| 2026 | ACL | Automated Profile Inference with Language Model Agents. | Yuntao Du, Zitao Li, Bolin Ding, Yaliang Li, Hanshen Xiao, Jingren Zhou, Ninghui Li |
| 2026 | NDSS | Cascading and Proxy Membership Inference Attacks. | Yuntao Du, Jiacheng Li, Yuetian Chen, Kaiyuan Zhang, Zhizhen Yuan, Hanshen Xiao, Bruno Ribeiro, Ninghui Li |
| 2025 | CCS | Systematic Assessment of Tabular Data Synthesis. | Yuntao Du, Ninghui Li |
| 2025 | CCS | Mitigating Data Poisoning Attacks to Local Differential Privacy. | Xiaolin Li, Ninghui Li, Boyang Wang, Wenhai Sun |
| 2025 | NDSS | CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. | Kaiyuan Zhang, Siyuan Cheng, Guangyu Shen, Bruno Ribeiro, Shengwei An, Pin-Yu Chen, Xiangyu Zhang, Ninghui Li |
| 2025 | NDSS | On the Robustness of LDP Protocols for Numerical Attributes under Data Poisoning Attacks. | Xiaoguang Li, Zitao Li, Ninghui Li, Wenhai Sun |
| 2023 | ESORICS | Towards Efficient Privacy-Preserving Deep Packet Inspection. | Weicheng Wang, Hyunwoo Lee, Yan Huang, Elisa Bertino, Ninghui Li |
| 2023 | ICLR | Effective passive membership inference attacks in federated learning against overparameterized models. | Jiacheng Li, Ninghui Li, Bruno Ribeiro |
| 2022 | AsiaCCS | VWAnalyzer: A Systematic Security Analysis Framework for the Voice over WiFi Protocol. | Hyunwoo Lee, Imtiaz Karim, Ninghui Li, Elisa Bertino |
| 2022 | AsiaCCS | Differentially Private Data Synthesis: State of the Art and Challenges. | Ninghui Li |
| 2022 | ESORICS | An Infection-Identifying and Self-Evolving System for IoT Early Defense from Multi-Step Attacks. | Hyunwoo Lee, Anand Mudgerikar, Ashish Kundu, Ninghui Li, Elisa Bertino |
| 2022 | IGARSS | SUN Glint Correction of HY-1C/COCTS Imagery. | Ninghui Li, Lei Guan, Hong Gao |
| 2021 | CCS | Continuous Release of Data Streams under both Centralized and Local Differential Privacy. | Tianhao Wang, Joann Qiongna Chen, Zhikun Zhang, Dong Su, Yueqiang Cheng, Zhou Li, Ninghui Li, Somesh Jha |
| 2021 | INFOCOM | Beyond Value Perturbation: Local Differential Privacy in the Temporal Setting. | Qingqing Ye, Haibo Hu, Ninghui Li, Xiaofeng Meng, Huadi Zheng, Haotian Yan |
| 2020 | NDSS | Locally Differentially Private Frequency Estimation with Consistency. | Tianhao Wang, Milan Lopuha-Zwakenberg, Zitao Li, Boris Skoric, Ninghui Li |
| 2020 | SIGMOD | Estimating Numerical Distributions under Local Differential Privacy. | Zitao Li, Tianhao Wang, Milan Lopuha-Zwakenberg, Ninghui Li, Boris Skoric |
| 2020 | SP | Towards Effective Differential Privacy Communication for Users' Data Sharing Decision and Comprehension. | Aiping Xiong, Tianhao Wang, Ninghui Li, Somesh Jha |
| 2019 | ACSAC | Koinonia: verifiable e-voting with long-term privacy. | Huangyi Ge, Sze Yiu Chau, Victor E. Gonsalves, Huian Li, Tianhao Wang, Xukai Zou, Ninghui Li |
| 2019 | MDM | Mobile Data Collection and Analysis with Local Differential Privacy. | Ninghui Li, Qingqing Ye |
| 2019 | NDSS | Analyzing Semantic Correctness with Symbolic Execution: A Case Study on PKCS#1 v1.5 Signature Verification. | Sze Yiu Chau, Moosa Yahyazadeh, Omar Chowdhury, Aniket Kate, Ninghui Li |
| 2019 | NDSS | Privacy Attacks to the 4G and 5G Cellular Paging Protocols Using Side Channel Information. | Syed Rafiul Hussain, Mitziu Echeverria, Omar Chowdhury, Ninghui Li, Elisa Bertino |
