| 2026 | AAAI | Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimization. | Tiantian Liu, Hongwei Yao, Feng Lin, Tong Wu, Zhan Qin, Kui Ren |
| 2026 | AAAI | MAJIC: Markovian Adaptive Jailbreaking via Iterative Composition of Diverse Innovative Strategies. | Weiwei Qi, Shuo Shao, Wei Gu, Tianhang Zheng, Puning Zhao, Zhan Qin, Kui Ren |
| 2026 | ACL | Towards Identification and Intervention of Safety-Critical Parameters in Large Language Models. | Weiwei Qi, Zefeng Wu, Tianhang Zheng, Zikang Zhang, Xiaojun Jia, Zhan Qin, Kui Ren |
| 2026 | ICPR | AC | Yuchen Yang, Enhao Huang, Chunshu Xia, Bingrun Yang, Tongtong Pan, Zhiyu Zhang, Dong Dong, Zhan Qin |
| 2026 | NDSS | DUALBREACH: Efficient Dual-Jailbreaking via Target-Driven Initialization and Multi-Target Optimization. | Xinzhe Huang, Kedong Xiu, Tianhang Zheng, Churui Zeng, Wangze Ni, Zhan Qin, Kui Ren, Chun Chen |
| 2026 | NDSS | Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference. | Zhifan Luo, Shuo Shao, Su Zhang, Lijing Zhou, Yuke Hu, Chenxu Zhao, Zhihao Liu, Zhan Qin |
| 2026 | WWW | DualMind: Towards Understanding Cognitive-Affective Cascades in Public Opinion Dissemination via Multi-Agent Simulation. | Enhao Huang, Tongtong Pan, Shuhuai Zhang, Qishu Jin, Liheng Zheng, Kaichun Hu, Yiming Li, Zhan Qin, Kui Ren |
| 2026 | WWW | SJBP: A Platform to Launch a Novel Jailbreak Attack on Large Language Models Based on Content's Spatial Distribution. | Zhiyi Mou, Zeheng Qian, Tianfang Xiao, Wangze Ni, Weijie Sun, Lei Chen, Zhan Qin, Peng Cheng, Kui Ren |
| 2026 | WWW | Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation. | Shuo Shao, Yiming Li, Hongwei Yao, Yifei Chen, Yuchen Yang, Zhan Qin |
| 2026 | WWW | Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework. | Zhaoqi Wang, Daqing He, Zijian Zhang, Ye Liu, Jiamou Liu, Zhirui Zeng, Zhan Qin, Zhen Li, Xin Li, Hongwei Yao, Jincheng An, Yong Liu, Yi Li, Qi Sun, Xiulei Liu, Liehuang Zhu |
| 2026 | SP | DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling. | Boheng Li, Junjie Wang, Yiming Li, Zhiyang Hu, Leyi Qi, Jianshuo Dong, Run Wang, Han Qiu, Zhan Qin, Tianwei Zhang |
| 2026 | SP | PromptCOS: Towards Content-Only System Prompt Copyright Auditing for LLMs. | Yuchen Yang, Yiming Li, Hongwei Yao, Enhao Huang, Shuo Shao, Yuyi Wang, Zhibo Wang, Dacheng Tao, Zhan Qin |
| 2025 | ACL | DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing. | Yi Wang, Fenghua Weng, Sibei Yang, Zhan Qin, Minlie Huang, Wenjie Wang |
| 2025 | ACL | Don't Say No: Jailbreaking LLM by Suppressing Refusal. | Yukai Zhou, Jian Lou, Zhijie Huang, Zhan Qin, Sibei Yang, Wenjie Wang |
| 2025 | CCS | Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classification. | Yiling He, Junchi Lei, Zhan Qin, Kui Ren, Chun Chen |
| 2025 | ICLR | REFINE: Inversion-Free Backdoor Defense via Model Reprogramming. | Yukun Chen, Shuo Shao, Enhao Huang, Yiming Li, Pin-Yu Chen, Zhan Qin, Kui Ren |
| 2025 | ISSTA | On Benchmarking Code LLMs for Android Malware Analysis. | Yiling He, Hongyu She, Xingzhi Qian, Xinran Zheng, Zhuo Chen, Zhan Qin, Lorenzo Cavallaro |
| 2025 | NDSS | Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution. | Shuo Shao, Yiming Li, Hongwei Yao, Yiling He, Zhan Qin, Kui Ren |
