activity
20242026
most citedMellivora Capensis: A Backdoor-Free Training Framework on the Poisoned Dataset without Auxiliary Data

1 citations · 2 across the 24 of their papers we have counts for

collaborators
Showing 2025Show all

6 papers · 1 filter

cs.LG2025

The Eminence in Shadow: Exploiting Feature Boundary Ambiguity for Robust Backdoor Attacks

Zhou Feng, Jiahao Chen, Chunyi Zhou +5

Deep neural networks (DNNs) underpin critical applications yet remain vulnerable to backdoor attacks, typically reliant on heuristic brute-force methods. Despite significant empiri…

cs.CR2025

Auditing M-LLMs for Privacy Risks: A Synthetic Benchmark and Evaluation Framework

Junhao Li, Jiahao Chen, Zhou Feng +1

Recent advances in multi-modal Large Language Models (M-LLMs) have demonstrated a powerful ability to synthesize implicit information from disparate sources, including images and t…

cs.CR2025

FreeTalk:A plug-and-play and black-box defense against speech synthesis attacks

Yuwen Pu, Zhou Feng, Chunyi Zhou +4

Recently, speech assistant and speech verification have been used in many fields, which brings much benefit and convenience for us. However, when we enjoy these speech applications…

cs.SD2025★ 1 cited

Enkidu: Universal Frequential Perturbation for Real-Time Audio Privacy Protection against Voice Deepfakes

Zhou Feng, Jiahao Chen, Chunyi Zhou +4

The rapid advancement of voice deepfake technologies has raised serious concerns about user audio privacy, as attackers increasingly exploit publicly available voice data to genera…

cs.CR2025

LoRAShield: Data-Free Editing Alignment for Secure Personalized LoRA Sharing

Jiahao Chen, Junhao Li, Yiming Wang +6

The proliferation of Low-Rank Adaptation (LoRA) models has democratized personalized text-to-image generation, enabling users to share lightweight models (e.g., personal portraits)…

cs.CR2025

Poison in the Well: Feature Embedding Disruption in Backdoor Attacks

Zhou Feng, Jiahao Chen, Chunyi Zhou +3

Backdoor attacks embed malicious triggers into training data, enabling attackers to manipulate neural network behavior during inference while maintaining high accuracy on benign in…