| 2026 | ACL | Fingerprinting LLMs via Prompt Injection. | Yuepeng Hu, Zhengyuan Jiang, Mengyuan Li, Osama Ahmed, Zhicong Huang, Cheng Hong, Neil Zhenqiang Gong |
| 2026 | ACL | Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection. | Zedian Shao, Hongbin Liu, Yuepeng Hu, Neil Zhenqiang Gong |
| 2026 | ACL | Copyright Detective: A Forensic System to Evidence LLMs Flickering Copyright Leakage Risks. | Guangwei Zhang, Jianing Zhu, Cheng Qian, Neil Zhenqiang Gong, Rada Mihalcea, Zhaozhuo Xu, Jingrui He, Jiaqi W. Ma, Chaowei Xiao, Bo Li, Ahmed Abbasi, Dongwon Lee, Heng Ji, Denghui Zhang |
| 2026 | ACL | SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator. | Xueyang Zhou, Weidong Wang, Lin Lu, Jiawen Shi, Guiyao Tie, Yongtian Xu, Lixing Chen, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun |
| 2026 | EACL | Jailbreaking Safeguarded Text-to-Image Models via Large Language Models. | Zhengyuan Jiang, Yuepeng Hu, Yuchen Yang, Yinzhi Cao, Neil Zhenqiang Gong |
| 2026 | NDSS | Prompt Injection Attack to Tool Selection in LLM Agents. | Jiawen Shi, Zenghui Yuan, Guiyao Tie, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun |
| 2026 | NDSS | ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data. | Reachal Wang, Yuqi Jia, Neil Zhenqiang Gong |
| 2026 | SP | PromptLocate: Localizing Prompt Injection Attacks. | Yuqi Jia, Yupei Liu, Zedian Shao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2025 | CVPR | Model Poisoning Attacks to Federated Learning via Multi-Round Consistency. | Yueqi Xie, Minghong Fang, Neil Zhenqiang Gong |
| 2025 | CVPR | BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models. | Zenghui Yuan, Jiawen Shi, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun |
| 2025 | EMNLP | WebInject: Prompt Injection Attack to Web Agents. | Xilong Wang, John Bloch, Zedian Shao, Yuepeng Hu, Shuyan Zhou, Neil Zhenqiang Gong |
| 2025 | ICLR | A Transfer Attack to Image Watermarks. | Yuepeng Hu, Zhengyuan Jiang, Moyang Guo, Neil Zhenqiang Gong |
| 2025 | ICLR | StringLLM: Understanding the String Processing Capability of Large Language Models. | Xilong Wang, Hao Fu, Jindong Wang, Neil Zhenqiang Gong |
| 2025 | KDD | A Survey on Model Extraction Attacks and Defenses for Large Language Models. | Kaixiang Zhao, Lincan Li, Kaize Ding, Neil Zhenqiang Gong, Yue Zhao, Yushun Dong |
| 2025 | WWW | Provably Robust Federated Reinforcement Learning. | Minghong Fang, Xilong Wang, Neil Zhenqiang Gong |
| 2025 | SP | DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks. | Yupei Liu, Yuqi Jia, Jinyuan Jia, Dawn Song, Neil Zhenqiang Gong |
| 2025 | SP | GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models. | Jiadong Lou, Xu Yuan, Rui Zhang, Xingliang Yuan, Neil Zhenqiang Gong, Nian-Feng Tzeng |
| 2024 | CCS | A General Framework for Data-Use Auditing of ML Models. | Zonghao Huang, Neil Zhenqiang Gong, Michael K. Reiter |
| 2024 | CCS | Optimization-based Prompt Injection Attack to LLM-as-a-Judge. | Jiawen Shi, Zenghui Yuan, Yinuo Liu, Yue Huang, Pan Zhou, Lichao Sun, Neil Zhenqiang Gong |
| 2024 | CVPR | Data Poisoning Based Backdoor Attacks to Contrastive Learning. | Jinghuai Zhang, Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2024 | ECCV | Certifiably Robust Image Watermark. | Zhengyuan Jiang, Moyang Guo, Yuepeng Hu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2024 | ECCV | Unlocking the Potential of Federated Learning: The Symphony of Dataset Distillation via Deep Generative Latents. | Yuqi Jia, Saeed Vahidian, Jingwei Sun, Jianyi Zhang, Vyacheslav Kungurtsev, Neil Zhenqiang Gong, Yiran Chen |
| 2024 | ICLR | MetaTool Benchmark for Large Language Models: Deciding Whether to Use Tools and Which to Use. | Yue Huang, Jiawen Shi, Yuan Li, Chenrui Fan, Siyuan Wu, Qihui Zhang, Yixin Liu, Pan Zhou, Yao Wan, Neil Zhenqiang Gong, Lichao Sun |