| 2025 | NDSS | Delay-allowed Differentially Private Data Stream Release. | Xiaochen Li, Zhan Qin, Kui Ren, Chen Gong, Shuya Feng, Yuan Hong, Tianhao Wang |
| 2024 | CCS | SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution. | Zhongjie Ba, Jieming Zhong, Jiachen Lei, Peng Cheng, Qinglong Wang, Zhan Qin, Zhibo Wang, Kui Ren |
| 2024 | CCS | A Causal Explainable Guardrails for Large Language Models. | Zhixuan Chu, Yan Wang, Longfei Li, Zhibo Wang, Zhan Qin, Kui Ren |
| 2024 | CCS | ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach. | Yuke Hu, Jian Lou, Jiaqi Liu, Wangze Ni, Feng Lin, Zhan Qin, Kui Ren |
| 2024 | EMNLP | Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models. | Yue Xu, Xiuyuan Qi, Zhan Qin, Wenjie Wang |
| 2024 | ICASSP | PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models. | Hongwei Yao, Jian Lou, Zhan Qin |
| 2024 | ICLR | Towards Reliable and Efficient Backdoor Trigger Inversion via Decoupling Benign Features. | Xiong Xu, Kunzhe Huang, Yiming Li, Zhan Qin, Kui Ren |
| 2024 | SP | DPI: Ensuring Strict Differential Privacy for Infinite Data Streaming. | Shuya Feng, Meisam Mohammady, Han Wang, Xiaochen Li, Zhan Qin, Yuan Hong |
| 2024 | SP | Need for Speed: Taming Backdoor Attacks with Speed and Precision. | Zhuo Ma, Yilong Yang, Yang Liu, Tong Yang, Xinjing Liu, Teng Li, Zhan Qin |
| 2024 | SP | PromptCARE: Prompt Copyright Protection by Watermark Injection and Verification. | Hongwei Yao, Jian Lou, Zhan Qin, Kui Ren |
| 2023 | CCS | FINER: Enhancing State-of-the-art Classifiers with Feature Attribution to Facilitate Security Analysis. | Yiling He, Jian Lou, Zhan Qin, Kui Ren |
| 2023 | ICASSP | A Large-Scale Pretrained Deep Model for Phishing URL Detection. | Yanbin Wang, Weifan Zhu, Haitao Xu, Zhan Qin, Kui Ren, Wenrui Ma |
| 2023 | ICCV | MUter: Machine Unlearning on Adversarially Trained Models. | Junxu Liu, Mingsheng Xue, Jian Lou, Xiaoyu Zhang, Li Xiong, Zhan Qin |
| 2023 | ISSTA | DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity. | Zhuo Chen, Jie Liu, Yubo Hu, Lei Wu, Yajin Zhou, Yiling He, Xianhao Liao, Ke Wang, Jinku Li, Zhan Qin |
| 2023 | KDD | ShapleyFL: Robust Federated Learning Based on Shapley Value. | Qiheng Sun, Xiang Li, Jiayao Zhang, Li Xiong, Weiran Liu, Jinfei Liu, Zhan Qin, Kui Ren |
| 2023 | WWW | Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding. | Yuke Hu, Wei Liang, Ruofan Wu, Kai Xiao, Weiqiang Wang, Xiaochen Li, Jinfei Liu, Zhan Qin |
| 2022 | CCS | L-SRR: Local Differential Privacy for Location-Based Services with Staircase Randomized Response. | Han Wang, Hanbin Hong, Li Xiong, Zhan Qin, Yuan Hong |
| 2022 | ESORICS | SeInspect: Defending Model Stealing via Heterogeneous Semantic Inspection. | Xinjing Liu, Zhuo Ma, Yang Liu, Zhan Qin, Junwei Zhang, Zhuzhu Wang |
| 2022 | ICLR | Backdoor Defense via Decoupling the Training Process. | Kunzhe Huang, Yiming Li, Baoyuan Wu, Zhan Qin, Kui Ren |
| 2021 | ICCV | Feature Importance-aware Transferable Adversarial Attacks. | Zhibo Wang, Hengchang Guo, Zhifei Zhang, Wenxin Liu, Zhan Qin, Kui Ren |
