Leo Yu Zhang

42 papers at tracked venues · 28 at CORE A* · active 2024–2026

DBLP profile ↗ORCID 0000-0001-9330-2662 ↗Homepage ↗

Venues

AAAI ×9 S&P ×6 IJCAI ×4 NeurIPS ×4 ACSAC ×2 AsiaCCS ×2 ESORICS ×2 ICML ×2 USENIX Security ×2 ACM MM ×1 CVPR ×1 ECAI ×1 ECML-PKDD ×1 EMNLP ×1 ICDM ×1 ICLR ×1 NDSS ×1 WWW ×1

Frequent coauthors

Shengshan Hu

×22

Yanjun Zhang

×14

Minghui Li

×13

Ziqi Zhou

×11

Yechao Zhang

×8

Shirui Pan

×7

Xianlong Wang

×7

Lulu Xue

×6

Wei Wan

×6

Hai Jin

×6

Yichen Wang

×5

Dezhong Yao

×5

Papers

ARES: Scalable and Practical Gradient Inversion Attack in Federated Learning Through Activation Recovery
S&P 2026 ·
Zirui Gong
, Leo Yu Zhang,
Yanjun Zhang
,
Viet Vo
,
Tianqing Zhu
,
Shirui Pan
,
Cong Wang
Beyond Denial-of-Service: The Puppeteer's Attack for Fine-Grained Control in Ranking-Based Federated Learning
WWW 2026 ·
Zhihao Chen
,
Zirui Gong
,
Jianting Ning
,
Yanjun Zhang
, Leo Yu Zhang
Character-Level Perturbations Disrupt LLM Watermarks
NDSS 2026 ·
Zhaoxi Zhang
,
Xiaomei Zhang
,
Yanjun Zhang
,
He Zhang
,
Shirui Pan
,
Bo Liu
,
Asif Gill
, Leo Yu Zhang
Debiased Dual-Invariant Defense for Adversarially Robust Person Re-Identification
AAAI 2026 ·
Yuhang Zhou
,
Yanxiang Zhao
,
Zhongyun Hua
,
Zhipu Liu
,
Zhaoquan Gu
,
Qing Liao
, Leo Yu Zhang
Dual-View Inference Attack: Machine Unlearning Amplifies Privacy Exposure
AAAI 2026 ·
Lulu Xue
,
Shengshan Hu
,
Linqiang Qian
,
Peijin Guo
,
Yechao Zhang
,
Minghui Li
,
Yanjun Zhang
,
Dayong Ye
, Leo Yu Zhang
Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation
AAAI 2026 ·
Shuyu Chang
,
Haiping Huang
,
Yanjun Zhang
,
Yujin Huang
,
Fu Xiao
, Leo Yu Zhang
AdvEDM: Fine-grained Adversarial Attack against VLM-based Embodied Agents
NeurIPS 2025 ·
Yichen Wang
,
Hangtao Zhang
,
Hewen Pan
,
Ziqi Zhou
,
Xianlong Wang
,
Peijin Guo
,
Lulu Xue
,
Shengshan Hu
,
Minghui Li
, Leo Yu Zhang
BadRobot: Jailbreaking Embodied LLM Agents in the Physical World
ICLR 2025 ·
Hangtao Zhang
,
Chenyu Zhu
,
Xianlong Wang
,
Ziqi Zhou
,
Changgan Yin
,
Minghui Li
,
Lulu Xue
,
Yichen Wang
,
Shengshan Hu
,
Aishan Liu
,
Peijin Guo
, Leo Yu Zhang
BiMark: Unbiased Multilayer Watermarking for Large Language Models
ICML 2025 ·
Xiaoyan Feng
,
He Zhang
,
Yanjun Zhang
, Leo Yu Zhang,
Shirui Pan
Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning
USENIX Security 2025 ·
Dayong Ye
,
Tianqing Zhu
,
Jiayang Li
,
Kun Gao
,
Bo Liu
, Leo Yu Zhang,
Wanlei Zhou
,
Yang Zhang
Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI
USENIX Security 2025 ·
Dayong Ye
,
Tianqing Zhu
,
Shang Wang
,
Bo Liu
, Leo Yu Zhang,
Wanlei Zhou
,
Yang Zhang
Detecting and Corrupting Convolution-based Unlearnable Examples
AAAI 2025 ·
Minghui Li
,
Xianlong Wang
,
Zhifei Yu
,
Shengshan Hu
,
Ziqi Zhou
,
Longling Zhang
, Leo Yu Zhang
