default search action
Google
Google Scholar
Semantic Scholar
Internet Archive Scholar
CiteSeerX
ORCIDYiming Li 0004
Person information
- affiliation: Zhejiang University, ZJU-HIC, Hangzhou Global Scientific and Technological Innovation Center, China
- affiliation (PhD 2013): Tsinghua University, Computer Science and Technology, Tsinghua Shenzhen International Graduate School, China
Other persons with the same name
- Yiming Li (aka: Yi-Ming Li) — disambiguation page
- Yiming Li 0001
![[0000-0002-7586-4845]](https://devdomain4test.ir/img/orcid-mark.12x12.png "0000-0002-7586-4845")
— Wuhan University, School of Computer Science, China - Yiming Li 0002 — Shanghai Jiao Tong University, Department of Biomedical Engineering, China
- Yiming Li 0003 — New York University, Mechanical and Aerospace Engineering, NY, USA (and 1 more)
- Yiming Li 0005 — National Chiao Tung University, Department of Electrical and Computer Engineering, Hsinchu, Taiwan
- Yiming Li 0006 — Nanjing University, State Key Laboratory for Novel Software Technology, China
- Yiming Li 0007 — University of California, Riverside, Center for Research in Intelligent Systems, CA, USA
- Yiming Li 0008 — Zhengzhou University, China
Refine list
refinements active!
zoomed in on ?? of ?? records
view refined list in
export refined list as
showing all ?? records
Journal Articles
- 2026
[j23]Xueluan Gong, Yuji Wang, Yanjiao Chen, Haocheng Dong, Yiming Li, Mengyuan Sun, Shuaike Li, Qian Wang:
Armor: Shielding Unlearnable Examples Against Data Augmentation. IEEE Trans. Pattern Anal. Mach. Intell. 48(4): 3988-4004 (2026)- [j22]Kuofeng Gao, Yufei Zhu, Yiming Li, Jiawang Bai, Yong Yang, Zhifeng Li, Shu-Tao Xia:
Toward Dataset Copyright Evasion Attack Against Personalized Text-to-Image Diffusion Models. IEEE Trans. Inf. Forensics Secur. 21: 725-740 (2026) - [j21]Ting Qiao, Yingjia Wang, Xing Liu, Sixing Wu, Jianbin Li, Yiming Li:
Cert-SSBD: Certified Backdoor Defense With Sample-Specific Smoothing Noises. IEEE Trans. Inf. Forensics Secur. 21: 2446-2461 (2026) - 2025
- [j20]Yaguan Qian, Zejie Lian, Yiming Li, Wei Wang, Zhaoquan Gu, Bin Wang, Yanchun Zhang:
Evading backdoor defenses: Concealing genuine backdoors through scapegoat strategy. Comput. Secur. 150: 104225 (2025) - [j19]Yiming Li, Linghui Zhu, Xiaojun Jia, Yang Bai, Yong Jiang, Shu-Tao Xia, Xiaochun Cao, Kui Ren:
MOVE: Effective and Harmless Ownership Verification via Embedded External Features. IEEE Trans. Pattern Anal. Mach. Intell. 47(6): 4734-4751 (2025) - [j18]Mingyan Zhu, Yiming Li, Junfeng Guo, Tao Wei, Shu-Tao Xia, Zhan Qin:
Towards Sample-Specific Backdoor Attack With Clean Labels via Attribute Trigger. IEEE Trans. Dependable Secur. Comput. 22(5): 4685-4698 (2025) - [j17]Cheng Wei, Yang Wang, Kuofeng Gao, Shuo Shao, Yiming Li, Zhibo Wang, Zhan Qin:
PointNCBW: Toward Dataset Ownership Verification for Point Clouds via Negative Clean-Label Backdoor Watermark. IEEE Trans. Inf. Forensics Secur. 20: 191-206 (2025) - [j16]Yiming Li, Kejiang Chen, Yaofei Wang, Xin Zhang, Guanjie Wang, Weiming Zhang, Nenghai Yu:
CoAS: Composite Audio Steganography Based on Text and Speech Synthesis. IEEE Trans. Inf. Forensics Secur. 20: 5978-5991 (2025) - [j15]Linshan Hou, Wei Luo, Zhongyun Hua, Songhua Chen, Leo Yu Zhang, Yiming Li:
FLARE: Toward Universal Dataset Purification Against Backdoor Attacks. IEEE Trans. Inf. Forensics Secur. 20: 6459-6473 (2025) - [j14]Zhonghao Yang, Cheng Luo, Daojing He, Yiming Li, Yu Li:
ArcGen: Generalizing Neural Backdoor Detection Across Diverse Architectures. IEEE Trans. Inf. Forensics Secur. 20: 10082-10097 (2025) - 2024
- [j13]Chuanbiao Song, Yanbo Fan, Aoyang Zhou, Baoyuan Wu, Yiming Li, Zhifeng Li, Kun He:
Regional Adversarial Training for Better Robust Generalization. Int. J. Comput. Vis. 132(10): 4510-4520 (2024) - [j12]Naiqi Li, Zhikang Xia, Yiming Li, Ercan E. Kuruoglu, Yong Jiang, Shu-Tao Xia:
Portfolio Selection via Graph-Aware Gaussian Processes With Generalized Gaussian Likelihood. IEEE Trans. Artif. Intell. 5(2): 505-515 (2024) - [j11]Naiqi Li, Wenjie Li, Yinghua Gao, Yiming Li, Jigang Bao, Ercan E. Kuruoglu, Yong Jiang, Shu-Tao Xia:
Node-Level Graph Regression With Deep Gaussian Process Models. IEEE Trans. Artif. Intell. 5(6): 3257-3269 (2024) - [j10]Hanbo Cai, Pengcheng Zhang, Hai Dong, Yan Xiao, Stefanos Koffas, Yiming Li:
