| 2026 | ACL | Retrievals Can Be Detrimental: Unveiling the Backdoor Vulnerability of Retrieval-Augmented Diffusion Models. | Hao Fang, Xiaohang Sui, Hongyao Yu, Kuofeng Gao, Jiawei Kong, Sijin Yu, Bin Chen, Shu-Tao Xia |
| 2026 | ACL | When Efficiency Meets Safety: A Benchmark Security Analysis of KV Cache Compression in Large Language Models. | Xiaoxiao Ma, Kuofeng Gao, Zeyi Lu, Wenxi Jiang, Hao Fang, Hao Wu, Bin Chen, Shu-Tao Xia |
| 2026 | ACL | Infinite Babble: Inflating 3D Vision-Language Model Inference Overhead via Adversarial Geometric Perturbation. | Shuoyang Sun, Jiaxin Hong, Yv Zhang, Kuofeng Gao, Hao Fang, Fan Mo, Bin Chen, Shu-Tao Xia |
| 2025 | ACL | Benchmarking Open-ended Audio Dialogue Understanding for Large Audio-Language Models. | Kuofeng Gao, Shutao Xia, Ke Xu, Philip Torr, Jindong Gu |
| 2025 | ACL | VLMInferSlow: Evaluating the Efficiency Robustness of Large Vision-Language Models as a Service. | Xiasi Wang, Tianliang Yao, Simin Chen, Runqi Wang, Lei Ye, Kuofeng Gao, Yi Huang, Yuan Yao |
| 2025 | ACL | QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language. | Qingsong Zou, Jingyu Xiao, Qing Li, Zhi Yan, Yuhang Wang, Li Xu, Wenxuan Wang, Kuofeng Gao, Ruoyu Li, Yong Jiang |
| 2025 | CVPR | Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations. | Haitong Liu, Kuofeng Gao, Yang Bai, Jinmin Li, Jinxiao Shan, Tao Dai, Shu-Tao Xia |
| 2025 | EMNLP | Your Language Model Can Secretly Write Like Humans: Contrastive Paraphrase Attacks on LLM-Generated Text Detectors. | Hao Fang, Jiawei Kong, Tianqu Zhuang, Yixiang Qiu, Kuofeng Gao, Bin Chen, Shu-Tao Xia, Yaowei Wang, Min Zhang |
| 2025 | EMNLP | Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment. | Tong Zhang, Kuofeng Gao, Jiawang Bai, Leo Yu Zhang, Xin Yin, Zonghui Wang, Shouling Ji, Wenzhi Chen |
| 2024 | CVPR | BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP. | Jiawang Bai, Kuofeng Gao, Shaobo Min, Shu-Tao Xia, Zhifeng Li, Wei Liu |
| 2024 | CVPR | Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers. | Sheng Yang, Jiawang Bai, Kuofeng Gao, Yong Yang, Yiming Li, Shu-Tao Xia |
| 2024 | ICLR | Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images. | Kuofeng Gao, Yang Bai, Jindong Gu, Shu-Tao Xia, Philip Torr, Zhifeng Li, Wei Liu |
| 2023 | BMVC | Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning. | Kuofeng Gao, Jiawang Bai, Bin Chen, Dongxian Wu, Shu-Tao Xia |
| 2023 | CVPR | Backdoor Defense via Adaptively Splitting Poisoned Dataset. | Kuofeng Gao, Yang Bai, Jindong Gu, Yong Yang, Shu-Tao Xia |
| 2022 | ECCV | Hardly Perceptible Trojan Attack Against Neural Networks with Bit Flips. | Jiawang Bai, Kuofeng Gao, Dihong Gong, Shu-Tao Xia, Zhifeng Li, Wei Liu |