Pixel Privacy: Increasing Image Appeal while Blocking Automatic Inference of Sensitive Scene Information. - Martha A. Larson; Zhuoran Liu 001; Simon Brugman; Zhengyu Zhao 001 (MediaEval, 2018)

First Steps in Pixel Privacy: Exploring Deep Learning-based Image Enhancement against Large-Scale Image Inference. - Zhuoran Liu 001; Zhengyu Zhao 001 (MediaEval, 2018)

Adversarial Photo Frame: Concealing Sensitive Scene Information of Social Images in a User-Acceptable Manner. - Zhuoran Liu 001; Zhengyu Zhao 001 (MediaEval, 2019)

Pixel Privacy 2019: Protecting Sensitive Scene Information in Images. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (MediaEval, 2019)

Maintaining Perceptual Faithfulness of Adversarial Image Examples by Leveraging Color Variance. - Sam Sweere; Zhuoran Liu 001; Martha A. Larson (MediaEval, 2019)

Who's Afraid of Adversarial Queries?: The Impact of Image Modifications on Content-based Image Retrieval. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (ICMR, 2019)

Reproducible Experiments on Adaptive Discriminative Region Discovery for Scene Recognition. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson; Ahmet Iscen; Naoko Nitta (ACM Multimedia, 2019)

Adversarial Color Enhancement: Generating Unrestricted Adversarial Images by Optimizing a Color Filter. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (BMVC, 2020)

Towards Large Yet Imperceptible Adversarial Image Perturbations With Perceptual Color Distance. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CVPR, 2020)

Pixel Privacy: Quality Camouflage for Social Images. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson; Laurent Amsaleg (MediaEval, 2020)

A Differentiable Color Filter for Generating Unrestricted Adversarial Images. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CoRR, 2020)

Adversarial Robustness Against Image Color Transformation within Parametric Filter Space. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (CoRR, 2020)

Screen Gleaning: A Screen Reading TEMPEST Attack on Mobile Devices Exploiting an Electromagnetic Side Channel. - Zhuoran Liu 001; Niels Samwel; Leo Weissbart; Zhengyu Zhao 001; Dirk Lauret; Lejla Batina; Martha A. Larson (NDSS, 2021)

On Success and Simplicity: A Second Look at Transferable Targeted Attacks. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (NeurIPS, 2021)

Pivoting Image-based Profiles Toward Privacy: Inhibiting Malicious Profiling with Adversarial Additions. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (UMAP, 2021)

Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start. - Zhuoran Liu 001; Martha A. Larson (WWW, 2021)

Going Grayscale: The Road to Understanding and Improving Unlearnable Examples. - Zhuoran Liu 001; Zhengyu Zhao 001; Alex Kolmus; Tijn Berns; Twan van Laarhoven; Tom Heskes; Martha A. Larson (CoRR, 2021)

Domain Constraints in Feature Space: Strengthening Robustness of Android Malware Detection against Realizable Adversarial Examples. - Hamid Bostani; Zhuoran Liu 001; Zhengyu Zhao 001; Veelasha Moonsamy (CoRR, 2022)

Generative Poisoning Using Random Discriminators. - Dirren van Vlijmen; Alex Kolmus; Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (CoRR, 2022)

Adversarial Machine Learning. - Carlos Javier Hernández-Castro; Zhuoran Liu 001; Alex Serban; Ilias Tsingenopoulos; Wouter Joosen (Security and Artificial Intelligence, 2022)

Beyond Neural-on-Neural Approaches to Speaker Gender Protection. - Loes van Bemmel; Zhuoran Liu 001; Nik Vaessen; Martha A. Larson (ICASSP, 2023)

Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning? - Rui Wen 002; Zhengyu Zhao 001; Zhuoran Liu 001; Michael Backes 001; Tianhao Wang 001; Yang Zhang 016 (ICLR, 2023)

Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (ICML, 2023)

Textual Concept Expansion with Commonsense Knowledge to Improve Dual-Stream Image-Text Matching. - Mingliang Liang; Zhuoran Liu 001; Martha A. Larson (MMM (1), 2023)

Adversarial Image Color Transformations in Explicit Color Filter Space. - Zhengyu Zhao 001; Zhuoran Liu 001; Martha A. Larson (IEEE Trans. Inf. Forensics Secur., 2023)

BAN: Detecting Backdoors Activated by Adversarial Neuron Noise. - Xiaoyun Xu; Zhuoran Liu 001; Stefanos Koffas; Shujian Yu; Stjepan Picek (NeurIPS, 2024)

SoK: Neural Network Extraction Through Physical Side Channels. - Péter Horváth; Dirk Lauret; Zhuoran Liu 001; Lejla Batina (USENIX Security Symposium, 2024)

Resisting Bag-Based Attribute Profiling by Adding Adversarial Items to Existing Media Profiles. - Zhuoran Liu 001; Zhengyu Zhao 001; Martha A. Larson (IEEE Trans. Inf. Forensics Secur., 2025)

Towards Backdoor Stealthiness in Model Parameter Space. - Xiaoyun Xu; Zhuoran Liu 001; Stefanos Koffas; Stjepan Picek (CoRR, 2025)

Real-world Edge Neural Network Implementations Leak Private Interactions Through Physical Side Channel. - Zhuoran Liu 001; Senna van Hoek; Péter Horváth; Dirk Lauret; Xiaoyun Xu; Lejla Batina (CoRR, 2025)

Level Up with ML Vulnerability Identification: Leveraging Domain Constraints in Feature Space for Robust Android Malware Detection. - Hamid Bostani; Zhengyu Zhao 001; Zhuoran Liu 001; Veelasha Moonsamy (ACM Trans. Priv. Secur., 2025)