PriWhisper: Enabling Keyless Secure Acoustic Communication for Smartphones. - Bingsheng Zhang; Zhan Qin; Junfei Wang; Kui Ren 001; Cong Wang 001; Di Ma 001 (IACR Cryptol. ePrint Arch., 2013)

Privacy-preserving outsourcing of image global feature detection. - Zhan Qin; Jingbo Yan; Kui Ren 001; Chang Wen Chen; Cong Wang 001; Xinwen Fu (GLOBECOM, 2014)

AcousAuth: An acoustic-based mobile application for user authentication. - Si Chen 009; Muyuan Li; Zhan Qin; Bingsheng Zhang; Kui Ren 001 (INFOCOM Workshops, 2014)

Private image computation: The case of cloud based privacy-preserving SIFT. - Zhan Qin; Jingbo Yan; Kui Ren 001 (INFOCOM Workshops, 2014)

Towards Efficient Privacy-preserving Image Feature Extraction in Cloud Computing. - Zhan Qin; Jingbo Yan; Kui Ren 001; Chang Wen Chen; Cong Wang 001 (ACM Multimedia, 2014)

PriWhisper: Enabling Keyless Secure Acoustic Communication for Smartphones. - Bingsheng Zhang; Zhan Qin; Si Chen 009; Muyuan Li; Kui Ren 001; Cong Wang 001; Di Ma 001 (IEEE Internet Things J., 2014)

Cloud-Enabled Privacy-Preserving Truth Discovery in Crowd Sensing Systems. - Chenglin Miao; Wenjun Jiang; Lu Su 001; Yaliang Li; Suxin Guo; Zhan Qin; Houping Xiao; Jing Gao 004; Kui Ren 001 (SenSys, 2015)

Heavy Hitter Estimation over Set-Valued Data with Local Differential Privacy. - Zhan Qin; Yin Yang 001; Ting Yu 001; Issa Khalil; Xiaokui Xiao; Kui Ren 001 (CCS, 2016)

RescueDP: Real-time spatio-temporal crowd-sourced data publishing with differential privacy. - Qian Wang 002; Yan Zhang 002; Xiao Lu; Zhibo Wang 001; Zhan Qin; Kui Ren 001 (INFOCOM, 2016)

SecWeb: Privacy-Preserving Web Browsing Monitoring with w-Event Differential Privacy. - Qian Wang 002; Xiao Lu; Yan Zhang 002; Zhibo Wang 001; Zhan Qin; Kui Ren 001 (SecureComm, 2016)

Securing acoustics-based short-range communication systems: an overview. - Si Chen 009; Zhan Qin; Guoliang Xing; Kui Ren 001 (J. Commun. Inf. Networks, 2016)

A Privacy-Preserving and Copy-Deterrence Content-Based Image Retrieval Scheme in Cloud Computing. - Zhihua Xia; Xinhui Wang; Liangao Zhang; Zhan Qin; Xingming Sun; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2016)

Securing SIFT: Privacy-Preserving Outsourcing Computation of Feature Extractions Over Encrypted Image Data. - Shengshan Hu; Qian Wang 002; Jingjun Wang; Zhan Qin; Kui Ren 001 (IEEE Trans. Image Process., 2016)

DPcode: Privacy-Preserving Frequent Visual Patterns Publication on Cloud. - Zhan Qin; Kui Ren 001; Ting Yu 001; Jian Weng 001 (IEEE Trans. Multim., 2016)

SecSIFT: Secure Image SIFT Feature Extraction in Cloud Computing. - Zhan Qin; Jingbo Yan; Kui Ren 001; Chang Wen Chen; Cong Wang 001 (ACM Trans. Multim. Comput. Commun. Appl., 2016)

Generating Synthetic Decentralized Social Graphs with Local Differential Privacy. - Zhan Qin; Ting Yu 001; Yin Yang 001; Issa Khalil; Xiaokui Xiao; Kui Ren 001 (CCS, 2017)

When privacy meets economics: Enabling differentially-private battery-supported meter reporting in smart grid. - Zijian Zhang 001; Wenqiang Cao; Zhan Qin; Liehuang Zhu; Zhengtao Yu 001; Kui Ren 001 (IWQoS, 2017)

Privacy-Preserving Outsourcing of Parallel Magnetic Resonance Image Reconstruction. - Zihao Shan; Kui Ren 001; Zhan Qin (PAC, 2017)

