activity
20152026
most citedWe Can Track You If You Take the Metro: Tracking Metro Riders Using Accelerometers on Smartphones

4 citations · 5 across the 12 of their papers we have counts for

collaborators

13 papers

cs.CR2026

ECHO: Replacing the Compliance Proxy with Response Harmfulness in Optimization-Based Jailbreak Attack

Yuanwei Wu, Lingdong Huang, Yunlong Mao +3

Despite extensive safety alignment, large language models remain vulnerable to jailbreak attacks. Existing optimization-based attacks share a single objective: maximize a token-lev…

cs.CL2026

Mitigating Database Leakage in RAG Systems with Keyword-Grounded Fact Substitution

Ziliang Zhang, Yubo Zhu, Wei Tong +4

Retrieval-Augmented Generation (RAG) has emerged as a powerful paradigm for combining large language models (LLMs) with external knowledge sources. However, RAG systems remain vuln…

cs.CR2026

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates

Zijian Wang, Yubo Zhu, Muzhi Dong +7

In Retrieval-Augmented Generation (RAG), post-retrieval conflict resolution arbitrates among noisy or contradictory retrieved passages. However, the robustness of this safeguard ag…

cs.CR2026

Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors

Zi Li, Tian Zhou, Wenze Li +3

Local fine-tuning datasets routinely contain sensitive secrets such as API keys, personal identifiers, and financial records. Although "local offline fine-tuning" is often viewed a…

cs.CR2025

Distillability of LLM Security Logic: Predicting Attack Success Rate of Outline Filling Attack via Ranking Regression

Tianyu Zhang, Zihang Xi, Jingyu Hua +1

In the realm of black-box jailbreak attacks on large language models (LLMs), the feasibility of constructing a narrow safety proxy, a lightweight model designed to predict the atta…

cs.CV2025

CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization

Fengling Zhu, Boshi Liu, Jingyu Hua +1

Multimodal Large Language Models (MLLMs) have achieved remarkable success in tasks such as image captioning, visual question answering, and cross-modal reasoning by integrating vis…

cs.CR2025

OFL: Opportunistic Federated Learning for Resource-Heterogeneous and Privacy-Aware Devices

Yunlong Mao, Mingyang Niu, Ziqin Dang +7

Efficient and secure federated learning (FL) is a critical challenge for resource-limited devices, especially mobile devices. Existing secure FL solutions commonly incur significan…

cs.CR2024

RADS-Checker: Measuring Compliance with Right of Access by the Data Subject in Android Markets

Zhenhua Li, Zhanpeng Liang, Congcong Yao +2

The latest data protection regulations worldwide, such as the General Data Protection Regulation (GDPR), have established the Right of Access by the Data Subject (RADS), granting u…

cs.CR2024

The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Prompts

Zhili Shen, Zihang Xi, Ying He +3

The rapid adoption of online chatbots represents a significant advancement in artificial intelligence. However, this convenience brings considerable privacy concerns, as prompts ca…

cs.LG2024

LabObf: A Label Protection Scheme for Vertical Federated Learning Through Label Obfuscation

Ying He, Mingyang Niu, Jingyu Hua +4

Split Neural Network, as one of the most common architectures used in vertical federated learning, is popular in industry due to its privacy-preserving characteristics. In this arc…

cs.CR2024

Subtoxic Questions: Dive Into Attitude Change of LLM's Response in Jailbreak Attempts

Tianyu Zhang, Zixuan Zhao, Jiaqi Huang +2

As Large Language Models (LLMs) of Prompt Jailbreaking are getting more and more attention, it is of great significance to raise a generalized research paradigm to evaluate attack…

cs.CR2021★ 1 cited

SGBA: A Stealthy Scapegoat Backdoor Attack against Deep Neural Networks

Ying He, Zhili Shen, Chang Xia +3

Outsourced deep neural networks have been demonstrated to suffer from patch-based trojan attacks, in which an adversary poisons the training sets to inject a backdoor in the obtain…

cs.CR2015★ 4 cited

We Can Track You If You Take the Metro: Tracking Metro Riders Using Accelerometers on Smartphones

Jingyu Hua, Zhenyu Shen, Sheng Zhong

Motion sensors (e.g., accelerometers) on smartphones have been demonstrated to be a powerful side channel for attackers to spy on users' inputs on touchscreen. In this paper, we re…