| 2026 | ACL | JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models. | Qingjia Huang, Jingyu Zhang, Jianguo Wu, Yakai Li, Weijuan Zhang, Yankai Rong, Junyi Yao, Shengzhi Zhang, Xiaoqi Jia |
| 2025 | CCS | RAG-WM: An Efficient Black-Box Watermarking Approach for Retrieval-Augmented Generation of Large Language Models. | Peizhuo Lv, Mengjie Sun, Hao Wang, XiaoFeng Wang, Shengzhi Zhang, Yuxuan Chen, Kai Chen, Limin Sun |
| 2025 | ICASSP | A Model Stealing Attack Against Multi-Exit Networks. | Pan Li, Peizhuo Lv, Kai Chen, Shengzhi Zhang, Yuling Cai, Fan Xiang |
| 2025 | NDSS | RContainer: A Secure Container Architecture through Extending ARM CCA Hardware Primitives. | Qihang Zhou, Wenzhuo Cao, Xiaoqi Jia, Peng Liu, Shengzhi Zhang, Jiayun Chen, Shaowen Xu, Zhenyu Song |
| 2025 | SP | EvilHarmony: Stealthy Adversarial Attacks Against Black-Box Speech Recognition Systems. | Xuejing Yuan, Jiangshan Zhang, Feng Guo, Kai Chen, Xiaofeng Wang, Shengzhi Zhang, Yuxuan Chen, Dun Liu, Pan Li, Zihao Wang, Runnan Zhu |
| 2024 | DSN | SEDSpec: Securing Emulated Devices by Enforcing Execution Specification. | Yang Chen, Shengzhi Zhang, Xiaoqi Jia, Qihang Zhou, Heqing Huang, Shaowen Xu, Haochao Du |
| 2024 | NDSS | SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-Supervised Learning. | Peizhuo Lv, Pan Li, Shenchen Zhu, Shengzhi Zhang, Kai Chen, Ruigang Liang, Chang Yue, Fan Xiang, Yuling Cai, Hualong Ma, Yingjun Zhang, Guozhu Meng |
| 2024 | TrustCom | Exploring Permission Control Flaws in Mini-apps. | Jun Li, Yuting Zhang, Wu Zhou, Shengzhi Zhang |
| 2024 | TrustCom | A Defensive Framework Against Adversarial Attacks on Machine Learning-Based Network Intrusion Detection Systems. | Benyamin Tafreshian, Shengzhi Zhang |
| 2024 | SP | MEA-Defender: A Robust Watermark against Model Extraction Attack. | Peizhuo Lv, Hualong Ma, Kai Chen, Jiachen Zhou, Shengzhi Zhang, Ruigang Liang, Shenchen Zhu, Pan Li, Yingjun Zhang |
| 2023 | SP | AI-Guardian: Defeating Adversarial Attacks using Backdoors. | Hong Zhu, Shengzhi Zhang, Kai Chen |
| 2022 | ISPEC | Practical Backdoor Attack Against Speaker Recognition System. | Yuxiao Luo, Jianwei Tai, Xiaoqi Jia, Shengzhi Zhang |
| 2022 | TrustCom | EnShare: Sharing Files Securely and Efficiently in the Cloud using Enclave. | Yun He, Xiaoqi Jia, Shengzhi Zhang, Lou Chitkushev |
| 2022 | SEC | An Efficient Use-after-Free Mitigation Approach via Static Dangling Pointer Nullification. | Yue Yu, Xiaoqi Jia, Xun An, Shengzhi Zhang |
| 2021 | CCS | AI-Lancet: Locating Error-inducing Neurons to Optimize Neural Networks. | Yue Zhao, Hong Zhu, Kai Chen, Shengzhi Zhang |
| 2020 | ACSAC | SEEF-ALDR: A Speaker Embedding Enhancement Framework via Adversarial Learning based Disentangled Representation. | Jianwei Tai, Xiaoqi Jia, Qingjia Huang, Weijuan Zhang, Haichao Du, Shengzhi Zhang |
| 2020 | RAID | EnclavePDP: A General Framework to Verify Data Integrity in Cloud Using Intel SGX. | Yun He, Yihua Xu, Xiaoqi Jia, Shengzhi Zhang, Peng Liu, Shuai Chang |
