Retrieving Social Flooding Images Based on Multimodal Information. - Zhengyu Zhao 001; Martha A. Larson (MediaEval, 2017)

Median filtering forensics in digital images based on frequency-domain features. - Anan Liu; Zhengyu Zhao 001; Chengqian Zhang; Yuting Su 001 (Multim. Tools Appl., 2017)

The Multimedia Satellite Task at MediaEval 2018. - Benjamin Bischke; Patrick Helber; Zhengyu Zhao 001; Jens de Bruijn; Damian Borth (MediaEval, 2018)

Pixel Privacy: Increasing Image Appeal while Blocking Automatic Inference of Sensitive Scene Information. - Martha A. Larson; Zhuoran Liu 001; Simon Brugman; Zhengyu Zhao 001 (MediaEval, 2018)

First Steps in Pixel Privacy: Exploring Deep Learning-based Image Enhancement against Large-Scale Image Inference. - Zhuoran Liu 001; Zhengyu Zhao 001 (MediaEval, 2018)

Exploiting Local Semantic Concepts for Flooding-related Social Image Classification. - Zhengyu Zhao 001; Martha A. Larson; Nelleke Oostdijk (MediaEval, 2018)

From Volcano to Toyshop: Adaptive Discriminative Region Discovery for Scene Recognition. - Zhengyu Zhao 001; Martha A. Larson (ACM Multimedia, 2018)

The Multimedia Satellite Task at MediaEval 2019. - Benjamin Bischke; Patrick Helber; Simon Brugman; Erkan Basar; Zhengyu Zhao 001; Martha A. Larson; Konstantin Pogorelov (MediaEval, 2019)

Adversarial Photo Frame: Concealing Sensitive Scene Information of Social Images in a User-Acceptable Manner. - Zhuoran Liu 001; Zhengyu Zhao 001 (MediaEval, 2019)

Pixel Privacy 2019: Protecting Sensitive Scene Information in Images. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (MediaEval, 2019)

Who's Afraid of Adversarial Queries?: The Impact of Image Modifications on Content-based Image Retrieval. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (ICMR, 2019)

Reproducible Experiments on Adaptive Discriminative Region Discovery for Scene Recognition. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson; Ahmet Iscen; Naoko Nitta (ACM Multimedia, 2019)

Smooth filtering identification based on convolutional neural networks. - Anan Liu; Zhengyu Zhao 001; Chengqian Zhang; Yuting Su 001 (Multim. Tools Appl., 2019)

Adversarial Color Enhancement: Generating Unrestricted Adversarial Images by Optimizing a Color Filter. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (BMVC, 2020)

Towards Large Yet Imperceptible Adversarial Image Perturbations With Perceptual Color Distance. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CVPR, 2020)

Fooling Blind Image Quality Assessment by Optimizing a Human-Understandable Color Filter. - Zhengyu Zhao 001 (MediaEval, 2020)

Pixel Privacy: Quality Camouflage for Social Images. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson; Laurent Amsaleg (MediaEval, 2020)

A Differentiable Color Filter for Generating Unrestricted Adversarial Images. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CoRR, 2020)

Adversarial Robustness Against Image Color Transformation within Parametric Filter Space. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CoRR, 2020)

Screen Gleaning: A Screen Reading TEMPEST Attack on Mobile Devices Exploiting an Electromagnetic Side Channel. - Zhuoran Liu 001; Niels Samwel; Leo Weissbart; Zhengyu Zhao 001; Dirk Lauret; Lejla Batina; Martha A. Larson (NDSS, 2021)

On Success and Simplicity: A Second Look at Transferable Targeted Attacks. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (NeurIPS, 2021)

Pivoting Image-based Profiles Toward Privacy: Inhibiting Malicious Profiling with Adversarial Additions. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (UMAP, 2021)

Going Grayscale: The Road to Understanding and Improving Unlearnable Examples. - Zhuoran Liu 001; Zhengyu Zhao 001; Alex Kolmus; Tijn Berns; Twan van Laarhoven; Tom Heskes; Martha A. Larson (CoRR, 2021)