| 2024 | ICLR | DyVal: Dynamic Evaluation of Large Language Models for Reasoning Tasks. | Kaijie Zhu, Jiaao Chen, Jindong Wang, Neil Zhenqiang Gong, Diyi Yang, Xing Xie |
| 2024 | ICML | Position: TrustLLM: Trustworthiness in Large Language Models. | Yue Huang, Lichao Sun, Haoran Wang, Siyuan Wu, Qihui Zhang, Yuan Li, Chujie Gao, Yixin Huang, Wenhan Lyu, Yixuan Zhang, Xiner Li, Hanchi Sun, Zhengliang Liu, Yixin Liu, Yijue Wang, Zhikun Zhang, Bertie Vidgen, Bhavya Kailkhura, Caiming Xiong, Chaowei Xiao, Chunyuan Li, Eric P. Xing, Furong Huang, Hao Liu, Heng Ji, Hongyi Wang, Huan Zhang, Huaxiu Yao, Manolis Kellis, Marinka Zitnik, Meng Jiang, Mohit Bansal, James Zou, Jian Pei, Jian Liu, Jianfeng Gao, Jiawei Han, Jieyu Zhao, Jiliang Tang, Jindong Wang, Joaquin Vanschoren, John C. Mitchell, Kai Shu, Kaidi Xu, Kai-Wei Chang, Lifang He, Lifu Huang, Michael Backes, Neil Zhenqiang Gong, Philip S. Yu, Pin-Yu Chen, Quanquan Gu, Ran Xu, Rex Ying, Shuiwang Ji, Suman Jana, Tianlong Chen, Tianming Liu, Tianyi Zhou, William Wang, Xiang Li, Xiangliang Zhang, Xiao Wang, Xing Xie, Xun Chen, Xuyu Wang, Yan Liu, Yanfang Ye, Yinzhi Cao, Yong Chen, Yue Zhao |
| 2024 | ICML | FedREDefense: Defending against Model Poisoning Attacks for Federated Learning using Model Update Reconstruction Error. | Yueqi Xie, Minghong Fang, Neil Zhenqiang Gong |
| 2024 | WWW | Robust Federated Learning Mitigates Client-side Training Data Distribution Inference Attacks. | Yichang Xu, Ming Yin, Minghong Fang, Neil Zhenqiang Gong |
| 2024 | WWW | Poisoning Federated Recommender Systems with Fake Users. | Ming Yin, Yichang Xu, Minghong Fang, Neil Zhenqiang Gong |
| 2024 | SP | Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning. | Hongbin Liu, Wenjie Qu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2023 | CCS | Evading Watermark based Detection of AI-Generated Content. | Zhengyuan Jiang, Jinghuai Zhang, Neil Zhenqiang Gong |
| 2023 | CVPR | PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees. | Jinghuai Zhang, Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong |
| 2023 | DSN | Fortifying Federated Learning against Membership Inference Attacks via Client-level Input Perturbation. | Yuchen Yang, Haolin Yuan, Bo Hui, Neil Zhenqiang Gong, Neil Fendley, Philippe Burlina, Yinzhi Cao |
| 2023 | NDSS | REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service. | Wenjie Qu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2023 | SP | FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information. | Xiaoyu Cao, Jinyuan Jia, Zaixi Zhang, Neil Zhenqiang Gong |
| 2022 | AAAI | Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks. | Jinyuan Jia, Yupei Liu, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2022 | ACSAC | AFLGuard: Byzantine-robust Asynchronous Federated Learning. | Minghong Fang, Jia Liu, Neil Zhenqiang Gong, Elizabeth S. Bentley |
| 2022 | AsiaCCS | GraphTrack: A Graph-based Cross-Device Tracking Framework. | Binghui Wang, Tianchen Zhou, Song Li, Yinzhi Cao, Neil Zhenqiang Gong |
| 2022 | AsiaCCS | Understanding Disparate Effects of Membership Inference Attacks and their Countermeasures. | Da Zhong, Haipei Sun, Jun Xu, Neil Zhenqiang Gong, Wendy Hui Wang |
| 2022 | CCS | StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning. | Yupei Liu, Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong |
| 2022 | CVPR | MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clients. | Xiaoyu Cao, Neil Zhenqiang Gong |
| 2022 | DAC | HERO: hessian-enhanced robust optimization for unifying and improving generalization and quantization performance. | Huanrui Yang, Xiaoxuan Yang, Neil Zhenqiang Gong, Yiran Chen |
| 2022 | ECCV | Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning. | Xinlei He, Hongbin Liu, Neil Zhenqiang Gong, Yang Zhang |
| 2022 | ECCV | Addressing Heterogeneity in Federated Learning via Distributional Transformation. | Haolin Yuan, Bo Hui, Yuchen Yang, Philippe Burlina, Neil Zhenqiang Gong, Yinzhi Cao |