| 2019 | SIGMOD | Answering Multi-Dimensional Analytical Queries under Local Differential Privacy. | Tianhao Wang, Bolin Ding, Jingren Zhou, Cheng Hong, Zhicong Huang, Ninghui Li, Somesh Jha |
| 2019 | SACMAT | Enhancing Biometric-Capsule-based Authentication and Facial Recognition via Deep Learning. | Tyler Phillips, Xukai Zou, Feng Li, Ninghui Li |
| 2018 | ACSAC | Why Johnny Can't Make Money With His Contents: Pitfalls of Designing and Implementing Content Delivery Apps. | Sze Yiu Chau, Bincheng Wang, Jianxiong Wang, Omar Chowdhury, Aniket Kate, Ninghui Li |
| 2018 | CCS | Precise Android API Protection Mapping Derivation and Reasoning. | Yousra Aafer, Guanhong Tao, Jianjun Huang, Xiangyu Zhang, Ninghui Li |
| 2018 | CCS | iOracle: Automated Evaluation of Access Control Policies in iOS. | Luke Deshotels, Razvan Deaconescu, Costin Carabas, Iulia Manda, William Enck, Mihai Chiroiu, Ninghui Li, Ahmad-Reza Sadeghi |
| 2018 | CCS | CALM: Consistent Adaptive Local Marginal for Marginal Release under Local Differential Privacy. | Zhikun Zhang, Tianhao Wang, Ninghui Li, Shibo He, Jiming Chen |
| 2018 | NDSS | AceDroid: Normalizing Diverse Android Access Control Checks for Inconsistency Detection. | Yousra Aafer, Jianjun Huang, Yi Sun, Xiangyu Zhang, Ninghui Li, Chen Tian |
| 2018 | SIGMOD | Privacy at Scale: Local Differential Privacy in Practice. | Graham Cormode, Somesh Jha, Tejas Kulkarni, Ninghui Li, Divesh Srivastava, Tianhao Wang |
| 2018 | SP | Locally Differentially Private Frequent Itemset Mining. | Tianhao Wang, Ninghui Li, Somesh Jha |
| 2018 | SecureComm | Adaptive Deterrence of DNS Cache Poisoning. | Sze Yiu Chau, Omar Chowdhury, Victor E. Gonsalves, Huangyi Ge, Weining Yang, Sonia Fahmy, Ninghui Li |
| 2017 | ACSAC | Analysis of SEAndroid Policies: Combining MAC and DAC in Android. | Haining Chen, Ninghui Li, William Enck, Yousra Aafer, Xiangyu Zhang |
| 2017 | CCS | SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android. | Ruowen Wang, Ahmed M. Azab, William Enck, Ninghui Li, Peng Ning, Xun Chen, Wenbo Shen, Yueqiang Cheng |
| 2017 | DSN | Analyzing Operational Behavior of Stateful Protocol Implementations for Detecting Semantic Bugs. | Md. Endadul Hoque, Omar Chowdhury, Sze Yiu Chau, Cristina Nita-Rotaru, Ninghui Li |
| 2017 | SP | SymCerts: Practical Symbolic Execution for Exposing Noncompliance in X.509 Certificate Validation Implementations. | Sze Yiu Chau, Omar Chowdhury, Md. Endadul Hoque, Huangyi Ge, Aniket Kate, Cristina Nita-Rotaru, Ninghui Li |
| 2016 | CCS | On the Security and Usability of Segment-based Visual Cryptographic Authentication Protocols. | Tianhao Wang, Huangyi Ge, Omar Chowdhury, Hemanta K. Maji, Ninghui Li |
| 2016 | CCS | An Empirical Study of Mnemonic Sentence-based Password Generation Strategies. | Weining Yang, Ninghui Li, Omar Chowdhury, Aiping Xiong, Robert W. Proctor |
| 2016 | ESORICS | Comparing Password Ranking Algorithms on Real-World Password Datasets. | Weining Yang, Ninghui Li, Ian M. Molloy, Youngja Park, Suresh N. Chari |
| 2016 | SIGMOD | Publishing Graph Degree Distribution with Node Differential Privacy. | Wei-Yen Day, Ninghui Li, Min Lyu |
