A Covert Channel Using Event Channel State on Xen Hypervisor. - Qingni Shen; Mian Wan; Zhuangzhuang Zhang; Zhi Zhang 001; Sihan Qing; Zhonghai Wu (ICICS, 2013)

PiBooster: Performance Accelerations in Page Table Management for Paravirtual VMs. - Zhi Zhang 001; Yueqiang Cheng (CLOUD, 2016)

KASR: A Reliable and Practical Approach to Attack Surface Reduction of Commodity OS Kernels. - Zhi Zhang 001; Yueqiang Cheng; Surya Nepal; Dongxi Liu; Qingni Shen; Fethi A. Rabhi (RAID, 2018)

Still Hammerable and Exploitable: on the Effectiveness of Software-only Physical Kernel Isolation. - Yueqiang Cheng; Zhi Zhang 001; Surya Nepal (CoRR, 2018)

A Reliable and Practical Approach to Kernel Attack Surface Reduction of Commodity OS. - Zhi Zhang 001; Yueqiang Cheng; Surya Nepal; Dongxi Liu; Qingni Shen; Fethi A. Rabhi (CoRR, 2018)

PiBooster: A Light-Weight Approach to Performance Improvements in Page Table Management for Paravirtual Virtual-Machines. - Zhi Zhang 001; Yueqiang Cheng (CoRR, 2019)

TeleHammer : A Stealthy Cross-Boundary Rowhammer Technique. - Zhi Zhang 001; Yueqiang Cheng; Dongxi Liu; Surya Nepal; Zhi Wang 004 (CoRR, 2019)

DRAMDig: A Knowledge-assisted Tool to Uncover DRAM Address Mapping. - Minghua Wang; Zhi Zhang 001; Yueqiang Cheng; Surya Nepal (DAC, 2020)

PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses. - Zhi Zhang 001; Yueqiang Cheng; Dongxi Liu; Surya Nepal; Zhi Wang 004; Yuval Yarom (MICRO, 2020)

GhostKnight: Breaching Data Integrity via Speculative Execution. - Zhi Zhang 001; Yueqiang Cheng; Yinqian Zhang; Surya Nepal (CoRR, 2020)

Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review. - Yansong Gao 001; Bao Gia Doan; Zhi Zhang 001; Siqi Ma; Jiliang Zhang 002; Anmin Fu; Surya Nepal; Hyoungshick Kim (CoRR, 2020)

Quantization Backdoors to Deep Learning Models. - Hua Ma; Huming Qiu; Yansong Gao 001; Zhi Zhang 001; Alsharif Abuadbba; Anmin Fu; Said F. Al-Sarawi; Derek Abbott (CoRR, 2021)

Design and Evaluate Recomposited OR-AND-XOR-PUF. - Jianrong Yao; Lihui Pang; Zhi Zhang 001; Wei Yang 008; Anmin Fu; Yansong Gao 001 (CoRR, 2021)

NTD: Non-Transferability Enabled Backdoor Detection. - Yinshan Li; Hua Ma; Zhi Zhang 001; Yansong Gao 001; Alsharif Abuadbba; Anmin Fu; Yifeng Zheng; Said F. Al-Sarawi; Derek Abbott (CoRR, 2021)

CATTmew: Defeating Software-Only Physical Kernel Isolation. - Yueqiang Cheng; Zhi Zhang 001; Surya Nepal; Zhi Wang 004 (IEEE Trans. Dependable Secur. Comput., 2021)

Detecting Hardware-Assisted Virtualization With Inconspicuous Features. - Zhi Zhang 001; Yueqiang Cheng; Yansong Gao 001; Surya Nepal; Dongxi Liu; Yi Zou (IEEE Trans. Inf. Forensics Secur., 2021)

BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability. - Zhi Zhang 001; Wei He; Yueqiang Cheng; Wenhao Wang 001; Yansong Gao 001; Minghua Wang; Kang Li; Surya Nepal; Yang Xiang 001 (IEEE Trans. Inf. Forensics Secur., 2021)