| 2019 | CCS | Seeing isn't Believing: Towards More Robust Adversarial Attack Against Real World Object Detectors. | Yue Zhao, Hong Zhu, Ruigang Liang, Qintao Shen, Shengzhi Zhang, Kai Chen |
| 2018 | APSEC | Running OS Kernel in Separate Domains: A New Architecture for Applications and OS Services Quarantine. | Weijuan Zhang, Xiaoqi Jia, Shengzhi Zhang, Rui Wang, Peng Liu |
| 2018 | GLOBECOM | All Your Alexa Are Belong to Us: A Remote Voice Control Attack against Echo. | Xuejing Yuan, Yuxuan Chen, Aohui Wang, Kai Chen, Shengzhi Zhang, Heqing Huang, Ian M. Molloy |
| 2018 | VEHITS | A Security Model for Dependable Vehicle Middleware and Mobile Applications Connection. | Shengzhi Zhang, Omar Makke, Oleg Gusikhin, Ayush Shah, Athanasios V. Vasilakos |
| 2017 | APNOMS | Towards comprehensive protection for OpenFlow controllers. | Shengzhi Zhang, Xiaoqi Jia, Weijuan Zhang |
| 2017 | Mobisys | TrustShadow: Secure Execution of Unmodified Applications with ARM TrustZone. | Le Guan, Peng Liu, Xinyu Xing, Xinyang Ge, Shengzhi Zhang, Meng Yu, Trent Jaeger |
| 2016 | ICICS | A Comprehensive Study of Co-residence Threat in Multi-tenant Public PaaS Clouds. | Weijuan Zhang, Xiaoqi Jia, Chang Wang, Shengzhi Zhang, Qingjia Huang, Mingsheng Wang, Peng Liu |
| 2016 | IWSEC | Analyzing Android Repackaged Malware by Decoupling Their Event Behaviors. | Zimin Lin, Rui Wang, Xiaoqi Jia, Shengzhi Zhang, Chuankun Wu |
| 2016 | TrustCom | Classifying Android Malware with Dynamic Behavior Dependency Graphs. | Zimin Lin, Rui Wang, Xiaoqi Jia, Shengzhi Zhang, Chuankun Wu |
| 2015 | ISPEC | Comprehensive Analysis of the Android Google Play's Auto-update Policy. | Craig Sanders, Ayush Shah, Shengzhi Zhang |
| 2015 | NSS | A Study of Network Domains Used in Android Applications. | Mark E. Fioravanti II, Ayush Shah, Shengzhi Zhang |
| 2014 | HPCC | Machine Learning Based Cross-Site Scripting Detection in Online Social Network. | Rui Wang, Xiaoqi Jia, Qinlei Li, Shengzhi Zhang |
| 2012 | CCS | Letting applications operate through attacks launched from compromised drivers. | Shengzhi Zhang, Peng Liu |
| 2012 | RAID | Assessing the Trustworthiness of Drivers. | Shengzhi Zhang, Peng Liu |
| 2011 | CNSM | Distributed workload and response time management for web applications. | Shengzhi Zhang, Haishan Wu, Wenjie Wang, Bo Yang, Peng Liu, Athanasios V. Vasilakos |
| 2011 | ICICS | HyperCrop: A Hypervisor-Based Countermeasure for Return Oriented Programming. | Jun Jiang, Xiaoqi Jia, Dengguo Feng, Shengzhi Zhang, Peng Liu |
| 2010 | ACSAC | Cross-layer comprehensive intrusion harm analysis for production workload server systems. | Shengzhi Zhang, Xiaoqi Jia, Peng Liu, Jiwu Jing |
| 2009 | CCS | Availability-sensitive intrusion recovery. | Shengzhi Zhang, Xi Xiong, Xiaoqi Jia, Peng Liu |
| 2008 | CCS | Using virtual machines to do cross-layer damage assessment. | Xiaoqi Jia, Shengzhi Zhang, Jiwu Jing, Peng Liu |