| 2026 | SP | PromptLocate: Localizing Prompt Injection Attacks. | Yuqi Jia, Yupei Liu, Zedian Shao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2026 | SACMAT | A Critical Evaluation of Defenses against Prompt Injection Attacks: [Dataset/Tool Paper]. | Yuqi Jia, Zedian Shao, Yupei Liu, Jinyuan Jia, Dawn Song, Neil Gong |
| 2025 | AAAI | TrojanDec: Data-free Detection of Trojan Inputs in Self-supervised Learning. | Yupei Liu, Yanting Wang, Jinyuan Jia |
| 2025 | SP | DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks. | Yupei Liu, Yuqi Jia, Jinyuan Jia, Dawn Song, Neil Zhenqiang Gong |
| 2025 | SENSYS | SecureGaze: Defending Gaze Estimation Against Backdoor Attacks. | Lingyu Du, Yupei Liu, Jinyuan Jia, Guohao Lan |
| 2022 | AAAI | Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks. | Jinyuan Jia, Yupei Liu, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2022 | CCS | StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning. | Yupei Liu, Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong |
| 2022 | SP | BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning. | Jinyuan Jia, Yupei Liu, Neil Zhenqiang Gong |