| 2016 | SACMAT | Tri-Modularization of Firewall Policies. | Haining Chen, Omar Chowdhury, Ninghui Li, Warut Khern-am-nuai, Suresh Chari, Ian M. Molloy, Youngja Park |
| 2015 | CCS | Differentially Private Publishing of High-dimensional Data Using Sensitivity Control. | Wei-Yen Day, Ninghui Li |
| 2015 | ESORICS | Learning from Others: User Anomaly Detection Using Anomalous Samples from Other Users. | Youngja Park, Ian M. Molloy, Suresh N. Chari, Zenglin Xu, Christopher S. Gates, Ninghui Li |
| 2014 | ESORICS | Detecting Insider Information Theft Using Features from File Access Logs. | Christopher S. Gates, Ninghui Li, Zenglin Xu, Suresh N. Chari, Ian M. Molloy, Youngja Park |
| 2014 | SIGIR | User Comment Analysis for Android apps and CSPI Detection with Comment Expansion. | Lei Cen, Luo Si, Ninghui Li, Hongxia Jin |
| 2014 | SIGMOD | PriView: practical differentially private release of marginal contingency tables. | Wahbeh H. Qardaji, Weining Yang, Ninghui Li |
| 2014 | SP | A Study of Probabilistic Password Models. | Jerry Ma, Weining Yang, Min Luo, Ninghui Li |
| 2013 | CCS | Membership privacy: a unifying framework for privacy definitions. | Ninghui Li, Wahbeh H. Qardaji, Dong Su, Yi Wu, Weining Yang |
| 2013 | EDBT | Efficient and accurate strategies for differentially-private sliding window queries. | Jianneng Cao, Qian Xiao, Gabriel Ghinita, Ninghui Li, Elisa Bertino, Kian-Lee Tan |
| 2013 | ICDE | Differentially private grids for geospatial data. | Wahbeh H. Qardaji, Weining Yang, Ninghui Li |
| 2012 | ACSAC | CodeShield: towards personalized application whitelisting. | Christopher S. Gates, Ninghui Li, Jing Chen, Robert W. Proctor |
| 2012 | CCS | On sampling, anonymization, and differential privacy or, | Ninghui Li, Wahbeh H. Qardaji, Dong Su |
| 2012 | CCS | Using probabilistic generative models for ranking risks of Android apps. | Hao Peng, Christopher S. Gates, Bhaskar Pratim Sarma, Ninghui Li, Yuan Qi, Rahul Potharaju, Cristina Nita-Rotaru, Ian M. Molloy |
| 2012 | CCS | Recursive partitioning and summarization: a practical framework for differentially private data publishing. | Wahbeh H. Qardaji, Ninghui Li |
| 2012 | CCS | Minimizing private data disclosures in the smart grid. | Weining Yang, Ninghui Li, Yuan Qi, Wahbeh H. Qardaji, Stephen E. McLaughlin, Patrick D. McDaniel |
| 2012 | SACMAT | Android permissions: a perspective combining risks and benefits. | Bhaskar Pratim Sarma, Ninghui Li, Christopher S. Gates, Rahul Potharaju, Cristina Nita-Rotaru, Ian M. Molloy |
| 2011 | CCS | Attack on the GridCode one-time password. | Ian M. Molloy, Ninghui Li |
| 2011 | FC | Beyond Risk-Based Access Control: Towards Incentive-Based Access Control. | Debin Liu, Ninghui Li, XiaoFeng Wang, L. Jean Camp |
| 2010 | SACMAT | Towards analyzing complex operating system access control configurations. | Hong Chen, Ninghui Li, Christopher S. Gates, Ziqing Mao |
| 2010 | SACMAT | Mining roles with noisy data. | Ian M. Molloy, Ninghui Li, Yuan (Alan) Qi, Jorge Lobo, Luke Dickens |
| 2009 | ESORICS | WORM-SEAL: Trustworthy Data Retention and Verification for Regulatory Compliance. | Tiancheng Li, Xiaonan Ma, Ninghui Li |
| 2009 | ESORICS | Usable Access Control in Collaborative Environments: Authorization Based on People-Tagging. | Qihua Wang, Hongxia Jin, Ninghui Li |
