[ { "key": "p75e1e4123e8e", "title": "'Tab, Tab, Bug': Security Pitfalls of Next Edit Suggestions in AI-Integrated IDEs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Investigates security failures in AI IDE next-edit suggestions, including manipulation of contextual inputs.", "authors": "Yunlong Lyu, Yixuan Tang, Peng Chen, Tian Dong, Xinyu Wang, Zhiqiang Dong, Hao Chen", "author_names": [ "Yunlong Lyu", "Yixuan Tang", "Peng Chen", "Tian Dong", "Xinyu Wang", "Zhiqiang Dong", "Hao Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM", "Agent" ], "topics": [ "Code assistants", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2602.06759", "abstract_characters": 1895, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p34736f80c653", "title": "(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Demonstrates parasitic trojans in machine-learning infrastructure that leak training information and amplify backdoor attacks.", "authors": "Habibur Rahaman, Qipan Xu, Zafaryab Haider, Prabuddha Chakraborty, Swarup Bhunia, Fnu Suya", "author_names": [ "Habibur Rahaman", "Qipan Xu", "Zafaryab Haider", "Prabuddha Chakraborty", "Swarup Bhunia", "Fnu Suya" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2607.17550", "abstract_characters": 1896, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p510167e37640", "title": "A Large-scale Measurement of In-Page Prompt Injections Against LLM Web Agents", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures real-world in-page prompt injections across web hosts and tests how model choice and page representation affect their success.", "authors": "Soheil Khodayari, Xuenan Zhang, Bhupendra Acharya, Giancarlo Pellegrino", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://trouge.net/papers/promptinjection_ccs2026.pdf", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Direct empirical study of indirect prompt injection against LLM web agents; full author-manuscript abstract and ordered author list verified.", "added_date": "", "abstract_characters": 1416, "author_names": [ "Soheil Khodayari", "Xuenan Zhang", "Bhupendra Acharya", "Giancarlo Pellegrino" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "96f6b5076b880c4f596656ae3db5d167a47e5b5e08bffa094c37dbc654337435" }, { "key": "p8c7003730ba2", "title": "A Single Glance Is Better Than Words: Vision-Guided Targeted Concept Erasing", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses visual guidance to erase targeted concepts from generative models.", "authors": "Yuyang Zhang, Yuxiang Sun, Ke Liang, Junlin Li, Kangjie Chen, Run Wang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Yuyang Zhang", "Yuxiang Sun", "Ke Liang", "Junlin Li", "Kangjie Chen", "Run Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p3d027f3b4e23", "title": "Adaptive Diffusion Freezing: Privacy-preserving Diffusion Models Against Membership Inference Attacks", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Reduces diffusion-model membership leakage through adaptive freezing.", "authors": "Jialu Guo, Xiao Han, Junjie Wu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.10608v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1305, "author_names": [ "Jialu Guo", "Xiao Han", "Junjie Wu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p2d31531efb4e", "title": "Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Audits fine-tuning data provenance through distributional fingerprints.", "authors": "Zirui Huang, Yunlong Mao, Wei Tong, Tingting Wu, Xin Ge, Sheng Zhong", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2608.02154v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1497, "author_names": [ "Zirui Huang", "Yunlong Mao", "Wei Tong", "Tingting Wu", "Xin Ge", "Sheng Zhong" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p3b58671707f2", "title": "BadTV: Unveiling Backdoor Threats in Third-Party Task Vectors", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Examines backdoors in third-party task vectors and their persistence when vectors are combined for model adaptation.", "authors": "Chia-Yi Hsu, Yu-Lin Tsai, Zhe Yu, Yan-Lun Chen, Chih-Hsun Lin, Chia-Mu Yu, Yang Zhang, Chun-Ying Huang, Jun Sakuma", "author_names": [ "Chia-Yi Hsu", "Yu-Lin Tsai", "Zhe Yu", "Yan-Lun Chen", "Chih-Hsun Lin", "Chia-Mu Yu", "Yang Zhang", "Chun-Ying Huang", "Jun Sakuma" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2501.02373v3", "abstract_characters": 1051, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p5758f659bc52", "title": "Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses neural networks to improve differentially private synthetic tabular data generation.", "authors": "Kai Chen, Chen Gong, Tianhao Wang", "author_names": [ "Kai Chen", "Chen Gong", "Tianhao Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2511.13893v2", "abstract_characters": 1225, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p46387af38236", "title": "Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Evaluates jailbreak resistance of small language models.", "authors": "Zhibo Wang, Wenhui Zhang, Huiyu Xu, Zeqing He, Ziqi Zhu, Kui Ren", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2503.06519v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1429, "author_names": [ "Zhibo Wang", "Wenhui Zhang", "Huiyu Xu", "Zeqing He", "Ziqi Zhu", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p9df4ef65319b", "title": "CircumVolve: Automated Discovery of Censorship Evasion Strategies Using Large Language Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Automates discovery of ways around LLM censorship.", "authors": "Ali Zohaib, Jackson Sippe, Jade Sheffey, Mingshi Wu, Eric Wustrow, Amir Houmansadr", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://people.cs.umass.edu/~amir/papers/2026-CCS-CircumVolve.pdf", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Scope disagreement: the full abstract concerns using an LLM to solve network-censorship evasion, not bypassing censorship or safety in an LLM. Preserve the existing inclusion for owner review. Existing inclusion retained; scope disagreement requires human review.", "added_date": "", "abstract_characters": 1293, "author_names": [ "Ali Zohaib", "Jackson Sippe", "Jade Sheffey", "Mingshi Wu", "Eric Wustrow", "Amir Houmansadr" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "1122f3e0ead974b2265c43ad3483f6c876811ae64ed2c9b780cc311dbd439f64" }, { "key": "pb9457270b1d2", "title": "Code-SeC: A Decoding-time Probing Method for Characterizing Secret Memorization in Code LLM", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Probes secret memorization in code models during decoding.", "authors": "Yanyuan Chen, Ruize Hui, Chen Hou, Meikang Qiu", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Yanyuan Chen", "Ruize Hui", "Chen Hou", "Meikang Qiu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p9d84aebe844c", "title": "Comment and Control: Hijacking Agentic Workflows via Context-Grounded Evolution", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Hijacks agent workflows using context-adapted malicious comments.", "authors": "Neil Fendley, Zhengyu Liu, Aonan Guan, Jiacheng Zhong, Yinzhi