Privacy Protection Using a Rechargeable Battery for Energy Consumption in Smart Grids. - Liehuang Zhu; Zijian Zhang 001; Zhan Qin; Jian Weng 001; Kui Ren 001 (IEEE Netw., 2017)

DPPro: Differentially Private High-Dimensional Data Release via Random Projection. - Chugui Xu; Ju Ren 001; Yaoxue Zhang; Zhan Qin; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2017)

Cost-Friendly Differential Privacy for Smart Meters: Exploiting the Dual Roles of the Noise. - Zijian Zhang 001; Zhan Qin; Liehuang Zhu; Jian Weng 001; Kui Ren 001 (IEEE Trans. Smart Grid, 2017)

Truth Inference on Sparse Crowdsourcing Data with Local Differential Privacy. - Haipei Sun; Boxiang Dong; Wendy Hui Wang; Ting Yu 001; Zhan Qin (IEEE BigData, 2018)

SecSAKE: Towards Secure and Efficient Outsourcing of Clinical MRI Reconstruction. - Zihao Shan; Zhan Qin; Leslie Ying; Kui Ren 001 (AsiaCCS, 2018)

An Efficient Two-Layer Mechanism for Privacy-Preserving Truth Discovery. - Yaliang Li; Chenglin Miao; Lu Su 001; Jing Gao 004; Qi Li 012; Bolin Ding; Zhan Qin; Kui Ren 001 (KDD, 2018)

Privacy-Preserving Image Processing in the Cloud. - Zhan Qin; Jian Weng 001; Yong Cui 001; Kui Ren 001 (IEEE Cloud Comput., 2018)

Towards Privacy-Preserving Content-Based Image Retrieval in Cloud Computing. - Zhihua Xia; Yi Zhu 012; Xingming Sun; Zhan Qin; Kui Ren 001 (IEEE Trans. Cloud Comput., 2018)

Real-Time and Spatio-Temporal Crowd-Sourced Social Network Data Publishing with Differential Privacy. - Qian Wang 002; Yan Zhang 002; Xiao Lu; Zhibo Wang 001; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2018)

Privacy Protection Scheme Based on Remote Anonymous Attestation for Trusted Smart Meters. - Jia Zhao 005; Jiqiang Liu; Zhan Qin; Kui Ren 001 (IEEE Trans. Smart Grid, 2018)

Analyzing Subgraph Statistics from Extended Local Views with Decentralized Differential Privacy. - Haipei Sun; Xiaokui Xiao; Issa Khalil; Yin Yang 001; Zhan Qin; Wendy Hui Wang; Ting Yu 001 (CCS, 2019)

CFP: Enabling Camera Fingerprint Concealment for Privacy-Preserving Image Sharing. - Zhongjie Ba; Xinyu Zhang 016; Zhan Qin; Kui Ren 001 (ICDCS, 2019)

SPEED: Accelerating Enclave Applications Via Secure Deduplication. - Helei Cui; Huayi Duan; Zhan Qin; Cong Wang 001; Yajin Zhou (ICDCS, 2019)

Adversarial Examples for Automatic Speech Recognition: Attacks and Countermeasures. - Shengshan Hu; Xingcan Shang; Zhan Qin; Minghui Li; Qian Wang 002; Cong Wang 001 (IEEE Commun. Mag., 2019)

EveDroid: Event-Aware Android Malware Detection Against Model Degrading for IoT Devices. - Tao Lei; Zhan Qin; Zhibo Wang 001; Qi Li 002; Dengpan Ye (IEEE Internet Things J., 2019)

EdgeSanitizer: Locally Differentially Private Deep Inference at the Edge for Mobile Data Analytics. - Chugui Xu; Ju Ren 001; Liang She; Yaoxue Zhang; Zhan Qin; Kui Ren 001 (IEEE Internet Things J., 2019)

CIM: Camera in Motion for Smartphone Authentication. - Zhongjie Ba; Zhan Qin; Xinwen Fu; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2019)

GANobfuscator: Mitigating Information Leakage Under GAN via Differential Privacy. - Chugui Xu; Ju Ren 001; Deyu Zhang; Yaoxue Zhang; Zhan Qin; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2019)

Privacy-Preserving Truth Discovery in Crowd Sensing Systems. - Chenglin Miao; Wenjun Jiang; Lu Su 001; Yaliang Li; Suxin Guo; Zhan Qin; Houping Xiao; Jing Gao 004; Kui Ren 001 (ACM Trans. Sens. Networks, 2019)

Toward Hardware-Rooted Smartphone Authentication. - Kui Ren 001; Zhan Qin; Zhongjie Ba (IEEE Wirel. Commun., 2019)

