← authors · overview

• Local Model Poisoning Attacks to Byzantine-Robust Federated Learning
  2019 · 174 citations
• Provably Secure Federated Learning against Malicious Clients
  2021 · 135 citations
• Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks
  2020 · 15 citations
• Backdoor Attacks to Graph Neural Networks
  2020 · 12 citations
• Poisoning Attacks to Local Differential Privacy Protocols for Key-Value Data
  2021 · 10 citations
• Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges
  2019 · 7 citations
• Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation
  2020 · 5 citations
• SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding
  2024 · 3 citations
• On the Intrinsic Differential Privacy of Bagging
  2020 · 1 citations
• FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information
  2022 · 1 citations
• Graph Neural Network Explanations are Fragile
  2024 · 1 citations
• SecInfer: Preventing Prompt Injection via Inference-time Scaling
  2025
• Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes
  2020
• REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service
  2023