(Selected Publications)
2024
Ring of Gyges: Accountable Anonymous Broadcast via Secret-Shared Shuffle
NDSS 2025
(Accepted to appear)
No-box Universal Adversarial Perturbations against Image Classifiers via Artificial Textures
IEEE Transactions on Information Forensics and Security 2024
(Accepted to appear)
ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization
NeurIPS 2024
(Accepted to appear)
BEOWULF: Mitigating Model Extraction Attacks Via Reshaping Decision Regions
CCS 2024
(Accepted to appear)
Zero-Query Adversarial Attack on Black-box Automatic Speech Recognition Systems
CCS 2024
(Accepted to appear)
ClusterPoison: Poisoning Attacks on Recommender Systems with Limited Fake Users
IEEE Communications Magazine 2024
(Accepted to appear)
Securing Face Liveness Detection on Mobile Devices Using Unforgeable Lip Motion Patterns
IEEE Transactions on Mobile Computing 2024
More Simplicity for Trainers, More Opportunity for Attackers: Black-Box Attacks on Speaker Recognition Systems by Inferring Feature Extractor
USENIX Security 2024
Perception-driven Imperceptible Adversarial Attack against Decision-based Black-box Models
IEEE Transactions on Information Forensics and Security 2024
From Hardware Fingerprint to Access Token:
Enhancing the Authentication on IoT Devices
NDSS 2024
PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound
NDSS 2024
PALETTE: Physically-Realizable Backdoor Attacks Against Video Recognition Models
IEEE Transactions on Dependable and Secure Computing 2024
KerbNet: A QoE-aware Kernel-Based Backdoor Attack Framework
IEEE Transactions on Dependable and Secure Computing 2024
FingerPattern: Securing Pattern Lock via Fingerprint-Dependent Friction Sound
IEEE Transactions on Mobile Computing 2023
FastTextDodger: Decision-based Adversarial Attack against Black-box NLP Models with Extremely High Efficiency
IEEE Transactions on Information Forensics and Security 2024
2023
Revisiting Adversarial Robustness Distillation from the Perspective of Robust Fairness
NeurIPS 2023
Improving Adversarial Transferability with Ghost
Samples
ECAI 2023
Interpreting Adversarial Examples in Deep Learning: A Review
ACM Computing Surveys 2023
A GAN-based Defense Framework against Model Inversion Attacks
IEEE Transactions on Information Forensics and Security 2023
AdvDDoS: Zero-Query Adversarial Attacks against Commercial Speech Recognition Systems
IEEE Transactions on Information Forensics and Security 2023
KENKU: Towards Efficient and Stealthy Black-box Adversarial Attacks against ASR Systems
USENIX Security 2023
MAGO: Maliciously Secure Subgraph Counting on Decentralized Social Graphs
IEEE Transactions on Information Forensics and Security 2023
SwiftTheft: A Time-efficient Model Extraction Attack Framework against Cloud-based Deep Neural Networks
Chinese Journal of Electronics 2023
Redeem Myself: Purifying Backdoors in Deep Learning Models using Self Attention Distillation
S&P 2023
Data Poisoning and Backdoor Attacks on Audio Intelligence Systems
IEEE Communications Magazine 2023
Spoofing Attacks and Anti-Spoofing Methods for Face Authentication over Smartphones
IEEE Communications Magazine 2023
Adversarial Network Pruning by Filter Robustness Estimation
ICASSP 2023
(Top 3% Paper Recognition) (Best Student Paper Nomination)
NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks using GAN-generated Fake Samples
TheWebConf 2023 (WWW 2023)
Kaleidoscope: Physical Backdoor Attacks against Deep Neural Networks with RGB Filters
IEEE Transactions on Dependable and Secure Computing 2023
PressPIN: Enabling Secure PIN Authentication on Mobile Devices via Structure-Borne Sounds
IEEE Transactions on Dependable and Secure Computing 2023
