| 2025 | ICCV | ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers. | Hanwen Cao, Haobo Lu, Xiaosen Wang, Kun He |
| 2025 | ICCV | Ideator: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves. | Ruofan Wang, Juncheng Li, Yixu Wang, Bo Wang, Xiaosen Wang, Yan Teng, Yingchun Wang, Xingjun Ma, Yu-Gang Jiang |
| 2024 | CVPR | Boosting Adversarial Transferability by Block Shuffle and Rotation. | Kunyu Wang, Xuanran He, Wenxuan Wang, Xiaosen Wang |
| 2024 | CVPR | MMA-Diffusion: MultiModal Attack on Diffusion Models. | Yijun Yang, Ruiyuan Gao, Xiaosen Wang, Tsung-Yi Ho, Nan Xu, Qiang Xu |
| 2023 | BMVC | Diversifying the High-level Features for better Adversarial Transferability. | Zhiyuan Wang, Zeliang Zhang, Siyuan Liang, Xiaosen Wang |
| 2023 | CVPR | Improving the Transferability of Adversarial Samples by Path-Augmented Method. | Jianping Zhang, Jen-tse Huang, Wenxuan Wang, Yichen Li, Weibin Wu, Xiaosen Wang, Yuxin Su, Michael R. Lyu |
| 2023 | ICCV | Structure Invariant Transformation for better Adversarial Transferability. | Xiaosen Wang, Zeliang Zhang, Jianping Zhang |
| 2022 | ECCV | Triangle Attack: A Query-Efficient Decision-Based Adversarial Attack. | Xiaosen Wang, Zeliang Zhang, Kangheng Tong, Dihong Gong, Kun He, Zhifeng Li, Wei Liu |
| 2022 | EMNLP | TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack. | Zhen Yu, Xiaosen Wang, Wanxiang Che, Kun He |
| 2022 | UAI | Robust textual embedding against word-level adversarial attacks. | Yichen Yang, Xiaosen Wang, Kun He |
| 2022 | UAI | Detecting textual adversarial examples through randomized substitution and vote. | Xiaosen Wang, Yifeng Xiong, Kun He |
| 2021 | AAAI | Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks. | Xiaosen Wang, Yichen Yang, Yihe Deng, Kun He |
| 2021 | BMVC | Boosting Adversarial Transferability through Enhanced Momentum. | Xiaosen Wang, Jiadong Lin, Han Hu, Jingdong Wang, Kun He |
| 2021 | CVPR | Enhancing the Transferability of Adversarial Attacks Through Variance Tuning. | Xiaosen Wang, Kun He |
| 2021 | ICCV | Admix: Enhancing the Transferability of Adversarial Attacks. | Xiaosen Wang, Xuanran He, Jingdong Wang, Kun He |
| 2021 | UAI | Natural language adversarial defense through synonym encoding. | Xiaosen Wang, Jin Hao, Yichen Yang, Kun He |