Hidden Voice Commands: Attacks and Defenses on the VCS of Autonomous Driving Cars. - Man Zhou; Zhan Qin; Xiu Lin; Shengshan Hu; Qian Wang 002; Kui Ren 001 (IEEE Wirel. Commun., 2019)

From Homogeneous to Heterogeneous: Leveraging Deep Learning based Power Analysis across Devices. - Fan Zhang 010; Bin Shao; Guorui Xu; Bolin Yang; Ziqi Yang; Zhan Qin; Kui Ren 001 (DAC, 2020)

Towards Differentially Private Truth Discovery for Crowd Sensing Systems. - Yaliang Li; Houping Xiao; Zhan Qin; Chenglin Miao; Lu Su 001; Jing Gao 004; Kui Ren 001; Bolin Ding (ICDCS, 2020)

Accelerometer-based smartphone eavesdropping. - Zhongjie Ba; Tianhang Zheng; Zhan Qin; Hanlin Yu; Liu Liu; Baochun Li; Xue Liu 001; Kui Ren 001 (MobiCom, 2020)

Learning-based Practical Smartphone Eavesdropping with Built-in Accelerometer. - Zhongjie Ba; Tianhang Zheng; Xinyu Zhang 016; Zhan Qin; Baochun Li; Xue Liu 001; Kui Ren 001 (NDSS, 2020)

DUMP: A Dummy-Point-Based Framework for Histogram Estimation in Shuffle Model. - Xiaochen Li; Weiran Liu; Ziyi Chen; Kunzhe Huang; Zhan Qin; Lei Zhang 006; Kui Ren 001 (CoRR, 2020)

The Security of Autonomous Driving: Threats, Defenses, and Future Directions. - Kui Ren 001; Qian Wang 002; Cong Wang 001; Zhan Qin; Xiaodong Lin 001 (Proc. IEEE, 2020)

ASAP: An Anonymous Smart-Parking and Payment Scheme in Vehicular Networks. - Liehuang Zhu; Meng Li 006; Zijian Zhang 001; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2020)

How to Securely Outsource Finding the Min-Cut of Undirected Edge-Weighted Graphs. - Pu Zhao 002; Jia Yu 003; Hanlin Zhang 001; Zhan Qin; Cong Wang 001 (IEEE Trans. Inf. Forensics Secur., 2020)

LPPA: Lightweight Privacy-Preserving Authentication From Efficient Multi-Key Secure Outsourced Computation for Location-Based Services in VANETs. - Jun Zhou 018; Zhenfu Cao; Zhan Qin; Xiaolei Dong; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2020)

Zero-to-Stable Driver Identification: A Non-Intrusive and Scalable Driver Identification Scheme. - Mussadiq Abdul Rahim; Liehuang Zhu; Xin Li 033; Jiamou Liu; Zijian Zhang 001; Zhan Qin; Salabat Khan; Keke Gai (IEEE Trans. Veh. Technol., 2020)

Feature Importance-aware Transferable Adversarial Attacks. - Zhibo Wang 001; Hengchang Guo; Zhifei Zhang; Wenxin Liu; Zhan Qin; Kui Ren 001 (ICCV, 2021)

From Local to Global Norm Emergence: Dissolving Self-reinforcing Substructures with Incremental Social Instruments. - Yiwei Liu; Jiamou Liu; Kaibin Wan; Zhan Qin; Zijian Zhang 001; Bakhadyr Khoussainov; Liehuang Zhu (ICML, 2021)

Secure Prediction of Neural Network in the Cloud. - Minghui Li; Yuejing Yan; Qian Wang 002; Minxin Du; Zhan Qin; Cong Wang 001 (IEEE Netw., 2021)

Are You Confident That You Have Successfully Generated Adversarial Examples? - Bo Wang 024; Mengnan Zhao; Wei Wang 025; Fei Wei; Zhan Qin; Kui Ren 001 (IEEE Trans. Circuits Syst. Video Technol., 2021)

Towards Private, Robust, and Verifiable Crowdsensing Systems via Public Blockchains. - Chengjun Cai; Yifeng Zheng; Yuefeng Du 001; Zhan Qin; Cong Wang 001 (IEEE Trans. Dependable Secur. Comput., 2021)

Towards Achieving Keyword Search over Dynamic Encrypted Cloud Data with Symmetric-Key Based Verification. - Xinrui Ge; Jia Yu 003; Hanlin Zhang 001; Chengyu Hu; Zengpeng Li 001; Zhan Qin; Rong Hao (IEEE Trans. Dependable Secur. Comput., 2021)

