activity
20232026
most citedTowards Self-Interpretable Graph-Level Anomaly Detection

25 citations · 33 across the 12 of their papers we have counts for

collaborators

12 papers

cs.CR2026

Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks

Xiaoyan Feng, Yanjun Zhang, He Zhang +2

Watermarking LLM-generated text is an important task for tracing its provenance. Existing LLM watermarks preserve provenance under editing, but this same robustness allows an adver…

cs.LG2026

ARES: Scalable and Practical Gradient Inversion Attack in Federated Learning through Activation Recovery

Zirui Gong, Leo Yu Zhang, Yanjun Zhang +4

Federated Learning (FL) enables collaborative model training by sharing model updates instead of raw data, aiming to protect user privacy. However, recent studies reveal that these…

cs.CR2026

Less Is More -- Until It Breaks: Security Pitfalls of Vision Token Compression in Large Vision-Language Models

Xiaomei Zhang, Zhaoxi Zhang, Leo Yu Zhang +3

Visual token compression is widely adopted to improve the inference efficiency of Large Vision-Language Models (LVLMs), enabling their deployment in latency-sensitive and resource-…

cs.LG2025

TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening

Nam Le, Leo Yu Zhang, Kewen Liao +2

As deep neural networks power increasingly critical applications, stealthy backdoor attacks, where poisoned training inputs trigger malicious model behaviour while appearing benign…

cs.CR2025

Character-Level Perturbations Disrupt LLM Watermarks

Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang +5

Large Language Model (LLM) watermarking embeds detectable signals into generated text for copyright protection, misuse prevention, and content detection. While prior studies evalua…

cs.CL2025

BiMark: Unbiased Multilayer Watermarking for Large Language Models

Xiaoyan Feng, He Zhang, Yanjun Zhang +2

Recent advances in Large Language Models (LLMs) have raised urgent concerns about LLM-generated text authenticity, prompting regulatory demands for reliable identification mechanis…

cs.LG2025

Not All Edges are Equally Robust: Evaluating the Robustness of Ranking-Based Federated Learning

Zirui Gong, Yanjun Zhang, Leo Yu Zhang +3

Federated Ranking Learning (FRL) is a state-of-the-art FL framework that stands out for its communication efficiency and resilience to poisoning attacks. It diverges from the tradi…

cs.CL2025

Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks

Xiaomei Zhang, Zhaoxi Zhang, Yanjun Zhang +4

Textual adversarial examples pose serious threats to the reliability of natural language processing systems. Recent studies suggest that adversarial examples tend to deviate from t…

cs.CR2024★ 1 cited

Large Language Model Watermark Stealing With Mixed Integer Programming

Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang +5

The Large Language Model (LLM) watermark is a newly emerging technique that shows promise in addressing concerns surrounding LLM copyright, monitoring AI-generated text, and preven…

cs.CR2024★ 1 cited

Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation

Di Mi, Yanjun Zhang, Leo Yu Zhang +4

Model extraction attacks (MEAs) enable an attacker to replicate the functionality of a victim deep neural network (DNN) model by only querying its API service remotely, posing a se…

cs.LG2023★ 25 cited

Towards Self-Interpretable Graph-Level Anomaly Detection

Yixin Liu, Kaize Ding, Qinghua Lu +3

Graph-level anomaly detection (GLAD) aims to identify graphs that exhibit notable dissimilarity compared to the majority in a collection. However, current works primarily focus on…

cs.CR2023★ 6 cited

Client-side Gradient Inversion Against Federated Learning from Poisoning

Jiaheng Wei, Yanjun Zhang, Leo Yu Zhang +5

Federated Learning (FL) enables distributed participants (e.g., mobile devices) to train a global model without sharing data directly to a central server. Recent studies have revea…