| 2026 | ACL | Speak No Evil, Just Prompt: Low-resource Multilingual Toxic Speech Detection with Audio Language Model. | Mingzi Zuo, Lei Zhang, Hailiang Sun, Shengzhi Huo, Changyu Dong, Xin Wang, Bo Wang, Hao Liu |
| 2026 | PKC | Secret-Shared Shuffle from Authenticated Correlations. | Xiangfu Song, Xiaojian Liang, Ye Dong, Jianli Bai, Pu Duan, Changyu Dong, Tianwei Zhang, Ee-Chien Chang |
| 2025 | CVPR | Distraction is All You Need for Multimodal Large Language Model Jailbreaking. | Zuopeng Yang, Jiluan Fan, Anli Yan, Erdun Gao, Xin Lin, Tao Li, Kanghua Mo, Changyu Dong |
| 2025 | IJCNN | Backdoor Defense via Malicious Knowledge Capturing and Machine Unlearning with Out-of-Distribution Data. | Dongyang Liang, Keyu Chen, Hongyang Yan, Changyu Dong |
| 2024 | AsiaCCS | DISCO: Dynamic Searchable Encryption with Constant State. | Xiangfu Song, Yu Zheng, Jianli Bai, Changyu Dong, Zheli Liu, Ee-Chien Chang |
| 2024 | NDSS | Secret-Shared Shuffle with Malicious Security. | Xiangfu Song, Dong Yin, Jianli Bai, Changyu Dong, Ee-Chien Chang |
| 2024 | PQCrypto | A New Hash-Based Enhanced Privacy ID Signature Scheme. | Liqun Chen, Changyu Dong, Nada El Kassem, Christopher J. P. Newton, Yalan Wang |
| 2023 | ACNS | Predicate Private Set Intersection with Linear Complexity. | Yaxi Yang, Jian Weng, Yufeng Yi, Changyu Dong, Leo Yu Zhang, Jianying Zhou |
| 2023 | AINA | Zero-Knowledge Multi-transfer Based on Range Proofs and Homomorphic Encryption. | Emanuele Scala, Changyu Dong, Flavio Corradini, Leonardo Mostarda |
| 2023 | AsiaCCS | Boost Off/On-Manifold Adversarial Robustness for Deep Learning with Latent Representation Mixup. | Mengdie Huang, Yi Xie, Xiaofeng Chen, Jin Li, Changyu Dong, Zheli Liu, Willy Susilo |
| 2023 | PQCrypto | Hash-Based Direct Anonymous Attestation. | Liqun Chen, Changyu Dong, Nada El Kassem, Christopher J. P. Newton, Yalan Wang |
| 2022 | ESORICS | GAME: Generative-Based Adaptive Model Extraction Attack. | Yi Xie, Mengdie Huang, Xiaoyu Zhang, Changyu Dong, Willy Susilo, Xiaofeng Chen |
| 2022 | FC | Multi-party Updatable Delegated Private Set Intersection. | Aydin Abadi, Changyu Dong, Steven J. Murdoch, Sotirios Terzis |
| 2021 | ICDM | Differentially Private String Sanitization for Frequency-Based Mining Tasks. | Huiping Chen, Changyu Dong, Liyue Fan, Grigorios Loukides, Solon P. Pissis, Leen Stougie |
| 2017 | CCS | Betrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing. | Changyu Dong, Yilei Wang, Amjad Aldweesh, Patrick McCorry, Aad van Moorsel |
| 2016 | FC | VD-PSI: Verifiable Delegated Private Set Intersection on Outsourced Private Datasets. | Aydin Abadi, Sotirios Terzis, Changyu Dong |
| 2015 | CANS | Secure Set-Based Policy Checking and Its Application to Password Registration. | Changyu Dong, Franziskus Kiefer |
| 2015 | SEC | O-PSI: Delegated Private Set Intersection on Outsourced Datasets. | Aydin Abadi, Sotirios Terzis, Changyu Dong |
| 2014 | ESORICS | A Fast Single Server Private Information Retrieval Protocol with Low Communication Cost. | Changyu Dong, Liqun Chen |
| 2014 | PAKDD | A Fast Secure Dot Product Protocol with Application to Privacy Preserving Association Rule Mining. | Changyu Dong, Liqun Chen |
| 2014 | SAC | Efficient protocols for private record linkage. | Zikai Wen, Changyu Dong |
| 2013 | CCS | When private set intersection meets big data: an efficient and scalable protocol. | Changyu Dong, Liqun Chen, Zikai Wen |
| 2013 | DBSEC | Fair Private Set Intersection with a Semi-trusted Arbiter. | Changyu Dong, Liqun Chen, Jan Camenisch, Giovanni Russello |
| 2011 | SIGCOMM | Argumentation-based fault diagnosis for home networks. | Changyu Dong, Naranker Dulay |
| 2008 | AINA | A Workflow-Based Access Control Framework for e-Health Applications. | Giovanni Russello, Changyu Dong, Naranker Dulay |
| 2008 | Coordination | Encrypted Shared Data Spaces. | Giovanni Russello, Changyu Dong, Naranker Dulay, Michel R. V. Chaudron, Maarten van Steen |
| 2008 | DBSEC | Shared and Searchable Encrypted Data for Untrusted Servers. | Changyu Dong, Giovanni Russello, Naranker Dulay |
| 2007 | AINA | Enforcing Fine-Grained Authorization Policies for Java Mobile Agents. | Giovanni Russello, Changyu Dong, Naranker Dulay |