activity
20202026
most citedAn Empirical Assessment of Global COVID-19 Contact Tracing Applications

19 citations · 95 across the 31 of their papers we have counts for

collaborators
Showing cs.CRShow all

23 papers · 1 filter

cs.CR2026

FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models

Haoyang Li, Ruoxi Sun, Qingqing Ye +4

Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of…

cs.CR2026

What You See Is Not What AI Gets: DPAgent-in-the-Middle Defense Against AI-Groomed Deceptive Patterns

Zewei Shi, Ruoxi Sun, Haoyang Li +4

Privacy deceptive patterns in web interfaces manipulate users into disclosing personal data, yet existing defenses are fragmented, static, and increasingly vulnerable to manipulati…

cs.CR2025

Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting

Hua Ma, Ruoxi Sun, Minhui Xue +4

Accurate time-series forecasting is increasingly critical for planning and operations in low-carbon power systems. Emerging time-series large language models (TS-LLMs) now deliver…

cs.CR2025

Re-Key-Free, Risky-Free: Adaptable Model Usage Control

Zihan Wang, Zhongkui Ma, Xinguo Feng +6

Deep neural networks (DNNs) have become valuable intellectual property of model owners, due to the substantial resources required for their development. To protect these assets in…

cs.CR2025

What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift

Jiamin Chang, Haoyang Li, Hammond Pearce +3

The growing adoption of artificial intelligence (AI) has amplified concerns about trustworthiness, including integrity, privacy, robustness, and bias. To assess and attribute these…

cs.CR2025★ 6 cited

50 Shades of Deceptive Patterns: A Unified Taxonomy, Multimodal Detection, and Security Implications

Zewei Shi, Ruoxi Sun, Jieshan Chen +5

Deceptive patterns (DPs) are user interface designs deliberately crafted to manipulate users into unintended decisions, often by exploiting cognitive biases for the benefit of comp…

cs.CR2024

SoK: The Security-Safety Continuum of Multimodal Foundation Models through Information Flow and Global Game-Theoretic Analysis of Asymmetric Threats

Ruoxi Sun, Jiamin Chang, Hammond Pearce +5

Multimodal foundation models (MFMs) integrate diverse data modalities to support complex and wide-ranging tasks. However, this integration also introduces distinct safety and secur…

cs.CR2024★ 2 cited

Iterative Window Mean Filter: Thwarting Diffusion-based Adversarial Purification

Hanrui Wang, Ruoxi Sun, Cunjian Chen +4

Face authentication systems have brought significant convenience and advanced developments, yet they have become unreliable due to their sensitivity to inconspicuous perturbations,…

cs.CR2024

Leakage-Resilient and Carbon-Neutral Aggregation Featuring the Federated AI-enabled Critical Infrastructure

Zehang Deng, Ruoxi Sun, Minhui Xue +4

AI-enabled critical infrastructures (ACIs) integrate artificial intelligence (AI) technologies into various essential systems and services that are vital to the functioning of soci…

cs.CR2024

The Invisible Game on the Internet: A Case Study of Decoding Deceptive Patterns

Zewei Shi, Ruoxi Sun, Jieshan Chen +2

Deceptive patterns are design practices embedded in digital platforms to manipulate users, representing a widespread and long-standing issue in the web and mobile software developm…

cs.CR2023★ 1 cited

Bounded and Unbiased Composite Differential Privacy

Kai Zhang, Yanjun Zhang, Ruoxi Sun +5

The objective of differential privacy (DP) is to protect privacy by producing an output distribution that is indistinguishable between any two neighboring databases. However, tradi…

cs.CR2023★ 1 cited

A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services

Hongsheng Hu, Shuo Wang, Jiamin Chang +5

The right to be forgotten requires the removal or "unlearning" of a user's data from machine learning models. However, in the context of Machine Learning as a Service (MLaaS), retr…

cs.CR2023★ 13 cited

Not Seen, Not Heard in the Digital World! Measuring Privacy Practices in Children's Apps

Ruoxi Sun, Minhui Xue, Gareth Tyson +3

The digital age has brought a world of opportunity to children. Connectivity can be a game-changer for some of the world's most marginalized children. However, while legislatures a…

cs.CR2022★ 2 cited

The "Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices

Wanlun Ma, Derui Wang, Ruoxi Sun +3

Deep Neural Networks (DNNs) are susceptible to backdoor attacks during training. The model corrupted in this way functions normally, but when triggered by certain patterns in the i…

cs.CR2022★ 1 cited

PublicCheck: Public Integrity Verification for Services of Run-time Deep Models

Shuo Wang, Sharif Abuadbba, Sidharth Agarwal +6

Existing integrity verification approaches for deep models are designed for private verification (i.e., assuming the service provider is honest, with white-box access to model para…

cs.CR2022★ 2 cited

Path Transitions Tell More:Optimizing Fuzzing Schedules via Runtime Program States

Kunpeng Zhang, Xi Xiao, Xiaogang Zhu +3

Coverage-guided Greybox Fuzzing (CGF) is one of the most successful and widely-used techniques for bug hunting. Two major approaches are adopted to optimize CGF: (i) to reduce sear…

cs.CR2021

Statically Detecting Adversarial Malware through Randomised Chaining

Matthew Crawford, Wei Wang, Ruoxi Sun +1

With the rapid growth of malware attacks, more antivirus developers consider deploying machine learning technologies into their productions. Researchers and developers published va…

cs.CR2021

Dissecting Malware in the Wild

Hamish Spencer, Wei Wang, Ruoxi Sun +1

With the increasingly rapid development of new malicious computer software by bad faith actors, both commercial and research-oriented antivirus detectors have come to make greater…

cs.CR2021★ 2 cited

NatiDroid: Cross-Language Android Permission Specification

Chaoran Li, Xiao Chen, Ruoxi Sun +5

The Android system manages access to sensitive APIs by permission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However,…

cs.CR2021★ 1 cited

Mate! Are You Really Aware? An Explainability-Guided Testing Framework for Robustness of Malware Detectors

Ruoxi Sun, Minhui Xue, Gareth Tyson +6

Numerous open-source and commercial malware detectors are available. However, their efficacy is threatened by new adversarial attacks, whereby malware attempts to evade detection,…

cs.CR2021★ 8 cited

Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference

Xiaotao Feng, Ruoxi Sun, Xiaogang Zhu +5

The proliferation of Internet of Things (IoT) devices has made people's lives more convenient, but it has also raised many security concerns. Due to the difficulty of obtaining and…

cs.CR2020★ 19 cited

An Empirical Assessment of Global COVID-19 Contact Tracing Applications

Ruoxi Sun, Wei Wang, Minhui Xue +3

The rapid spread of COVID-19 has made manual contact tracing difficult. Thus, various public health authorities have experimented with automatic contact tracing using mobile applic…

cs.CR2020★ 15 cited

Quality Assessment of Online Automated Privacy Policy Generators: An Empirical Study

Ruoxi Sun, Minhui Xue

Online Automated Privacy Policy Generators (APPGs) are tools used by app developers to quickly create app privacy policies which are required by privacy regulations to be incorpora…