| 2025 | AAAI | FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts. | Yichen Gong, Delong Ran, Jinyuan Liu, Conglei Wang, Tianshuo Cong, Anyu Wang, Sisi Duan, Xiaoyun Wang |
| 2025 | AAAI | CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers. | Jingyi Zheng, Tianyi Hu, Tianshuo Cong, Xinlei He |
| 2025 | ACL | Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models. | Sibo Yi, Tianshuo Cong, Xinlei He, Qi Li, Jiaxing Song |
| 2025 | NDSS | Safety Misalignment Against Large Language Models. | Yichen Gong, Delong Ran, Xinlei He, Tianshuo Cong, Anyu Wang, Xiaoyun Wang |
| 2025 | SP | PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning. | Zhen Sun, Tianshuo Cong, Yule Liu, Chenhao Lin, Xinlei He, Rongmao Chen, Xingshuo Han, Xinyi Huang |
| 2024 | SP | Test-Time Poisoning Attacks Against Test-Time Adaptation Models. | Tianshuo Cong, Xinlei He, Yun Shen, Yang Zhang |
| 2022 | CCS | SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders. | Tianshuo Cong, Xinlei He, Yang Zhang |