| 2025 | NDSS | Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executables. | Yanzuo Chen, Zhibo Liu, Yuanyuan Yuan, Sihang Hu, Tianxiang Li, Shuai Wang |
| 2025 | NDSS | BitShield: Defending Against Bit-Flip Attacks on DNN Executables. | Yanzuo Chen, Yuanyuan Yuan, Zhibo Liu, Sihang Hu, Tianxiang Li, Shuai Wang |
| 2025 | SP | CipherSteal: Stealing Input Data from TEE-Shielded Neural Networks with Ciphertext Side Channels. | Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su |
| 2024 | CCS | DeepCache: Revisiting Cache Side-Channel Attacks in Deep Neural Networks Executables. | Zhibo Liu, Yuanyuan Yuan, Yanzuo Chen, Sihang Hu, Tianxiang Li, Shuai Wang |
| 2024 | CCS | HyperTheft: Thieving Model Weights from TEE-Shielded Neural Networks via Ciphertext Side Channels. | Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su |
| 2023 | NDSS | OBSan: An Out-Of-Bound Sanitizer to Harden DNN Executables. | Yanzuo Chen, Yuanyuan Yuan, Shuai Wang |