Towards Private and Scalable Cross-Media Retrieval. - Shengshan Hu; Leo Yu Zhang; Qian Wang 002; Zhan Qin; Cong Wang 001 (IEEE Trans. Dependable Secur. Comput., 2021)

e-PoS: Making Proof-of-Stake Decentralized and Fair. - Muhammad Saad 001; Zhan Qin; Kui Ren 001; DaeHun Nyang; David Mohaisen (IEEE Trans. Parallel Distributed Syst., 2021)

L-SRR: Local Differential Privacy for Location-Based Services with Staircase Randomized Response. - Han Wang 021; Hanbin Hong; Li Xiong 001; Zhan Qin; Yuan Hong 001 (CCS, 2022)

SeInspect: Defending Model Stealing via Heterogeneous Semantic Inspection. - Xinjing Liu; Zhuo Ma 001; Yang Liu 118; Zhan Qin; Junwei Zhang 001; Zhuzhu Wang (ESORICS (1), 2022)

Backdoor Defense via Decoupling the Training Process. - Kunzhe Huang; Yiming Li 004; Baoyuan Wu; Zhan Qin; Kui Ren 001 (ICLR, 2022)

FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model. - Shuo Shao 002; Wenyuan Yang; Hanlin Gu; Jian Lou 001; Zhan Qin; Lixin Fan; Qiang Yang 001; Kui Ren 001 (CoRR, 2022)

OpBoost: A Vertical Federated Tree Boosting Framework Based on Order-Preserving Desensitization. - Xiaochen Li; Yuke Hu; Weiran Liu; Hanwen Feng 001; Li Peng; Yuan Hong 001; Kui Ren 001; Zhan Qin (Proc. VLDB Endow., 2022)

snWF: Website Fingerprinting Attack by Ensembling the Snapshot of Deep Learning. - Yanbin Wang; Haitao Xu 002; Zhenhao Guo; Zhan Qin; Kui Ren 001 (IEEE Trans. Inf. Forensics Secur., 2022)

FINER: Enhancing State-of-the-art Classifiers with Feature Attribution to Facilitate Security Analysis. - Yiling He; Jian Lou 001; Zhan Qin; Kui Ren 001 (CCS, 2023)

A Large-Scale Pretrained Deep Model for Phishing URL Detection. - Yanbin Wang; Weifan Zhu; Haitao Xu 002; Zhan Qin; Kui Ren 001; Wenrui Ma (ICASSP, 2023)

MUter: Machine Unlearning on Adversarially Trained Models. - Junxu Liu; Mingsheng Xue; Jian Lou 001; Xiaoyu Zhang 010; Li Xiong 001; Zhan Qin (ICCV, 2023)

DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity. - Zhuo Chen; Jie Liu; Yubo Hu; Lei Wu 012; Yajin Zhou; Yiling He; Xianhao Liao; Ke Wang 042; Jinku Li; Zhan Qin (ISSTA, 2023)

ShapleyFL: Robust Federated Learning Based on Shapley Value. - Qiheng Sun; Xiang Li 001; Jiayao Zhang 006; Li Xiong 001; Weiran Liu; Jinfei Liu; Zhan Qin; Kui Ren 001 (KDD, 2023)

Certified Minimax Unlearning with Generalization Rates and Deletion Capacity. - Jiaqi Liu 003; Jian Lou 001; Zhan Qin; Kui Ren 001 (NeurIPS, 2023)

Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding. - Yuke Hu; Wei Liang; Ruofan Wu; Kai Xiao; Weiqiang Wang 002; Xiaochen Li; Jinfei Liu; Zhan Qin (WWW, 2023)

FDINet: Protecting against DNN Model Extraction via Feature Distortion Index. - Hongwei Yao; Zheng Li; Haiqin Weng; Feng Xue; Kui Ren 001; Zhan Qin (CoRR, 2023)

Pitfalls in Language Models for Code Intelligence: A Taxonomy and Survey. - Xinyu She; Yue Liu 011; Yanjie Zhao 001; Yiling He; Li Li 029; Chakkrit Tantithamthavorn; Zhan Qin; Haoyu Wang 001 (CoRR, 2023)

Malicious URL Detection via Pretrained Language Model Guided Multi-Level Feature Attention Network. - Ruitong Liu; Yanbin Wang; Haitao Xu 002; Zhan Qin; Yiwei Liu; Zheng Cao (CoRR, 2023)

ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach. - Yuke Hu; Jian Lou 001; Jiaqi Liu 003; Feng Lin 004; Zhan Qin; Kui Ren 001 (CoRR, 2023)

PyraTrans: Attention-Enriched Pyramid Transformer for Malicious URL Detection. - Ruitong Liu; Yanbin Wang; Zhenhao Guo; Haitao Xu 002; Zhan Qin; Wenrui Ma; Fan Zhang 010 (CoRR, 2023)

Threats to Training: A Survey of Poisoning Attacks and Defenses on Machine Learning Systems. - Zhibo Wang 001; Jingjing Ma; Xue Wang; Jiahui Hu; Zhan Qin; Kui Ren 001 (ACM Comput. Surv., 2023)

Equitable Data Valuation Meets the Right to Be Forgotten in Model Markets. - Haocheng Xia; Jinfei Liu; Jian Lou 001; Zhan Qin; Kui Ren 001; Yang Cao 011; Li Xiong 001 (Proc. VLDB Endow., 2023)

MsDroid: Identifying Malicious Snippets for Android Malware Detection. - Yiling He; Yiping Li; Lei Wu 012; Ziqi Yang; Kui Ren 001; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2023)

DivTheft: An Ensemble Model Stealing Attack by Divide-and-Conquer. - Zhuo Ma 001; Xinjing Liu; Yang Liu 118; Ximeng Liu; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2023)

SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution. - Zhongjie Ba; Jieming Zhong; Jiachen Lei; Peng Cheng 007; Qinglong Wang 003; Zhan Qin; Zhibo Wang 001; Kui Ren 001 (CCS, 2024)

A Causal Explainable Guardrails for Large Language Models. - Zhixuan Chu; Yan Wang 002; Longfei Li; Zhibo Wang 001; Zhan Qin; Kui Ren 001 (CCS, 2024)

ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach. - Yuke Hu; Jian Lou 001; Jiaqi Liu 003; Wangze Ni; Feng Lin 004; Zhan Qin; Kui Ren 001 (CCS, 2024)

Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models. - Yue Xu; Xiuyuan Qi; Zhan Qin; Wenjie Wang 008 (EMNLP (Findings), 2024)

PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models. - Hongwei Yao; Jian Lou 001; Zhan Qin (ICASSP, 2024)

Towards Reliable and Efficient Backdoor Trigger Inversion via Decoupling Benign Features. - Xiong Xu; Kunzhe Huang; Yiming Li 004; Zhan Qin; Kui Ren 001 (ICLR, 2024)

DPI: Ensuring Strict Differential Privacy for Infinite Data Streaming. - Shuya Feng; Meisam Mohammady; Han Wang 021; Xiaochen Li; Zhan Qin; Yuan Hong 001 (SP, 2024)

Need for Speed: Taming Backdoor Attacks with Speed and Precision. - Zhuo Ma 001; Yilong Yang 004; Yang Liu 118; Tong Yang 003; Xinjing Liu; Teng Li 003; Zhan Qin (SP, 2024)

PromptCARE: Prompt Copyright Protection by Watermark Injection and Verification. - Hongwei Yao; Jian Lou 001; Zhan Qin; Kui Ren 001 (SP, 2024)

MicGuard: A Comprehensive Detection System against Out-of-band Injection Attacks for Different Level Microphone-based Devices. - Tiantian Liu 002; Feng Lin 004; Zhongjie Ba; Li Lu 008; Zhan Qin; Kui Ren 001 (USENIX Security Symposium, 2024)

Property Existence Inference against Generative Models. - Lijin Wang; Jingjing Wang; Jie Wan; Lin Long; Ziqi Yang; Zhan Qin (USENIX Security Symposium, 2024)

TransURL: Improving malicious URL detection with multi-layer Transformer encoding and multi-scale pyramid features. - Ruitong Liu; Yanbin Wang; Zhenhao Guo; Haitao Xu 002; Zhan Qin; Wenrui Ma; Fan Zhang 010 (Comput. Networks, 2024)

LLM-Guided Multi-View Hypergraph Learning for Human-Centric Explainable Recommendation. - Zhixuan Chu; Yan Wang 002; Qing Cui; Longfei Li; Wenqing Chen; Sheng Li 001; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Differentially Private Zeroth-Order Methods for Scalable Large Language Model Finetuning. - Zhihao Liu; Jian Lou 001; Wenjie Bao; Yuke Hu; Bo Li 126; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Going Proactive and Explanatory Against Malware Concept Drift. - Yiling He; Junchi Lei; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Sora Detector: A Unified Hallucination Detection for Large Text-to-Video Models. - Zhixuan Chu; Lei Zhang 006; Yichen Sun; Siqiao Xue; Zhibo Wang 001; Zhan Qin; Kui Ren 001 (CoRR, 2024)

