| 2026 | AAAI | PhysPatch: A Physically Realizable and Transferable Adversarial Patch Attack for Multimodal Large Language Models-based Autonomous Driving Systems. | Qi Guo, Xiaojun Jia, Shanmin Pang, Simeng Qin, Lin Wang, Ju Jia, Yang Liu, Qing Guo |
| 2026 | AAAI | GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations. | Xinwei Liu, Xiaojun Jia, Yuan Xun, Simeng Qin, Xiaochun Cao |
| 2026 | AAAI | The Emotional Baby Is Truly Deadly: Does Your Multimodal Large Reasoning Model Have Emotional Flattery Towards Humans? | Yuan Xun, Xiaojun Jia, Xinwei Liu, Simeng Qin, Hua Zhang |
| 2026 | AAAI | MPAS: Breaking Sequential Constraints of Multi-Agent Communication Topologies via Individual-Epistemic Message Propagation. | Jingxuan Yu, Ju Jia, Simeng Qin, Xiaojun Jia, Siqi Ma, Yihao Huang, Yali Yuan, Guang Cheng |
| 2026 | ACL | Asymmetric Relational-Geometry Driven Universal Adversarial Perturbations for Vision-Language Models. | Jiaxin Ye, Weihai Li, Ying Wang, Simeng Qin, Zhitao Zeng, Zikai Xu |
| 2025 | EMNLP | PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization. | Ruoxi Cheng, Yizhong Ding, Shuirong Cao, Ranjie Duan, Xiaoshuang Jia, Shaowei Yuan, Simeng Qin, Zhiqiang Wang, Xiaojun Jia |