Bit2RNG: Leveraging Bad-page Initialized Table with Bit-error Insertion for True Random Number Generation in Commodity Flash Memory. - Wei Yan 005; Huifeng Zhu; Zhiyuan Yu 001; Fatemeh Tehranipoor; John A. Chandy; Ning Zhang 017; Xuan Zhang 001 (HOST, 2020)

Towards Automated Computational Auditing of mHealth Security and Privacy Regulations. - Brian Tung; Zhiyuan Yu 001; Ning Zhang 017 (CCS, 2021)

Security and Privacy in the Emerging Cyber-Physical World: A Survey. - Zhiyuan Yu 001; Zack Kaplan; Qiben Yan; Ning Zhang 017 (IEEE Commun. Surv. Tutorials, 2021)

When Evil Calls: Targeted Adversarial Voice over IP Network. - Han Liu; Zhiyuan Yu 001; Mingming Zha 001; XiaoFeng Wang 001; William Yeoh 001; Yevgeniy Vorobeychik; Ning Zhang 017 (CCS, 2022)

HeatDeCam: Detecting Hidden Spy Cameras via Thermal Emissions. - Zhiyuan Yu 001; Zhuohang Li; Yuanhaur Chang; Skylar Fong; Jian Liu 001; Ning Zhang 017 (CCS, 2022)

PowerTouch: A Security Objective-Guided Automation Framework for Generating Wired Ghost Touch Attacks on Touchscreens. - Huifeng Zhu; Zhiyuan Yu 001; Weidong Cao 001; Ning Zhang 017; Xuan Zhang 001 (ICCAD, 2022)

PolyRhythm: Adaptive Tuning of a Multi-Channel Attack Template for Timing Interference. - Ao Li 006; Marion Sudvarg; Han Liu; Zhiyuan Yu 001; Chris Gill 001; Ning Zhang 017 (RTSS, 2022)

AntiFake: Using Adversarial Audio to Prevent Unauthorized Speech Synthesis. - Zhiyuan Yu 001; Shixuan Zhai; Ning Zhang 017 (CCS, 2023)

SlowLiDAR: Increasing the Latency of LiDAR-Based Detection Using Adversarial Examples. - Han Liu; Yuhao Wu; Zhiyuan Yu 001; Yevgeniy Vorobeychik; Ning Zhang 017 (CVPR, 2023)

CodeIPPrompt: Intellectual Property Infringement Assessment of Code Language Models. - Zhiyuan Yu 001; Yuhao Wu; Ning Zhang 017; Chenguang Wang; Yevgeniy Vorobeychik; Chaowei Xiao (ICML, 2023)

SMACK: Semantically Meaningful Adversarial Audio Attack. - Zhiyuan Yu 001; Yuanhaur Chang; Ning Zhang 017; Chaowei Xiao (USENIX Security Symposium, 2023)

XCheck: Verifying Integrity of 3D Printed Patient-Specific Devices via Computing Tomography. - Zhiyuan Yu 001; Yuanhaur Chang; Shixuan Zhai; Nicholas Deily; Tao Ju; XiaoFeng Wang 001; Uday Jammalamadaka; Ning Zhang 017 (USENIX Security Symposium, 2023)

ChargeX: Exploring State Switching Attack on Electric Vehicle Charging Systems. - Ce Zhou; Qiben Yan; Zhiyuan Yu 001; Eshan Dixit; Ning Zhang 017; Huacheng Zeng; Alireza Safdari Ghanhdari (CoRR, 2023)

PhySense: Defending Physically Realizable Attacks for Autonomous Systems via Consistency Reasoning. - Zhiyuan Yu 001; Ao Li 006; Ruoyao Wen; Yijia Chen; Ning Zhang 017 (CCS, 2024)

Towards Proactive Protection against Unauthorized Speech Synthesis. - Zhiyuan Yu 001 (CCS, 2024)

Please Tell Me More: Privacy Impact of Explainability through the Lens of Membership Inference Attack. - Han Liu; Yuhao Wu; Zhiyuan Yu 001; Ning Zhang 017 (SP, 2024)

Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models. - Zhiyuan Yu 001; Xiaogeng Liu; Shunning Liang; Zach Cameron; Chaowei Xiao; Ning Zhang 017 (USENIX Security Symposium, 2024)

Automatic and Universal Prompt Injection Attacks against Large Language Models. - Xiaogeng Liu; Zhiyuan Yu 001; Yizhe Zhang; Ning Zhang 017; Chaowei Xiao (CoRR, 2024)

Understanding the Bad Development Practices of Android Custom Permissions in the Wild. - Xiaohan Zhang; Zhiyuan Yu 001; Xinghua Li 001; Cen Zhang; Cong Sun 001; Ning Zhang 017; Robert H. Deng (IEEE Trans. Dependable Secur. Comput., 2025)