activity
20172026
most citedDolphinAtack: Inaudible Voice Commands

564 citations · 611 across the 21 of their papers we have counts for

collaborators

21 papers

cs.CR2026

TRAP: Hijacking VLA CoT-Reasoning via Adversarial Patches

Zhengxian Huang, Wenjun Zhu, Haoxuan Qiu +2

By integrating Chain-of-Thought (CoT) reasoning, Vision-Language-Action (VLA) models have demonstrated strong capabilities in robotic manipulation, particularly by improving genera…

cs.CR2026

Differentially Private and Communication Efficient Large Language Model Split Inference via Stochastic Quantization and Soft Prompt

Yujie Gu, Richeng Jin, Xiaoyu Ji +2

Large Language Models (LLMs) have achieved remarkable performance and received significant research interest. The enormous computational demands, however, hinder the local deployme…

cs.RO2025

Phantom Menace: Exploring and Enhancing the Robustness of VLA Models Against Physical Sensor Attacks

Xuancun Lu, Jiaxiang Chen, Shilin Xiao +7

Vision-Language-Action (VLA) models revolutionize robotic systems by enabling end-to-end perception-to-action pipelines that integrate multiple sensory modalities, such as visual s…

cs.CR2025★ 2 cited

SoK: Understanding the Fundamentals and Implications of Sensor Out-of-band Vulnerabilities

Shilin Xiao, Wenjun Zhu, Yan Jiang +5

Sensors are fundamental to cyber-physical systems (CPS), enabling perception and control by transducing physical stimuli into digital measurements. However, despite growing researc…

cs.CR2025

False Reality: Uncovering Sensor-induced Human-VR Interaction Vulnerability

Yancheng Jiang, Yan Jiang, Ruochen Zhou +3

Virtual Reality (VR) techniques, serving as the bridge between the real and virtual worlds, have boomed and are widely used in manufacturing, remote healthcare, gaming, etc. Specif…

eess.SP2024

PowerRadio: Manipulate Sensor Measurementvia Power GND Radiation

Yan Jiang, Xiaoyu Ji, Yancheng Jiang +3

Sensors are key components enabling various applications, e.g., home intrusion detection and environmental monitoring. While various software defenses and physical protections are…

cs.RO2024

Easier Said Than Done: Unpacking Intent-Behavior Gap in Jailbreaking LLM-Based Robots

Xuancun Lu, Zhengxian Huang, Xinfeng Li +4

LLM-based robots use Large Language Models (LLMs) as planners to translate natural language instructions into policies such as grasp(), move_to(), and open_gripper(). Jailbreak att…

eess.SP2024

PhantomLiDAR: Cross-modality Signal Injection Attacks against LiDAR

Zizhi Jin, Qinhong Jiang, Xuancun Lu +3

LiDAR (Light Detection and Ranging) is a pivotal sensor for autonomous driving, offering precise 3D spatial information. Previous signal attacks against LiDAR systems mainly exploi…

cs.CR2024★ 1 cited

ReThink: Reveal the Threat of Electromagnetic Interference on Power Inverters

Fengchen Yang, Zihao Dan, Kaikai Pan +3

With the boom of renewable energy sources (RES), the number of power inverters proliferates. Power inverters are the key electronic devices that transform the direct current (DC) p…

cs.CR2024★ 1 cited

SafeEar: Content Privacy-Preserving Audio Deepfake Detection

Xinfeng Li, Kai Li, Yifan Zheng +3

Text-to-Speech (TTS) and Voice Conversion (VC) models have exhibited remarkable performance in generating realistic and natural audio. However, their dark side, audio deepfake pose…

cs.CV2024★ 19 cited

SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models

Xinfeng Li, Yuchen Yang, Jiangyi Deng +4

Text-to-image (T2I) models, such as Stable Diffusion, have exhibited remarkable performance in generating high-quality images from text descriptions in recent years. However, text-…

cs.RO2024

Exploring Adversarial Robustness of LiDAR-Camera Fusion Model in Autonomous Driving

Bo Yang, Xiaoyu Ji, Zizhi Jin +2

Our study assesses the adversarial robustness of LiDAR-camera fusion models in 3D object detection. We introduce an attack technique that, by simply adding a limited number of phys…

cs.CV2023

CamPro: Camera-based Anti-Facial Recognition

Wenjun Zhu, Yuan Sun, Jiani Liu +3

The proliferation of images captured from millions of cameras and the advancement of facial recognition (FR) technology have made the abuse of FR a severe privacy threat. Existing…

cs.CR2023★ 3 cited

TPatch: A Triggered Physical Adversarial Patch

Wenjun Zhu, Xiaoyu Ji, Yushi Cheng +2

Autonomous vehicles increasingly utilize the vision-based perception module to acquire information about driving environments and detect obstacles. Correct detection and classifica…

cs.CR2023★ 2 cited

Inaudible Adversarial Perturbation: Manipulating the Recognition of User Speech in Real Time

Xinfeng Li, Chen Yan, Xuancun Lu +3

Automatic speech recognition (ASR) systems have been shown to be vulnerable to adversarial examples (AEs). Recent success all assumes that users will not notice or disrupt the atta…

cs.SD2023★ 1 cited

Enrollment-stage Backdoor Attacks on Speaker Recognition Systems via Adversarial Ultrasound

Xinfeng Li, Junning Ze, Chen Yan +3

Automatic Speaker Recognition Systems (SRSs) have been widely used in voice applications for personal identification and access control. A typical SRS consists of three stages, i.e…

cs.CV2022★ 15 cited

Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition

Chen Yan, Zhijian Xu, Zhanyuan Yin +2

Traffic light recognition is essential for fully autonomous driving in urban areas. In this paper, we investigate the feasibility of fooling traffic light recognition mechanisms by…

cs.CR2021★ 1 cited

SMS Goes Nuclear: Fortifying SMS-Based MFA in Online Account Ecosystem

Weizhao Jin, Xiaoyu Ji, Ruiwen He +3

With the rapid growth of online services, the number of online accounts proliferates. The security of a single user account no longer depends merely on its own service provider but…

cs.CR2020

Who Is Charging My Phone? Identifying Wireless Chargers via Fingerprinting

Zhiyun Wang, Jiayu Zhang, Xiaoyu Ji +3

With the increasing popularity of the Internet of Things(IoT) devices, the demand for fast and convenient battery charging services grows rapidly. Wireless charging is a promising…

cs.CR2018★ 2 cited

Which One to Go: Security and Usability Evaluation of Mid-Air Gestures

Wenyuan Xu, Xiaopeng Li, Jing Tian +4

With the emerging of touch-less human-computer interaction techniques and gadgets, mid-air hand gestures have been widely used for authentication. Much literature examined either t…

cs.CR2017★ 564 cited

DolphinAtack: Inaudible Voice Commands

Guoming Zhang, Chen Yan, Xiaoyu Ji +3

Speech recognition (SR) systems such as Siri or Google Now have become an increasingly popular human-computer interaction method, and have turned various systems into voice control…