A Survey on Medical Large Language Models: Technology, Application, Trustworthiness, and Future Directions. - Lei Liu; Xiaoyan Yang; Junchi Lei; Xiaoyang Liu; Yue Shen; Zhiqiang Zhang 012; Peng Wei; Jinjie Gu; Zhixuan Chu; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Prompt-Consistency Image Generation (PCIG): A Unified Framework Integrating LLMs, Knowledge Graphs, and Controllable Diffusion Models. - Yichen Sun; Zhixuan Chu; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning. - Binhao Ma; Tianhang Zheng; Hongsheng Hu; Di Wang 015; Shuo Wang; Zhongjie Ba; Zhan Qin; Kui Ren 001 (CoRR, 2024)

TAPI: Towards Target-Specific and Adversarial Prompt Injection against Code LLMs. - Yuchen Yang; Hongwei Yao; Bingrun Yang; Yiling He; Yiming Li 004; Tianwei Zhang 004; Zhan Qin; Kui Ren 001 (CoRR, 2024)

Defending Jailbreak Attack in VLMs via Cross-modality Information Detector. - Yue Xu; Xiuyuan Qi; Zhan Qin; Wenjie Wang 008 (CoRR, 2024)

PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (CoRR, 2024)

Mitigating Privacy Risks in LLM Embeddings from Embedding Inversion. - Tiantian Liu 002; Hongwei Yao; Tong Wu; Zhan Qin; Feng Lin 004; Kui Ren 001; Chun Chen 001 (CoRR, 2024)

Task-Free Fairness-Aware Bias Mitigation for Black-Box Deployed Models. - Guodong Cao; Zhibo Wang 001; Yunhe Feng; Xiaowei Dong; Zhifei Zhang; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Privacy Enhancement Via Dummy Points in the Shuffle Model. - Xiaochen Li; Weiran Liu; Hanwen Feng 001; Kunzhe Huang; Yuke Hu; Jinfei Liu; Kui Ren 001; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2024)

Label-Free Poisoning Attack Against Deep Unsupervised Domain Adaptation. - Zhibo Wang 001; Wenxin Liu; Jiahui Hu; Hengchang Guo; Zhan Qin; Jian Liu 012; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Effectively Improving Data Diversity of Substitute Training for Data-Free Black-Box Attack. - Yang Wei 002; Zhuo Ma 001; Zhuoran Ma; Zhan Qin; Yang Liu 118; Bin Xiao 002; Xiuli Bi; Jianfeng Ma 001 (IEEE Trans. Dependable Secur. Comput., 2024)

RemovalNet: DNN Fingerprint Removal Attacks. - Hongwei Yao; Zheng Li; Kunzhe Huang; Jian Lou 001; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

PrivacyAsst: Safeguarding User Privacy in Tool-Using Large Language Model Agents. - Xinyu Zhang 016; Huiyu Xu; Zhongjie Ba; Zhibo Wang 001; Yuan Hong 001; Jian Liu 012; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2024)

Local Differentially Private Heavy Hitter Detection in Data Streams with Bounded Memory. - Xiaochen Li; Weiran Liu; Jian Lou 001; Yuan Hong 001; Lei Zhang 006; Zhan Qin; Kui Ren 001 (Proc. ACM Manag. Data, 2024)

SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores. - Leqian Zheng; Lei Xu 019; Cong Wang 001; Sheng Wang 011; Yuke Hu; Zhan Qin; Feifei Li 001; Kui Ren 001 (Proc. VLDB Endow., 2024)

DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing. - Yi Wang; Fenghua Weng; Sibei Yang; Zhan Qin; Minlie Huang; Wenjie Wang (ACL (Findings), 2025)

Don't Say No: Jailbreaking LLM by Suppressing Refusal. - Yukai Zhou; Jian Lou 001; Zhijie Huang; Zhan Qin; Sibei Yang; Wenjie Wang 008 (ACL (Findings), 2025)

REFINE: Inversion-Free Backdoor Defense via Model Reprogramming. - Yukun Chen 002; Shuo Shao 002; Enhao Huang; Yiming Li 004; Pin-Yu Chen; Zhan Qin; Kui Ren 001 (ICLR, 2025)

