BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label. - Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Leo Yu Zhang; Yifeng Zheng 001; Yuanyuan He 002; Hai Jin 001 (ACM Multimedia, 2022)

Downstream-agnostic Adversarial Examples. - Ziqi Zhou 001; Shengshan Hu; Ruizhi Zhao; Qian Wang 002; Leo Yu Zhang; Junhui Hou; Hai Jin 001 (ICCV, 2023)

AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning. - Ziqi Zhou 001; Shengshan Hu; Minghui Li; Hangtao Zhang; Yechao Zhang; Hai Jin 001 (ACM Multimedia, 2023)

Corrupting Convolution-based Unlearnable Datasets with Pixel-based Image Transformations. - Xianlong Wang 001; Shengshan Hu; Minghui Li; Zhifei Yu; Ziqi Zhou 001; Leo Yu Zhang; Hai Jin 001 (CoRR, 2023)

ECLIPSE: Expunging Clean-Label Indiscriminate Poisons via Sparse Diffusion Purification. - Xianlong Wang 001; Shengshan Hu; Yechao Zhang; Ziqi Zhou 001; Leo Yu Zhang; Peng Xu 003; Wei Wan; Hai Jin 001 (ESORICS (1), 2024)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness in the Physical World. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (IJCAI, 2024)

Transferable Adversarial Facial Images for Privacy Protection. - Minghui Li; Jiangxiong Wang; Hao Zhang; Ziqi Zhou 001; Shengshan Hu; Xiaobing Pei (ACM Multimedia, 2024)

Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need. - Xianlong Wang 001; Minghui Li; Wei Liu 004; Hangtao Zhang; Shengshan Hu; Yechao Zhang; Ziqi Zhou 001; Hai Jin 001 (NeurIPS, 2024)

DarkSAM: Fooling Segment Anything Model to Segment Nothing. - Ziqi Zhou 001; Yufei Song; Minghui Li; Shengshan Hu; Xianlong Wang 001; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (NeurIPS, 2024)

Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples. - Ziqi Zhou 001; Minghui Li; Wei Liu 004; Shengshan Hu; Yechao Zhang; Wei Wan; Lulu Xue; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (SP, 2024)

Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness. - Hangtao Zhang; Shengshan Hu; Yichen Wang; Leo Yu Zhang; Ziqi Zhou 001; Xianlong Wang 001; Yanjun Zhang; Chao Chen 015 (CoRR, 2024)

BadRobot: Jailbreaking LLM-based Embodied AI in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Shengshan Hu; Leo Yu Zhang (CoRR, 2024)

TrojanRobot: Backdoor Attacks Against Robotic Manipulation in the Physical World. - Xianlong Wang 001; Hewen Pan; Hangtao Zhang; Minghui Li; Shengshan Hu; Ziqi Zhou 001; Lulu Xue; Peijin Guo; Yichen Wang; Wei Wan; Aishan Liu; Leo Yu Zhang (CoRR, 2024)

PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation. - Yufei Song; Ziqi Zhou 001; Minghui Li; Xianlong Wang 001; Menghao Deng; Wei Wan; Shengshan Hu; Leo Yu Zhang (CoRR, 2024)

NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors. - Ziqi Zhou 001; Bowen Li; Yufei Song; Zhifei Yu; Shengshan Hu; Wei Wan; Leo Yu Zhang; Dezhong Yao 002; Hai Jin 001 (AAAI, 2025)

Detecting and Corrupting Convolution-based Unlearnable Examples. - Minghui Li; Xianlong Wang 001; Zhifei Yu; Shengshan Hu; Ziqi Zhou 001; Longling Zhang; Leo Yu Zhang (AAAI, 2025)

Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature. - Yichen Wang; Yuxuan Chou; Ziqi Zhou 001; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li (AAAI, 2025)

Test-Time Backdoor Detection for Object Detection Models. - Hangtao Zhang; Yichen Wang; Shihui Yan; Chenyu Zhu; Ziqi Zhou 001; Linshan Hou; Shengshan Hu; Minghui Li; Yanjun Zhang; Leo Yu Zhang (CVPR, 2025)

PB-UAP: Hybride Universal Adversarial Attack for Image Segmentation. - Yufei Song; Ziqi Zhou 001; Minghui Li; Xianlong Wang 001; Hangtao Zhang; Menghao Deng; Wei Wan; Shengshan Hu; Leo Yu Zhang (ICASSP, 2025)

BadRobot: Jailbreaking Embodied LLM Agents in the Physical World. - Hangtao Zhang; Chenyu Zhu; Xianlong Wang 001; Ziqi Zhou 001; Changgan Yin; Minghui Li; Lulu Xue; Yichen Wang; Shengshan Hu; Aishan Liu; Peijin Guo; Leo Yu Zhang (ICLR, 2025)

DarkHash: A Data-Free Backdoor Attack Against Deep Hashing. - Ziqi Zhou 001; Menghao Deng; Yufei Song; Hangtao Zhang; Wei Wan; Shengshan Hu; Minghui Li; Leo Yu Zhang; Dezhong Yao 002 (IEEE Trans. Inf. Forensics Secur., 2025)

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM. - Lei Yu; Yechao Zhang; Ziqi Zhou 001; Yang Wu; Wei Wan; Minghui Li; Shengshan Hu; Pei Xiaobing; Jing Wang (CoRR, 2025)

Towards Reliable Forgetting: A Survey on Machine Unlearning Verification, Challenges, and Future Directions. - Lulu Xue; Shengshan Hu; Wei Lu; Yan Shen; Dongxu Li; Peijin Guo; Ziqi Zhou 001; Minghui Li; Yanjun Zhang; Leo Yu Zhang (CoRR, 2025)

ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agents. - Yichen Wang; Hangtao Zhang; Hewen Pan; Ziqi Zhou 001; Xianlong Wang 001; Peijin Guo; Lulu Xue; Shengshan Hu; Minghui Li; Leo Yu Zhang (CoRR, 2025)

MARS: A Malignity-Aware Backdoor Defense in Federated Learning. - Wei Wan; Yuxuan Ning; Zhicong Huang; Cheng Hong 001; Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Tianqing Zhu; Wanlei Zhou 001; Leo Yu Zhang (CoRR, 2025)

Towards Real-World Deepfake Detection: A Diverse In-the-wild Dataset of Forgery Faces. - Junyu Shi; Minghui Li; Junguo Zuo; Zhifei Yu; Yipeng Lin; Shengshan Hu; Ziqi Zhou 001; Yechao Zhang; Wei Wan; Yinzhe Xu; Leo Yu Zhang (CoRR, 2025)

SegTrans: Transferable Adversarial Examples for Segmentation Models. - Yufei Song; Ziqi Zhou 001; Qi Lu; Hangtao Zhang; Yifan Hu; Lulu Xue; Shengshan Hu; Minghui Li; Leo Yu Zhang (CoRR, 2025)

Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2. - Ziqi Zhou 001; Yifan Hu; Yufei Song; Zijing Li; Shengshan Hu; Leo Yu Zhang; Dezhong Yao 002; Long Zheng; Hai Jin 001 (CoRR, 2025)