| 2009 | FC | Defeating Cross-Site Request Forgery Attacks with Browser-Enforced Authenticity Protection. | Ziqing Mao, Ninghui Li, Ian M. Molloy |
| 2009 | ICDE | Modeling and Integrating Background Knowledge in Data Anonymization. | Tiancheng Li, Ninghui Li, Jian Zhang |
| 2009 | ICDM | On the (In)Security and (Im)Practicality of Outsourcing Precise Association Rule Mining. | Ian M. Molloy, Ninghui Li, Tiancheng Li |
| 2009 | ISI | Assured Information Sharing Life Cycle. | Tim Finin, Anupam Joshi, Hillol Kargupta, Yelena Yesha, Joel Sachs, Elisa Bertino, Ninghui Li, Chris Clifton, Gene Spafford, Bhavani Thuraisingham, Murat Kantarcioglu, Alain Bensoussan, Nathan Berg, Latifur Khan, Jiawei Han, ChengXiang Zhai, Ravi S. Sandhu, Shouhuai Xu, Jim Massaro, Lada A. Adamic |
| 2009 | KDD | On the tradeoff between privacy and utility in data publishing. | Tiancheng Li, Ninghui Li |
| 2009 | NDSS | Analyzing and Comparing the Protection Quality of Security Enhanced Operating Systems. | Hong Chen, Ninghui Li, Ziqing Mao |
| 2009 | SACMAT | Access control policy combining: theory meets practice. | Ninghui Li, Qihua Wang, Wahbeh H. Qardaji, Elisa Bertino, Prathima Rao, Jorge Lobo, Dan Lin |
| 2009 | SACMAT | Trojan horse resistant discretionary access control. | Ziqing Mao, Ninghui Li, Hong Chen, Xuxian Jiang |
| 2009 | SACMAT | Evaluating role mining algorithms. | Ian M. Molloy, Ninghui Li, Tiancheng Li, Ziqing Mao, Qihua Wang, Jorge Lobo |
| 2009 | SACMAT | An algebra for fine-grained integration of XACML policies. | Prathima Rao, Dan Lin, Elisa Bertino, Ninghui Li, Jorge Lobo |
| 2009 | SACMAT | An efficient framework for user authorization queries in RBAC systems. | Guneshi T. Wickramaarachchi, Wahbeh H. Qardaji, Ninghui Li |
| 2008 | ESORICS | Access Control Friendly Query Verification for Outsourced Data Publishing. | Hong Chen, Xiaonan Ma, Windsor W. Hsu, Ninghui Li, Qihua Wang |
| 2008 | ESORICS | On the Security of Delegation in Access Control Systems. | Qihua Wang, Ninghui Li, Hong Chen |
| 2008 | ICDE | Injector: Mining Background Knowledge for Data Anonymization. | Tiancheng Li, Ninghui Li |
| 2008 | NDSS | PRECIP: Towards Practical and Retrofittable Confidential Information Protection. | XiaoFeng Wang, Zhuowei Li, Ninghui Li, Jong Youl Choi |
| 2008 | SACMAT | Policy decomposition for collaborative access control. | Dan Lin, Prathima Rao, Elisa Bertino, Ninghui Li, Jorge Lobo |
| 2008 | SACMAT | Mining roles with semantic meanings. | Ian M. Molloy, Hong Chen, Tiancheng Li, Qihua Wang, Ninghui Li, Elisa Bertino, Seraphin B. Calo, Jorge Lobo |
| 2007 | ACNS | Universal Accumulators with Efficient Nonmembership Proofs. | Jiangtao Li, Ninghui Li, Rui Xue |
| 2007 | CCS | Administration in role-based access control. | Ninghui Li, Ziqing Mao |
| 2007 | CCS | Direct static enforcement of high-level security policies. | Qihua Wang, Ninghui Li |
| 2007 | DASFAA | Efficient | Ji-Won Byun, Ashish Kamra, Elisa Bertino, Ninghui Li |
| 2007 | ESORICS | Satisfiability and Resiliency in Workflow Systems. | Qihua Wang, Ninghui Li |
| 2007 | FC | Dynamic Virtual Credit Card Numbers. | Ian M. Molloy, Jiangtao Li, Ninghui Li |
