activity
20212026
most citedSeeing is Living? Rethinking the Security of Facial Liveness Verification in the Deepfake Era

13 citations · 53 across the 29 of their papers we have counts for

collaborators
Showing cs.CRShow all

16 papers · 1 filter

cs.CR2026

Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy Backdoors

Rui Yin, Tianxu Han, Naen Xu +8

Safety-aligned large language models (LLMs) are increasingly deployed in real-world pipelines, yet this deployment also enlarges the supply-chain attack surface: adversaries can di…

cs.CR2025

You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors

Bochuan Cao, Changjiang Li, Yuanpu Cao +3

Large language models (LLMs) have been widely adopted across various applications, leveraging customized system prompts for diverse tasks. Facing potential system prompt leakage ri…

cs.CR2025

Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools

Ping He, Changjiang Li, Binbin Zhao +2

The remarkable capability of large language models (LLMs) has led to the wide application of LLM-based agents in various domains. To standardize interactions between LLM-based agen…

cs.CR2025

Your Agent Can Defend Itself against Backdoor Attacks

Li Changjiang, Liang Jiacheng, Cao Bochuan +2

Despite their growing adoption across domains, large language model (LLM)-powered agents face significant security risks from backdoor attacks during training and fine-tuning. Thes…

cs.CR2025

On the Security Risks of ML-based Malware Detection Systems: A Survey

Ping He, Yuhao Mao, Changjiang Li +3

Malware presents a persistent threat to user privacy and data integrity. To combat this, machine learning-based (ML-based) malware detection (MD) systems have been developed. Howev…

cs.CR2025

RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models

Tanqiu Jiang, Changjiang Li, Fenglong Ma +1

Differentially private diffusion models (DPDMs) harness the remarkable generative capabilities of diffusion models while enforcing differential privacy (DP) for sensitive data. How…

cs.CR2024

CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models

Naen Xu, Changjiang Li, Tianyu Du +8

Text-to-image diffusion models have emerged as powerful tools for generating high-quality images from textual descriptions. However, their increasing popularity has raised signific…

cs.CR2024★ 1 cited

RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction

Tanqiu Jiang, Zian Wang, Jiacheng Liang +3

Jailbreak attacks circumvent LLMs' built-in safeguards by concealing harmful queries within jailbreak prompts. While existing defenses primarily focus on mitigating the effects of…

cs.CR2024★ 1 cited

Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models

Changjiang Li, Ren Pang, Bochuan Cao +4

Thanks to their remarkable denoising capabilities, diffusion models are increasingly being employed as defensive tools to reinforce the security of other models, notably in purifyi…

cs.CR2024

Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective

Jiahao Chen, Zhiqiang Shen, Yuwen Pu +5

Face Recognition Systems (FRS) have increasingly integrated into critical applications, including surveillance and user authentication, highlighting their pivotal role in modern se…

cs.CR2024

PRSA: Prompt Stealing Attacks against Real-World Prompt Services

Yong Yang, Changjiang Li, Qingming Li +6

Recently, large language models (LLMs) have garnered widespread attention for their exceptional capabilities. Prompts are central to the functionality and performance of LLMs, maki…

cs.CR2023★ 1 cited

On the Difficulty of Defending Contrastive Learning against Backdoor Attacks

Changjiang Li, Ren Pang, Bochuan Cao +4

Recent studies have shown that contrastive learning, like supervised learning, is highly vulnerable to backdoor attacks wherein malicious functions are injected into target models,…

cs.CR2023★ 1 cited

On the Security Risks of Knowledge Graph Reasoning

Zhaohan Xi, Tianyu Du, Changjiang Li +6

Knowledge graph reasoning (KGR) -- answering complex logical queries over large knowledge graphs -- represents an important artificial intelligence task, entailing a range of appli…

cs.CR2022★ 3 cited

An Embarrassingly Simple Backdoor Attack on Self-supervised Learning

Changjiang Li, Ren Pang, Zhaohan Xi +4

As a new paradigm in machine learning, self-supervised learning (SSL) is capable of learning high-quality representations of complex data without relying on labels. In addition to…

cs.CR2022★ 13 cited

Seeing is Living? Rethinking the Security of Facial Liveness Verification in the Deepfake Era

Changjiang Li, Li Wang, Shouling Ji +4

Facial Liveness Verification (FLV) is widely used for identity authentication in many security-sensitive domains and offered as Platform-as-a-Service (PaaS) by leading cloud vendor…

cs.CR2021

Towards Robust Reasoning over Knowledge Graphs

Zhaohan Xi, Ren Pang, Changjiang Li +4

Answering complex logical queries over large-scale knowledge graphs (KGs) represents an important artificial intelligence task, entailing a range of applications. Recently, knowled…