activity
20242026
most citedA Measurement Study of Model Context Protocol Ecosystem

2 citations · 5 across the 30 of their papers we have counts for

collaborators

32 papers

cs.SE2026

UNBIND: UNlearning By INference-time Directional Steering for Code LLMs

Zhengyang Shan, Jiayun Xin, Yanjun Lin +7

Code large language models acquire programming capabilities from large code corpora, but can also memorize implementations that later require removal. Code unlearning is needed to…

cs.AI2026

OBLIVION: Workflow-Level Operational Skill Unlearning for Deployed Agents

Zhengyang Shan, Xu Qian, Jiayun Xin +3

Large language model agents are becoming operational interfaces to files, memories, registries, and external tools. This deployment shift creates a new skill revocation problem: af…

cs.CR2026

Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks

Ying JinCheng, Minghui Xu, Yinhao Xiao +2

Large language models (LLMs) are safety-aligned before deployment to reduce harmful content generation. Yet neuron-level pruning attacks show that refusal can depend on a small set…

cs.CY2026

Bad company corrupts good morals: Understanding and Measuring Narrative-Induced Moral Reasoning Degradation in LLMs

Wanying Yu, Boyang Ma, Zhibo Eric Sun +2

Large language models are deployed in long-context, emotionally interactive environments like digital humans, AI companions, educational assistants, and counseling systems. Unlike…

cs.CR2026

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers

Biwei Yan, Minghui Xu, Yijun Yang +4

The Model Context Protocol (MCP) has rapidly become the de facto standard for connecting large language models (LLMs) to external resources, but it also introduces a class of priva…

cs.CR2026

A Measurement Study of Cryptographic Misuse in Embodied AI Mobile Applications

Junchao Li, Xuelei Wang, Yuhang Huang +5

Embodied AI (EAI) mobile applications are evolving from auxiliary user interfaces into active control-path components, directly linking mobile-side cryptographic security to cyber-…

cs.CR2026

PRAG: End-to-End Privacy-Preserving Retrieval-Augmented Generation

Zhijun Li, Minghui Xu, Huayi Qi +6

Retrieval-Augmented Generation (RAG) is essential for enhancing Large Language Models (LLMs) with external knowledge, but its reliance on cloud environments exposes sensitive data…

cs.CR2026

AgentDID: Trustless Identity Authentication for AI Agents

Minghui Xu, Xiaoyu Liu, Yihao Guo +3

AI agents are autonomous entities that can be instantiated on demand, migrate across platforms, and interact with other agents or services without continuous human supervision. In…

cs.LG2026

Utility-Aware Data Pricing: Token-Level Quality and Empirical Training Gain for LLMs

Minghui Xu, Qi Luo, Kun Li +1

Traditional ``row-count quality coefficient'' approaches fail to capture the nonlinear utility of data for Large Language Model (LLM) capabilities. We present a utility-aw…

cs.CR2026

SAGE: Signal-Amplified Guided Embeddings for LLM-based Vulnerability Detection

Zhengyang Shan, Xu Qian, Jiayun Xin +5

Software vulnerabilities are a primary threat to modern infrastructure. While static analysis and Graph Neural Networks have long served as the foundation for vulnerability detecti…

cs.LG2026

Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs

Qi Luo, Minghui Xu, Dongxiao Yu +1

Modern graph learning systems often combine links with text, as in citation networks with abstracts or social graphs with user posts. In such systems, text is usually easier to edi…

cs.CR2026

Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClaw

Zhengyang Shan, Jiayun Xin, Yue Zhang +1

Code agents powered by large language models can execute shell commands on behalf of users, introducing severe security vulnerabilities. This paper presents a two-phase security an…

cs.CR2026

What Breaks Embodied AI Security:LLM Vulnerabilities, CPS Flaws,or Something Else?

Boyang Ma, Hechuan Guo, Peizhuo Lv +5

Embodied AI systems (e.g., autonomous vehicles, service robots, and LLM-driven interactive agents) are rapidly transitioning from controlled environments to safety critical real-wo…

cs.CR2026

When Skills Lie: Hidden-Comment Injection in LLM Agents

Qianli Wang, Boyang Ma, Minghui Xu +1

LLM agents often rely on Skills to describe available tools and recommended procedures. We study a hidden-comment prompt injection risk in this documentation layer: when a Markdown…

cs.CR2026

Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions

Zhihao Li, Boyang Ma, Xuelong Dai +4

The Model Context Protocol (MCP) enables large language models to invoke external tools through natural-language descriptions, forming the foundation of many AI agent applications.…

cs.CR2026

Low Rank Comes with Low Security: Gradient Assembly Poisoning Attacks against Distributed LoRA-based LLM Systems

Yueyan Dong, Minghui Xu, Qin Hu +5

Low-Rank Adaptation (LoRA) has become a popular solution for fine-tuning large language models (LLMs) in federated settings, dramatically reducing update costs by introducing train…

cs.DC2025

PIR-DSN: A Decentralized Storage Network Supporting Private Information Retrieval

Jiahao Zhang, Minghui Xu, Hechuan Guo +1

Decentralized Storage Networks (DSNs) are emerging as a foundational infrastructure for Web 3.0, offering global peer-to-peer storage. However, a critical vulnerability persists: u…

cs.CR2025

Beyond Model Jailbreak: Systematic Dissection of the "Ten DeadlySins" in Embodied Intelligence

Yuhang Huang, Junchao Li, Boyang Ma +6

Embodied AI systems integrate language models with real world sensing, mobility, and cloud connected mobile apps. Yet while model jailbreaks have drawn significant attention, the b…

cs.CR2025

CCN: Decentralized Cross-Chain Channel Networks Supporting Secure and Privacy-Preserving Multi-Hop Interactions

Minghui Xu, Yihao Guo, Yanqiang Zhang +5

Cross-chain technology enables interoperability among otherwise isolated blockchains, supporting interactions across heterogeneous networks. Similar to how multi-hop communication…

cs.CR2025

"MCP Does Not Stand for Misuse Cryptography Protocol": Uncovering Cryptographic Misuse in Model Context Protocol at Scale

Biwei Yan, Yue Zhang, Minghui Xu +5

The Model Context Protocol (MCP) is rapidly emerging as the middleware for LLM-based applications, offering a standardized interface for tool integration. However, its built-in sec…

cs.CR2025

What You Code Is What We Prove: Translating BLE App Logic into Formal Models with LLMs for Vulnerability Detection

Biwei Yan, Yue Zhang, Minghui Xu +3

The application layer of Bluetooth Low Energy (BLE) is a growing source of security vulnerabilities, as developers often neglect to implement critical protections such as encryptio…

cs.CR2025

Dataset Ownership in the Era of Large Language Models

Kun Li, Cheng Wang, Minghui Xu +2

As datasets become critical assets in modern machine learning systems, ensuring robust copyright protection has emerged as an urgent challenge. Traditional legal mechanisms often f…

cs.CY2025★ 2 cited

A Measurement Study of Model Context Protocol Ecosystem

Hechuan Guo, Yongle Hao, Yue Zhang +4

The Model Context Protocol (MCP) has been proposed as a unifying standard for connecting large language models (LLMs) with external tools and resources, promising the same role for…

cs.CR2025

xRWA: A Cross-Chain Framework for Interoperability of Real-World Assets

Yihao Guo, Haoming Zhu, Minghui Xu +2

Real-World Assets (RWAs) have recently attracted increasing attention as a means of bridging traditional financial instruments with decentralized infrastructures. By representing a…