FLAME: Flexible and Lightweight Biometric Authentication Scheme in Malicious Environments
ACSAC 2025 ·
Fuyi Wang
,
Fangyuan Sun
,
Mingyuan Fan
,
Jianying Zhou
,
Jin Ma
,
Chao Chen
,
Jiangang Shu
, Leo Yu Zhang
Improving Generalization of Universal Adversarial Perturbation via Dynamic Maximin Optimization
AAAI 2025 ·
Yechao Zhang
,
Yingzhe Xu
,
Junyu Shi
, Leo Yu Zhang,
Shengshan Hu
,
Minghui Li
,
Yanjun Zhang
MARS: A Malignity-Aware Backdoor Defense in Federated Learning
NeurIPS 2025 ·
Wei Wan
,
Yuxuan Ning
,
Zhicong Huang
,
Cheng Hong
,
Shengshan Hu
,
Ziqi Zhou
,
Yechao Zhang
,
Tianqing Zhu
,
Wanlei Zhou
, Leo Yu Zhang
MMGIA: Gradient Inversion Attack Against Multimodal Federated Learning via Intermodal Correlation
IJCAI 2025 ·
Lele Zheng
,
Yang Cao
, Leo Yu Zhang,
Wei Wang
,
Yulong Shen
,
Xiaochun Cao
Not All Edges are Equally Robust: Evaluating the Robustness of Ranking-Based Federated Learning
S&P 2025 ·
Zirui Gong
,
Yanjun Zhang
, Leo Yu Zhang,
Zhaoxi Zhang
,
Yong Xiang
,
Shirui Pan
NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors
AAAI 2025 ·
Ziqi Zhou
,
Bowen Li
,
Yufei Song
,
Zhifei Yu
,
Shengshan Hu
,
Wei Wan
, Leo Yu Zhang,
Dezhong Yao
,
Hai Jin
Performance Guaranteed Poisoning Attacks in Federated Learning: A Sliding Mode Approach
IJCAI 2025 ·
Huazi Pan
,
Yanjun Zhang
, Leo Yu Zhang,
Scott D. Adams
,
Abbas Z. Kouzani
,
Suiyang Khoo
Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment
EMNLP 2025 ·
Tong Zhang
,
Kuofeng Gao
,
Jiawang Bai
, Leo Yu Zhang,
Xin Yin
,
Zonghui Wang
,
Shouling Ji
,
Wenzhi Chen
Secure Transfer Learning: Training Clean Model Against Backdoor in Pre-Trained Encoder and Downstream Dataset
S&P 2025 ·
Yechao Zhang
,
Yuxuan Zhou
,
Tianyu Li
,
Minghui Li
,
Shengshan Hu
,
Wei Luo
, Leo Yu Zhang
TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening
ICDM 2025 ·
Nam Le
, Leo Yu Zhang,
Kewen Liao
,
Shirui Pan
,
Wei Luo
Test-Time Backdoor Detection for Object Detection Models
CVPR 2025 ·
Hangtao Zhang
,
Yichen Wang
,
Shihui Yan
,
Chenyu Zhu
,
Ziqi Zhou
,
Linshan Hou
,
Shengshan Hu
,
Minghui Li
,
Yanjun Zhang
, Leo Yu Zhang
Uncertainty-Aware Metabolic Stability Prediction with Dual-View Contrastive Learning
ECML-PKDD 2025 ·
Peijin Guo
,
Minghui Li
,
Hewen Pan
,
Bowen Chen
,
Yang Wu
,
Zikang Guo
, Leo Yu Zhang,
Shengshan Hu
,
Shengqing Hu
Vanish into Thin Air: Cross-prompt Universal Adversarial Attacks for SAM2
NeurIPS 2025 ·
Ziqi Zhou
,
Yifan Hu
,
Yufei Song
,
Zijing Li
,
Shengshan Hu
, Leo Yu Zhang,
Dezhong Yao
,
Long Zheng
,
Hai Jin
When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning
AsiaCCS 2025 ·
Ruining Sun
,
Hongsheng Hu
,
Wei Luo
,
Zhaoxi Zhang
,
Yanjun Zhang
,
Haizhuan Yuan
, Leo Yu Zhang
Conditional Backdoor Attack via JPEG Compression
AAAI 2024 ·
Qiuyu Duan
,
Zhongyun Hua