Software-only Rowhammer Attacks and Countermeasures. - Zhi Zhang 001 (2021)

SoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only Target Row Refresh. - Zhi Zhang 001; Yueqiang Cheng; Minghua Wang; Wei He; Wenhao Wang 001; Surya Nepal; Yansong Gao 001; Kang Li; Zhe Wang 017; Chenggang Wu 002 (USENIX ATC, 2022)

Meltdown-type attacks are still feasible in the wall of kernel page-Table isolation. - Yueqiang Cheng; Zhi Zhang 001; Yansong Gao 001; Zhaofeng Chen; Shengjian Guo; Qifei Zhang 001; Rui Mei; Surya Nepal; Yang Xiang 001 (Comput. Secur., 2022)

A Retrospective and Futurespective of Rowhammer Attacks and Defenses on DRAM. - Zhi Zhang 001; Jiahao Qi; Yueqiang Cheng; Shijie Jiang; Yiyang Lin; Yansong Gao 001; Surya Nepal; Yi Zou (CoRR, 2022)

Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World. - Hua Ma; Yinshan Li; Yansong Gao 001; Alsharif Abuadbba; Zhi Zhang 001; Anmin Fu; Hyoungshick Kim; Said F. Al-Sarawi; Surya Nepal; Derek Abbott (CoRR, 2022)

Systematically Evaluation of Challenge Obfuscated APUFs. - Yansong Gao 001; Jianrong Yao; Lihui Pang; Zhi Zhang 001; Anmin Fu; Naixue Xiong; Hyoungshick Kim (CoRR, 2022)

Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures. - Huming Qiu; Hua Ma; Zhi Zhang 001; Alsharif Abuadbba; Wei Kang 004; Anmin Fu; Yansong Gao 001 (CoRR, 2022)

CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences. - Shang Wang; Yansong Gao 001; Anmin Fu; Zhi Zhang 001; Yuqing Zhang 001; Willy Susilo (CoRR, 2022)

MUD-PQFed: Towards Malicious User Detection in Privacy-Preserving Quantized Federated Learning. - Hua Ma; Qun Li 005; Yifeng Zheng; Zhi Zhang 001; Xiaoning Liu 002; Yansong Gao 001; Said F. Al-Sarawi; Derek Abbott (CoRR, 2022)

MACAB: Model-Agnostic Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World. - Hua Ma; Yinshan Li; Yansong Gao 001; Zhi Zhang 001; Alsharif Abuadbba; Anmin Fu; Said F. Al-Sarawi; Surya Nepal; Derek Abbott (CoRR, 2022)

Evaluation and Optimization of Distributed Machine Learning Techniques for Internet of Things. - Yansong Gao 001; Minki Kim; Chandra Thapa; Alsharif Abuadbba; Zhi Zhang 001; Seyit Camtepe; Hyoungshick Kim; Surya Nepal (IEEE Trans. Computers, 2022)

Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks. - Yansong Gao 001; Yeonjae Kim; Bao Gia Doan; Zhi Zhang 001; Gongxuan Zhang; Surya Nepal; Damith C. Ranasinghe; Hyoungshick Kim (IEEE Trans. Dependable Secur. Comput., 2022)

Design and Evaluate Recomposited OR-AND-XOR-PUF. - Jianrong Yao; Lihui Pang; Yang Su 001; Zhi Zhang 001; Wei Yang 008; Anmin Fu; Yansong Gao 001 (IEEE Trans. Emerg. Top. Comput., 2022)

CASSOCK: Viable Backdoor Attacks against DNN in the Wall of Source-Specific Backdoor Defenses. - Shang Wang; Yansong Gao 001; Anmin Fu; Zhi Zhang 001; Yuqing Zhang 001; Willy Susilo; Dongxi Liu (AsiaCCS, 2023)

PPA: Preference Profiling Attack Against Federated Learning. - Chunyi Zhou; Yansong Gao 001; Anmin Fu; Kai Chen 012; Zhiyang Dai; Zhi Zhang 001; Minhui Xue 001; Yuqing Zhang 001 (NDSS, 2023)

TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World. - Hua Ma; Yinshan Li; Yansong Gao 001; Zhi Zhang 001; Alsharif Abuadbba; Anmin Fu; Said F. Al-Sarawi; Surya Nepal; Derek Abbott (SRDS, 2023)

Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder. - Jiliang Zhang 002; Jing Xu; Zhi Zhang 001; Yansong Gao 001 (CoRR, 2023)

SemDiff: Binary Similarity Detection by Diffing Key-Semantics Graphs. - Zian Liu; Zhi Zhang 001; Siqi Ma; Dongxi Liu; Jun Zhang 010; Chao Chen 015; Shigang Liu; Muhammad Ejaz Ahmed; Yang Xiang 001 (CoRR, 2023)

Implicit Hammer: Cross-Privilege-Boundary Rowhammer Through Implicit Accesses. - Zhi Zhang 001; Wei He; Yueqiang Cheng; Wenhao Wang 001; Yansong Gao 001; Dongxi Liu; Kang Li; Surya Nepal; Anmin Fu; Yi Zou (IEEE Trans. Dependable Secur. Comput., 2023)

APMSA: Adversarial Perturbation Against Model Stealing Attacks. - Jiliang Zhang 002; Shuang Peng 010; Yansong Gao 001; Zhi Zhang 001; Qinghui Hong (IEEE Trans. Inf. Forensics Secur., 2023)

RBNN: Memory-Efficient Reconfigurable Deep Binary Neural Network With IP Protection for Internet of Things. - Huming Qiu; Hua Ma; Zhi Zhang 001; Yansong Gao 001; Yifeng Zheng; Anmin Fu; Pan Zhou 001; Derek Abbott; Said F. Al-Sarawi (IEEE Trans. Comput. Aided Des. Integr. Circuits Syst., 2023)

MUD-PQFed: Towards Malicious User Detection on model corruption in Privacy-preserving Quantized Federated learning. - Hua Ma; Qun Li 005; Yifeng Zheng; Zhi Zhang 001; Xiaoning Liu 002; Yansong Gao 001; Said F. Al-Sarawi; Derek Abbott (Comput. Secur., 2023)

SoK: Rowhammer on Commodity Operating Systems. - Zhi Zhang 001; Decheng Chen; Jiahao Qi; Yueqiang Cheng; Shijie Jiang; Yiyang Lin; Yansong Gao 001; Surya Nepal; Yi Zou; Jiliang Zhang 002; Yang Xiang 001 (AsiaCCS, 2024)

Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense. - Hua Ma; Shang Wang; Yansong Gao 001; Zhi Zhang 001; Huming Qiu; Minhui Xue 001; Alsharif Abuadbba; Anmin Fu; Surya Nepal; Derek Abbott (CCS, 2024)

ThermalScope: A Practical Interrupt Side Channel Attack Based on Thermal Event Interrupts. - Xin Zhang 110; Zhi Zhang 001; Qingni Shen; Wenhao Wang 001; Yansong Gao 001; Zhuoxi Yang; Zhonghai Wu (DAC, 2024)

SegScope: Probing Fine-grained Interrupts via Architectural Footprints. - Xin Zhang 110; Zhi Zhang 001; Qingni Shen; Wenhao Wang 001; Yansong Gao 001; Zhuoxi Yang; Jiliang Zhang 002 (HPCA, 2024)

DeepTheft: Stealing DNN Model Architectures through Power Side Channel. - Yansong Gao 001; Huming Qiu; Zhi Zhang 001; Binghui Wang; Hua Ma; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Surya Nepal (SP, 2024)

Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection. - Shaofeng Li 001; Xinyu Wang 004; Minhui Xue 001; Haojin Zhu; Zhi Zhang 001; Yansong Gao 001; Wen Wu 003; Xuemin (Sherman) Shen (USENIX Security Symposium, 2024)

Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects. - Na Li; Chunyi Zhou; Yansong Gao 001; Hui Chen; Anmin Fu; Zhi Zhang 001; Yu Shui (CoRR, 2024)