| 2021 | ICML | From Local to Global Norm Emergence: Dissolving Self-reinforcing Substructures with Incremental Social Instruments. | Yiwei Liu, Jiamou Liu, Kaibin Wan, Zhan Qin, Zijian Zhang, Bakhadyr Khoussainov, Liehuang Zhu |
| 2020 | DAC | From Homogeneous to Heterogeneous: Leveraging Deep Learning based Power Analysis across Devices. | Fan Zhang, Bin Shao, Guorui Xu, Bolin Yang, Ziqi Yang, Zhan Qin, Kui Ren |
| 2020 | ICDCS | Towards Differentially Private Truth Discovery for Crowd Sensing Systems. | Yaliang Li, Houping Xiao, Zhan Qin, Chenglin Miao, Lu Su, Jing Gao, Kui Ren, Bolin Ding |
| 2020 | MOBICOM | Accelerometer-based smartphone eavesdropping. | Zhongjie Ba, Tianhang Zheng, Zhan Qin, Hanlin Yu, Liu Liu, Baochun Li, Xue Liu, Kui Ren |
| 2020 | NDSS | Learning-based Practical Smartphone Eavesdropping with Built-in Accelerometer. | Zhongjie Ba, Tianhang Zheng, Xinyu Zhang, Zhan Qin, Baochun Li, Xue Liu, Kui Ren |
| 2019 | CCS | Analyzing Subgraph Statistics from Extended Local Views with Decentralized Differential Privacy. | Haipei Sun, Xiaokui Xiao, Issa Khalil, Yin Yang, Zhan Qin, Wendy Hui Wang, Ting Yu |
| 2019 | ICDCS | CFP: Enabling Camera Fingerprint Concealment for Privacy-Preserving Image Sharing. | Zhongjie Ba, Xinyu Zhang, Zhan Qin, Kui Ren |
| 2019 | ICDCS | SPEED: Accelerating Enclave Applications Via Secure Deduplication. | Helei Cui, Huayi Duan, Zhan Qin, Cong Wang, Yajin Zhou |
| 2018 | CCS | SecSAKE: Towards Secure and Efficient Outsourcing of Clinical MRI Reconstruction. | Zihao Shan, Zhan Qin, Leslie Ying, Kui Ren |
| 2018 | KDD | An Efficient Two-Layer Mechanism for Privacy-Preserving Truth Discovery. | Yaliang Li, Chenglin Miao, Lu Su, Jing Gao, Qi Li, Bolin Ding, Zhan Qin, Kui Ren |
| 2017 | CCS | Generating Synthetic Decentralized Social Graphs with Local Differential Privacy. | Zhan Qin, Ting Yu, Yin Yang, Issa Khalil, Xiaokui Xiao, Kui Ren |
| 2017 | IWQoS | When privacy meets economics: Enabling differentially-private battery-supported meter reporting in smart grid. | Zijian Zhang, Wenqiang Cao, Zhan Qin, Liehuang Zhu, Zhengtao Yu, Kui Ren |
| 2016 | CCS | Heavy Hitter Estimation over Set-Valued Data with Local Differential Privacy. | Zhan Qin, Yin Yang, Ting Yu, Issa Khalil, Xiaokui Xiao, Kui Ren |
| 2016 | INFOCOM | RescueDP: Real-time spatio-temporal crowd-sourced data publishing with differential privacy. | Qian Wang, Yan Zhang, Xiao Lu, Zhibo Wang, Zhan Qin, Kui Ren |
| 2016 | SecureComm | SecWeb: Privacy-Preserving Web Browsing Monitoring with w-Event Differential Privacy. | Qian Wang, Xiao Lu, Yan Zhang, Zhibo Wang, Zhan Qin, Kui Ren |
| 2015 | SENSYS | Cloud-Enabled Privacy-Preserving Truth Discovery in Crowd Sensing Systems. | Chenglin Miao, Wenjun Jiang, Lu Su, Yaliang Li, Suxin Guo, Zhan Qin, Houping Xiao, Jing Gao, Kui Ren |
| 2014 | GLOBECOM | Privacy-preserving outsourcing of image global feature detection. | Zhan Qin, Jingbo Yan, Kui Ren, Chang Wen Chen, Cong Wang, Xinwen Fu |
| 2014 | INFOCOM | AcousAuth: An acoustic-based mobile application for user authentication. | Si Chen, Muyuan Li, Zhan Qin, Bingsheng Zhang, Kui Ren |
| 2014 | INFOCOM | Private image computation: The case of cloud based privacy-preserving SIFT. | Zhan Qin, Jingbo Yan, Kui Ren |