Cao", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.11229v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1861, "author_names": [ "Neil Fendley", "Zhengyu Liu", "Aonan Guan", "Jiacheng Zhong", "Yinzhi Cao" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p713abd1ae8a5", "title": "ContractGuard: Auditing Semantic Contracts of MCP Tools for Security Violations", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Audits mismatches between MCP tool descriptions and implementations to uncover violations of their stated security contracts.", "authors": "Hengkai Ye, Zhechang Zhang, Ruibo Lu, Jinyuan Jia, Hong Hu", "author_names": [ "Hengkai Ye", "Zhechang Zhang", "Ruibo Lu", "Jinyuan Jia", "Hong Hu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions", "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://splash-ye.github.io/", "abstract_characters": 1757, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p5f47d22efd6a", "title": "Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Poisons plugins used for text-to-image customization.", "authors": "Jiahao Chen, Xing He, Yong Yang, Xinfeng Li, Chunyi Zhou, Junhao Li, Zhe Ma, Tianyu Du, Shouling Ji", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.09151v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1770, "author_names": [ "Jiahao Chen", "Xing He", "Yong Yang", "Xinfeng Li", "Chunyi Zhou", "Junhao Li", "Zhe Ma", "Tianyu Du", "Shouling Ji" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p77538cb7bafb", "title": "DeepProve: Verifiable End-to-End Large Language Model Inference", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Verifies complete LLM inference with cryptographic proofs.", "authors": "Nicolas Gailly, Ismael Hishon-Rezaizadeh, Tianyi Liu, Nicholas Mainardi, Dimitrios Papadopoulos, Charalampos Papamanthou, Christodoulos Pappas, Shravan Srinivasan, Zack Youell, Yupeng Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2026/1112", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 2288, "author_names": [ "Nicolas Gailly", "Ismael Hishon-Rezaizadeh", "Tianyi Liu", "Nicholas Mainardi", "Dimitrios Papadopoulos", "Charalampos Papamanthou", "Christodoulos Pappas", "Shravan Srinivasan", "Zack Youell", "Yupeng Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p0632edbf6888", "title": "Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Scans code models for poisoning-induced vulnerabilities using black-box access.", "authors": "Shenao Yan, Shan Jin, Shimaa Ahmed, Sunpreet Singh Arora, Yiwei Cai, Yizhen Wang, Yuan Hong", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2603.17174v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1633, "author_names": [ "Shenao Yan", "Shan Jin", "Shimaa Ahmed", "Sunpreet Singh Arora", "Yiwei Cai", "Yizhen Wang", "Yuan Hong" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p8483ac8099bf", "title": "DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses tests at multiple scales to track regenerated datasets, evaluating both image and text data.", "authors": "Tian Dong, Yan Meng, Shaofeng Li, Guoxing Chen, Yuling Chen, Zhen Liu, Haojin Zhu, Hao Chen", "author_names": [ "Tian Dong", "Yan Meng", "Shaofeng Li", "Guoxing Chen", "Yuling Chen", "Zhen Liu", "Haojin Zhu", "Hao Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Provenance & watermarking", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.21240v1", "abstract_characters": 1466, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p3cc0f2c9084c", "title": "DisarmRAG: Stealthy Retriever Poisoning to Disable Self-Correction in Retrieval-Augmented Generation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Poisons a RAG retriever to deliver instructions that suppress the generator's self-correction and promote attacker-selected answers.", "authors": "Yanbo Dai, Zhenlan Ji, Zongjie Li, Kuan Li, Shuai Wang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2508.20083v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Directly attacks RAG integrity through retriever poisoning; arXiv explicitly identifies this matching-author extended version as the CCS 2026 paper.", "added_date": "", "abstract_characters": 1697, "author_names": [ "Yanbo Dai", "Zhenlan Ji", "Zongjie Li", "Kuan Li", "Shuai Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "97dc2fe40b8160f9daa3b98ba275e5be3c35120f8c5272a5523b07adc327de34" }, { "key": "p4d37bbf354a0", "title": "Does AI Amplify Online Hate? A Multi-Modal Measurement Study on 4chan's /pol/", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures AI-generated hateful text and imagery on 4chan and their association with organized hate campaigns.", "authors": "Bo Shao, Xinyue Shen, Yang Zhang", "author_names": [ "Bo Shao", "Xinyue Shen", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM", "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://xinyueshen.me/static/papers/CCS26-AI4chan.pdf", "abstract_characters": 1914, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p9f66646a0722", "title": "Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Examines how compromised open-source training components can leak private data through malicious injected behavior.", "authors": "Jin-Seong Kim, Han-Ju Lee, Seok-Won Hong, Takeshi Takahashi, Chansu Han, Tomohiro Morikawa, Seok-Hwan Choi", "author_names": [ "Jin-Seong Kim", "Han-Ju Lee", "Seok-Won Hong", "Takeshi Takahashi", "Chansu Han", "Tomohiro Morikawa", "Seok-Hwan Choi" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Poisoning & backdoors", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2607.27886v2", "abstract_characters": 1423, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pc81c8bfb0996", "title": "DRIP: Defending Prompt Injection via Token-wise Representation Editing and Residual Fusion", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Combines token-level representation editing with residual instruction fusion to reduce prompt injection while preserving legitimate task performance.", "authors": "Ruofan Liu, Yun Lin, Zhiyong Huang, Jin Song Dong", "doi": "", "areas": [ "Foundations" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2511.00447v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Direct prompt-injection defense; ordered authors, distinctive title, and representation-editing/residual-fusion method match the official listing and author repository.", "added_date": "", "abstract_characters": 1585, "author_names": [ "Ruofan Liu", "Yun Lin", "Zhiyong Huang", "Jin Song Dong" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "0e1f65f1dfbce3cdd75fcdb73797a326d10807d671ef8e9f549ec0838b52b43f" }, { "key": "p7fc932913023", "title": "DSS: Dynamic Semantic Steering for Robust Concept Erasure in Diffusion Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses semantic steering to improve robust concept erasure.", "authors": "Qinghui Gong, Zhengchun Zhou, Hua Meng, Yihuai Liang, Yuxuan Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2604.16483v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1777, "author_names": [ "Qinghui Gong", "Zhengchun Zhou", "Hua Meng", "Yihuai Liang", "Yuxuan Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pfaf8c1b98620", "title": "DWBench: Holistic Evaluation of Watermark for Dataset Copyright Auditing", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Evaluates dataset-copyright watermarks across classification and generation, including multiple users and overlapping watermarks.", "authors": "Xiao Ren, Xinyi Yu, Linkang Du, Min Chen, Yuanchao Shu, Zhou Su, Yunjun Gao, Zhikun Zhang", "author_names": [ "Xiao Ren", "Xinyi Yu", "Linkang Du", "Min Chen", "Yuanchao Shu", "Zhou Su", "Yunjun Gao", "Zhikun Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2602.13541v2", "abstract_characters": 1635, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf69d4e517044", "title": "From Prompt to Pwn: Exploiting GPU Memory Errors During ML Inference", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses GPU taint tracking and controlled exploits to show how real device-side memory errors can enable model manipulation, data leakage and code injection during ML inference.", "authors": "Jonas Roels, Adriaan Jacobs, Silviu Vlasceanu, Mahmoud Ammar, Stijn Volckaert", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors", "Side channels & systems", "Model security", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://people.cs.kuleuven.be/~stijn.volckaert/papers/2026_CCS_LLM.pdf", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Inference-system security relevant to LLM deployment; complete author-manuscript abstract and authors matched. Claims are conditional controlled proof-of-concept results.", "added_date": "", "abstract_characters": 1549, "author_names": [ "Jonas Roels", "Adriaan Jacobs", "Silviu Vlasceanu", "Mahmoud Ammar", "Stijn Volckaert" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "b86fd97b202b52031d4aaa45ee6bf54227a9f51e20588b931c36d0e49f9440be" }, { "key": "pb489bfb8b92f", "title": "From Snapshot to Snooping: An Empirical Study on Geolocation Privacy Leakage in Large Vision Language Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures geolocation leakage from images analyzed by large vision-language models.", "authors": "Yihe Zhou, Tao Ni, Qingchuan Zhao, Cong Wang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Yihe Zhou", "Tao Ni", "Qingchuan Zhao", "Cong Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pac9670367373", "title": "Fundamental Limitations of Favorable Privacy–Utility Guarantees for DP-SGD", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Establishes limitations on favorable DP-SGD privacy–utility guarantees under the studied sampling assumptions.", "authors": "Murat Bilgehan Ertan, Marten van Dijk", "author_names": [ "Murat Bilgehan Ertan", "Marten van Dijk" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2601.10237v3", "abstract_characters": 1756, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pb916ef9b0ac4", "title": "Governing AI Agent with Capability and Delegation Chain", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Governs agent capabilities and delegated authority.", "authors": "Jiaqin Yan, Guoxing Chen, Yan Meng, Haojin Zhu", "doi": "", "areas": [ "Agent" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Jiaqin Yan", "Guoxing Chen", "Yan Meng", "Haojin Zhu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pebf5b6463c22", "title": "Hitchhiking on Inherent Randomness: Diffusion-based Graph Generation under Differential Privacy", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies differential privacy for diffusion-based graph generation.", "authors": "Renxuan Hou, Qingqing Ye, Lyu Xu, Xun Ran, Haibo Hu", "author_names": [ "Renxuan Hou", "Qingqing Ye", "Lyu Xu", "Xun Ran", "Haibo Hu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Graph diffusion rather than image synthesis; abstract unavailable.", "review_note": "Included from the official accepted-paper title and author listing. Full abstract review remains pending.", "added_date": "2026-10-23", "abstract_characters": 0 }, { "key": "p9afe2441c065", "title": "Hoss: Fast Oblivious Semantic Search with Heterogeneous GPU-CPU-TEE Architecture", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Combines CPU and GPU trusted execution to hide semantic-search contents and access patterns.", "authors": "Jianzhang Du, Weijie Huang, Chenghong Wang, Nicolas Tsagareli, Yukui Luo, XiaoFeng Wang, Zhongshu Gu", "author_names": [ "Jianzhang Du", "Weijie Huang", "Chenghong Wang", "Nicolas Tsagareli", "Yukui Luo", "XiaoFeng Wang", "Zhongshu Gu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2609.04522v1", "abstract_characters": 1723, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pcb724f0cf4d0", "title": "Identifying AI Web Scrapers Using Canary Tokens", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses canary tokens to identify web scrapers that feed content into AI systems.", "authors": "Steven Seiden, Triss Ren, Caroline Zhang, Taein Kim, Enze Liu, Emily Wenger", "author_names": [ "Steven Seiden", "Triss Ren", "Caroline Zhang", "Taein Kim", "Enze Liu", "Emily Wenger" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2605.13706", "abstract_characters": 1597, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p4dda051b408c", "title": "Implementation Bugs as Attacks: Adversarial Neuron Fuzzing and Supply-Chain Backdoors", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies neural implementation bugs and supply-chain backdoors as attack surfaces.", "authors": "Zizhuang Deng, Yiying Shan, Sanchuan Chen, Guozhu Meng, Qingxin Wang, Xueqing Zhang, Tong Liu", "author_names": [ "Zizhuang Deng", "Yiying Shan", "Sanchuan Chen", "Guozhu Meng", "Qingxin Wang", "Xueqing Zhang", "Tong Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "General ML security foundation; summary based on the official title; abstract unavailable.", "review_note": "Included from the official accepted-paper title and author listing. Full abstract review remains pending.", "added_date": "2026-10-23", "abstract_characters": 0 }, { "key": "pa95dba17dfd2", "title": "InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Introduces stealthy poisoning attacks on retrieval-augmented generation.", "authors": "Jiachang Zhang, Min Chen, Xiao Ren, Zhenyong Zhang, Yuanchao Shu, Yunjun Gao, Zhikun Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.16818v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1848, "author_names": [ "Jiachang Zhang", "Min Chen", "Xiao Ren", "Zhenyong Zhang", "Yuanchao Shu", "Yunjun Gao", "Zhikun Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pf80cd30a2c5c", "title": "IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Defends conference review workflows against outsourcing to commercial chatbots.", "authors": "Oubo Ma, Ruixiao Lin, Jiahao Chen, Yuan Su, Yong Yang, Shouling Ji", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.05271v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1889, "author_names": [ "Oubo Ma", "Ruixiao Lin", "Jiahao Chen", "Yuan Su", "Yong Yang", "Shouling Ji" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pacbf9a8c9aa7", "title": "Investigating Novice Researchers' Perceptions of Research Privacy Within LLM-Assisted Workflows", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies researchers' privacy perceptions in LLM-assisted work.", "authors": "Shuning Zhang, Changxi Wen, Eve He, Ying Ma, Robert Xiao, Xin Yi, Hewu Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.03248v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1189, "author_names": [ "Shuning Zhang", "Changxi Wen", "Eve He", "Ying Ma", "Robert Xiao", "Xin Yi", "Hewu Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p91846afe02b8", "title": "It Takes a Forum: Resources & Stakeholders Sustaining the Online Synthetic Non-Consensual Intimate Image Creation Ecosystem", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies forums, resources, and stakeholders that sustain AI-generated non-consensual intimate imagery.", "authors": "Bernardo B. P. Medeiros, Malvika Jadhav, Allison Lu, Tadayoshi Kohno, Vincent Bindschaedler, Kevin R. B. Butler", "author_names": [ "Bernardo B. P. Medeiros", "Malvika Jadhav", "Allison Lu", "Tadayoshi Kohno", "Vincent Bindschaedler", "Kevin R. B. Butler" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2604.12190v2", "abstract_characters": 1475, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pae55917faf34", "title": "Jailbreaking via Activation Dilution: Neuron-Guided Adaptive Decomposition of Language Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies decomposition-based LLM jailbreaks using reinforcement learning and neuron-guided selection, finding that splitting requests can dilute safety-related activation signals.", "authors": "Jiahang Wang, Chenglong Fu, Xiaojiang Du, Bo Luo", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Model security" ], "abstract_reviewed": true, "abstract_source": "https://raw.githubusercontent.com/JiahangWang/Nadia-CCS2026/main/Nadia_full.pdf", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. The full author-hosted manuscript studies attacks against LLM safety alignment; title, ordered authors and CCS 2026 publication identity match the official listing.", "added_date": "", "abstract_characters": 2055, "author_names": [ "Jiahang Wang", "Chenglong Fu", "Xiaojiang Du", "Bo Luo" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "f61762ebd81afe264a8fd8865753b5ba6f2b78d69e99e057dc61baa0b9e1c61f" }, { "key": "p36cc90fb6e32", "title": "Janus: Characterizing Bidirectional Privacy and Security Risks in LLM-Integrated Android Apps", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Analyzes Android LLM integration pipelines to identify exposed secrets, sensitive-data outsourcing, downstream response leakage and prompt-injection weaknesses.", "authors": "Jiawei Guo, Zongze Li, Haipeng Cai", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt injection", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://chapering.github.io/pubs/ccs26jiaweib.pdf", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Direct LLM application privacy/security study; abstract explicitly includes system-prompt exposure and prompt-injection-prone handling. Full manuscript matches title and authors.", "added_date": "", "abstract_characters": 1760, "author_names": [ "Jiawei Guo", "Zongze Li", "Haipeng Cai" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "abstract_sha256": "16a34dafa486d3024056beba1c6687bf996451a078805cd27592b7d9ace23d98" }, { "key": "p4b9ef1080949", "title": "LightShark: Actively Secure Machine-Learning Inference Based on Lightweight Authenticated Distributed Comparison Function", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Reduces communication for actively secure machine-learning inference, including GPT and BERT workloads.", "authors": "Chenkai Zeng, Qi Feng, Debiao He, Min Luo", "author_names": [ "Chenkai Zeng", "Qi Feng", "Debiao He", "Min Luo" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2026/1487", "abstract_characters": 1093, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p26464aed8172", "title": "LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Generates adversarial examples to train generalizable injection defenses.", "authors": "Yuyang Gong, Zihao Wang, Jiawei Liu, XiaoFeng Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Unlearning & fine-tuning", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.01462v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1878, "author_names": [ "Yuyang Gong", "Zihao Wang", "Jiawei Liu", "XiaoFeng Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p7e8ca06c1152", "title": "Logit Laundering: Evading Data-Use Auditing in Large Language Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Evades auditing of model training-data use through logit manipulation.", "authors": "Ruihan Hu, Wei Luo, Yu-Ming Shang, Jiakai Wang, Chuxuan Zhang, Mei Li, Xi Zhang, Meikang Qiu", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Ruihan Hu", "Wei Luo", "Yu-Ming Shang", "Jiakai Wang", "Chuxuan Zhang", "Mei Li", "Xi Zhang", "Meikang Qiu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p3d314ef73fed", "title": "MemPoison: Bypassing Selective Memory Mechanisms to Plant Backdoors in LLM Agents", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Poisons selective agent memory to establish persistent backdoors.", "authors": "Hongtao Wang, Se Yang, Yu Chen, Puzhuo Liu", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Poisoning & backdoors", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.29960v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1772, "author_names": [ "Hongtao Wang", "Se Yang", "Yu Chen", "Puzhuo Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pa64a9d7f942f", "title": "MetaMancer: Practical Tool Selection Attacks against LLM Agents", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Manipulates tool selection in LLM agents.", "authors": "Wenbin Zhai, Yihao Liu, Dong Wang, Hao Chen, Bin Xiao", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Wenbin Zhai", "Yihao Liu", "Dong Wang", "Hao Chen", "Bin Xiao" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p5f3a8cbfb421", "title": "Mind the Gap: Action Rebinding Attacks against Android GUI Agents", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Redirects Android GUI-agent actions through action rebinding.", "authors": "Yi Qian, Kunwei Qian, Xingbang He, Ligeng Chen, Jikang Zhang, Tiantai Zhang, Haiyang Wei, Linzhang Wang, Hao Wu, Bing Mao", "doi": "", "areas": [ "Image & diffusion", "Agent" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2601.12349v3", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1910, "author_names": [ "Yi Qian", "Kunwei Qian", "Xingbang He", "Ligeng Chen", "Jikang Zhang", "Tiantai Zhang", "Haiyang Wei", "Linzhang Wang", "Hao Wu", "Bing Mao" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p9bcfeadfb5db", "title": "MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Poisons RAG responses without knowing the eventual user query.", "authors": "Tailun Chen, Yu He, Yan Wang, Shuo Shao, Haolun Zheng, Zhihao Liu, Jinfeng Li, Zhizhen Qin, Yuefeng Chen, Zhixuan Chu, Zhan Qin, Kui Ren", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2512.08289v4", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1354, "author_names": [ "Tailun Chen", "Yu He", "Yan Wang", "Shuo Shao", "Haolun Zheng", "Zhihao