| 2022 | ICLR | Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations. | Jinyuan Jia, Binghui Wang, Xiaoyu Cao, Hongbin Liu, Neil Zhenqiang Gong |
| 2022 | ICMLA | Deep Neural Network Piration without Accuracy Loss. | Aritra Ray, Jinyuan Jia, Sohini Saha, Jayeeta Chaudhuri, Neil Zhenqiang Gong, Krishnendu Chakrabarty |
| 2022 | KDD | FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients. | Zaixi Zhang, Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2022 | SP | BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning. | Jinyuan Jia, Yupei Liu, Neil Zhenqiang Gong |
| 2021 | AAAI | Provably Secure Federated Learning against Malicious Clients. | Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | AAAI | Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks. | Jinyuan Jia, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2021 | AAAI | Semi-Supervised Node Classification on Graphs: Markov Random Fields vs. Graph Neural Networks. | Binghui Wang, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | ACSAC | On Detecting Growing-Up Behaviors of Malicious Accounts in Privacy-Centric Mobile Social Networks. | Zijie Yang, Binghui Wang, Haoran Li, Dong Yuan, Zhuotao Liu, Neil Zhenqiang Gong, Chang Liu, Qi Li, Xiao Liang, Shaofeng Hu |
| 2021 | AsiaCCS | IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary. | Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | AsiaCCS | Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes. | Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong |
| 2021 | CCS | EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning. | Hongbin Liu, Jinyuan Jia, Wenjie Qu, Neil Zhenqiang Gong |
| 2021 | CVPR | PointGuard: Provably Robust 3D Point Cloud Classification. | Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | IJCAI | On the Intrinsic Differential Privacy of Bagging. | Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | KDD | Unveiling Fake Accounts at the Time of Registration: An Unsupervised Approach. | Xiao Liang, Zheng Yang, Binghui Wang, Shaofeng Hu, Zijie Yang, Dong Yuan, Neil Zhenqiang Gong, Qi Li, Fang He |
| 2021 | KDD | Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation. | Binghui Wang, Jinyuan Jia, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2021 | NDSS | FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping. | Xiaoyu Cao, Minghong Fang, Jia Liu, Neil Zhenqiang Gong |
| 2021 | NDSS | Data Poisoning Attacks to Deep Learning Based Recommender Systems. | Hai Huang, Jiaming Mu, Neil Zhenqiang Gong, Qi Li, Bin Liu, Mingwei Xu |
| 2021 | NDSS | Practical Blind Membership Inference Attack via Differential Comparisons. | Bo Hui, Yuchen Yang, Haolin Yuan, Philippe Burlina, Neil Zhenqiang Gong, Yinzhi Cao |
| 2021 | WWW | Data Poisoning Attacks and Defenses to Crowdsourcing Systems. | Minghong Fang, Minghao Sun, Qi Li, Neil Zhenqiang Gong, Jin Tian, Jia Liu |
| 2021 | WWW | Linear-Time Self Attention with Codeword Histogram for Efficient Recommendation. | Yongji Wu, Defu Lian, Neil Zhenqiang Gong, Lu Yin, Mingyang Yin, Jingren Zhou, Hongxia Yang |
| 2021 | SACMAT | Backdoor Attacks to Graph Neural Networks. | Zaixi Zhang, Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong |
| 2020 | ICLR | Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing. | Jinyuan Jia, Xiaoyu Cao, Binghui Wang, Neil Zhenqiang Gong |
| 2020 | WWW | Influence Function based Data Poisoning Attacks to Top-N Recommender Systems. | Minghong Fang, Neil Zhenqiang Gong, Jia Liu |
| 2020 | WWW | Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing. | Jinyuan Jia, Binghui Wang, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2019 | CCS | MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples. | Jinyuan Jia, Ahmed Salem, Michael Backes, Yang Zhang, Neil Zhenqiang Gong |
| 2019 | CCS | Attacking Graph-based Classification via Manipulating the Graph Structure. | Binghui Wang, Neil Zhenqiang Gong |
