| 2026 | AAAI | PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems. | Qi Guo, Xiaojun Jia, Shanmin Pang, Simeng Qin, Lin Wang, Ju Jia, Yang Liu, Qing Guo |
| 2026 | AAAI | PAGPL: Privacy-Aware Graph Prompt Learning Scheme via Adaptive Perturbation-Estimated Topology Recovery. | Ju Jia, Jiansen Song, Jingxuan Yu, Jiabao Guo, Xiaoshuang Jia, Di Wu, Yali Yuan, Guang Cheng |
| 2026 | AAAI | Cross-Modal Unlearning via Influential Neuron Path Editing in Multimodal Large Language Models. | Kunhao Li, Wenhao Li, Di Wu, Lei Yang, Jun Bai, Ju Jia, Jason Xue |
| 2026 | AAAI | MPAS: Breaking Sequential Constraints of Multi-Agent Communication Topologies via Individual-Epistemic Message Propagation. | Jingxuan Yu, Ju Jia, Simeng Qin, Xiaojun Jia, Siqi Ma, Yihao Huang, Yali Yuan, Guang Cheng |
| 2025 | COLING | SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Prompts. | Aihua Pei, Zehua Yang, Shunan Zhu, Ruoxi Cheng, Ju Jia |
| 2025 | ICCV | Backdooring Self-Supervised Contrastive Learning by Noisy Alignment. | Tuo Chen, Jie Gui, Minjing Dong, Ju Jia, Lanting Fang, Jian Liu |
| 2025 | ICCV | Spoofing-aware Prompt Learning for Unified Physical-Digital Facial Attack Detection. | Jiabao Guo, Yadian Wang, Hui Ma, Yuhao Fu, Ju Jia, Hui Liu, Shengeng Tang, Lechao Cheng, Yufeng Diao, Ajian Liu |
| 2025 | KDD | Prompt as a Double-Edged Sword: A Dynamic Equilibrium Gradient-Assigned Attack against Graph Prompt Learning. | Ju Jia, Jingxuan Yu, Di Wu, Cong Wu, Hengjie Zhu, Lina Wang |
| 2025 | SIGIR | PATFinger: Prompt-Adapted Transferable Fingerprinting against Unauthorized Multimodal Dataset Usage. | Wenyi Zhang, Ju Jia, Xiaojun Jia, Yihao Huang, Xinfeng Li, Cong Wu, Lina Wang |