Publications

Yuelin Xu, Xiao Zhang (2026). How Learning Dynamics Drive Adversarially Robust Generalization?. UAI 2026.

PDF Cite Code ArXiv

Jia Fu, Yongtao Wu, Yihang Chen, Kunyu Peng, Xiao Zhang, Volkan Cevher, Sepideh Pashami, Anders Holst (2026). DiffCAP: Diffusion-based Cumulative Adversarial Purification for Vision Language Models. TMLR 2026.

PDF Cite ArXiv OpenReview

Yuan Xin, Dingfan Chen, Linyi Yang, Michael Backes, Xiao Zhang (2026). Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?. ACL 2026 Findings.

PDF Cite ArXiv

Madhurima Ghosh, Ankush Meshram, Markus Karch, Christian Haas, Xiao Zhang, Mridula Singh (2026). FEVA-ICS: Benchmarking Adversarial Robustness of Machine Learning-based Intrusion Detection Systems in Industrial Control Systems. CPSS 2026.

PDF Cite

Santanu Rathod, Pietro Liò, Xiao Zhang (2026). SplineFlow: Flow Matching for Dynamical Systems with B-Spline Interpolants. ArXiv.

PDF Cite Code ArXiv

Somrita Ghosh, Yuelin Xu, Xiao Zhang (2026). Efficient Semi-Supervised Adversarial Training via Latent Clustering-Based Data Reduction. SaTML 2026.

PDF Cite Code ArXiv

Subrat Kishore Dutta, Yuelin Xu, Piyush Pant, Xiao Zhang (2025). GREAT: Generalizable Backdoor Attacks in RLHF via Emotion-Aware Trigger Synthesis. ArXiv.

PDF Cite Code ArXiv

Santanu Rathod, Francesco Ceccarelli, Sean B. Holden, Pietro Liò, Xiao Zhang, Jovan Tanevski (2025). ContextFlow: Context-Aware Flow Matching For Trajectory Inference From Spatial Omics Data. ArXiv.

PDF Cite Code ArXiv

Advik Raj Basani, Xiao Zhang (2025). GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs. NeurIPS 2025.

PDF Cite Code ArXiv OpenReview

Youngjin Kwon, Xiao Zhang (2025). Controllable Adversarial Makeup for Privacy via Text-Guided Diffusion. ArXiv.

PDF Cite Code ArXiv

Zhizhen Chen, Zhengyu Zhao, Subrat Kishore Dutta, Chenhao Lin, Chao Shen, Xiao Zhang (2025). Generalizable Targeted Data Poisoning against Varying Physical Objects. ArXiv.

PDF Cite Code ArXiv

Devansh Srivastav, Xiao Zhang (2025). Safe in Isolation, Dangerous Together: Agent-Driven Multi-Turn Decomposition Jailbreaks on LLMs. ACL 2025 REALM Workshop (Oral).

PDF Cite Code Source Document

Subrat Kishore Dutta, Xiao Zhang (2025). IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization. ICCV 2025.

PDF Cite Code ArXiv

Yuan Xin, Dingfan Chen, Michael Backes, Xiao Zhang (2025). Provably Cost-Sensitive Adversarial Defense via Randomized Smoothing. ICML 2025.

PDF Cite Code ArXiv OpenReview

Santanu Rathod, Pietro Liò, Xiao Zhang (2025). Predicting Time-varying Flux and Balance in Metabolic Systems using Structured Neural ODE Processes. ICLR 2025 MLGenX Workshop.

PDF Cite ArXiv OpenReview

Jia Fu, Xiao Zhang, Sepideh Pashami, Fatemeh Rahimian, Anders Holst (2025). DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination. WACV 2025.

PDF Cite ArXiv

Wenshu Fan, Minxing Zhang, Hongwei Li, Wenbo Jiang, Hanxiao Chen, Xiangyu Yue, Michael Backes, Xiao Zhang (2025). DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy. CCS 2025 (Distinguished Paper Award).

PDF Cite Code ArXiv

Anshuman Suri, Xiao Zhang, David Evans (2024). Do Parameters Reveal More than Loss for Membership Inference?. TMLR 2024.

PDF Cite Code ArXiv OpenReview

Minxing Zhang, Michael Backes, Xiao Zhang (2024). Generating Less Certain Adversarial Examples Improves Robust Generalization. TMLR 2024.

PDF Cite Code ArXiv OpenReview

Minxing Zhang, Michael Backes, Xiao Zhang (2024). Invisibility Cloak: Disappearance under Human Pose Estimation via Backdoor Attacks. ArXiv.

PDF Cite ArXiv

Yuelin Xu, Xiao Zhang (2024). Understanding Adversarially Robust Generalization via Weight-Curvature Index. ICML 2024 HiLD Workshop.

PDF Cite ArXiv OpenReview

Wenshu Fan, Hongwei Li, Wenbo Jiang, Meng Hao, Shui Yu, Xiao Zhang (2024). Stealthy Targeted Backdoor Attacks against Image Captioning. TIFS 2024.

PDF Cite Link ArXiv

Yifan Zeng, Yiran Wu, Xiao Zhang, Huazheng Wang, Qingyun Wu (2024). AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks. NeurIPS 2024 SafeGenAI Workshop.

PDF Cite Code ArXiv

Fnu Suya, Xiao Zhang, Yuan Tian, David Evans (2023). What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?. NeurIPS 2023.

PDF Cite ArXiv

Yiyong Liu, Michael Backes, Xiao Zhang (2023). Transferable Availability Poisoning Attacks. ArXiv.

PDF Cite Code ArXiv