| 2026 | ACL | Know Thy Enemy: Securing LLMs Against Prompt Injection via Diverse Data Synthesis and Instruction-Level Chain-of-Thought Learning. | Zhiyuan Chang, Mingyang Li, Yuekai Huang, Ziyou Jiang, Xiaojun Jia, Qian Xiong, Junjie Wang, Zhaoyang Li, Qing Wang |
| 2026 | ACL | All Changes May Have Invariant Principles: Improving Ever-Shifting Harmful Meme Detection via Design Concept Reproduction. | Ziyou Jiang, Mingyang Li, Junjie Wang, Yuekai Huang, Jie Huang, Zhiyuan Chang, Zhaoyang Li, Qing Wang |
| 2025 | ACL | Mimicking the Familiar: Dynamic Command Generation for Information Theft Attacks in LLM Tool-Learning System. | Ziyou Jiang, Mingyang Li, Guowei Yang, Junjie Wang, Yuekai Huang, Zhiyuan Chang, Qing Wang |
| 2025 | EMNLP | One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems. | Zhiyuan Chang, Mingyang Li, Xiaojun Jia, Junjie Wang, Yuekai Huang, Ziyou Jiang, Yang Liu, Qing Wang |
| 2025 | EMNLP | Butterfly Effects in Toolchains: A Comprehensive Analysis of Failed Parameter Filling in LLM Tool-Agent Systems. | Qian Xiong, Yuekai Huang, Ziyou Jiang, Zhiyuan Chang, Yu Zheng, Tianhao Li, Mingyang Li |
| 2024 | ACL | Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues. | Zhiyuan Chang, Mingyang Li, Yi Liu, Junjie Wang, Qing Wang, Yang Liu |
| 2024 | EMNLP | Repairing Catastrophic-Neglect in Text-to-Image Diffusion Models via Attention-Guided Feature Enhancement. | Zhiyuan Chang, Mingyang Li, Junjie Wang, Yi Liu, Qing Wang, Yang Liu |
| 2023 | ICSE | Cross-Domain Requirements Linking via Adversarial-based Domain Adaptation. | Zhiyuan Chang, Mingyang Li, Qing Wang, Shoubin Li, Junjie Wang |