Leo Yu Zhang

Venues

Frequent coauthors

Papers

1. Beyond Denial-of-Service: The Puppeteer's Attack for Fine-Grained Control in Ranking-Based Federated Learning
   WWW 2026 ·

   Zhihao Chen

   DBLP profile ↗ORCID search ↗
2. Debiased Dual-Invariant Defense for Adversarially Robust Person Re-Identification
   AAAI 2026 ·

   Yuhang Zhou

   DBLP profile ↗ORCID search ↗
3. Dual-View Inference Attack: Machine Unlearning Amplifies Privacy Exposure
   AAAI 2026 ·

   Lulu Xue

   DBLP profile ↗ORCID search ↗
4. Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation
   AAAI 2026 ·

   Shuyu Chang

   DBLP profile ↗ORCID search ↗
5. AdvEDM: Fine-grained Adversarial Attack against VLM-based Embodied Agents
   NeurIPS 2025 ·

   Yichen Wang

   DBLP profile ↗ORCID search ↗
6. BadRobot: Jailbreaking Embodied LLM Agents in the Physical World
   ICLR 2025 ·

   Hangtao Zhang

   DBLP profile ↗ORCID search ↗
7. BiMark: Unbiased Multilayer Watermarking for Large Language Models
   ICML 2025 ·

   Xiaoyan Feng

   DBLP profile ↗ORCID search ↗
8. Detecting and Corrupting Convolution-based Unlearnable Examples
   AAAI 2025 ·

   Minghui Li

   DBLP profile ↗ORCID search ↗
9. Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization
   AAAI 2025 ·

   Yechao Zhang

   DBLP profile ↗ORCID search ↗
10. MARS: A Malignity-Aware Backdoor Defense in Federated Learning
    NeurIPS 2025 ·

    Wei Wan

    DBLP profile ↗ORCID search ↗
11. MMGIA: Gradient Inversion Attack Against Multimodal Federated Learning via Intermodal Correlation
    IJCAI 2025 ·

    Lele Zheng

    DBLP profile ↗ORCID search ↗
12. NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors
    AAAI 2025 ·

    Ziqi Zhou

    DBLP profile ↗ORCID search ↗
13. Performance Guaranteed Poisoning Attacks in Federated Learning: A Sliding Mode Approach
    IJCAI 2025 ·

    Huazi Pan

    DBLP profile ↗ORCID search ↗
14. Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment
    EMNLP 2025 ·

    Tong Zhang

    DBLP profile ↗ORCID search ↗
15. TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening
    ICDM 2025 ·

    Nam Le

    DBLP profile ↗ORCID search ↗
16. Test-Time Backdoor Detection for Object Detection Models
    CVPR 2025 ·

    Hangtao Zhang

    DBLP profile ↗ORCID search ↗
17. Uncertainty-Aware Metabolic Stability Prediction with Dual-View Contrastive Learning
    ECML-PKDD 2025 ·

    Peijin Guo

    DBLP profile ↗ORCID search ↗
18. Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2
    NeurIPS 2025 ·

    Ziqi Zhou

    DBLP profile ↗ORCID search ↗
19. Conditional Backdoor Attack via JPEG Compression
    AAAI 2024 ·

    Qiuyu Duan

    DBLP profile ↗ORCID search ↗
20. DERD: Data-free Adversarial Robustness Distillation through Self-adversarial Teacher Group
    ACM MM 2024 ·

    Yuhang Zhou

    DBLP profile ↗ORCID search ↗
21. DarkFed: A Data-Free Backdoor Attack in Federated Learning
    IJCAI 2024 ·

    Minghui Li

    DBLP profile ↗ORCID search ↗
22. DarkSAM: Fooling Segment Anything Model to Segment Nothing
    NeurIPS 2024 ·

    Ziqi Zhou

    DBLP profile ↗ORCID search ↗
23. Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness in the Physical World
    IJCAI 2024 ·

    Hangtao Zhang

    DBLP profile ↗ORCID search ↗
24. IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency
    ICML 2024 ·

    Linshan Hou

    DBLP profile ↗ORCID search ↗
25. Revisiting Gradient Pruning: A Dual Realization for Defending against Gradient Attacks
    AAAI 2024 ·

    Lulu Xue

    DBLP profile ↗ORCID search ↗
26. Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation
    AAAI 2024 ·

    Di Mi

    DBLP profile ↗ORCID search ↗
27. TrustMIS: Trust-Enhanced Inference Framework for Medical Image Segmentation
    ECAI 2024 ·

    Fuyi Wang

    DBLP profile ↗ORCID search ↗