| 2007 | ICDE | t-Closeness: Privacy Beyond k-Anonymity and l-Diversity. | Ninghui Li, Tiancheng Li, Suresh Venkatasubramanian |
| 2007 | VLDB | On the Correctness Criteria of Fine-Grained Access Control in Relational Databases. | Qihua Wang, Ting Yu, Ninghui Li, Jorge Lobo, Elisa Bertino, Keith Irwin, Ji-Won Byun |
| 2007 | SP | Usable Mandatory Integrity Protection for Operating Systems. | Ninghui Li, Ziqing Mao, Hong Chen |
| 2006 | CCS | Resiliency policies in access control. | Ninghui Li, Mahesh V. Tripunitara, Qihua Wang |
| 2006 | CCS | Beyond separation of duty: an algebra for specifying high-level security policies. | Ninghui Li, Qihua Wang |
| 2006 | ICDM | Optimal k-Anonymity with Flexible Generalization Schemes through Bottom-up Searching. | Tiancheng Li, Ninghui Li |
| 2006 | ICICS | A Construction for General and Efficient Oblivious Commitment Based Envelope Protocols. | Jiangtao Li, Ninghui Li |
| 2006 | ICICS | Distributed Credential Chain Discovery in Trust Management with Parameterized Roles and Constraints (Short Paper). | Ziqing Mao, Ninghui Li, William H. Winsborough |
| 2006 | SACMAT | Constraint generation for separation of duty. | Hong Chen, Ninghui Li |
| 2006 | SecureComm | Denial of Service Attacks and Defenses in Decentralized Trust Management. | Jiangtao Li, Ninghui Li, XiaoFeng Wang, Ting Yu |
| 2005 | ACNS | OACerts: Oblivious Attribute Certificates. | Jiangtao Li, Ninghui Li |
| 2005 | CCS | Automated trust negotiation using cryptographic credentials. | Jiangtao Li, Ninghui Li, William H. Winsborough |
| 2005 | PODC | Policy-hiding access control in open environment. | Jiangtao Li, Ninghui Li |
| 2005 | SP | On Safety in Discretionary Access Control. | Ninghui Li, Mahesh V. Tripunitara |
| 2005 | SACMAT | Purpose based access control of complex data for privacy protection. | Ji-Won Byun, Elisa Bertino, Ninghui Li |
| 2004 | ACSAC | Securing Java RMI-Based Distributed Applications. | Ninghui Li, John C. Mitchell, Derrick Tong |
| 2004 | CCS | On mutually-exclusive roles and separation of duty. | Ninghui Li, Ziad Bizri, Mahesh V. Tripunitara |
| 2004 | CCS | Comparing the expressive power of access control models. | Mahesh V. Tripunitara, Ninghui Li |
| 2004 | SP | Safety in Automated Trust Negotiation. | William H. Winsborough, Ninghui Li |
| 2004 | SACMAT | Security analysis in role-based access control. | Ninghui Li, Mahesh V. Tripunitara |
| 2003 | PADL | DATALOG with Constraints: A Foundation for Trust Management Languages. | Ninghui Li, John C. Mitchell |
| 2003 | PODC | Oblivious signature-based envelope. | Ninghui Li, Wenliang Du, Dan Boneh |
| 2003 | SP | Beyond Proof-of-Compliance: Safety and Availability Analysis in Trust Management. | Ninghui Li, William H. Winsborough, John C. Mitchell |
| 2002 | SP | Design of a Role-Based Trust-Management Framework. | Ninghui Li, John C. Mitchell, William H. Winsborough |
| 2001 | CCS | Distributed credential chain discovery in trust management: extended abstract. | Ninghui Li, William H. Winsborough, John C. Mitchell |
| 2001 | FC | Nonmonotonicity, User Interfaces, and Risk Assessment in Certificate Revocation. | Ninghui Li, Joan Feigenbaum |
| 2000 | SP | A Practically Implementable and Tractable Delegation Logic. | Ninghui Li, Benjamin N. Grosof, Joan Feigenbaum |