SoundID: Securing Mobile Two-Factor Authentication via Acoustic Signals
IEEE Transactions on Dependable and Secure Computing 2023
Where Are The Dots: Hardening Face Authentication on Smartphones with Unforgeable Eye Movement Patterns
IEEE Transactions on Information Forensics and Security 2023
Securing Liveness Detection for Voice Authentication via Pop Noises
IEEE Transactions on Dependable and Secure Computing 2023
2022
面向机器学习模型安全的测试与修复
电子学报 (Acta Electronica Sinica) 2022
Verifying the Quality of Outsourced Training on Clouds
ESORICS 2022
Private Data Inference Attacks against Cloud: Model, Technologies, and Research Directions
IEEE Communications Magazine 2022
Towards Black-Box Adversarial Attacks on Interpretable Deep Learning Systems
ICME 2022
Safe Exploration in Wireless Security: A Safe Reinforcement Learning Algorithm with Hierarchical Structure
IEEE Transactions on Information Forensics and Security 2022
FairNeuron: Improving Deep Neural Network Fairness with Adversary Games on Selective Neurons
ICSE 2022
Towards Personalized Privacy-Preserving Truth Discovery Over Crowdsourced Data Streams
IEEE/ACM Transactions on Networking 2022
Dynamic Network Function Enforcement via Joint Flow and Function Scheduling
IEEE Transactions on Information Forensics and Security 2022
GraphShield: Dynamic Large Graphs for Secure Queries with Forward Privacy
IEEE Transactions on Knowledge and Data Engineering 2022
Optimizing Privacy-Preserving Outsourced Convolutional Neural Network Predictions
IEEE Transactions on Dependable and Secure Computing 2022
Hear Sign Language: A Real-time End-to-End Sign Language Recognition System
IEEE Transactions on Mobile Computing 2022
Coordinated Backdoor Attacks against Federated Learning with Model-Dependent Triggers
IEEE Network 2022
2021
Rethinking Adversarial Examples Exploiting
Frequency-Based Analysis
ICICS 2021
(Won the Best Paper Award)
Building In-the-Cloud Network Functions: Security and Privacy Challenges
Proceedings of the IEEE 2021
Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information
CCS 2021
Anti-Distillation Backdoor Attacks: Backdoors Can Really Survive in Knowledge Distillation
MM 2021
SEAR: Secure and Efficient Aggregation for Byzantine-Robust Federated Learning
IEEE Transactions on Dependable and Secure Computing 2021
CARTL: Cooperative Adversarially-Robust Transfer Learning
ICML 2021 (Long Oral Presentation)
Defense-Resistant Backdoor Attacks against Deep Neural Networks in Outsourced Cloud Environment
IEEE Journal on Selected Areas in Communications 2021
微信恶意账号检测研究
计算机研究与发展 (Journal of Computer Research and Development) 2021
Recent Advances in Adversarial Training for Adversarial Robustness
IJCAI SURVEY 2021
Joint Knowledge Pruning and Recurrent Graph Convolution for News Recommendation
SIGIR 2021
VeriML: Enabling Integrity Assurances and Fair Payments for Machine Learning as a Service
IEEE Transactions on Parallel and Distributed Systems 2021
区块链网络安全保障：攻击与防御
通信学报 (Journal on Communications) 2021
针对深度学习模型的对抗性攻击与防御
计算机研究与发展 (Journal of Computer Research and Development) 2021
Privacy-Preserving Polynomial Evaluation over Spatio-Temporal Data on An Untrusted Cloud Server
DASFAA 2021
BOSSA: A Decentralized System for Proofs of Data Retrievability and Replication
IEEE Transactions on Parallel and Distributed Systems 2021
Stealing Your Android Patterns via Acoustic Signals
IEEE Transactions on Mobile Computing 2021
Towards Query-efficient Adversarial Attacks against Automatic Speech Recognition Systems
IEEE Transactions on Information Forensics and Security 2021
Invisible Adversarial Attack against Deep Neural Networks: An Adaptive Penalization Approach
IEEE Transactions on Dependable and Secure Computing 2021