Liu", "Jinfeng Li", "Zhizhen Qin", "Yuefeng Chen", "Zhixuan Chu", "Zhan Qin", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pc51e2a121b36", "title": "MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses simulated reasoning to improve computer-use agent security.", "authors": "Wenqi Zhang, Yulin Shen, Changyue Jiang, Jiarun Dai, Geng Hong, Xudong Pan", "doi": "", "areas": [ "Agent" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2601.12822v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1791, "author_names": [ "Wenqi Zhang", "Yulin Shen", "Changyue Jiang", "Jiarun Dai", "Geng Hong", "Xudong Pan" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p466efc92d192", "title": "MMAligner: Safeguarding Multimodal Large Language Models through Representation Calibration", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Calibrates representations to safeguard multimodal language models.", "authors": "Shenyi Zhang, Keyan Guo, Zihao Wang, Xuebin Li, Lingchen Zhao, Hongxin Hu, Chao Shen, Qian Wang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2608.05909v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1750, "author_names": [ "Shenyi Zhang", "Keyan Guo", "Zihao Wang", "Xuebin Li", "Lingchen Zhao", "Hongxin Hu", "Chao Shen", "Qian Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p2210d0db542d", "title": "MOSAIC: Masked Outsourcing of Secure AI Computations", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses masking to outsource secure AI computations while protecting inputs and models, including large transformer inference.", "authors": "James Hsin-yu Chiang, Sheila Zingg, Kari Kostiainen, Srdjan Capkun", "author_names": [ "James Hsin-yu Chiang", "Sheila Zingg", "Kari Kostiainen", "Srdjan Capkun" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2607.29221v2", "abstract_characters": 1714, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p5526c8b8db75", "title": "Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Exhausts multimodal models through joint image and prompt optimization.", "authors": "Zhaoxiong Ni, Yatie Xiao, Chi-Man Pun, Fei Peng, Qingxiao Guan, Keke Tang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.05889v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1625, "author_names": [ "Zhaoxiong Ni", "Yatie Xiao", "Chi-Man Pun", "Fei Peng", "Qingxiao Guan", "Keke Tang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p69a9695c3755", "title": "NotaryMark: Multi-Bit Watermarking for Black-Box Dataset Usage Auditing in Text-to-Image Diffusion Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Watermarks datasets to audit their use in text-to-image model training.", "authors": "Xinyi Yu, Linkang Du, Zhou Su, Min Chen, Yuntao Wang, Zhikun Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Xinyi Yu", "Linkang Du", "Zhou Su", "Min Chen", "Yuntao Wang", "Zhikun Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p5ca295390572", "title": "One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Examines how pretrained-model exposure increases fine-tuned model jailbreak risk.", "authors": "Yixin Tan, Yu Zhe, Rui Wen, Jun Sakuma", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Privacy & inference", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2512.14751v3", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1498, "author_names": [ "Yixin Tan", "Yu Zhe", "Rui Wen", "Jun Sakuma" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p1e5d1bd67a57", "title": "PathMark: Protecting Intellectual Property of Mixture-of-expert LLMs via Path Watermarks", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Watermarks expert-routing paths to protect mixture-of-experts ownership.", "authors": "Yudong Gao, Qingyue Wang, Yuanyuan Yuan, Ruixuan Huang, Linghan Chen, Zimo Ji, Shuai Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2607.03688v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1683, "author_names": [ "Yudong Gao", "Qingyue Wang", "Yuanyuan Yuan", "Ruixuan Huang", "Linghan Chen", "Zimo Ji", "Shuai Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pcd8a566cbff7", "title": "PC^2: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Jailbreaks GPT-based image generation to produce politically controversial content.", "authors": "Wonwoo Choi, Minjae Seo, Minkyoo Song, Hwanjo Heo, Seungwon Shin, Myoungsung You", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2601.05150v4", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1601, "author_names": [ "Wonwoo Choi", "Minjae Seo", "Minkyoo Song", "Hwanjo Heo", "Seungwon Shin", "Myoungsung You" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pdb803ec77db6", "title": "PhantomSeal: Proactive Deepfakes Defense with Identity/Context Protection and Forensic Tracing", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Protects facial identity and image context against deepfake manipulation while supporting forensic tracing.", "authors": "Liangqin Ren, Zeyan Liu, Ye Wang, Yuxin Chen, Fengjun Li, Bo Luo", "author_names": [ "Liangqin Ren", "Zeyan Liu", "Ye Wang", "Yuxin Chen", "Fengjun Li", "Bo Luo" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2607.20564v2", "abstract_characters": 1257, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf4357a69c8b0", "title": "PiMRef: Deducing Ever-evolving Spear-phishing Emails with Knowledge Base Invariants", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies evolving spear-phishing emails generated with language models and defenses based on knowledge-base invariants.", "authors": "Ruofan Liu, Yun Lin, Yuxin Wang, Xiwen Teoh, Zhenkai Liang, Gongshen Liu, Haojin Zhu, Jin Song Dong", "author_names": [ "Ruofan Liu", "Yun Lin", "Yuxin Wang", "Xiwen Teoh", "Zhenkai Liang", "Gongshen Liu", "Haojin Zhu", "Jin Song Dong" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2507.15393v2", "abstract_characters": 1741, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p700ce5eb18c2", "title": "PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Benchmarks visual privacy leakage from mobile GUI agents.", "authors": "Qihang Cen, Tianshuo Cong, Da Song, Xinlei He, Jiaxing Song, Ke Xu, Qi Li", "doi": "", "areas": [ "Image & diffusion", "Agent", "LLM" ], "topics": [ "Privacy & inference", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.13873v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1526, "author_names": [ "Qihang Cen", "Tianshuo Cong", "Da Song", "Xinlei He", "Jiaxing Song", "Ke Xu", "Qi Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pd18fedb378a5", "title": "Private Direct Preference Optimization for LLM Alignment", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Protects private alignment data during preference optimization.", "authors": "Yangfan Jiang, Fei Wei, Ergute Bao, Xiaokui Xiao, Yaliang Li, Bolin Ding", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2608.05040v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1510, "author_names": [ "Yangfan Jiang", "Fei Wei", "Ergute Bao", "Xiaokui Xiao", "Yaliang Li", "Bolin Ding" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pbb4febc926cb", "title": "PrivEscalate: Measuring and Augmenting the Threat of LLM-Automated Linux