NGG: A Service-Oriented Application Grid Architecture for National Geological Survey. - Yu Tang 014; Kai-Tao He; Zhen Xiang; Yongbo Zhang; Ning Jing (GCC (1), 2003)

Intelligent Multimedia Group of Tsinghua University at TRECVID 2006. - Jie Cao; Yanxiang Lan; Jianmin Li 001; Qiang Li; Xirong Li 001; Fuzong Lin; Xiaobing Liu; Linjie Luo; Wanli Peng; Dong Wang 022; Huiyi Wang; Zhikun Wang; et al. (TRECVID, 2006)

Evaluation of the Human Eye Glare after Strong Exposure. - Kai Xiong; Zhen Xiang; Jianhong Ge (BMEI (1), 2008)

Slope Perception from Monoscopic Field Images: Applications to Mobile Robot Navigation. - Zhen Xiang; Geb W. Thomas; Kristopher M. Thornburg; Nathalie Cabrol; Edmond Grin; Robert C. Anderson (J. Intell. Robotic Syst., 2009)

Locally optimal, delay-tolerant predictive source coding. - Zhen Xiang; David J. Miller 001 (CISS, 2018)

A Mixture Model Based Defense for Data Poisoning Attacks Against Naive Bayes Spam Filters. - David J. Miller 001; Xinyi Hu; Zhen Xiang; George Kesidis (CoRR, 2018)

A Benchmark Study Of Backdoor Data Poisoning Defenses For Deep Neural Network Classifiers And A Novel Defense. - Zhen Xiang; David J. Miller 001; George Kesidis (MLSP, 2019)

Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks. - David J. Miller 001; Zhen Xiang; George Kesidis (CoRR, 2019)

Revealing Perceptible Backdoors, without the Training Set, via the Maximum Achievable Misclassification Fraction Statistic. - Zhen Xiang; David J. Miller 001; George Kesidis (CoRR, 2019)

A Scalable Mixture Model Based Defense Against Data Poisoning Attacks on Classifiers. - Xi Li 015; David J. Miller 001; Zhen Xiang; George Kesidis (DDDAS, 2020)

Revealing Backdoors, Post-Training, in DNN Classifiers via Novel Inference on Optimized Perturbations Inducing Group Misclassification. - Zhen Xiang; David J. Miller 001; George Kesidis (ICASSP, 2020)

Revealing Perceptible Backdoors in DNNs, Without the Training Set, via the Maximum Achievable Misclassification Fraction Statistic. - Zhen Xiang; David J. Miller 001; Hang Wang; George Kesidis (MLSP, 2020)

Multimedia resource allocation strategy of wireless sensor networks using distributed heuristic algorithm in cloud computing environment. - Jian Yang; Zhen Xiang; Lisha Mou; Shumu Liu (Multim. Tools Appl., 2020)

Scanning the Issue. - Weiqiang Liu 001; Maximilian John; Andreas Karrenbauer; Adam Allerhand; Fabrizio Lombardi; Michael Shulte; David J. Miller 001; Zhen Xiang; George Kesidis; Antti Oulasvirta; Niraj Ramesh Dayama; Morteza Shiripour (Proc. IEEE, 2020)

Adversarial Learning Targeting Deep Neural Network Classification: A Comprehensive Review of Defenses Against Attacks. - David J. Miller 001; Zhen Xiang; George Kesidis (Proc. IEEE, 2020)

Determination of Planetary Boundary Layer height with Lidar Signals Using Maximum Limited Height Initialization and Range Restriction (MLHI-RR). - Tianfen Zhong; Nanchao Wang; Xue Shen; Da Xiao; Zhen Xiang; Dong Liu 020 (Remote. Sens., 2020)

L-Red: Efficient Post-Training Detection of Imperceptible Backdoor Attacks Without Access to the Training Set. - Zhen Xiang; David J. Miller 001; George Kesidis (ICASSP, 2021)

A Backdoor Attack against 3D Point Cloud Classifiers. - Zhen Xiang; David J. Miller 001; Siheng Chen; Xi Li 015; George Kesidis (ICCV, 2021)