Towards Private and Scalable Cross-Media Retrieval
IEEE Transactions on Dependable and Secure Computing 2021
Augmenting Encrypted Search: A Decentralized Service Realization with Enforced Execution
IEEE Transactions on Dependable and Secure Computing 2021
2020
Silhouette: Efficient Cloud Configuration Exploration for Large-Scale Analytics
IEEE Transactions on Parallel and Distributed Systems 2020
ELLG: Explainable Lesion Learning and Generation for Diabetic Retinopathy Detection
IJCAI-DCM 2020
(Won the Best Paper Award)
Model Extraction Attacks and Defenses on Cloud-Based Machine Learning Models
IEEE Communications Magazine 2020
Secure Prediction of Neural Network in the Cloud
IEEE Network 2020
Collaborative Fairness in Federated Learning
FL-IJCAI 2020
(Won the Best Paper Award)
Deep Learning on Mobile and Embedded Devices: State-of-the-Art, Challenges and Future Directions
ACM Computing Surveys 2020
Towards Compression-Resistant Privacy-Preserving Photo Sharing on Social Networks
MobiHoc 2020
Towards Demand-driven Dynamic Incentive for Mobile Crowdsensing Systems
IEEE Transactions on Wireless Communications 2020
Shielding Collaborative Learning: Mitigating Poisoning Attacks through Client-Side Detection
IEEE Transactions on Dependable and Secure Computing 2020
Deep Learning-Based Gait Recognition Using Smartphones in the Wild
IEEE Transactions on Information Forensics and Security 2020
Deep Domain Adaptation with Differential Privacy
IEEE Transactions on Information Forensics and Security 2020
Analyzing User-Level Privacy Attack Against Federated Learning
IEEE Journal on Selected Areas in Communications 2020
Towards Privacy-assured and Lightweight On-chain Auditing of Decentralized Storage
ICDCS 2020
Backdoor Attacks and Defenses for Deep Neural Networks in Outsourced Cloud Environments
IEEE Network 2020
SocialRecruiter: Dynamic Incentive Mechanism for Mobile Crowdsourcing Worker Recruitment with Social Networks
IEEE Transactions on Mobile Computing 2020
Towards Personalized Task-Oriented Worker Recruitment in Mobile Crowdsensing
IEEE Transactions on Mobile Computing 2020
EncELC: Hardening and Enriching Ethereum Light Clients with Trusted Enclaves
INFOCOM 2020
PriRadar: A Privacy-Preserving Framework for Spatial Crowdsourcing
IEEE Transactions on Information Forensics and Security 2020
The Security of Autonomous Driving: Threats, Defenses, and Future Directions
Proceedings of the IEEE 2020
(ESI Highly Cited Paper)
Privacy-Preserving Collaborative Deep Learning with Unreliable Participants
IEEE Transactions on Information Forensics and Security 2020
2019
False Data Injection Attacks against Smart Gird State Estimation: Construction, Detection and Defense
Science China Technological Sciences 2019
Robust Lane Detection from Continuous Driving Scenes Using Deep Neural Networks
IEEE Transactions on Vehicular Technology 2019
Towards A Ledger-assisted Architecture for Secure
Query Processing over Distributed IoT Data
DSC 2019
(Won the Best Paper Award)
LVID: A Multimodal Biometrics Authentication System on Smartphones
IEEE Transactions on Information Forensics and Security 2019
When Mobile Crowdsensing Meets Privacy
IEEE Communications Magazine 2019
advPattern: Physical-world Attacks on Deep Person Re-identification via Adversarially Transformable Patterns
ICCV 2019
Adversarial Examples for Automatic Speech Recognition: Attacks and Countermeasures
IEEE Communications Magazine 2019
Hidden Voice Commands: Attacks and Defenses on the VCS of Autonomous Driving Cars
IEEE Wireless Communications 2019
ARMOR: A Secure Combinatorial Auction for Heterogeneous Spectrum
IEEE Transactions on Mobile Computing 2019
Note: has corrected some typos of the journal version published in IEEE TMC 2019.