Privilege Escalation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures the threat from automated Linux privilege escalation.", "authors": "Yixuan Liu, Zilong Zhen, Yin Wu, Yi Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.09087v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1758, "author_names": [ "Yixuan Liu", "Zilong Zhen", "Yin Wu", "Yi Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pf3ba6f28f6b0", "title": "Proof-of-Authorship for Diffusion-based AI Generated Content", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Provides authorship evidence for diffusion-generated content.", "authors": "De Zhang Lee, Han Fang, Ee-Chien Chang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2603.17513v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1601, "author_names": [ "De Zhang Lee", "Han Fang", "Ee-Chien Chang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pd4b1cd7561da", "title": "PURA: Provably Unbiased and Robust Multi-Bit Watermarking for AI-Generated Text Attribution", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Provides robust multi-bit attribution watermarks for generated text.", "authors": "Yaofei Wang, Jinyang Guo, Shuchao Du, Chao Wang, Qiyi Yao, Donghui Hu, Weiming Zhang, Nenghai Yu, Kejiang Chen", "doi": "", "areas": [ "Foundations" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2608.22218v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1476, "author_names": [ "Yaofei Wang", "Jinyang Guo", "Shuchao Du", "Chao Wang", "Qiyi Yao", "Donghui Hu", "Weiming Zhang", "Nenghai Yu", "Kejiang Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pefdcb410e295", "title": "Real Money, Fake Models: Deceptive Model Claims in Shadow APIs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Audits shadow API providers for deceptive model claims and the consequences of substituting underlying models.", "authors": "Yage Zhang, Yukun Jiang, Zeyuan Chen, Michael Backes, Xinyue Shen, Yang Zhang", "author_names": [ "Yage Zhang", "Yukun Jiang", "Zeyuan Chen", "Michael Backes", "Xinyue Shen", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security", "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2603.01919", "abstract_characters": 1863, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf20391e94c8c", "title": "ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Trains short, natural-looking prompts that induce excessive reasoning and output in reasoning models, enabling inference-time denial of service.", "authors": "Xiaogeng Liu, Xinyan Wang, Yechao Zhang, Sanjay Kariyappa, Chong Xiang, Muhao Chen, G. Edward Suh, Chaowei Xiao", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2602.00154v1", "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1712, "author_names": [ "Xiaogeng Liu", "Xinyan Wang", "Yechao Zhang", "Sanjay Kariyappa", "Chong Xiang", "Muhao Chen", "G. Edward Suh", "Chaowei Xiao" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pd9a00ef8ee7b", "title": "Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies backdoor removal through catastrophic forgetting and develops a method for more complete adversarial unlearning.", "authors": "Zhenqian Zhu, Yamin Hu, Yujiang Liu, Luping Wei, Wenbo Hou, Bin Li, Haodong Li, Wenjian Luo", "author_names": [ "Zhenqian Zhu", "Yamin Hu", "Yujiang Liu", "Luping Wei", "Wenbo Hou", "Bin Li", "Haodong Li", "Wenjian Luo" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Unlearning & fine-tuning", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.14078v1", "abstract_characters": 1534, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pa4124eb34e23", "title": "Rethinking the Security of DP-SGD: A Corrected Analysis of Differentially Private Machine Learning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Re-examines differential-privacy guarantees when DP-SGD uses normalization, identifying discrepancies in privacy accounting.", "authors": "Wenhao Wang, Shujie Cui, Hui Cui, Xingliang Yuan", "author_names": [ "Wenhao Wang", "Shujie Cui", "Hui Cui", "Xingliang Yuan" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2605.15648v1", "abstract_characters": 1613, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p112a05695fff", "title": "Robustness of Vision Language Models Against Split-Image Harmful Input Attacks", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Evaluates multimodal defenses against harmful inputs split across images.", "authors": "Md Rafi Ur Rashid, MD Sadik Hossain Shanto, Vishnu Asutosh Dasu, Shagufta Mehnaz", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety", "Side channels & systems", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2602.08136v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1606, "author_names": [ "Md Rafi Ur Rashid", "MD Sadik Hossain Shanto", "Vishnu Asutosh Dasu", "Shagufta Mehnaz" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pb6949fb0e6cc", "title": "ROSETTA: Efficient and Accurate Privacy-Preserving LLM Decoding via Hybrid CKKS/TFHE Evaluation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Combines encryption schemes for private LLM decoding.", "authors": "Jiangrui Yu, Baosheng Zhang, Liang Kong, Lin Ding, Yi Chen, Ye Yu, Mingzhe Zhang, Meng Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2026/2047", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1319, "author_names": [ "Jiangrui Yu", "Baosheng Zhang", "Liang Kong", "Lin Ding", "Yi Chen", "Ye Yu", "Mingzhe Zhang", "Meng Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pd48bedf4e8fd", "title": "Safeguarding LLM Agents against Long-Horizon Threats via Shadow Memory", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses shadow memory to defend agents over long interactions.", "authors": "Yuhui Wang, Tanqiu Jiang, Jiacheng Liang, Charles Fleming, Ting Wang", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.03228v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1418, "author_names": [ "Yuhui Wang", "Tanqiu Jiang", "Jiacheng Liang", "Charles Fleming", "Ting Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p59cebd1b16cd", "title": "SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Aligns shared experts in mixture-of-experts language models to strengthen safety across routing choices.", "authors": "Qingyu Meng, Yiwei Zha, Jiahuan Pei, Koen Hindriks, Herbert Bos, Min Chen", "author_names": [ "Qingyu Meng", "Yiwei Zha", "Jiahuan Pei", "Koen Hindriks", "Herbert Bos", "Min Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2609.02293", "abstract_characters": 1914, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p47cf5f739576", "title": "Selective Fine-Tuning for Targeted and Robust Concept Unlearning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Selectively fine-tunes models to unlearn targeted concepts robustly.", "authors": "Mansi Mansi, Avinash Kori, Francesca Toni, Soteris Demetriou", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Unlearning & fine-tuning", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2602.07919v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1227, "author_names": [ "Mansi Mansi", "Avinash Kori", "Francesca Toni", "Soteris