Senior2Local: A Machine Learning Based Intrusion Detection Method for VANETs. - Yi Zeng 005; Meikang Qiu; Zhong Ming 001; Meiqin Liu (SmartCom, 2018)

DeepVCM: A Deep Learning Based Intrusion Detection Method in VANET. - Yi Zeng 005; Meikang Qiu; Dan Zhu; Zhihao Xue; Jian Xiong 001; Meiqin Liu (BigDataSecurity/HPSC/IDS, 2019)

V-PSC: A Perturbation-Based Causative Attack Against DL Classifiers' Supply Chain in VANET. - Yi Zeng 005; Meikang Qiu; Jingqi Niu; Yanxin Long; Jian Xiong 001; Meiqin Liu (CSE/EUC, 2019)

Joint Energy and Spectrum Efficient Virtual Optical Network embedding in EONs. - Wenting Wei; Huaxi Gu; Achille Pattavina; Jiru Wang; Yi Zeng 005 (HPSR, 2019)

Using Adversarial Examples to Bypass Deep Learning Based URL Detection System. - Wencheng Chen; Yi Zeng 005; Meikang Qiu (SmartCloud, 2019)

$Deep-Full-Range$ : A Deep Learning Based Network Encrypted Traffic Classification and Intrusion Detection Framework. - Yi Zeng 005; Huaxi Gu; Wenting Wei; Yantao Guo (IEEE Access, 2019)

TEST: an End-to-End Network Traffic Examination and Identification Framework Based on Spatio-Temporal Features Extraction. - Yi Zeng 005; Zihao Qi; Wencheng Chen; Yanzhe Huang; Xingxin Zheng; Han Qiu 001 (CoRR, 2019)

A Data Augmentation-Based Defense Method Against Adversarial Attacks in Neural Networks. - Yi Zeng 005; Han Qiu 001; Gérard Memmi; Meikang Qiu (ICA3PP (2), 2020)

Mitigating Advanced Adversarial Attacks with More Advanced Gradient Obfuscation Techniques. - Han Qiu 001; Yi Zeng 005; Qinkai Zheng; Tianwei Zhang 004; Meikang Qiu; Gérard Memmi (CoRR, 2020)

The Hidden Vulnerability of Watermarking for Deep Neural Networks. - Shangwei Guo; Tianwei Zhang 004; Han Qiu 001; Yi Zeng 005; Tao Xiang 001; Yang Liu 003 (CoRR, 2020)

FenceBox: A Platform for Defeating Adversarial Examples with Data Augmentation Techniques. - Han Qiu 001; Yi Zeng 005; Tianwei Zhang 004; Yong Jiang; Meikang Qiu (CoRR, 2020)

Optimizing energy and spectrum efficiency of virtual optical network embedding in elastic optical networks. - Wenting Wei; Huaxi Gu; Achille Pattavina; Jiru Wang; Yi Zeng 005 (Opt. Switch. Netw., 2020)

DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation. - Han Qiu 001; Yi Zeng 005; Shangwei Guo; Tianwei Zhang 004; Meikang Qiu; Bhavani Thuraisingham (AsiaCCS, 2021)

Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective. - Yi Zeng 005; Won Park; Z. Morley Mao; Ruoxi Jia 001 (ICCV, 2021)

Fine-tuning Is Not Enough: A Simple yet Effective Watermark Removal Attack for DNN Models. - Shangwei Guo; Tianwei Zhang 004; Han Qiu 001; Yi Zeng 005; Tao Xiang 001; Yang Liu 003 (IJCAI, 2021)

A Unified Framework for Task-Driven Data Quality Management. - Tianhao Wang 013; Yi Zeng 005; Ming Jin 002; Ruoxi Jia 001 (CoRR, 2021)

Adversarial Unlearning of Backdoors via Implicit Hypergradient. - Yi Zeng 005; Si Chen; Won Park; Zhuoqing Mao 001; Ming Jin 002; Ruoxi Jia 001 (ICLR, 2022)

CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks. - Xuanli He; Qiongkai Xu; Yi Zeng 005; Lingjuan Lyu; Fangzhao Wu; Jiwei Li 001; Ruoxi Jia 001 (NeurIPS, 2022)

How to Sift Out a Clean Data Subset in the Presence of Data Poisoning? - Yi Zeng 005; Minzhou Pan; Himanshu Jahagirdar; Ming Jin 002; Lingjuan Lyu; Ruoxi Jia 001 (CoRR, 2022)

Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information. - Yi Zeng 005; Minzhou Pan; Hoang Anh Just; Lingjuan Lyu; Meikang Qiu; Ruoxi Jia 001 (CCS, 2023)

LAVA: Data Valuation without Pre-Specified Learning Algorithms. - Hoang Anh Just; Feiyang Kang; Tianhao Wang 013; Yi Zeng 005; Myeongseob Ko; Ming Jin 002; Ruoxi Jia 001 (ICLR, 2023)

Towards Robustness Certification Against Universal Perturbations. - Yi Zeng 005; Zhouxing Shi; Ming Jin 002; Feiyang Kang; Lingjuan Lyu; Cho-Jui Hsieh; Ruoxi Jia 001 (ICLR, 2023)

Revisiting Data-Free Knowledge Distillation with Poisoned Teachers. - Junyuan Hong; Yi Zeng 005; Shuyang Yu; Lingjuan Lyu; Ruoxi Jia 001; Jiayu Zhou (ICML, 2023)

Where Did I Come From? Origin Attribution of AI-Generated Images. - Zhenting Wang; Chen Chen 043; Yi Zeng 005; Lingjuan Lyu; Shiqing Ma (NeurIPS, 2023)

ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms. - Minzhou Pan; Yi Zeng 005; Lingjuan Lyu; Xue Lin; Ruoxi Jia 001 (USENIX Security Symposium, 2023)

Meta-Sift: How to Sift Out a Clean Subset in the Presence of Data Poisoning? - Yi Zeng 005; Minzhou Pan; Himanshu Jahagirdar; Ming Jin 002; Lingjuan Lyu; Ruoxi Jia 001 (USENIX Security Symposium, 2023)

LAVA: Data Valuation without Pre-Specified Learning Algorithms. - Hoang Anh Just; Feiyang Kang; Jiachen T. Wang; Yi Zeng 005; Myeongseob Ko; Ming Jin 002; Ruoxi Jia 001 (CoRR, 2023)

Alteration-free and Model-agnostic Origin Attribution of Generated Images. - Zhenting Wang; Chen Chen 043; Yi Zeng 005; Lingjuan Lyu; Shiqing Ma (CoRR, 2023)

Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning. - Shuyang Yu; Junyuan Hong; Yi Zeng 005; Fei Wang; Ruoxi Jia 001; Jiayu Zhou (CoRR, 2023)

Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion. - Si Chen; Yi Zeng 005; Won Park; Jiachen T. Wang; Xun Chen; Lingjuan Lyu; Zhuoqing Mao 001; Ruoxi Jia 001 (Trans. Mach. Learn. Res., 2023)

How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs. - Yi Zeng 005; Hongpeng Lin; Jingwen Zhang; Diyi Yang; Ruoxi Jia 001; Weiyan Shi (ACL (1), 2024)

Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To! - Xiangyu Qi; Yi Zeng 005; Tinghao Xie; Pin-Yu Chen; Ruoxi Jia 001; Prateek Mittal; Peter Henderson 002 (ICLR, 2024)

Position: A Safe Harbor for AI Evaluation and Red Teaming. - Shayne Longpre; Sayash Kapoor; Kevin Klyman; Ashwin Ramaswami; Rishi Bommasani; Borhane Blili-Hamelin; Yangsibo Huang; Aviya Skowron; Zheng Xin Yong; Suhas Kotha; Yi Zeng 005; Weiyan Shi; et al. (ICML, 2024)

RigorLLM: Resilient Guardrails for Large Language Models against Undesired Content. - Zhuowen Yuan; Zidi Xiong; Yi Zeng 005; Ning Yu; Ruoxi Jia 001; Dawn Song; Bo Li 026 (ICML, 2024)

A Safe Harbor for AI Evaluation and Red Teaming. - Shayne Longpre; Sayash Kapoor; Kevin Klyman; Ashwin Ramaswami; Rishi Bommasani; Borhane Blili-Hamelin; Yangsibo Huang; Aviya Skowron; Zheng Xin Yong; Suhas Kotha; Yi Zeng 005; Weiyan Shi; et al. (CoRR, 2024)

Introducing v0.5 of the AI Safety Benchmark from MLCommons. - Bertie Vidgen; Adarsh Agrawal; Ahmed M. Ahmed 004; Victor Akinwande; Namir Al-Nuaimi; Najla Alfaraj; Elie Alhajjar; Lora Aroyo; Trupti Bavalatti; Borhane Blili-Hamelin; Kurt D. Bollacker; Rishi Bomassani; et al. (CoRR, 2024)

AI Risk Management Should Incorporate Both Safety and Security. - Xiangyu Qi; Yangsibo Huang; Yi Zeng 005; Edoardo Debenedetti; Jonas Geiping; Luxi He; Kaixuan Huang; Udari Madhushani; Vikash Sehwag; Weijia Shi; Boyi Wei; Tinghao Xie; et al. (CoRR, 2024)

JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits. - Minzhou Pan; Yi Zeng 005; Xue Lin; Ning Yu; Cho-Jui Hsieh; Peter Henderson 002; Ruoxi Jia 001 (CoRR, 2024)

Fairness-Aware Meta-Learning via Nash Bargaining. - Yi Zeng 005; Xuelin Yang; Li Chen; Cristian Canton Ferrer; Ming Jin 002; Michael I. Jordan; Ruoxi Jia 001 (CoRR, 2024)

SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal Behaviors. - Tinghao Xie; Xiangyu Qi; Yi Zeng 005; Yangsibo Huang; Udari Madhushani Sehwag; Kaixuan Huang; Luxi He; Boyi Wei; Dacheng Li; Ying Sheng 007; Ruoxi Jia 001; Bo Li 026; et al. (CoRR, 2024)

BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models. - Yi Zeng 005; Weiyu Sun; Tran Ngoc Huynh; Dawn Song; Bo Li 026; Ruoxi Jia 001 (CoRR, 2024)

AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policies. - Yi Zeng 005; Kevin Klyman; Andy Zhou; Yu Yang; Minzhou Pan; Ruoxi Jia 001; Dawn Song; Percy Liang; Bo Li 026 (CoRR, 2024)

AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies. - Yi Zeng 005; Yu Yang; Andy Zhou; Jeffrey Ziwei Tan; Yuheng Tu; Yifan Mai; Kevin Klyman; Minzhou Pan; Ruoxi Jia 001; Dawn Song; Percy Liang; Bo Li 026 (CoRR, 2024)

An Efficient Preprocessing-Based Approach to Mitigate Advanced Adversarial Attacks. - Han Qiu 001; Yi Zeng 005; Qinkai Zheng; Shangwei Guo; Tianwei Zhang 004; Hewu Li (IEEE Trans. Computers, 2024)