CReam: A Smart Contract Enabled Collusion-Resistant e-Auction
IEEE Transactions on Information Forensics and Security 2019
Privacy-preserving Crowd-sourced Statistical Data Publishing with An Untrusted Server
IEEE Transactions on Mobile Computing 2019
(ESI Highly Cited Paper)
Personalized Privacy-preserving Task Allocation for Mobile Crowdsensing
IEEE Transactions on Mobile Computing 2019
(ESI Highly Cited Paper)
Privacy-Preserving and Truthful Double Auction for Heterogeneous Spectrum
IEEE/ACM Transactions on Networking 2019
VoicePop: A Pop Noise based Anti-spoofing System for Voice Authentication on Smartphones
INFOCOM 2019
Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning
INFOCOM 2019
A Context-Aware User-Item Representation Learning for Item Recommendation
ACM Transactions on Information Systems 2019
DeepCrack: Learning Hierarchical Convolutional Features for Crack Detection
IEEE Transactions on Image Processing 2019
Dolphin: Real-Time Hidden Acoustic Signal Capture with Smartphones
IEEE Transactions on Mobile Computing 2019
PROST: Privacy-Preserving and Truthful Online Double Auction for Spectrum Allocation
IEEE Transactions on Information Forensics and Security 2019
Task Bundling Based Incentive for Location-dependent Mobile Crowdsourcing
IEEE Communications Magazine 2019
2018
Enabling Online Robust Barcode-based Visible Light Communication with Realtime Feedback
IEEE Transactions on Wireless Communications 2018
Privacy-Preserving Collaborative Model Learning: The Case of Word Vector Training
IEEE Transactions on Knowledge and Data Engineering 2018
Outsourced Biometric Identification with Privacy
IEEE Transactions on Information Forensics and Security 2018
Privacy-preserving Indexing and Query Processing for Secure Dynamic Cloud Storage
IEEE Transactions on Information Forensics and Security 2018
Ensuring Minimum Requirement in Matching-based Spectrum Allocation
IEEE Transactions on Mobile Computing 2018
Enabling Generic, Verifiable, and Secure Data Search in Cloud Services
IEEE Transactions on Parallel and Distributed Systems 2018
Differentially Private Distributed Online Learning
IEEE Transactions on Knowledge and Data Engineering 2018
Dating Ancient Paintings of Mogao Grottoes Using Deeply Learnt Visual Codes
SCIENCE CHINA Information Sciences 2018
[PDF]
Pay On-demand: Dynamic Incentive and Task Selection for Location-dependent Mobile Crowdsensing Systems
ICDCS 2018
[PDF]
Real-time and Spatio-temporal Crowd-sourced Social Network Data Publishing with Differential Privacy
IEEE Transactions on Dependable and Secure Computing 2018
Dynamic Proofs of Retrievability for Coded Cloud Storage Systems
IEEE Transactions on Services Computing 2018
Searchable Encryption over Feature-Rich Data
IEEE Transactions on Dependable and Secure Computing 2018
Robust Gait Recognition by Integrating Inertial and RGBD Sensors
IEEE Transactions on Cybernetics 2018
InstantCryptoGram: Secure Image Retrieval Service
INFOCOM 2018
(Won the Best-in-Session Presentation Award)
Searching an Encrypted Cloud Meets Blockchain: A Decentralized, Reliable and Fair Realization
INFOCOM 2018
Technical Report
[PDF]
InPrivate Digging: Enabling Tree-based Distributed Data Mining with Differential Privacy
INFOCOM 2018
Deep User Modeling for Content-based Event Recommendation in Event-based Social Networks
INFOCOM 2018
Non-Interactive Privacy-Preserving Truth Discovery in Crowd Sensing Applications
INFOCOM 2018
2017
Publicly Verifiable Computation of Polynomials over Outsourced Data with Multiple Sources
IEEE Transactions on Information Forensics and Security 2017
You Can Hear But You Cannot Steal: Defending against Voice Impersonation Attacks on Smartphones
ICDCS 2017
(Won the Best Student Paper Award)
THEMIS: Collusion-Resistant and Fair Pricing Spectrum Auction Under Dynamic Supply
IEEE Transactions on Mobile Computing 2017
SecGDB: Graph Encryption for Exact Shortest Distance Queries with Efficient Updates
Financial Cryptography and Data Security 2017