Reverse engineering imperceptible backdoor attacks on deep neural networks for detection and training set cleansing. - Zhen Xiang; David J. Miller 001; George Kesidis (Comput. Secur., 2021)

Detecting Scene-Plausible Perceptible Backdoors in Trained DNNs Without Access to the Training Set. - Zhen Xiang; David J. Miller 001; Hang Wang; George Kesidis (Neural Comput., 2021)

Distributed Robust Nash Equilibrium Seeking for Double-Integrator-Type Players Without Velocity Measurements. - Danhu Li; Zhen Xiang; Maojiao Ye (ASCC, 2022)

Test-Time Detection of Backdoor Triggers for Poisoned Deep Neural Networks. - Xi Li 015; Zhen Xiang; David J. Miller 001; George Kesidis (ICASSP, 2022)

Detecting Backdoor Attacks against Point Cloud Classifiers. - Zhen Xiang; David J. Miller 001; Siheng Chen; Xi Li 015; George Kesidis (ICASSP, 2022)

Post-Training Detection of Backdoor Attacks for Two-Class and Multi-Attack Scenarios. - Zhen Xiang; David J. Miller 001; George Kesidis (ICLR, 2022)

Velocity-Free Distributed Robust Nash Equilibrium Seeking By An Uncertainty and Disturbance Estimator Based Algorithm. - Zhen Xiang; Danhu Li; Guobiao Jia; Maojiao Ye (IECON, 2022)

Universal Post-Training Backdoor Detection. - Hang Wang; Zhen Xiang; David J. Miller 001; George Kesidis (CoRR, 2022)

Detection of Backdoors in Trained Classifiers Without Access to the Training Set. - Zhen Xiang; David J. Miller 001; George Kesidis (IEEE Trans. Neural Networks Learn. Syst., 2022)

Training Set Cleansing of Backdoor Poisoning by Self-Supervised Representation Learning. - Hang Wang; Sahar Karami; Ousmane Dia; Hippolyt Ritter; Ehsan Emamjomeh-Zadeh; Jiahui Chen; Zhen Xiang; David J. Miller 001; George Kesidis (ICASSP, 2023)

UMD: Unsupervised Model Detection for X2X Backdoor Attacks. - Zhen Xiang; Zidi Xiong; Bo Li 026 (ICML, 2023)

A BIC-Based Mixture Model Defense Against Data Poisoning Attacks on Classifiers. - Xi Li 015; David J. Miller 001; Zhen Xiang; George Kesidis (MLSP, 2023)

CBD: A Certified Backdoor Detector Based on Local Dominant Probability. - Zhen Xiang; Zidi Xiong; Bo Li 026 (NeurIPS, 2023)

Swift: A modern highly-parallel gravity and smoothed particle hydrodynamics solver for astrophysical and cosmological applications. - Matthieu Schaller; Josh Borrow; Peter W. Draper; Mladen Ivkovic; Stuart McAlpine; Bert Vandenbroucke; Yannick Bahé; Evgenii Chaikin; Aidan B. G. Chalk; Tsang Keung Chan; Camila Correa; Marcel van Daalen; et al. (CoRR, 2023)

Backdoor Mitigation by Correcting the Distribution of Neural Activations. - Xi Li 015; Zhen Xiang; David J. Miller 001; George Kesidis (CoRR, 2023)

Malicious Agent Detection for Robust Multi-Agent Collaborative Perception. - Yangheng Zhao; Zhen Xiang; Sheng Yin; Xianghe Pang; Siheng Chen; Yanfeng Wang 001 (CoRR, 2023)

ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs. - Fengqing Jiang; Zhangchen Xu; Luyao Niu; Zhen Xiang; Bhaskar Ramasubramanian; Bo Li 026; Radha Poovendran (ACL (1), 2024)

BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models. - Zhen Xiang; Fengqing Jiang; Zidi Xiong; Bhaskar Ramasubramanian; Radha Poovendran; Bo Li 026 (ICLR, 2024)

MADE: Malicious Agent Detection for Robust Multi-Agent Collaborative Perception. - Yangheng Zhao; Zhen Xiang; Sheng Yin; Xianghe Pang; Yanfeng Wang 001; Siheng Chen (IROS, 2024)

Improved Activation Clipping for Universal Backdoor Mitigation and Test-Time Detection. - Hang Wang; Zhen Xiang; David J. Miller 001; George Kesidis (MLSP, 2024)

Data Free Backdoor Attacks. - Bochuan Cao; Jinyuan Jia 001; Chuxuan Hu; Wenbo Guo 002; Zhen Xiang; Jinghui Chen; Bo Li 026; Dawn Song (NeurIPS, 2024)

AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases. - Zhaorun Chen; Zhen Xiang; Chaowei Xiao; Dawn Song; Bo Li 026 (NeurIPS, 2024)

MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic. - Hang Wang; Zhen Xiang; David J. Miller 001; George Kesidis (SP, 2024)

Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models. - Zhenyang Ni; Rui Ye 001; Yuxi Wei; Zhen Xiang; Yanfeng Wang 001; Siheng Chen (CoRR, 2024)

GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning. - Zhen Xiang; Linzhi Zheng; Yanjie Li; Junyuan Hong; Qinbin Li; Han Xie; Jiawei Zhang 002; Zidi Xiong; Chulin Xie; Carl Yang 001; Dawn Song; Bo Li 026 (CoRR, 2024)

Evaluation of OpenAI o1: Opportunities and Challenges of AGI. - Tianyang Zhong; Zhengliang Liu; Yi Pan 001; Yutong Zhang; Yifan Zhou; Shizhe Liang; Zihao Wu 001; Yanjun Lyu; Peng Shu; Xiaowei Yu; Chao Cao; Hanqi Jiang; et al. (CoRR, 2024)

Towards Next-Generation Medical Agent: How o1 is Reshaping Decision-Making in Medical Scenarios. - Shaochen Xu; Yifan Zhou; Zhengliang Liu; Zihao Wu 001; Tianyang Zhong; Huaqin Zhao; Yiwei Li 002; Hanqi Jiang; Yi Pan 001; Junhao Chen; Jin Lu 001; Wei Zhang 090; et al. (CoRR, 2024)

Are We There Yet? Revealing the Risks of Utilizing Large Language Models in Scholarly Peer Review. - Rui Ye 001; Xianghe Pang; Jingyi Chai; Jiaao Chen; Zhenfei Yin; Zhen Xiang; Xiaowen Dong 001; Jing Shao; Siheng Chen (CoRR, 2024)

SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents. - Sheng Yin; Xianghe Pang; Yuanzhuo Ding; Menglan Chen; Yutong Bi; Yichen Xiong; Wenhao Huang; Zhen Xiang; Jing Shao; Siheng Chen (CoRR, 2024)

BIC-Based Mixture Model Defense Against Data Poisoning Attacks on Classifiers: A Comprehensive Study. - Xi Li 015; David J. Miller 001; Zhen Xiang; George Kesidis (IEEE Trans. Knowl. Data Eng., 2024)

Unveiling Privacy Risks in LLM Agent Memory. - Bo Wang 069; Weiyi He; Shenglai Zeng; Zhen Xiang; Yue Xing 002; Jiliang Tang; Pengfei He (ACL (1), 2025)

SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities. - Fengqing Jiang; Zhangchen Xu; Yuetai Li; Luyao Niu; Zhen Xiang; Bo Li 026; Bill Yuchen Lin; Radha Poovendran (ACL (Findings), 2025)

MMDT: Decoding the Trustworthiness and Safety of Multimodal Foundation Models. - Chejian Xu; Jiawei Zhang 002; Zhaorun Chen; Chulin Xie; Mintong Kang; Yujin Potter; Zhun Wang; Zhuowen Yuan; Alexander Xiong; Zidi Xiong; Chenhui Zhang; Lingzhi Yuan; et al. (ICLR, 2025)

Correcting the distribution of batch normalization signals for Trojan mitigation. - Xi Li 015; Zhen Xiang; David J. Miller 001; George Kesidis (Neurocomputing, 2025)

Multi-Faceted Studies on Data Poisoning can Advance LLM Development. - Pengfei He; Yue Xing 002; Han Xu 002; Zhen Xiang; Jiliang Tang (CoRR, 2025)

A Practical Memory Injection Attack against LLM Agents. - Shen Dong; Shaochen Xu; Pengfei He; Yige Li; Jiliang Tang; Tianming Liu 001; Hui Liu 031; Zhen Xiang (CoRR, 2025)

MMDT: Decoding the Trustworthiness and Safety of Multimodal Foundation Models. - Chejian Xu; Jiawei Zhang 002; Zhaorun Chen; Chulin Xie; Mintong Kang; Yujin Potter; Zhun Wang; Zhuowen Yuan; Alexander Xiong; Zidi Xiong; Chenhui Zhang; Lingzhi Yuan; et al. (CoRR, 2025)

Large Language Model Empowered Privacy-Protected Framework for PHI Annotation in Clinical Notes. - Guanchen Wu; Linzhi Zheng; Han Xie; Zhen Xiang; Jiaying Lu 001; Darren Liu; Delgersuren Bold; Bo Li 026; Xiao Hu 002; Carl Yang 001 (CoRR, 2025)

Doxing via the Lens: Revealing Privacy Leakage in Image Geolocation for Agentic Multi-Modal Large Reasoning Model. - Weidi Luo; Qiming Zhang; Tianyu Lu; Xiaogeng Liu; Yue Zhao 016; Zhen Xiang; Chaowei Xiao (CoRR, 2025)

How Memory Management Impacts LLM Agents: An Empirical Study of Experience-Following Behavior. - Zidi Xiong; Yuping Lin; Wenya Xie; Pengfei He; Jiliang Tang; Himabindu Lakkaraju; Zhen Xiang (CoRR, 2025)

SOSBENCH: Benchmarking Safety Alignment on Scientific Knowledge. - Fengqing Jiang; Fengbo Ma; Zhangchen Xu; Yuetai Li; Bhaskar Ramasubramanian; Luyao Niu; Bo Li 026; Xianyan Chen; Zhen Xiang; Radha Poovendran (CoRR, 2025)

CDR-Agent: Intelligent Selection and Execution of Clinical Decision Rules Using Large Language Model Agents. - Zhen Xiang; Aliyah R. Hsu; Austin Zane; Aaron Kornblith; Margaret J. Lin-Martore; Jasmanpreet C. Kaur; Vasuda M. Dokiparthi; Bo Li; Bin Yu (CoRR, 2025)

Comprehensive Vulnerability Analysis is Necessary for Trustworthy LLM-MAS. - Pengfei He; Yue Xing 002; Shen Dong; Juanhui Li; Zhenwei Dai; Xianfeng Tang; Hui Liu 031; Han Xu 002; Zhen Xiang; Charu C. Aggarwal; Hui Liu 031 (CoRR, 2025)

RadFabric: Agentic AI System with Reasoning Capability for Radiology. - Wenting Chen; Yi Dong; Zhaojun Ding; Yucheng Shi; Yifan Zhou; Fang Zeng; Yijun Luo; Tianyu Lin; Yihang Su; Yichen Wu; Kai Zhang 039; Zhen Xiang; et al. (CoRR, 2025)

Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges. - Haoran Lu; Luyang Fang; Ruidong Zhang; Xinliang Li; Jiazhang Cai; Huimin Cheng; Lin Tang; Ziyu Liu; Zeliang Sun; Tao Wang; Yingchuan Zhang; Arif Hassan Zidan; et al. (CoRR, 2025)

Adaptive Content Restriction for Large Language Models via Suffix Optimization. - Yige Li; Peihai Jiang; Jun Sun 001; Peng Shu; Tianming Liu 001; Zhen Xiang (CoRR, 2025)