Demetriou" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pbea018989c0c", "title": "Single Medium, Multiple Perspectives: Exposing and Exploiting Semantic Gaps in AI Services' Media Preprocessing Pipelines", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Examines semantic gaps in AI-service media preprocessing as an attack surface.", "authors": "Yacong Gu, Xiangfan Wu, Lingyun Ying, Yingyuan Pu, Haipeng Qu, Jianjun Chen, Haixin Duan", "author_names": [ "Yacong Gu", "Xiangfan Wu", "Lingyun Ying", "Yingyuan Pu", "Haipeng Qu", "Jianjun Chen", "Haixin Duan" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM", "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Summary based on the official title; abstract unavailable.", "review_note": "Included from the official accepted-paper title and author listing. Full abstract review remains pending.", "added_date": "2026-10-23", "abstract_characters": 0 }, { "key": "pc6aa0e33aa67", "title": "SkillCODER: Towards Auditing and Attribution of Copyright Infringement in LLM Agent Skills", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Audits copyright infringement and attribution in agent skills.", "authors": "Enhao Huang, Chunshu Xia, Yiming Li, Yuchen Yang, Bingrun Yang, Zhan Qin, Dacheng Tao, Kui Ren", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Provenance & watermarking", "Agents & permissions" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Enhao Huang", "Chunshu Xia", "Yiming Li", "Yuchen Yang", "Bingrun Yang", "Zhan Qin", "Dacheng Tao", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pe73862bb6fc6", "title": "SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Enforces minimal privileges for agent skills.", "authors": "Jiangrong Wu, Yuhong Nan, Yixi Lin, Huaijin Wang, Yuming Xiao, Shuai Wang, Zibin Zheng", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.05868v3", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1611, "author_names": [ "Jiangrong Wu", "Yuhong Nan", "Yixi Lin", "Huaijin Wang", "Yuming Xiao", "Shuai Wang", "Zibin Zheng" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pdf046b523e5f", "title": "SLAC: Access-Driven CPU-to-GPU Side-channel Attacks via System-Level Cache on Apple Silicon", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses Apple Silicon system-level cache side channels to infer sensitive information from GPU workloads, including language models.", "authors": "Tianhong Xu, Saion Kumar Roy, Ruyi Ding, A. Adam Ding, Yunsi Fei", "author_names": [ "Tianhong Xu", "Saion Kumar Roy", "Ruyi Ding", "A. Adam Ding", "Yunsi Fei" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM" ], "topics": [ "Side channels & systems", "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2608.09075v2", "abstract_characters": 1727, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p13f90107410b", "title": "Sound Debloating of Redundant Checks in Zero-Knowledge Machine-Learning Circuits", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Removes redundant checks from zero-knowledge machine-learning circuits while preserving soundness, including transformer workloads.", "authors": "Zhantong Xue, Pingchuan Ma, Zhaoyu Wang, Yuguang Zhou, Huaijin Wang, Shuai Wang", "author_names": [ "Zhantong Xue", "Pingchuan Ma", "Zhaoyu Wang", "Yuguang Zhou", "Huaijin Wang", "Shuai Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2609.10149v1", "abstract_characters": 1723, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p34b38b5b8609", "title": "SpecStega: Provably Secure Linguistic Steganography Based on Speculative Sampling in Asymmetric Resource Scenarios", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Hides messages in language generation using speculative sampling.", "authors": "Jun Jiang, Kejiang Chen, Yuang Qi, Jiawei Zhao, Weiming Zhang, Nenghai Yu", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Jun Jiang", "Kejiang Chen", "Yuang Qi", "Jiawei Zhao", "Weiming Zhang", "Nenghai Yu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p6e865cd6922b", "title": "Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Builds a benchmark and defense for detecting and attributing motion-aware deepfake videos produced by pose-guided diffusion models.", "authors": "Fazhong Liu, Yan Meng, Tian Dong, Guoxing Chen, Haojin Zhu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2610.11496v2", "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1708, "author_names": [ "Fazhong Liu", "Yan Meng", "Tian Dong", "Guoxing Chen", "Haojin Zhu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pb2bcf8d5a216", "title": "SymSan: Mitigating Malware Embedding in Large Language Models via Parameter Space Symmetry", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses model symmetries to mitigate malware hidden in weights.", "authors": "Ming Tan, Wei Li, Tao Hu, Qian Chen, Aodi Liu, Hailong Ma", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Ming Tan", "Wei Li", "Tao Hu", "Qian Chen", "Aodi Liu", "Hailong Ma" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p75c4819d7005", "title": "TENNOR: Trustworthy Execution for Neural Networks through Obliviousness and Retrievals", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses oblivious execution and retrievals to protect neural-network computation and its access patterns.", "authors": "Zifan Qu, Vasileios P. Kemerlis, Giuseppe Ateniese, Evgenios M. Kornaropoulos", "author_names": [ "Zifan Qu", "Vasileios P. Kemerlis", "Giuseppe Ateniese", "Evgenios M. Kornaropoulos" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2605.07160v3", "abstract_characters": 1438, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p5593dcce0248", "title": "The Deception Delta: Adversarial Evaluation of LLM-Based Smart Contract Bytecode Forensics", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Adversarially evaluates LLM-based smart-contract forensics.", "authors": "Timo Schefold", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.14098v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1775, "author_names": [ "Timo Schefold" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pb0f9eaac883f", "title": "Thinking Dangerously: How Reasoning Training Dilutes Safety in Language Models", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies safety degradation introduced by reasoning training.", "authors": "Dongxin Guo, Jikun Wu, Siu Ming Yiu", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Dongxin Guo", "Jikun Wu", "Siu Ming Yiu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pe5eb979cd5d6", "title": "Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Defends models against harmful reinforcement-learning fine-tuning.", "authors": "Weitao Feng, Lixu Wang, Peizhuo Lv, Tianyi Wei, Jie Zhang, Chongyang Gao, Sinong Simon Zhan, Wei Dong", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2508.20697v4", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1287, "author_names": [ "Weitao Feng", "Lixu Wang", "Peizhuo Lv", "Tianyi Wei", "Jie Zhang", "Chongyang Gao", "Sinong Simon Zhan", "Wei Dong" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pa44b387b3bb7", "title": "Tricycle: Private Transformer Inference with Tricyclic