One-to-Multiple Clean-Label Image Camouflage (OmClic) based backdoor attack on deep learning. - Guohong Wang; Hua Ma; Yansong Gao 001; Alsharif Abuadbba; Zhi Zhang 001; Wei Kang 004; Said F. Al-Sarawi; Gongxuan Zhang; Derek Abbott (Knowl. Based Syst., 2024)

Quantization Backdoors to Deep Learning Commercial Frameworks. - Hua Ma; Huming Qiu; Yansong Gao 001; Zhi Zhang 001; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Jiliang Zhang 002; Said F. Al-Sarawi; Derek Abbott (IEEE Trans. Dependable Secur. Comput., 2024)

NTD: Non-Transferability Enabled Deep Learning Backdoor Detection. - Yinshan Li; Hua Ma; Zhi Zhang 001; Yansong Gao 001; Alsharif Abuadbba; Minhui Xue 001; Anmin Fu; Yifeng Zheng; Said F. Al-Sarawi; Derek Abbott (IEEE Trans. Inf. Forensics Secur., 2024)

Toward a Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures. - Huming Qiu; Hua Ma; Zhi Zhang 001; Alsharif Abuadbba; Wei Kang 004; Anmin Fu; Yansong Gao 001 (IEEE Trans. Inf. Forensics Secur., 2024)

HyperHammer: Breaking Free from KVM-Enforced Isolation. - Wei Chen 006; Zhi Zhang 001; Xin Zhang 110; Qingni Shen; Yuval Yarom; Daniel Genkin; Chen Yan; Zhe Wang 017 (ASPLOS (2), 2025)

Try to Poison My Deep Learning Data? Nowhere to Hide Your Trajectory Spectrum! - Yansong Gao 001; Huaibing Peng; Hua Ma; Zhi Zhang 001; Shuo Wang 012; Rayne Holland; Anmin Fu; Minhui Xue 001; Derek Abbott (NDSS, 2025)

Practical Opcode-based Fault Attack on AES-NI. - Xue Gong; Xin Zhang 110; Qianmei Wu; Fan Zhang; Junge Xu; Qingni Shen; Zhi Zhang 001 (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2025)

Decaf: Data Distribution Decompose Attack Against Federated Learning. - Zhiyang Dai; Yansong Gao 001; Chunyi Zhou; Anmin Fu; Zhi Zhang 001; Minhui Xue 001; Yifeng Zheng; Yuqing Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Fantastic Interrupts and Where to Find Them: Exploiting Non-Movable Interrupts on x86. - Xin Zhang 110; Qingni Shen; Zhi Zhang 001; Yansong Gao 001; Jiajun Zou; Yi Yang; Zhonghai Wu (IEEE Trans. Inf. Forensics Secur., 2025)

TruVRF: Toward Triple-Granularity Verification on Machine Unlearning. - Chunyi Zhou; Yansong Gao 001; Anmin Fu; Kai Chen 012; Zhi Zhang 001; Minhui Xue 001; Zhiyang Dai; Shouling Ji; Yuqing Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Life-Cycle Routing Vulnerabilities of LLM Router. - Qiqi Lin; Xiaoyang Ji; Shengfang Zhai; Qingni Shen; Zhi Zhang 001; Yuejian Fang; Yansong Gao 001 (CoRR, 2025)

WhistleBlower: A System-Level Empirical Study on RowHammer. - Wei He; Zhi Zhang 001; Yueqiang Cheng; Wenhao Wang 001; Wei Song 002; Yansong Gao 001; Qifei Zhang 001; Kang Li; Dongxi Liu; Surya Nepal (IEEE Trans. Computers, 2025)

Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks. - Anmin Fu; Fanyu Meng; Huaibing Peng; Hua Ma; Zhi Zhang 001; Yifeng Zheng; Willy Susilo; Yansong Gao 001 (CoRR, 2025)

Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects. - Na Li; Chunyi Zhou; Yansong Gao 001; Hui Chen; Zhi Zhang 001; Boyu Kuang; Anmin Fu (IEEE Trans. Neural Networks Learn. Syst., 2025)