Membership Inference Attacks by Exploiting Loss Trajectory. - Yiyong Liu; Zhengyu Zhao 001; Michael Backes 001; Yang Zhang 016 (CCS, 2022)

Domain Constraints in Feature Space: Strengthening Robustness of Android Malware Detection against Realizable Adversarial Examples. - Hamid Bostani; Zhuoran Liu 001; Zhengyu Zhao 001; Veelasha Moonsamy (CoRR, 2022)

Evaluating Transfer-based Targeted Adversarial Perturbations against Real-World Computer Vision Systems based on Human Judgments. - Zhengyu Zhao 001; Nga Dang; Martha A. Larson (CoRR, 2022)

Generative Poisoning Using Random Discriminators. - Dirren van Vlijmen; Alex Kolmus; Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (CoRR, 2022)

Towards Good Practices in Evaluating Transfer Adversarial Attacks. - Zhengyu Zhao 001; Hanwei Zhang 001; Renjue Li; Ronan Sicre; Laurent Amsaleg; Michael Backes 001 (CoRR, 2022)

Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning? - Rui Wen 002; Zhengyu Zhao 001; Zhuoran Liu 001; Michael Backes 001; Tianhao Wang 001; Yang Zhang 016 (ICLR, 2023)

Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (ICML, 2023)

The Importance of Image Interpretation: Patterns of Semantic Misclassification in Real-World Adversarial Images. - Zhengyu Zhao 001; Nga Dang; Martha A. Larson (MMM (2), 2023)

Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis. - Yihan Ma 001; Zhengyu Zhao 001; Xinlei He 001; Zheng Li 023; Michael Backes 001; Yang Zhang 016 (CoRR, 2023)

Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models. - Yugeng Liu; Tianshuo Cong; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Turn Fake into Real: Adversarial Head Turn Attacks Against Deepfake Detection. - Weijie Wang; Zhengyu Zhao 001; Nicu Sebe; Bruno Lepri (CoRR, 2023)

Prompt Backdoors in Visual Prompt Learning. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (CoRR, 2023)

Revisiting Transferable Adversarial Image Examples: Attack Categorization, Evaluation Guidelines, and New Insights. - Zhengyu Zhao 001; Hanwei Zhang 001; Renjue Li; Ronan Sicre; Laurent Amsaleg; Michael Backes 001; Qi Li 002; Chao Shen 001 (CoRR, 2023)

Collapse-Oriented Adversarial Training with Triplet Decoupling for Robust Image Retrieval. - Qiwei Tian; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001 (CoRR, 2023)

Adversarial Image Color Transformations in Explicit Color Filter Space. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (IEEE Trans. Inf. Forensics Secur., 2023)

Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving. - Junhao Zheng; Chenhao Lin; Jiahao Sun; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (CVPR, 2024)

Improving Adversarial Robustness in Android Malware Detection by Reducing the Impact of Spurious Correlations. - Hamid Bostani; Zhengyu Zhao 001; Veelasha Moonsamy (ESORICS Workshops (2), 2024)

Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrieval. - Qiwei Tian; Chenhao Lin; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (ICML, 2024)

Composite Backdoor Attacks Against Large Language Models. - Hai Huang 014; Zhengyu Zhao 001; Michael Backes 001; Yun Shen; Yang Zhang 016 (NAACL-HLT (Findings), 2024)

Breaking Semantic Artifacts for Generalized AI-generated Image Detection. - Chende Zheng; Chenhao Lin; Zhengyu Zhao 001; Hang Wang; Xu Guo; Shuai Liu 016; Chao Shen 001 (NeurIPS, 2024)

ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving. - Chen Ma; Ningfei Wang; Zhengyu Zhao 001; Qian Wang 002; Qi Alfred Chen; Chao Shen 001 (CoRR, 2024)