Toward Stealthy Backdoor Attacks Against Speech Recognition via Elements of Sound. IEEE Trans. Inf. Forensics Secur. 19: 5852-5866 (2024) - [j9]Yinghua Gao, Yiming Li, Xueluan Gong, Zhifeng Li, Shu-Tao Xia, Qian Wang:
Backdoor Attack With Sparse and Invisible Trigger. IEEE Trans. Inf. Forensics Secur. 19: 6364-6376 (2024) - [j8]Yiming Li, Yong Jiang, Zhifeng Li, Shu-Tao Xia:
Backdoor Learning: A Survey. IEEE Trans. Neural Networks Learn. Syst. 35(1): 5-22 (2024) - 2023
- [j7]Yinghua Gao, Yiming Li, Linghui Zhu, Dongxian Wu, Yong Jiang, Shu-Tao Xia:
Not All Samples Are Born Equal: Towards Effective Clean-Label Backdoor Attacks. Pattern Recognit. 139: 109512 (2023) - [j6]Yiming Li, Mingyan Zhu, Xue Yang, Yong Jiang, Tao Wei, Shu-Tao Xia:
Black-Box Dataset Ownership Verification via Backdoor Watermarking. IEEE Trans. Inf. Forensics Secur. 18: 2318-2332 (2023) - 2022
- [j5]Linghui Zhu, Xinyi Liu, Yiming Li, Xue Yang, Shu-Tao Xia, Rongxing Lu:
A Fine-Grained Differentially Private Federated Learning Against Leakage From Gradients. IEEE Internet Things J. 9(13): 11500-11512 (2022) - [j4]Jiawang Bai, Yiming Li, Jiawei Li, Xue Yang, Yong Jiang, Shu-Tao Xia:
Multinomial random forest. Pattern Recognit. 122: 108331 (2022) - [j3]Yiming Li, Baoyuan Wu, Yan Feng, Yanbo Fan, Yong Jiang, Zhifeng Li, Shu-Tao Xia:
Semi-supervised robust training with generalized perturbed neighborhood. Pattern Recognit. 124: 108472 (2022) - 2020
- [j2]Jiawei Li, Yiming Li, Xingchun Xiang, Shu-Tao Xia, Siyi Dong, Yun Cai:
TNT: An Interpretable Tree-Network-Tree Learning Framework using Knowledge Distillation. Entropy 22(11): 1203 (2020) - 2019
- [j1]Jiawei Li, Yiming Li, Jiacheng Yang, Taian Guo, Shu-Tao Xia:
UA-DRN: Unbiased Aggregation of Deep Neural Networks for Regression Ensemble. Aust. J. Intell. Inf. Process. Syst. 15(2): 86-93 (2019)
Conference and Workshop Papers
- 2026
- [c45]Shuo Shao, Yiming Li, Hongwei Yao, Yifei Chen, Yuchen Yang, Zhan Qin:
Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation. WWW 2026: 2637-2648 - 2025
- [c44]Qingjie Zhang, Di Wang, Haoting Qian, Yiming Li, Tianwei Zhang, Minlie Huang, Ke Xu, Hewu Li, Liu Yan, Han Qiu:
Understanding the Dark Side of LLMs' Intrinsic Self-Correction. ACL (1) 2025: 27066-27101 - [c43]Zilan Wang, Junfeng Guo, Jiacheng Zhu, Yiming Li, Heng Huang, Muhao Chen, Zhengzhong Tu:
SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models. CVPR 2025: 8213-8224 - [c42]Yukun Chen, Shuo Shao, Enhao Huang, Yiming Li, Pin-Yu Chen, Zhan Qin, Kui Ren:
REFINE: Inversion-Free Backdoor Defense via Model Reprogramming. ICLR 2025 - [c41]Runyi Hu, Jie Zhang, Yiming Li, Jiwei Li, Qing Guo, Han Qiu, Tianwei Zhang:
VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking. ICLR 2025 - [c40]Biao Yi, Tiansheng Huang, Sishuo Chen, Tong Li, Zheli Liu, Zhixuan Chu, Yiming Li:
Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models. ICLR 2025 - [c39]Qingjie Zhang, Han Qiu, Di Wang, Yiming Li, Tianwei Zhang, Wenyu Zhu, Haiqin Weng, Liu Yan, Chao Zhang:
A Benchmark for Semantic Sensitive Information in LLMs Outputs. ICLR 2025 - [c38]Yutong Wu, Jie Zhang, Yiming Li, Chao Zhang, Qing Guo, Han Qiu, Nils Lukas, Tianwei Zhang:
Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems. ICML 2025 - [c37]Shuo Shao, Yiming Li, Hongwei Yao, Yiling He, Zhan Qin, Kui Ren:
Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution. NDSS 2025 - [c36]Wenjie Qu, Yuguang Zhou, Yongji Wu, Tingsong Xiao, Binhang Yuan, Yiming Li, Jiaheng Zhang:
Prompt Inversion Attack Against Collaborative Inference of Large Language Models. SP 2025: 1695-1712 - [c35]Boheng Li, Yanhao Wei, Yankai Fu, Zhenting Wang, Yiming Li, Jie Zhang, Run Wang, Tianwei Zhang:
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models. SP 2025: 2564-2582 - [c34]Yu He, Boheng Li, Liu Liu, Zhongjie Ba, Wei Dong, Yiming Li, Zhan Qin, Kui Ren, Chun Chen:
Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models. USENIX Security Symposium 2025: 1609-1628 - 2024
- [c33]Biao Yi, Sishuo Chen, Yiming Li, Tong Li, Baolei Zhang, Zheli Liu:
BadActs: A Universal Backdoor Defense in the Activation Space. ACL (Findings) 2024: 5339-5352 - [c32]Zhixuan Chu, Hui Ding, Guang Zeng, Shiyu Wang, Yiming Li:
Causal Interventional Prediction System for Robust and Explainable Effect Forecasting. CIKM 2024: 4431-4438 - [c31]Sheng Yang, Jiawang Bai, Kuofeng Gao, Yong Yang, Yiming Li, Shu-Tao Xia:
Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers. CVPR 2024: 24431-24441 - [c30]Fengyuan Liu, Haochen Luo, Yiming Li, Philip Torr, Jindong Gu:
Which Model Generated This Image? A Model-Agnostic Approach for Origin Attribution. ECCV (62) 2024: 282-301 - [c29]Xiong Xu, Kunzhe Huang, Yiming Li, Zhan Qin, Kui Ren:
Towards Reliable and Efficient Backdoor Trigger Inversion via Decoupling Benign Features. ICLR 2024 - [c28]Mengxi Ya, Yiming Li, Tao Dai, Bin Wang, Yong Jiang, Shu-Tao Xia:
Towards Faithful XAI Evaluation via Generalization-Limited Backdoor Watermark. ICLR 2024 - [c27]Linshan Hou, Ruili Feng, Zhongyun Hua, Wei Luo, Leo Yu Zhang, Yiming Li:
IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency. ICML 2024: 18992-19022 - [c26]Boheng Li, Yishuo Cai, Jisong Cai, Yiming Li, Han Qiu, Run Wang, Tianwei Zhang:
Purifying Quantization-conditioned Backdoors via Layer-wise Activation Correction with Distribution Approximation. ICML 2024: 27439-27456 - [c25]Najeeb Moharram Jebreel, Josep Domingo-Ferrer, Yiming Li:
Defending Against Backdoor Attacks by Layer-wise Feature Analysis (Extended Abstract). IJCAI 2024: 8416-8420 - [c24]Junfeng Guo, Yiming Li, Ruibo Chen, Yihan Wu, Chenxi Liu, Heng Huang:
ZeroMark: Towards Dataset Ownership Verification without Disclosing Watermark. NeurIPS 2024 - 2023
- [c23]Bangyan He, Jian Liu, Yiming Li, Siyuan Liang, Jingzhi Li, Xiaojun Jia, Xiaochun Cao:
Generating Transferable 3D Adversarial Point Cloud via Random Perturbation Factorization. AAAI 2023: 764-772 - [c22]Chengxiao Luo, Yiming Li, Yong Jiang, Shu-Tao Xia:
Untargeted Backdoor Attack Against Object Detection. ICASSP 2023: 1-5 - [c21]Tong Xu, Yiming Li, Yong Jiang, Shu-Tao Xia:
BATT: Backdoor Attack with Transformation-Based Triggers. ICASSP 2023: 1-5 - [c20]Sheng Yang, Yiming Li, Yong Jiang, Shu-Tao Xia:
Backdoor Defense via Suppressing Model Shortcuts. ICASSP 2023: 1-5 - [c19]Jianshuo Dong, Han Qiu, Yiming Li, Tianwei Zhang, Yuanjie Li, Zeqi Lai, Chao Zhang, Shu-Tao Xia:
One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training. ICCV 2023: 4665-4675 - [c18]Guanhao Gan, Yiming Li, Dongxian Wu, Shu-Tao Xia:
Towards Robust Model Watermark via Reducing Parametric Vulnerability. ICCV 2023: 4728-4738 - [c17]Junfeng Guo, Yiming Li, Xun Chen, Hanqing Guo, Lichao Sun, Cong Liu:
SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency. ICLR 2023 - [c16]Junfeng Guo, Yiming Li, Lixu Wang, Shu-Tao Xia, Heng Huang, Cong Liu, Bo Li:
Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand. NeurIPS 2023 - [c15]Najeeb Moharram Jebreel, Josep Domingo-Ferrer, Yiming Li:
Defending Against Backdoor Attacks by Layer-wise Feature Analysis. PAKDD (2) 2023: 428-440 - 2022
- [c14]Yiming Li, Linghui Zhu, Xiaojun Jia, Yong Jiang, Shu-Tao Xia, Xiaochun Cao:
Defending against Model Stealing via Verifying Embedded External Features. AAAI 2022: 1464-1472 - [c13]Hongwei Li, Tao Dai, Yiming Li, Xueyi Zou, Shu-Tao Xia:
Adaptive Local Implicit Image Function for Arbitrary-Scale Super-Resolution. ICIP 2022: 4033-4037 - [c12]Yiming Li, Haoxiang Zhong, Xingjun Ma, Yong Jiang, Shu-Tao Xia:
Few-Shot Backdoor Attacks on Visual Object Tracking. ICLR 2022 - [c11]Kunzhe Huang, Yiming Li, Baoyuan Wu, Zhan Qin, Kui Ren:
Backdoor Defense via Decoupling the Training Process. ICLR 2022 - [c10]Yiming Li, Yang Bai, Yong Jiang, Yong Yang, Shu-Tao Xia, Bo Li:
Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection. NeurIPS 2022 - 2021
- [c9]Tongqing Zhai, Yiming Li, Ziqi Zhang, Baoyuan Wu, Yong Jiang, Shu-Tao Xia:
Backdoor Attack Against Speaker Verification. ICASSP 2021: 2560-2564 - [c8]Yiming Li, Yang Zhang, Qingtao Tang, Weipéng Huáng, Yong Jiang, Shu-Tao Xia:
t-k-means: A ROBUST AND STABLE k-means VARIANT. ICASSP 2021: 3120-3124 - [c7]Yiming Li, Peidong Liu, Yong Jiang, Shu-Tao Xia:
Visual Privacy Protection via Mapping Distortion. ICASSP 2021: 3740-3744 - [c6]Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, Siwei Lyu:
Invisible Backdoor Attack with Sample-Specific Triggers. ICCV 2021: 16443-16452 - [c5]Jiawang Bai, Baoyuan Wu, Yong Zhang, Yiming Li, Zhifeng Li, Shu-Tao Xia:
Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits. ICLR 2021 - 2020
- [c4]Jiawang Bai, Bin Chen, Yiming Li, Dongxian Wu, Weiwei Guo, Shu-Tao Xia, En-Hui Yang:
Targeted Attack for Deep Hashing Based Retrieval. ECCV (1) 2020: 618-634 - [c3]Jia Xu, Yiming Li, Yong Jiang, Shu-Tao Xia:
Adversarial Defense Via Local Flatness Regularization. ICIP 2020: 2196-2200 - [c2]Yinghua Gao, Naiqi Li, Ning Ding, Yiming Li, Tao Dai, Shu-Tao Xia:
Generalized Local Aggregation for Large Scale Gaussian Process Regression. IJCNN 2020: 1-8 - [c1]Jiawei Li, Zhilong Zheng, Yiming Li, Rubao Ma, Shu-Tao Xia:
Multitask Deep Learning for Edge Intelligence Video Surveillance System. INDIN 2020: 579-584
Informal and Other Publications
- 2026
- [i93]Enhao Huang, Tongtong Pan, Shuhuai Zhang, Qishu Jin, Liheng Zheng, Kaichun Hu, Yiming Li, Zhan Qin, Kui Ren:
DualMind: Towards Understanding Cognitive-Affective Cascades in Public Opinion Dissemination via Multi-Agent Simulation. CoRR abs/2602.02534 (2026) - [i92]Yuchen Yang, Wenze Lin, Enhao Huang, Zhixuan Chu, Hongbin Zhou, Lan Tao, Yiming Li, Zhan Qin, Kui Ren:
Explainable Token-level Noise Filtering for LLM Fine-tuning Datasets. CoRR abs/2602.14536 (2026) - [i91]Yiming Li, Dacheng Tao:
Position: AI Agents Are Not (Yet) a Panacea for Social Simulation. CoRR abs/2603.00113 (2026) - [i90]Yu He, Haozhe Zhu, Yiming Li, Shuo Shao, Hongwei Yao, Zhihao Liu, Zhan Qin:
AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations. CoRR abs/2603.10749 (2026) - [i89]Jiale Meng, Jie Zhang, Runyi Hu, Zhe-Ming Lu, Tianwei Zhang, Yiming Li:
TRACE: Structure-Aware Character Encoding for Robust and Generalizable Document Watermarking. CoRR abs/2603.12873 (2026) - 2025
- [i88]Xueluan Gong, Yuji Wang, Yanjiao Chen, Haocheng Dong, Yiming Li, Mengyuan Sun, Shuaike Li, Qian Wang, Chen Chen:
ARMOR: Shielding Unlearnable Examples against Data Augmentation. CoRR abs/2501.08862 (2025) - [i87]Runyi Hu, Jie Zhang, Yiming Li, Jiwei Li, Qing Guo, Han Qiu, Tianwei Zhang:
VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking. CoRR abs/2501.14195 (2025) - [i86]Shuo Shao, Haozhe Zhu, Hongwei Yao, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren:
FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint. CoRR abs/2501.15509 (2025) - [i85]Xingjun Ma, Yifeng Gao, Yixu Wang, Ruofan Wang, Xin Wang, Ye Sun, Yifan Ding, Hengyuan Xu, Yunhao Chen, Yunhan Zhao, Hanxun Huang, Yige Li, Jiaming Zhang, Xiang Zheng, Yang Bai, Zuxuan Wu, Xipeng Qiu, Jingfeng Zhang, Yiming Li, Jun Sun, Cong Wang, Jindong Gu, Baoyuan Wu, Siheng Chen, Tianwei Zhang, Yang Liu, Mingming Gong, Tongliang Liu, Shirui Pan, Cihang Xie, Tianyu Pang, Yinpeng Dong, Ruoxi Jia, Yang Zhang, Shiqing Ma, Xiangyu Zhang, Neil Gong, Chaowei Xiao, Sarah M. Erfani, Bo Li, Masashi Sugiyama, Dacheng Tao, James Bailey, Yu-Gang Jiang:
Safety at Scale: A Comprehensive Survey of Large Model Safety. CoRR abs/2502.05206 (2025) - [i84]Junfeng Guo, Yiming Li, Ruibo Chen, Yihan Wu, Chenxi Liu, Yanshuo Chen, Heng Huang:
Towards Copyright Protection for Knowledge Bases of Retrieval-augmented Language Models via Ownership Verification with Reasoning. CoRR abs/2502.10440 (2025) - [i83]Yukun Chen, Shuo Shao, Enhao Huang, Yiming Li, Pin-Yu Chen, Zhan Qin, Kui Ren:
REFINE: Inversion-Free Backdoor Defense via Model Reprogramming. CoRR abs/2502.18508 (2025) - [i82]Yu He, Boheng Li, Liu Liu, Zhongjie Ba, Wei Dong, Yiming Li, Zhan Qin, Kui Ren, Chun Chen:
Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models. CoRR abs/2502.18943 (2025) - [i81]Yiming Li, Kaiying Yan, Shuo Shao, Tongqing Zhai, Shu-Tao Xia, Zhan Qin, Dacheng Tao:
CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking. CoRR abs/2503.05794 (2025) - [i80]Wenjie Qu, Yuguang Zhou, Yongji Wu, Tingsong Xiao, Binhang Yuan, Yiming Li, Jiaheng Zhang:
Prompt Inversion Attack against Collaborative Inference of Large Language Models. CoRR abs/2503.09022 (2025) - [i79]Yaopeng Wang, Huiyu Xu, Zhibo Wang, Jiacheng Du, Zhichao Li, Yiming Li, Qiu Wang, Kui Ren:
PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning. CoRR abs/2504.10853 (2025) - [i78]Shiqian Zhao, Jiayang Liu, Yiming Li, Runyi Hu, Xiaojun Jia, Wenshu Fan, Xinfeng Li, Jie Zhang, Wei Dong, Tianwei Zhang, Luu Anh Tuan:
Inception: Jailbreak the Memory Mechanism of Text-to-Image Generation Systems. CoRR abs/2504.20376 (2025) - [i77]Kuofeng Gao, Yufei Zhu, Yiming Li, Jiawang Bai, Yong Yang, Zhifeng Li, Shu-Tao Xia:
Towards Dataset Copyright Evasion Attack against Personalized Text-to-Image Diffusion Models. CoRR abs/2505.02824 (2025) - [i76]Kai Li, Can Shen, Yile Liu, Jirui Han, Kelong Zheng, Xuechao Zou, Zhe Wang, Xingjian Du, Shun Zhang, Hanjun Luo, Yingbin Jin, Xinxin Xing, Ziyang Ma, Yue Liu, Xiaojun Jia, Yifan Zhang, Junfeng Fang, Kun Wang, Yibo Yan, Haoyang Li, Yiming Li, Xiaobin Zhuang, Yang Liu, Haibo Hu, Zhuo Chen, Zhizheng Wu, Xiaolin Hu, Eng-Siong Chng, XiaoFeng Wang, Wenyuan Xu, Wei Dong, Xinfeng Li:
AudioTrust: Benchmarking the Multifaceted Trustworthiness of Audio Large Language Models. CoRR abs/2505.16211 (2025) - [i75]Xiaobei Yan, Yiming Li, Zhaoxin Fan, Han Qiu, Tianwei Zhang:
BitHydra: Towards Bit-flip Inference Cost Attack against Large Language Models. CoRR abs/2505.16670 (2025) - [i74]Xiaojun Jia, Sensen Gao, Simeng Qin, Tianyu Pang, Chao Du, Yihao Huang, Xinfeng Li, Yiming Li, Bo Li, Yang Liu:
Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment. CoRR abs/2505.21494 (2025) - [i73]Ting Qiao, Yiming Li, Jianbin Li, Yingjia Wang, Leyi Qi, Junfeng Guo, Ruili Feng, Dacheng Tao:
CertDW: Towards Certified Dataset Ownership Verification via Conformal Prediction. CoRR abs/2506.13160 (2025) - [i72]Biao Yi, Tiansheng Huang, Sishuo Chen, Tong Li, Zheli Liu, Zhixuan Chu, Yiming Li:
Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models. CoRR abs/2506.16447 (2025) - [i71]Jiale Meng, Yiming Li, Zhe-Ming Lu, Zewei He, Hao Luo, Tianwei Zhang:
CoreMark: Toward Robust and Universal Text Watermarking Technique. CoRR abs/2506.23066 (2025) - [i70]Linghui Zhu, Yiming Li, Haiqin Weng, Yan Liu, Tianwei Zhang, Shu-Tao Xia, Zhi Wang:
Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features. CoRR abs/2507.00724 (2025) - [i69]Yiming Li, Shuo Shao, Yu He, Junfeng Guo, Tianwei Zhang, Zhan Qin, Pin-Yu Chen, Michael Backes, Philip Torr, Dacheng Tao, Kui Ren:
Rethinking Data Protection in the (Generative) Artificial Intelligence Era. CoRR abs/2507.03034 (2025) - [i68]Shuo Shao, Yiming Li, Mengren Zheng, Zhiyang Hu, Yukun Chen, Boheng Li, Yu He, Junfeng Guo, Tianwei Zhang, Dacheng Tao, Zhan Qin:
DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective. CoRR abs/2507.05622 (2025) - [i67]Yanghao Su, Jie Zhang, Yiming Li, Tianwei Zhang, Qing Guo, Weiming Zhang, Nenghai Yu, Nils Lukas, Wenbo Zhou:
BURN: Backdoor Unlearning via Adversarial Boundary Analysis. CoRR abs/2507.10491 (2025) - [i66]Boheng Li, Renjie Gu, Junjie Wang, Leyi Qi, Yiming Li, Run Wang, Zhan Qin, Tianwei Zhang:
Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning. CoRR abs/2507.16302 (2025) - [i65]Boheng Li, Junjie Wang, Yiming Li, Zhiyang Hu, Leyi Qi, Jianshuo Dong, Run Wang, Han Qiu, Zhan Qin, Tianwei Zhang:
DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling. CoRR abs/2507.16329 (2025) - [i64]Biao Yi, Zekun Fei, Jianing Geng, Tong Li, Lihai Nie, Zheli Liu, Yiming Li:
BadReasoner: Planting Tunable Overthinking Backdoors into Large Reasoning Models for Fun or Profit. CoRR abs/2507.18305 (2025) - [i63]Wenjie Li, Siying Gu, Yiming Li, Kangjie Chen, Zhili Chen, Tianwei Zhang, Shu-Tao Xia, Dacheng Tao:
Coward: Toward Practical Proactive Federated Backdoor Defense via Collision-based Watermark. CoRR abs/2508.02115 (2025) - [i62]Shiqian Zhao, Chong Wang, Yiming Li, Yihao Huang, Wenjie Qu, Siew-Kei Lam, Yi Xie, Kangjie Chen, Jie Zhang, Tianwei Zhang:
Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models. CoRR abs/2508.06837 (2025) - [i61]Yutong Wu, Jie Zhang, Yiming Li, Chao Zhang, Qing Guo, Nils Lukas, Tianwei Zhang:
Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems. CoRR abs/2508.09230 (2025) - [i60]Shuo Shao, Yiming Li, Yu He, Hongwei Yao, Wenyuan Yang, Dacheng Tao, Zhan Qin:
SoK: Large Language Model Copyright Auditing via Fingerprinting. CoRR abs/2508.19843 (2025) - [i59]Yuchen Yang, Yiming Li, Hongwei Yao, Enhao Huang, Shuo Shao, Bingrun Yang, Zhibo Wang, Dacheng Tao, Zhan Qin:
PromptCOS: Towards System Prompt Copyright Auditing for LLMs via Content-level Output Similarity. CoRR abs/2509.03117 (2025) - [i58]Yukun Chen, Boheng Li, Yu Yuan, Leyi Qi, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren:
Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack. CoRR abs/2509.23871 (2025) - [i57]Yu He, Yifei Chen, Yiming Li, Shuo Shao, Leyi Qi, Boheng Li, Dacheng Tao, Zhan Qin:
External Data Extraction Attacks against Retrieval-Augmented Large Language Models. CoRR abs/2510.02964 (2025) - [i56]Kuofeng Gao, Yiming Li, Chao Du, Xin Wang, Xingjun Ma, Shu-Tao Xia, Tianyu Pang:
Imperceptible Jailbreaking against Large Language Models. CoRR abs/2510.05025 (2025) - [i55]Shuo Shao, Yiming Li, Hongwei Yao, Yifei Chen, Yuchen Yang, Zhan Qin:
Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation. CoRR abs/2510.06605 (2025) - [i54]Wenyuan Yang, Yichen Sun, Changzheng Chen, Zhixuan Chu, Jiaheng Zhang, Yiming Li, Dacheng Tao:
SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking. CoRR abs/2511.04711 (2025) - [i53]Zhonghao Yang, Cheng Luo, Daojing He, Yiming Li, Yu Li:
ArcGen: Generalizing Neural Backdoor Detection Across Diverse Architectures. CoRR abs/2512.19730 (2025) - [i52]Songze Li, Jiameng Cheng, Yiming Li, Xiaojun Jia, Dacheng Tao:
Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography. CoRR abs/2512.20168 (2025) - 2024
- [i51]Fengyuan Liu, Haochen Luo, Yiming Li, Philip Torr, Jindong Gu:
Model-agnostic Origin Attribution of Generated Images with Few-shot Examples. CoRR abs/2404.02697 (2024) - [i50]Shuo Shao, Yiming Li, Hongwei Yao, Yiling He, Zhan Qin, Kui Ren:
Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution. CoRR abs/2405.04825 (2024) - [i49]Linshan Hou, Ruili Feng, Zhongyun Hua, Wei Luo, Leo Yu Zhang, Yiming Li:
IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency. CoRR abs/2405.09786 (2024) - [i48]Sheng Yang, Jiawang Bai, Kuofeng Gao, Yong Yang, Yiming Li, Shutao Xia:
Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers. CoRR abs/2405.10612 (2024) - [i47]Biao Yi, Sishuo Chen, Yiming Li, Tong Li, Baolei Zhang, Zheli Liu:
BadActs: A Universal Backdoor Defense in the Activation Space. CoRR abs/2405.11227 (2024) - [i46]Yuchen Yang, Hongwei Yao, Bingrun Yang, Yiling He, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren:
TAPI: Towards Target-Specific and Adversarial Prompt Injection against Code LLMs. CoRR abs/2407.09164 (2024) - [i45]Zhixuan Chu, Hui Ding, Guang Zeng, Shiyu Wang, Yiming Li:
Causal Interventional Prediction System for Robust and Explainable Effect Forecasting. CoRR abs/2407.19688 (2024) - [i44]Cheng Wei, Yang Wang, Kuofeng Gao, Shuo Shao, Yiming Li, Zhibo Wang, Zhan Qin:
PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark. CoRR abs/2408.05500 (2024) - [i43]Yifei Ge, Weisong Sun, Yihang Lou, Chunrong Fang, Yiran Zhang, Yiming Li, Xiaofang Zhang, Yang Liu, Zhihong Zhao, Zhenyu Chen:
Demonstration Attack against In-Context Learning for Code Intelligence. CoRR abs/2410.02841 (2024) - [i42]Boheng Li, Yanhao Wei, Yankai Fu, Zhenting Wang, Yiming Li, Jie Zhang, Run Wang, Tianwei Zhang:
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models. CoRR abs/2410.10437 (2024) - [i41]Kui Ren, Ziqi Yang, Li Lu, Jian Liu, Yiming Li, Jie Wan, Xiaodi Zhao, Xianheng Feng, Shuo Shao:
SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI. CoRR abs/2411.11478 (2024) - [i40]Linshan Hou, Wei Luo, Zhongyun Hua, Songhua Chen, Leo Yu Zhang, Yiming Li:
FLARE: Towards Universal Dataset Purification against Backdoor Attacks. CoRR abs/2411.19479 (2024) - [i39]Zilan Wang, Junfeng Guo, Jiacheng Zhu, Yiming Li, Heng Huang, Muhao Chen, Zhengzhong Tu:
SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models. CoRR abs/2412.04852 (2024) - [i38]Runyi Hu, Jie Zhang, Yiming Li, Jiwei Li, Qing Guo, Han Qiu, Tianwei Zhang:
SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution. CoRR abs/2412.10049 (2024) - [i37]Qingjie Zhang, Han Qiu, Di Wang, Haoting Qian, Yiming Li, Tianwei Zhang, Minlie Huang:
Understanding the Dark Side of LLMs' Intrinsic Self-Correction. CoRR abs/2412.14959 (2024) - 2023
- [i36]Yiming Li, Mengxi Ya, Yang Bai, Yong Jiang, Shu-Tao Xia:
BackdoorBox: A Python Toolbox for Backdoor Learning. CoRR abs/2302.01762 (2023) - [i35]Junfeng Guo, Yiming Li, Xun Chen, Hanqing Guo, Lichao Sun, Cong Liu:
SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency. CoRR abs/2302.03251 (2023) - [i34]Najeeb Moharram Jebreel, Josep Domingo-Ferrer, Yiming Li:
Defending Against Backdoor Attacks by Layer-wise Feature Analysis. CoRR abs/2302.12758 (2023) - [i33]Yinghua Gao, Yiming Li, Xueluan Gong, Shu-Tao Xia, Qian Wang:
Backdoor Attack with Sparse and Invisible Trigger. CoRR abs/2306.06209 (2023) - [i32]Hanbo Cai, Pengcheng Zhang, Hai Dong, Yan Xiao, Stefanos Koffas, Yiming Li:
Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound. CoRR abs/2307.08208 (2023) - [i31]Jianshuo Dong, Han Qiu, Yiming Li, Tianwei Zhang, Yuanjie Li, Zeqi Lai, Chao Zhang, Shu-Tao Xia:
One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training. CoRR abs/2308.07934 (2023) - [i30]Guanhao Gan, Yiming Li, Dongxian Wu, Shutao Xia:
Towards Robust Model Watermark via Reducing Parametric Vulnerability. CoRR abs/2309.04777 (2023) - [i29]Junfeng Guo, Yiming Li, Lixu Wang, Shu-Tao Xia, Heng Huang, Cong Liu, Bo Li:
Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand. CoRR abs/2310.14942 (2023) - [i28]Yiming Li, Mingyan Zhu, Junfeng Guo, Tao Wei, Shu-Tao Xia, Zhan Qin:
Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger. CoRR abs/2312.04584 (2023) - 2022
- [i27]Yiming Li, Haoxiang Zhong, Xingjun Ma, Yong Jiang, Shu-Tao Xia:
Few-Shot Backdoor Attacks on Visual Object Tracking. CoRR abs/2201.13178 (2022) - [i26]Kunzhe Huang, Yiming Li, Baoyuan Wu, Zhan Qin, Kui Ren:
Backdoor Defense via Decoupling the Training Process. CoRR abs/2202.03423 (2022) - [i25]Yiming Li, Linghui Zhu, Xiaojun Jia, Yang Bai, Yong Jiang, Shu-Tao Xia, Xiaochun Cao:
MOVE: Effective and Harmless Ownership Verification via Embedded External Features. CoRR abs/2208.02820 (2022) - [i24]Hongwei Li, Tao Dai, Yiming Li, Xueyi Zou, Shu-Tao Xia:
Adaptive Local Implicit Image Function for Arbitrary-scale Super-resolution. CoRR abs/2208.04318 (2022) - [i23]Yiming Li, Mingyan Zhu, Xue Yang, Yong Jiang, Shu-Tao Xia:
Black-box Ownership Verification for Dataset Protection via Backdoor Watermarking. CoRR abs/2209.06015 (2022) - [i22]Yiming Li, Yang Bai, Yong Jiang, Yong Yang, Shu-Tao Xia, Bo Li:
Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection. CoRR abs/2210.00875 (2022) - [i21]Tong Xu, Yiming Li, Yong Jiang, Shu-Tao Xia:
BATT: Backdoor Attack with Transformation-based Triggers. CoRR abs/2211.01806 (2022) - [i20]Sheng Yang, Yiming Li, Yong Jiang, Shu-Tao Xia:
Backdoor Defense via Suppressing Model Shortcuts. CoRR abs/2211.05631 (2022) - [i19]Chengxiao Luo, Yiming Li, Yong Jiang, Shu-Tao Xia:
Untargeted Backdoor Attack against Object Detection. CoRR abs/2211.05638 (2022) - 2021
- [i18]Jiawang Bai, Baoyuan Wu, Yong Zhang, Yiming Li, Zhifeng Li, Shu-Tao Xia:
Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits. CoRR abs/2102.10496 (2021) - [i17]Yiming Li, Yanjie Li, Yalei Lv, Yong Jiang, Shu-Tao Xia:
Hidden Backdoor Attack against Semantic Segmentation Models. CoRR abs/2103.04038 (2021) - [i16]Yiming Li, Tongqing Zhai, Yong Jiang, Zhifeng Li, Shu-Tao Xia:
Backdoor Attack in the Physical World. CoRR abs/2104.02361 (2021) - [i15]Chuanbiao Song, Yanbo Fan, Yichen Yang, Baoyuan Wu, Yiming Li, Zhifeng Li, Kun He:
Regional Adversarial Training for Better Robust Generalization. CoRR abs/2109.00678 (2021) - [i14]Yiming Li, Linghui Zhu, Xiaojun Jia, Yong Jiang, Shu-Tao Xia, Xiaochun Cao:
Defending against Model Stealing via Verifying Embedded External Features. CoRR abs/2112.03476 (2021) - 2020
- [i13]Yiming Li, Baoyuan Wu, Yan Feng, Yanbo Fan, Yong Jiang, Zhifeng Li, Shutao Xia:
Toward Adversarial Robustness via Semi-supervised Robust Training. CoRR abs/2003.06974 (2020) - [i12]Yiming Li, Tongqing Zhai, Baoyuan Wu, Yong Jiang, Zhifeng Li, Shutao Xia:
Rethinking the Trigger of Backdoor Attack. CoRR abs/2004.04692 (2020) - [i11]Jiawang Bai, Bin Chen, Yiming Li, Dongxian Wu, Weiwei Guo, Shu-Tao Xia, En-Hui Yang:
Targeted Attack for Deep Hashing based Retrieval. CoRR abs/2004.07955 (2020) - [i10]Yiming Li, Baoyuan Wu, Yong Jiang, Zhifeng Li, Shu-Tao Xia:
Backdoor Learning: A Survey. CoRR abs/2007.08745 (2020) - [i9]Yiming Li, Jiawang Bai, Jiawei Li, Xue Yang, Yong Jiang, Shu-Tao Xia:
Rectified Decision Trees: Exploring the Landscape of Interpretable and Effective Machine Learning. CoRR abs/2008.09413 (2020) - [i8]Yiming Li, Ziqi Zhang, Jiawang Bai, Baoyuan Wu, Yong Jiang, Shu-Tao Xia:
Open-sourced Dataset Protection via Backdoor Watermarking. CoRR abs/2010.05821 (2020) - [i7]Tongqing Zhai, Yiming Li, Ziqi Zhang, Baoyuan Wu, Yong Jiang, Shu-Tao Xia:
Backdoor Attack against Speaker Verification. CoRR abs/2010.11607 (2020) - [i6]Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, Siwei Lyu:
Backdoor Attack with Sample-Specific Triggers. CoRR abs/2012.03816 (2020) - 2019
- [i5]Yiming Li, Jiawang Bai, Qingtao Tang, Yong Jiang, Chun Li, Shutao Xia:
Multinomial Random Forests: Fill the Gap between Theoretical Consistency and Empirical Soundness. CoRR abs/1903.04003 (2019) - [i4]Jiawang Bai, Yiming Li, Jiawei Li, Yong Jiang, Shu-Tao Xia:
Rectified Decision Trees: Towards Interpretability, Compression and Empirical Soundness. CoRR abs/1903.05965 (2019) - [i3]Yang Zhang, Qingtao Tang, Yiming Li, Weipéng Huáng, Shutao Xia:
t-k-means: A k-means Variant with Robustness and Stability. CoRR abs/1907.07442 (2019) - [i2]Jia Xu, Yiming Li, Yang Bai, Yong Jiang, Shu-Tao Xia:
Adversarial Defense Via Local Flatness Regularization. CoRR abs/1910.12165 (2019) - [i1]Peidong Liu, Yiming Li, Yong Jiang, Shu-Tao Xia:
Visual Privacy Protection via Mapping Distortion. CoRR abs/1911.01769 (2019)
Coauthor Index
Shutao Xia
aka: Shu-Tao Xia
aka: Shu-Tao Xia
[j22] [j19] [j18] [j12] [j11] [j9] [j8] [j7] [j6] [j5] [j4] [j3] [j2] [j1] [c31] [c28] [c22] [c21] [c20] [c19] [c18] [c16] [c14] [c13] [c12] [c10] [c9] [c8] [c7] [c5] [c4] [c3] [c2] [c1] [i81] [i77] [i70] [i63] [i56] [i48] [i36] [i33] [i31] [i30] [i29] [i28] [i27] [i25] [i24] [i23] [i22] [i21] [i20] [i19] [i18] [i17] [i16] [i14] [i13] [i12] [i11] [i10] [i9] [i8] [i7] [i5] [i4] [i3] [i2] [i1]
manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.
Unpaywalled article links
Add open access links from 
to the list of external document links (if available).
Privacy notice: By enabling the option above, your browser will contact the API of unpaywall.org to load hyperlinks to open access articles. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Unpaywall privacy policy.
Archived links via Wayback Machine
For web page which are no longer available, try to retrieve content from the 
of the Internet Archive (if available).
Privacy notice: By enabling the option above, your browser will contact the API of archive.org to check for archived content of web pages that are no longer available. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Internet Archive privacy policy.
Reference lists
Add a list of references from 
, 
, and 
to record detail pages.
load references from crossref.org and opencitations.net
Privacy notice: By enabling the option above, your browser will contact the APIs of crossref.org, opencitations.net, and semanticscholar.org to load article reference information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Crossref privacy policy and the OpenCitations privacy policy, as well as the AI2 Privacy Policy covering Semantic Scholar.
Citation data
Add a list of citing articles from and to record detail pages.
load citations from opencitations.net
Privacy notice: By enabling the option above, your browser will contact the API of opencitations.net and semanticscholar.org to load citation information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the OpenCitations privacy policy as well as the AI2 Privacy Policy covering Semantic Scholar.
OpenAlex data
Load additional information about publications from 
.
Privacy notice: By enabling the option above, your browser will contact the API of openalex.org to load additional information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the information given by OpenAlex.
last updated on 2026-04-19 00:12 CEST by the dblp team
all metadata released as open data under CC0 1.0 license
see also: Terms of Use | Privacy Policy | Imprint
dblp was originally created in 1993 at:
since 2018, dblp has been operated and maintained by:
the dblp computer science bibliography is funded and supported by:
