| 2026 | AAAI | DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks. | Yunfei Yang, Xiaojun Chen, Yuexin Xuan, Zhendong Zhao, Xin Zhao, He Li |
| 2026 | DASFAA | Buster: Implanting Semantic Backdoor Into Text Encoder to Mitigate NSFW Content Generation. | Xin Zhao, Xiaojun Chen, Yuexin Xuan, Zhendong Zhao, Xinfeng Li, Xiaojun Jia, Xiaofeng Wang |
| 2025 | ICASSP | Take Attention Inside: Neighbor Pair Graph Contrastive Learning. | Bisheng Tang, Xiaojun Chen, Shaopu Wang, Yuexin Xuan, Zhendong Zhao |
| 2024 | ACSAC | Lightweight Secure Aggregation for Personalized Federated Learning with Backdoor Resistance. | Tingyu Fan, Xiaojun Chen, Ye Dong, Xudong Chen, Yuexin Xuan, Weizhan Jing |
| 2024 | IJCNN | STMS: An Out-Of-Distribution Model Stealing Method Based on Causality. | Yunfei Yang, Xiaojun Chen, Zhendong Zhao, Yuexin Xuan, Bisheng Tang, Xiaoying Li |
| 2023 | ECAI | Unsupervised Graph Structure-Assisted Personalized Federated Learning. | Xiaoying Li, Xiaojun Chen, Bisheng Tang, Shaopu Wang, Yuexin Xuan, Zhendong Zhao |
| 2022 | CVPR | DEFEAT: Deep Hidden Feature Backdoor Attacks by Imperceptible Perturbation and Latent Representation Constraints. | Zhendong Zhao, Xiaojun Chen, Yuexin Xuan, Ye Dong, Dakui Wang, Kaitai Liang |
| 2022 | IJCNN | ACTSS: Input Detection Defense against Backdoor Attacks via Activation Subset Scanning. | Yuexin Xuan, Xiaojun Chen, Zhendong Zhao, Yangyang Ding, Jianming Lv |