,
Qing Liao
,
Yushu Zhang
, Leo Yu Zhang
CryptGraph: An Efficient Privacy-Enhancing Solution for Accurate Shortest Path Retrieval in Cloud Environments
AsiaCCS 2024 ·
Fuyi Wang
,
Zekai Chen
,
Lei Pan
, Leo Yu Zhang,
Jianying Zhou
DERD: Data-free Adversarial Robustness Distillation through Self-adversarial Teacher Group
ACM MM 2024 ·
Yuhang Zhou
,
Yushu Zhang
, Leo Yu Zhang,
Zhongyun Hua
DarkFed: A Data-Free Backdoor Attack in Federated Learning
IJCAI 2024 ·
Minghui Li
,
Wei Wan
,
Yuxuan Ning
,
Shengshan Hu
,
Lulu Xue
, Leo Yu Zhang,
Yichen Wang
DarkSAM: Fooling Segment Anything Model to Segment Nothing
NeurIPS 2024 ·
Ziqi Zhou
,
Yufei Song
,
Minghui Li
,
Shengshan Hu
,
Xianlong Wang
, Leo Yu Zhang,
Dezhong Yao
,
Hai Jin
Detector Collapse: Backdooring Object Detection to Catastrophic Overload or Blindness in the Physical World
IJCAI 2024 ·
Hangtao Zhang
,
Shengshan Hu
,
Yichen Wang
, Leo Yu Zhang,
Ziqi Zhou
,
Xianlong Wang
,
Yanjun Zhang
,
Chao Chen
ECLIPSE: Expunging Clean-Label Indiscriminate Poisons via Sparse Diffusion Purification
ESORICS 2024 ·
Xianlong Wang
,
Shengshan Hu
,
Yechao Zhang
,
Ziqi Zhou
, Leo Yu Zhang,
Peng Xu
,
Wei Wan
,
Hai Jin
IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency
ICML 2024 ·
Linshan Hou
,
Ruili Feng
,
Zhongyun Hua
,
Wei Luo
, Leo Yu Zhang,
Yiming Li
PointAPA: Towards Availability Poisoning Attacks in 3D Point Clouds
ESORICS 2024 ·
Xianlong Wang
,
Minghui Li
,
Peng Xu
,
Wei Liu
, Leo Yu Zhang,
Shengshan Hu
,
Yanjun Zhang
Revisiting Gradient Pruning: A Dual Realization for Defending against Gradient Attacks
AAAI 2024 ·
Lulu Xue
,
Shengshan Hu
,
Ruizhi Zhao
, Leo Yu Zhang,
Shengqing Hu
,
Lichao Sun
,
Dezhong Yao
Robust Backdoor Detection for Deep Learning via Topological Evolution Dynamics
S&P 2024 ·
Xiaoxing Mo
,
Yechao Zhang
, Leo Yu Zhang,
Wei Luo
,
Nan Sun
,
Shengshan Hu
,
Shang Gao
,
Yang Xiang
Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples
S&P 2024 ·
Ziqi Zhou
,
Minghui Li
,
Wei Liu
,
Shengshan Hu
,
Yechao Zhang
,
Wei Wan
,
Lulu Xue
, Leo Yu Zhang,
Dezhong Yao
,
Hai Jin
Stealing Watermarks of Large Language Models via Mixed Integer Programming
ACSAC 2024 ·
Zhaoxi Zhang
,
Xiaomei Zhang
,
Yanjun Zhang
, Leo Yu Zhang,
Chao Chen
,
Shengshan Hu
,
Asif Gill
,
Shirui Pan
Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation
AAAI 2024 ·
Di Mi
,
Yanjun Zhang
, Leo Yu Zhang,
Shengshan Hu
,
Qi Zhong
,
Haizhuan Yuan
,
Shirui Pan
TrustMIS: Trust-Enhanced Inference Framework for Medical Image Segmentation
ECAI 2024 ·
Fuyi Wang
,
Jinzhi Ouyang
,
Lei Pan
, Leo Yu Zhang,
Xiaoning Liu
,
Yanping Wang
,
Robin Doss
Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability
S&P 2024 ·
Yechao Zhang
,
Shengshan Hu
, Leo Yu Zhang,
Junyu Shi
,
Minghui Li
,
Xiaogeng Liu
,
Wei Wan
,
Hai Jin