| Local Model Poisoning Attacks to Byzantine-Robust Federated Learning M Fang, X Cao, J Jia, NZ Gong USENIX Security Symposium, 2020 | 1139 | 2020 |
| MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples J Jia, A Salem, M Backes, Y Zhang, NZ Gong ACM Conference on Computer and Communications Security (CCS), 2019 | 404 | 2019 |
| Backdoor attacks to graph neural networks Z Zhang, J Jia, B Wang, NZ Gong ACM Symposium on Access Control Models and Technologies (SACMAT), 2021 | 207 | 2021 |
| AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning J Jia, NZ Gong USENIX Security Symposium, 2018 | 192 | 2018 |
| FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients Z Zhang, X Cao, J Jia, NZ Gong ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD), 2022 | 183 | 2022 |
| BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning J Jia, Y Liu, NZ Gong IEEE Symposium on Security and Privacy (IEEE S&P), 2022 | 160 | 2022 |
| Stealing Links from Graph Neural Networks X He, J Jia, M Backes, NZ Gong, Y Zhang USENIX Security Symposium, 2021 | 160 | 2021 |
| IPGuard: Protecting the Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary X Cao, J Jia, NZ Gong ACM ASIA Conference on Computer and Communications Security (ASIACCS), 2021 | 141 | 2021 |
| Random walk based fake account detection in online social networks J Jia, B Wang, NZ Gong IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2017 | 141 | 2017 |
| Provably Secure Federated Learning against Malicious Clients X Cao, J Jia, NZ Gong AAAI Conference on Artificial Intelligence (AAAI), 2021 | 129 | 2021 |
| On Certifying Robustness against Backdoor Attacks via Randomized Smoothing B Wang, X Cao, J Jia, NZ Gong CVPR 2020 Workshop on Adversarial Machine Learning in Computer Vision, 2020 | 112 | 2020 |
| Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks J Jia, X Cao, NZ Gong AAAI Conference on Artificial Intelligence (AAAI), 2021 | 111 | 2021 |
| AttriInfer: Inferring user attributes in online social networks using markov random fields J Jia, B Wang, L Zhang, NZ Gong Proceedings of the WWW, 1561-1569, 2017 | 109 | 2017 |
| Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing J Jia, X Cao, B Wang, NZ Gong International Conference on Learning Representations (ICLR), 2020 | 100 | 2020 |
| EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning H Liu, J Jia, W Qu, NZ Gong ACM Conference on Computer and Communications Security (CCS), 2021 | 87 | 2021 |
| Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing J Jia, B Wang, X Cao, NZ Gong The Web Conference (WWW), 2020 | 86 | 2020 |
| Data Poisoning Attacks to Local Differential Privacy Protocols X Cao, J Jia, NZ Gong USENIX Security Symposium, 2021 | 80 | 2021 |
| Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks J Jia, Y Liu, X Cao, NZ Gong AAAI Conference on Artificial Intelligence (AAAI), 2022 | 78 | 2022 |
| PointGuard: Provably Robust 3D Point Cloud Classification H Liu, J Jia, NZ Gong IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2021 | 76 | 2021 |
| Certified robustness of graph neural networks against adversarial structural perturbation B Wang, J Jia, X Cao, NZ Gong ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD), 2021 | 68 | 2021 |
