| 2026 | ACL | CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning. | Biao Yi, Tiansheng Huang, Baolei Zhang, Tong Li, Lihai Nie, Zheli Liu, Li Shen |
| 2026 | ACL | SEAD: A Surrogate-free Label-only Membership Inference Attack against Pre-trained LLMs with Semantic-Aware Density. | Biao Yi, Jiahao Li, Yiming Li, Yu He, Baolei Zhang, Zheli Liu, Dacheng Tao |
| 2026 | SP | Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation. | Baolei Zhang, Haoran Xin, Yuxi Chen, Zhuqing Liu, Biao Yi, Tong Li, Lihai Nie, Zheli Liu, Minghong Fang |
| 2026 | SACMAT | Practical Poisoning Attacks against Retrieval-Augmented Generation. | Baolei Zhang, Yuxi Chen, Zhuqing Liu, Lihai Nie, Tong Li, Zheli Liu, Minghong Fang |
| 2025 | ACL | Prompt-Guided Internal States for Hallucination Detection of Large Language Models. | Fujie Zhang, Peiqi Yu, Biao Yi, Baolei Zhang, Tong Li, Zheli Liu |
| 2025 | WWW | Traceback of Poisoning Attacks to Retrieval-Augmented Generation. | Baolei Zhang, Haoran Xin, Minghong Fang, Zhuqing Liu, Biao Yi, Tong Li, Zheli Liu |
| 2024 | ACL | BadActs: A Universal Backdoor Defense in the Activation Space. | Biao Yi, Sishuo Chen, Yiming Li, Tong Li, Baolei Zhang, Zheli Liu |
| 2009 | ISNN | Cutting Force Prediction of High-Speed Milling Hardened Steel Based on BP Neural Networks. | Yuanling Chen, Weiren Long, Fanglan Ma, Baolei Zhang |