| 2026 | AAAI | Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks. | Yaxin Xiao, Qingqing Ye, Zi Liang, Haoyang Li, Ronghua Li, Huadi Zheng, Haibo Hu |
| 2025 | AAAI | Multi-Turn Jailbreaking Large Language Models via Attention Shifting. | Xiaohu Du, Fan Mo, Ming Wen, Tu Gu, Huadi Zheng, Hai Jin, Jie Shi |
| 2025 | AAAI | A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks. | Haoyang Li, Li Bai, Qingqing Ye, Haibo Hu, Yaxin Xiao, Huadi Zheng, Jianliang Xu |
| 2025 | ICCV | Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy. | Yaxin Xiao, Qingqing Ye, Li Hu, Huadi Zheng, Haibo Hu, Zi Liang, Haoyang Li, Yijie Jiao |
| 2025 | WWW | MER-Inspector: Assessing Model Extraction Risks from An Attack-Agnostic Perspective. | Xinwei Zhang, Haibo Hu, Qingqing Ye, Li Bai, Huadi Zheng |
| 2023 | AsiaCCS | QUDA: Query-Limited Data-Free Model Extraction. | Zijun Lin, Ke Xu, Chengfang Fang, Huadi Zheng, Aneez Ahmed Jaheezuddin, Jie Shi |
| 2021 | INFOCOM | Beyond Value Perturbation: Local Differential Privacy in the Temporal Setting. | Qingqing Ye, Haibo Hu, Ninghui Li, Xiaofeng Meng, Huadi Zheng, Haotian Yan |
| 2019 | ESORICS | BDPL: A Boundary Differentially Private Layer Against Machine Learning Model Extraction Attacks. | Huadi Zheng, Qingqing Ye, Haibo Hu, Chengfang Fang, Jie Shi |
| 2019 | IJCAI | Metadata-driven Task Relation Discovery for Multi-task Learning. | Zimu Zheng, Yuqi Wang, Quanyu Dai, Huadi Zheng, Dan Wang |
| 2019 | SP | PrivKV: Key-Value Data Collection with Local Differential Privacy. | Qingqing Ye, Haibo Hu, Xiaofeng Meng, Huadi Zheng |
| 2016 | ICPR | Text-independent voice conversion using deep neural network based phonetic level features. | Huadi Zheng, Weicheng Cai, Tianyan Zhou, Shilei Zhang, Ming Li |