| 2021 | CCS | Continuous Release of Data Streams under both Centralized and Local Differential Privacy. | Tianhao Wang, Joann Qiongna Chen, Zhikun Zhang, Dong Su, Yueqiang Cheng, Zhou Li, Ninghui Li, Somesh Jha |
| 2019 | DSN | Reaching Data Confidentiality and Model Accountability on the CalTrain. | Zhongshu Gu, Hani Jamjoom, Dong Su, Heqing Huang, Jialong Zhang, Tengfei Ma, Dimitrios Pendarakis, Ian M. Molloy |
| 2019 | WWW | PrivIdEx: Privacy Preserving and Secure Exchange of Digital Identity Assets. | Hasini Gunasinghe, Ashish Kundu, Elisa Bertino, Hugo Krawczyk, Suresh Chari, Kapil Singh, Dong Su |
| 2019 | SP | Defending Against Neural Network Model Stealing Attacks Using Deceptive Perturbations. | Taesung Lee, Benjamin Edwards, Ian M. Molloy, Dong Su |
| 2018 | ECCV | Is Robustness the Cost of Accuracy? - A Comprehensive Study on the Robustness of 18 Deep Image Classification Models. | Dong Su, Huan Zhang, Hongge Chen, Jinfeng Yi, Pin-Yu Chen, Yupeng Gao |
| 2018 | ICLR | Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach. | Tsui-Wei Weng, Huan Zhang, Pin-Yu Chen, Jinfeng Yi, Dong Su, Yupeng Gao, Cho-Jui Hsieh, Luca Daniel |
| 2013 | CCS | Membership privacy: a unifying framework for privacy definitions. | Ninghui Li, Wahbeh H. Qardaji, Dong Su, Yi Wu, Weining Yang |
| 2012 | CCS | On sampling, anonymization, and differential privacy or, | Ninghui Li, Wahbeh H. Qardaji, Dong Su |
| 2009 | INDOCRYPT | A New Hard-Core Predicate of Paillier's Trapdoor Function. | Dong Su, Kewei Lv |