Security Matrix for Multimodal Agents on Mobile Devices: A Systematic and Proof of Concept Study. - Yulong Yang 002; Xinshan Yang; Shuaidong Li; Chenhao Lin; Zhengyu Zhao 001; Chao Shen 001; Tianwei Zhang 004 (CoRR, 2024)

A Survey of Defenses against AI-generated Visual Media: Detection, Disruption, and Authentication. - Jingyi Deng; Chenhao Lin; Zhengyu Zhao 001; Shuai Liu 016; Qian Wang 002; Chao Shen 001 (CoRR, 2024)

Unlocking Adversarial Suffix Optimization Without Affirmative Phrases: Efficient Black-box Jailbreaking via LLM as Optimizer. - Weipeng Jiang; Zhenting Wang; Juan Zhai; Shiqing Ma; Zhengyu Zhao 001; Chao Shen 001 (CoRR, 2024)

A Survey on Adversarial Machine Learning for Code Data: Realistic Threats, Countermeasures, and Interpretations. - Yulong Yang 002; Haoran Fan; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001; Xiaohong Guan (CoRR, 2024)

Can Targeted Clean-Label Poisoning Attacks Generalize? - Zhizhen Chen; Subrat Kishore Dutta; Zhengyu Zhao 001; Chenhao Lin; Chao Shen 001; Xiao Zhang (CoRR, 2024)

Exploiting Facial Relationships and Feature Aggregation for Multi-Face Forgery Detection. - Chenhao Lin; Fangbin Yi; Hang Wang; Jingyi Deng; Zhengyu Zhao 001; Qian Li 024; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Exploiting the Adversarial Example Vulnerability of Transfer Learning of Source Code. - Yulong Yang 002; Haoran Fan; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantization. - Yulong Yang 002; Chenhao Lin; Qian Li 024; Zhengyu Zhao 001; Haoran Fan; Dawei Zhou 004; Nannan Wang 001; Tongliang Liu; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Improving Integrated Gradient-based Transferable Adversarial Examples by Refining the Integration Path. - Yuchen Ren 002; Zhengyu Zhao 001; Chenhao Lin; Bo Yang 049; Lu Zhou; Zhe Liu; Chao Shen 001 (AAAI, 2025)

Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement. - Yuchen Ren 002; Zhengyu Zhao 001; Chenhao Lin; Bo Yang 049; Lu Zhou; Zhe Liu; Chao Shen 001 (CVPR, 2025)

Nullu: Mitigating Object Hallucinations in Large Vision-Language Models via HalluSpace Projection. - Le Yang 007; Ziwei Zheng; Boxu Chen; Zhengyu Zhao 001; Chenhao Lin; Chao Shen 001 (CVPR, 2025)

CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP. - Songlong Xing; Zhengyu Zhao 001; Nicu Sebe (CVPR, 2025)

TGDrag: Adding Semantic Control into Point-based Image Editing via Text Guidance. - Chenhao Lin; Yanjie Zhu; Yingmao Miao; Zhengyu Zhao 001; Shuai Liu 016; Chao Shen 001 (ICASSP, 2025)

One-Shot Face Avatar Generation in a Single Forward Pass with Identity Preservation. - Yingmao Miao; Chenhao Lin; Zhengyu Zhao 001; Hang Wang; Shuai Liu 016; Chao Shen 001; Xiaohong Guan (ICASSP, 2025)

An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer. - Weipeng Jiang; Zhenting Wang; Juan Zhai; Shiqing Ma; Zhengyu Zhao 001; Chao Shen 001 (NAACL (Findings), 2025)

Typographic Attacks in a Multi-Image Setting. - Xiaomeng Wang; Zhengyu Zhao 001; Martha A. Larson (NAACL (Long Papers), 2025)

Hard Adversarial Example Mining for Improving Robust Fairness. - Chenhao Lin; Xiang Ji; Yulong Yang 002; Qian Li 024; Zhengyu Zhao 001; Zhe Peng; Run Wang 001; Liming Fang 001; Chao Shen 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Resisting Bag-Based Attribute Profiling by Adding Adversarial Items to Existing Media Profiles. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (IEEE Trans. Inf. Forensics Secur., 2025)

