| 2025 | EMNLP | Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment. | Tong Zhang, Kuofeng Gao, Jiawang Bai, Leo Yu Zhang, Xin Yin, Zonghui Wang, Shouling Ji, Wenzhi Chen |
| 2024 | CVPR | BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP. | Jiawang Bai, Kuofeng Gao, Shaobo Min, Shu-Tao Xia, Zhifeng Li, Wei Liu |
| 2024 | CVPR | Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers. | Sheng Yang, Jiawang Bai, Kuofeng Gao, Yong Yang, Yiming Li, Shu-Tao Xia |
| 2024 | ECCV | Parameter-Efficient and Memory-Efficient Tuning for Vision Transformer: A Disentangled Approach. | Taolin Zhang, Jiawang Bai, Zhihe Lu, Dongze Lian, Genping Wang, Xinchao Wang, Shu-Tao Xia |
| 2024 | ICML | Beyond Sole Strength: Customized Ensembles for Generalized Vision-Language Models. | Zhihe Lu, Jiawang Bai, Xin Li, Zeyu Xiao, Xinchao Wang |
| 2023 | BMVC | Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning. | Kuofeng Gao, Jiawang Bai, Bin Chen, Dongxian Wu, Shu-Tao Xia |
| 2022 | ECCV | Hardly Perceptible Trojan Attack Against Neural Networks with Bit Flips. | Jiawang Bai, Kuofeng Gao, Dihong Gong, Shu-Tao Xia, Zhifeng Li, Wei Liu |
| 2022 | ECCV | Improving Vision Transformers by Revisiting High-Frequency Components. | Jiawang Bai, Li Yuan, Shu-Tao Xia, Shuicheng Yan, Zhifeng Li, Wei Liu |
| 2021 | ICLR | Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits. | Jiawang Bai, Baoyuan Wu, Yong Zhang, Yiming Li, Zhifeng Li, Shu-Tao Xia |
| 2020 | ECCV | Targeted Attack for Deep Hashing Based Retrieval. | Jiawang Bai, Bin Chen, Yiming Li, Dongxian Wu, Weiwei Guo, Shu-Tao Xia, En-Hui Yang |