yuan Xu; Han Qiu 001; Guowen Xu; Tianwei Zhang 004 (SP, 2024)

THEMIS: Regulating Textual Inversion for Personalized Concept Censorship. - Yutong Wu 009; Jie Zhang 002; Florian Kerschbaum; Tianwei Zhang 004 (NDSS, 2025)

One Patch to Rule Them All: Transforming Static Patches into Dynamic Attacks in the Physical World. - Xingshuo Han; Chen Ling; Shiyi Yao; Haozhao Wang; Hangcheng Liu; Yutong Wu 009; Shengmin Xu; Changhai Ou; Xinyi Huang 001; Tianwei Zhang 004 (CoRR, 2025)

Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems. - Yutong Wu 009; Jie Zhang 073; Yiming Li 004; Chao Zhang 008; Qing Guo 005; Nils Lukas; Tianwei Zhang 004 (CoRR, 2025)