| 2019 | CCS | Detecting Fake Accounts in Online Social Networks at the Time of Registrations. | Dong Yuan, Yuanli Miao, Neil Zhenqiang Gong, Zheng Yang, Qi Li, Dawn Song, Qian Wang, Xiao Liang |
| 2019 | INFOCOM | Calibrate: Frequency Estimation and Heavy Hitter Identification with Local Differential Privacy via Incorporating Prior Knowledge. | Jinyuan Jia, Neil Zhenqiang Gong |
| 2019 | KDD | Characterizing and Detecting Malicious Accounts in Privacy-Centric Mobile Social Networks: A Case Study. | Zenghua Xia, Chang Liu, Neil Zhenqiang Gong, Qi Li, Yong Cui, Dawn Song |
| 2019 | NDSS | Graph-based Security and Privacy Analytics via Collective Classification with Joint Weight Learning and Propagation. | Binghui Wang, Jinyuan Jia, Neil Zhenqiang Gong |
| 2018 | ACSAC | Poisoning Attacks to Graph-Based Recommender Systems. | Minghong Fang, Guolei Yang, Neil Zhenqiang Gong, Jia Liu |
| 2018 | CCS | EviHunter: Identifying Digital Evidence in the Permanent Storage of Android Devices via Static Analysis. | Chris Chao-Chun Cheng, Chen Shi, Neil Zhenqiang Gong, Yong Guan |
| 2018 | RAID | SybilBlind: Detecting Fake Users in Online Social Networks Without Manual Labels. | Binghui Wang, Le Zhang, Neil Zhenqiang Gong |
| 2018 | SP | Stealing Hyperparameters in Machine Learning. | Binghui Wang, Neil Zhenqiang Gong |
| 2018 | SP | A Dynamic Taint Analysis Tool for Android App Forensics. | Zhen Xu, Chen Shi, Chris Chao-Chun Cheng, Neil Zhenqiang Gong, Yong Guan |
| 2017 | ACSAC | Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification. | Xiaoyu Cao, Neil Zhenqiang Gong |
| 2017 | DSN | Random Walk Based Fake Account Detection in Online Social Networks. | Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong |
| 2017 | ICDCS | PIANO: Proximity-Based User Authentication on Voice-Powered Internet-of-Things Devices. | Neil Zhenqiang Gong, Altay Ozen, Yu Wu, Xiaoyu Cao, Richard Shin, Dawn Song, Hongxia Jin, Xuan Bao |
| 2017 | ICDM | GANG: Detecting Fraudulent Users in Online Social Networks via Guilt-by-Association on Directed Graphs. | Binghui Wang, Neil Zhenqiang Gong, Hao Fu |
| 2017 | INFOCOM | SybilSCAR: Sybil detection in online social networks via local rule based propagation. | Binghui Wang, Le Zhang, Neil Zhenqiang Gong |
| 2017 | NDSS | Fake Co-visitation Injection Attacks to Recommender Systems. | Guolei Yang, Neil Zhenqiang Gong, Ying Cai |
| 2017 | WWW | AttriInfer: Inferring User Attributes in Online Social Networks Using Markov Random Fields. | Jinyuan Jia, Binghui Wang, Le Zhang, Neil Zhenqiang Gong |
| 2016 | CCS | Forgery-Resistant Touch-based Authentication on Mobile Devices. | Neil Zhenqiang Gong, Mathias Payer, Reza Moazzezi, Mario Frank |
| 2015 | CIKM | Protecting Your Children from Inappropriate Content in Mobile Apps: An Automatic Maturity Rating Framework. | Bing Hu, Bin Liu, Neil Zhenqiang Gong, Deguang Kong, Hongxia Jin |
| 2015 | NDSS | On Your Social Network De-anonymizablity: Quantification and Large Scale Evaluation with Seed Knowledge. | Shouling Ji, Weiqing Li, Neil Zhenqiang Gong, Prateek Mittal, Raheem A. Beyah |
| 2015 | WSDM | Personalized Mobile App Recommendation: Reconciling App Functionality and User Privacy Preference. | Bin Liu, Deguang Kong, Lei Cen, Neil Zhenqiang Gong, Hongxia Jin, Hui Xiong |
| 2012 | IMC | Evolution of social-attribute networks: measurements, modeling, and implications using google+. | Neil Zhenqiang Gong, Wenchang Xu, Ling Huang, Prateek Mittal, Emil Stefanov, Vyas Sekar, Dawn Song |
| 2012 | SP | On the Feasibility of Internet-Scale Author Identification. | Arvind Narayanan, Hristo S. Paskov, Neil Zhenqiang Gong, John Bethencourt, Emil Stefanov, Eui Chul Richard Shin, Dawn Song |
| 2011 | APWEB | Efficient Approximate Top- | Dongqu Chen, Guang-Zhong Sun, Neil Zhenqiang Gong |
| 2010 | MDM | Protecting Privacy in Location-Based Services Using K-Anonymity without Cloaked Region. | Neil Zhenqiang Gong, Guangzhong Sun, Xing Xie |