On Benchmarking Code LLMs for Android Malware Analysis. - Yiling He; Hongyu She; Xingzhi Qian; Xinran Zheng; Zhuo Chen; Zhan Qin; Lorenzo Cavallaro (ISSTA Companion, 2025)

Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution. - Shuo Shao 002; Yiming Li 004; Hongwei Yao; Yiling He; Zhan Qin; Kui Ren 001 (NDSS, 2025)

Delay-allowed Differentially Private Data Stream Release. - Xiaochen Li; Zhan Qin; Kui Ren 001; Chen Gong 005; Shuya Feng; Yuan Hong 001; Tianhao Wang 001 (NDSS, 2025)

Design of Wearable Intelligent Pulse Detection System Based on Flexible Sensors. - Can Liang; Yifeng Xu; Wenhao You; Chengxu Huang; Qi Gui; Zhan Qin; Zongming Tan; Baohua Tan (IEEE Access, 2025)

PMANet: Malicious URL detection via post-trained language model guided multi-level feature attention network. - Ruitong Liu; Yanbin Wang; Haitao Xu 002; Zhan Qin; Fan Zhang 010; Yiwei Liu; Zheng Cao (Inf. Fusion, 2025)

Vanilla Feature Distillation for Improving the Accuracy-Robustness Trade-Off in Adversarial Training. - Guodong Cao; Zhibo Wang 001; Xiaowei Dong; Zhifei Zhang; Hengchang Guo; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Privacy Risks of Federated Knowledge Graph Embedding: New Membership Inference Attacks and Personalized Differential Privacy Defense. - Yuke Hu; Yang Wang; Jian Lou 001; Wei Liang; Ruofan Wu; Weiqiang Wang; Xiaochen Li; Jinfei Liu; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2025)

FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model. - Shuo Shao 002; Wenyuan Yang; Hanlin Gu; Zhan Qin; Lixin Fan; Qiang Yang 001; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Defending Data Inference Attacks Against Machine Learning Models by Mitigating Prediction Distinguishability. - Ziqi Yang; Yiran Zhu; Jie Wan; ChuXiao Xiang; Tong Tang; Yilin Wang; Ruite Xu; Lijin Wang; Fan Zhang 010; Jiarong Xu; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2025)

FDINet: Protecting Against DNN Model Extraction Using Feature Distortion Index. - Hongwei Yao; Zheng Li; Haiqin Weng; Feng Xue; Zhan Qin; Kui Ren 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Towards Sample-Specific Backdoor Attack With Clean Labels via Attribute Trigger. - Mingyan Zhu 001; Yiming Li 004; Junfeng Guo; Tao Wei 002; Shu-Tao Xia; Zhan Qin (IEEE Trans. Dependable Secur. Comput., 2025)

FedGhost: Data-Free Model Poisoning Enhancement in Federated Learning. - Zhuoran Ma; Xinyi Huang 001; Zhuzhu Wang; Zhan Qin; Xiangyu Wang 010; Jianfeng Ma 001 (IEEE Trans. Inf. Forensics Secur., 2025)

PointNCBW: Toward Dataset Ownership Verification for Point Clouds via Negative Clean-Label Backdoor Watermark. - Cheng Wei; Yang Wang; Kuofeng Gao; Shuo Shao 002; Yiming Li 004; Zhibo Wang 001; Zhan Qin (IEEE Trans. Inf. Forensics Secur., 2025)

FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint. - Shuo Shao 002; Haozhe Zhu; Hongwei Yao; Yiming Li 004; Tianwei Zhang 004; Zhan Qin; Kui Ren 001 (CoRR, 2025)

Membership Inference Attacks Against Vision-Language Models. - Yuke Hu; Zheng Li; Zhihao Liu; Yang Zhang; Zhan Qin; Kui Ren 001; Chun Chen 001 (CoRR, 2025)

DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing. - Yi Wang; Fenghua Weng; Sibei Yang; Zhan Qin; Minlie Huang; Wenjie Wang 007 (CoRR, 2025)

Boosting Illuminant Estimation in Deep Color Constancy through Enhancing Brightness Robustness. - Mengda Xie; Chengzhi Zhong; Yiling He; Zhan Qin; Meie Fang (CoRR, 2025)

Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models. - Yu He; Boheng Li; Liu Liu; Zhongjie Ba; Wei Dong 001; Yiming Li 004; Zhan Qin; Kui Ren 001; Chun Chen 001 (CoRR, 2025)