Adversarial Example Soups: Improving Transferability and Stealthiness for Free. - Bo Yang 049; Hengwei Zhang; Jindong Wang 002; Yulong Yang 002; Chenhao Lin; Chao Shen 001; Zhengyu Zhao 001 (IEEE Trans. Inf. Forensics Secur., 2025)

TITIM-code: Code to implement the TITIM workflow and reproduce the results. - Chenhao Lin; Chenyang Zhao 006; Shiwei Wang; Longtian Wang; Chao Shen 001; Zhengyu Zhao 001 (Zenodo, 2025)

TITIM: Code & datasets to implement the TITIM workflow and reproduce the results. - Chenhao Lin; Chenyang Zhao 006; Shiwei Wang; Longtian Wang; Chao Shen 001; Zhengyu Zhao 001 (Zenodo, 2025)

Revisiting Training-Inference Trigger Intensity in Backdoor Attacks. - Chenhao Lin; Chenyang Zhao 006; Shiwei Wang; Longtian Wang; Chao Shen 001; Zhengyu Zhao 001 (CoRR, 2025)

Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency. - Bo Yang 049; Hengwei Zhang; Jindong Wang 002; Yuchen Ren 002; Chenhao Lin; Chao Shen 001; Zhengyu Zhao 001 (CoRR, 2025)

Seeing It or Not? Interpretable Vision-aware Latent Steering to Mitigate Object Hallucinations. - Boxu Chen; Ziwei Zheng; Le Yang 007; Zeyu Geng; Zhengyu Zhao 001; Chenhao Lin; Chao Shen 001 (CoRR, 2025)

Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective. - Ruixuan Zhang; He Wang 002; Zhengyu Zhao 001; Zhiqing Guo; Xun Yang 001; Yunfeng Diao; Meng Wang 001 (CoRR, 2025)

Level Up with ML Vulnerability Identification: Leveraging Domain Constraints in Feature Space for Robust Android Malware Detection. - Hamid Bostani; Zhengyu Zhao 001; Zhuoran Liu 001; Veelasha Moonsamy (ACM Trans. Priv. Secur., 2025)

Prediction Inconsistency Helps Achieve Generalizable Detection of Adversarial Examples. - Sicong Han; Chenhao Lin; Zhengyu Zhao 001; Xiyuan Wang; Xinlei He 001; Qian Li 024; Cong Wang 001; Qian Wang 002; Chao Shen 001 (CoRR, 2025)

Concept Unlearning by Modeling Key Steps of Diffusion Process. - Chaoshuo Zhang; Chenhao Lin; Zhengyu Zhao 001; Le Yang 007; Qian Wang 002; Chao Shen 001 (CoRR, 2025)

Revisiting Adversarial Patch Defenses on Object Detectors: Unified Evaluation, Large-Scale Dataset, and New Insights. - Junhao Zheng; Jiahao Sun; Chenhao Lin; Zhengyu Zhao 001; Chen Ma; Chong Zhang; Cong Wang 001; Qian Wang 002; Chao Shen 001 (CoRR, 2025)

D3: Training-Free AI-Generated Video Detection Using Second-Order Features. - Chende Zheng; Ruiqi suo; Chenhao Lin; Zhengyu Zhao 001; Le Yang 007; Shuai Liu 016; Minghui Yang; Cong Wang 001; Chao Shen 001 (CoRR, 2025)

Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards. - Song Yan; Hui Wei 004; Jinlong Fei; Guoliang Yang; Zhengyu Zhao 001; Zheng Wang 007 (CoRR, 2025)

Adversarial Video Promotion Against Text-to-Video Retrieval. - Qiwei Tian; Chenhao Lin; Zhengyu Zhao 001; Qian Li 024; Shuai Liu 016; Chao Shen 001 (CoRR, 2025)