Learning Privately: Privacy-Preserving Canonical Correlation Analysis for Cross-Media Retrieval
INFOCOM 2017
Exploiting Social Influence for Context-Aware Event Recommendation in Event-based Social Networks
INFOCOM 2017
Local Pattern Collocations Using Regional Co-occurrence Factorization
IEEE Transactions on Multimedia 2017
2016
Messages Behind the Sound: Real-Time Hidden Acoustic Signal Capture with Smartphones
MobiCom 2016
Jamming-Resistant Multiradio Multichannel Opportunistic Spectrum Access in Cognitive Radio Networks
IEEE Transactions on Vehicular Technology 2016
Securing Fast Learning! Ridge Regression over Encrypted Big Data
TrustCom 2016
(Won the Best Paper Award)
Securing SIFT: Privacy-preserving Outsourcing Computation of Feature Extractions Over Encrypted Image Data
IEEE Transactions on Image Processing 2016
Catch Me in the Dark: Effective Privacy-preserving Outsourcing of Feature Extractions over Image Data
INFOCOM 2016
RescueDP: Real-time Spatio-temporal Crowd-sourced Data Publishing with Differential Privacy
INFOCOM 2016
2015
Deep Learning Based Feature Selection for Remote Sensing Scene Classification
IEEE Geoscience and Remote Sensing Letters 2015
(ESI Highly Cited Paper)
CloudBI: Practical Privacy-Preserving Outsourcing of Biometric Identification in the Cloud
ESORICS 2015
Note: the has appeared in IEEE TIFS 2018, and presents significantly improved constructions
(for single-server and multi-server solutions) and a complete rewrite and evaluation.
Note: the has appeared in IEEE TIFS 2018, and presents significantly improved constructions
(for single-server and multi-server solutions) and a complete rewrite and evaluation.
Walls Have Ears! Opportunistically Communicating Secret Messages Over the Wiretap Channel: from Theory to Practice
CCS 2015
2014
Securing Emerging Short Range Wireless Communications: The State of the Art
IEEE Wireless Communications 2014
2013
Opportunistic Spectrum Access: from Stochastic Channels to Non-Stochastic Channels
IEEE Wireless Communications 2013
Harnessing the Cloud for Securely Outsourcing Large-Scale Systems of Linear Equations
IEEE Transactions on Parallel and Distributed Systems 2013
Privacy-Preserving Public Auditing for Secure Cloud Storage
IEEE Transactions on Computers 2013
Popular Articles of IEEE TC (Top 1 most frequently downloaded articles, as of Nov. 2016)
Most Cited Articles of IEEE TC (Top 4 most frequently cited articles, as of Nov. 2016)
(ESI Highly Cited Paper)
Popular Articles of IEEE TC (Top 1 most frequently downloaded articles, as of Nov. 2016)
Most Cited Articles of IEEE TC (Top 4 most frequently cited articles, as of Nov. 2016)
2012
Cooperative Secret Key Generation from Phase Estimation in Narrowband Fading Channels
IEEE Journal on Selected Areas in Communications 2012
Towards Optimal Adaptive UFH-Based Anti-Jamming Wireless Communication
IEEE Journal on Selected Areas in Communications 2012
Toward Secure and Dependable Storage Services in Cloud Computing
IEEE Transactions on Service Computing 2012
(ESI Highly Cited Paper)
Security Challenges for the Public Cloud
IEEE Internet Computing 2012
(ESI Highly Cited Paper)
2011
Enabling Public Auditability and Data Dynamics for Storage Security in Cloud Computing
IEEE Transactions on Parallel and Distributed Systems 2011
(ESI Highly Cited Paper)
Dependable and Secure Sensor Data Storage with Dynamic Integrity Assurance
ACM Transactions on Sensor Networks 2011
Anti-Jamming Communication in Cognitive Radio Networks with Unknown Channel Statistics
ICNP 2011
(Won the Best Paper Award)
Fast and Scalable Secret Key Generation Exploiting Channel Phase Randomness in Wireless Networks
INFOCOM 2011
Secret Key Generation Exploiting Channel Characteristics in Wireless Communications
IEEE Wireless Communications 2011
2010
Privacy-Preserving Public Auditing for Data Storage Security in Cloud Computing
INFOCOM 2010
2009
Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing
ESORICS 2009
Ensuring Data Storage Security in Cloud Computing
IWQoS 2009