SPAS: Continuous Release of Data Streams under w-Event Differential Privacy. - Xiaochen Li; Tianyu Li; Yitian Cheng; Chen Gong 005; Kui Ren 001; Zhan Qin; Tianhao Wang 001 (Proc. ACM Manag. Data, 2025)

CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking. - Yiming Li 004; Kaiying Yan; Shuo Shao 002; Tongqing Zhai; Shu-Tao Xia; Zhan Qin; Dacheng Tao (CoRR, 2025)

Imperceptible but Forgeable: Practical Invisible Watermark Forgery via Diffusion Models. - Ziping Dong; Chao Shuai; Zhongjie Ba; Peng Cheng 007; Zhan Qin; Qinglong Wang 003; Kui Ren 001 (CoRR, 2025)

RetouchUAA: Unconstrained Adversarial Attack via Realistic Image Retouching. - Mengda Xie; Yiling He; Zhan Qin; Meie Fang (IEEE Trans. Circuits Syst. Video Technol., 2025)

ControlNET: A Firewall for RAG-based LLM System. - Hongwei Yao; Haoran Shi; Yidou Chen; Yixin Jiang; Cong Wang 001; Zhan Qin (CoRR, 2025)

PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networks. - Xuran Li; Jingyi Wang 004; Xiaohan Yuan; Peixin Zhang 001; Zhan Qin; Zhibo Wang 001; Kui Ren 001 (CoRR, 2025)

BadReward: Clean-Label Poisoning of Reward Models in Text-to-Image RLHF. - Kaiwen Duan; Hongwei Yao; Yufei Chen 001; Ziyun Li; Tong Qiao; Zhan Qin; Cong Wang 001 (CoRR, 2025)

SmartGuard: Leveraging Large Language Models for Network Attack Detection through Audit Log Analysis and Summarization. - Hao Zhang; Shuo Shao 002; Song Li 006; Zhenyu Zhong; Yan Liu 069; Zhan Qin; Kui Ren 001 (CoRR, 2025)

ContextCache: Context-Aware Semantic Cache for Multi-Turn Queries in Large Language Models. - Jianxin Yan; Wangze Ni; Lei Chen; Xuemin Lin 001; Peng Cheng 007; Zhan Qin; Kui Ren 001 (CoRR, 2025)

Rethinking Data Protection in the (Generative) Artificial Intelligence Era. - Yiming Li 004; Shuo Shao 002; Yu He; Junfeng Guo; Tianwei Zhang 004; Zhan Qin; Pin-Yu Chen; Michael Backes 001; Philip Torr 001; Dacheng Tao; Kui Ren 001 (CoRR, 2025)

DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective. - Shuo Shao 002; Yiming Li 004; Mengren Zheng; Zhiyang Hu; Yukun Chen 002; Boheng Li; Yu He; Junfeng Guo; Tianwei Zhang 004; Dacheng Tao; Zhan Qin (CoRR, 2025)

Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning. - Boheng Li; Renjie Gu; Junjie Wang; Leyi Qi; Yiming Li 004; Run Wang 001; Zhan Qin; Tianwei Zhang 004 (CoRR, 2025)

DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling. - Boheng Li; Junjie Wang; Yiming Li 004; Zhiyang Hu; Leyi Qi; Jianshuo Dong; Run Wang 001; Han Qiu 001; Zhan Qin; Tianwei Zhang 004 (CoRR, 2025)

Towards Evaluation for Real-World LLM Unlearning. - Ke Miao; Yuke Hu; Xiaochen Li; Wenjie Bao; Zhihao Liu; Zhan Qin; Kui Ren 001 (CoRR, 2025)

Quantifying Conversation Drift in MCP via Latent Polytope. - Haoran Shi; Hongwei Yao; Shuo Shao 002; Shaopeng Jiao; Ziqi Peng; Zhan Qin; Cong Wang 001 (CoRR, 2025)

Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference. - Zhifan Luo; Shuo Shao 002; Su Zhang; Lijing Zhou; Yuke Hu; Chenxu Zhao; Zhihao Liu; Zhan Qin (CoRR, 2025)

MAJIC: Markovian Adaptive Jailbreaking via Iterative Composition of Diverse Innovative Strategies. - Weiwei Qi; Shuo Shao 002; Wei Gu; Tianhang Zheng; Puning Zhao; Zhan Qin; Kui Ren 001 (CoRR, 2025)

Boosting illuminant estimation in deep color constancy through brightness robustness enhancement. - Mengda Xie; Chengzhi Zhong; Yiling He; Zhan Qin; Meie Fang (Pattern Recognit., 2026)