Encodings", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Uses specialized encodings to perform private transformer inference.", "authors": "Lawrence Lim, Vikas Kalagi, Julia Novick, Jiaming Liu, Divyakant Agrawal, Amr El Abbadi", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2025/1200", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1493, "author_names": [ "Lawrence Lim", "Vikas Kalagi", "Julia Novick", "Jiaming Liu", "Divyakant Agrawal", "Amr El Abbadi" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pdad6b1f86c81", "title": "TWIST: Private Tenant-Dedicated LLM Serving via Joint Model-Token Transformation", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Transforms models and tokens to isolate private tenant inference.", "authors": "Qizhi Zhang, Yufei Chen, Yu Lin, Wenqiang Ruan, Quanwei Cai, Daode Zhang, Longxiang Wang, Jue Hong, Ye Wu, Cong Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Qizhi Zhang", "Yufei Chen", "Yu Lin", "Wenqiang Ruan", "Quanwei Cai", "Daode Zhang", "Longxiang Wang", "Jue Hong", "Ye Wu", "Cong Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pa6064200bbcf", "title": "Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures and mitigates prompt leakage in deployed applications.", "authors": "Yong Yang, Chong Fu, Tong Zhang, Rui Zeng, Qingming Li, Tianyu Du, Zonghui Wang, Shouling Ji, Wenzhi Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.18673v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1494, "author_names": [ "Yong Yang", "Chong Fu", "Tong Zhang", "Rui Zeng", "Qingming Li", "Tianyu Du", "Zonghui Wang", "Shouling Ji", "Wenzhi Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p4241152698af", "title": "Understanding and Preserving Safety in Fine-Tuned LLMs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Studies safety degradation and preservation during fine-tuning.", "authors": "Jiawen Zhang, Yangfan Hu, Kejia Chen, Lipeng He, Jiachen Ma, Jian Lou, Dan Li, Jian Liu, Xiaohu Yang, Ruoxi Jia", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2601.10141v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1845, "author_names": [ "Jiawen Zhang", "Yangfan Hu", "Kejia Chen", "Lipeng He", "Jiachen Ma", "Jian Lou", "Dan Li", "Jian Liu", "Xiaohu Yang", "Ruoxi Jia" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p7c064c8a1b3d", "title": "Understanding the Security Boundary of Obfuscation-based On-Device LLM Protection", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Evaluates obfuscation-based protection for on-device language models.", "authors": "Hanyi Zhou, Chenyang Li, Yuanzhe Pang, Ke Xu, Mingwei Xu, Zhuotao Liu", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2609.10117v2", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1912, "author_names": [ "Hanyi Zhou", "Chenyang Li", "Yuanzhe Pang", "Ke Xu", "Mingwei Xu", "Zhuotao Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pb21bfb598700", "title": "What Concepts Lie Within? Detecting and Suppressing Risky Content in Diffusion Transformers", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Audits and suppresses risky concepts in diffusion transformers.", "authors": "Chenyu Zhang, Lanjun Wang, Yueyang Cheng, Ruidong Chen, Wenhui Li, An-an Liu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.10180v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1856, "author_names": [ "Chenyu Zhang", "Lanjun Wang", "Yueyang Cheng", "Ruidong Chen", "Wenhui Li", "An-an Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pe593e10f1254", "title": "What Does the Server See- Understanding Privacy Leakage from Large Language Models in Split Inference", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Measures what a split-inference server learns about private inputs.", "authors": "Mingyuan Fan, Yu Liu, Fuyi Wang, Cen Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2605.23158v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1473, "author_names": [ "Mingyuan Fan", "Yu Liu", "Fuyi Wang", "Cen Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p45e241b70a15", "title": "When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Exploits structured-output controls in LLM systems.", "authors": "Shuoming Zhang, Jiacheng Zhao, Hanyuan Dong, Ruiyuan Xu, Zhicheng Li, Yangyu Zhang, Shuaijiang Li, Yuan Wen, Chunwei Xia, Zheng Wang, Xiaobing Feng, Huimin Cui", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2503.24191v4", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1562, "author_names": [ "Shuoming Zhang", "Jiacheng Zhao", "Hanyuan Dong", "Ruiyuan Xu", "Zhicheng Li", "Yangyu Zhang", "Shuaijiang Li", "Yuan Wen", "Chunwei Xia", "Zheng Wang", "Xiaobing Feng", "Huimin Cui" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p555cdbad6617", "title": "When Topology Betrays Privacy: Lattice-Based Reconstruction Attacks on Secure Aggregation in Decentralized Federated Learning", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Reconstructs private updates and data from decentralized secure aggregation by exploiting network topology, including text tasks.", "authors": "Wenrui Yu, Changlong Ji, Johannes Bjerva, Qiongxiu Li", "author_names": [ "Wenrui Yu", "Changlong Ji", "Johannes Bjerva", "Qiongxiu Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2609.08476v1", "abstract_characters": 1466, "new_in_review": true, "status": "Accepted / forthcoming", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p00c04caa8375", "title": "Your Space is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Investigates security risks of applications hosted on pretrained-model hubs.", "authors": "Yacong Gu, Lingyun Ying, Zidong Zhang, Yingyuan Pu, Xiaoxue Huang, Jiawei Zhou, Wenjie Zhu, Donghong Sun, Haixin Duan", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "http://arxiv.org/abs/2606.30373v1", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1495, "author_names": [ "Yacong Gu", "Lingyun Ying", "Zidong Zhang", "Yingyuan Pu", "Xiaoxue Huang", "Jiawei Zhou", "Wenjie Zhu", "Donghong Sun", "Haixin Duan" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "pd6955a965f7c", "title": "Your Synthetic Image Is a Confession: Trojaning Image-to-Image Generative Models for Private Input Reconstruction", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Backdoors image-to-image generators to reconstruct private input images.", "authors": "Haolin Yuan, Alison Rebman, John Aucott, Yinzhi Cao", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors", "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Haolin Yuan", "Alison Rebman", "John Aucott", "Yinzhi Cao" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p2383a6f0c389", "title": "zkAgent: Verifiable LLM Agent Execution via One-Shot Transcript Proofs", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Proves agent execution through verifiable transcripts.", "authors": "Lizheng Wang, Hancheng Lou, Chongrong Li, Yu Yu, Yuncong Hu", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Private & verifiable computation", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2026/199", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1895, "author_names": [ "Lizheng Wang", "Hancheng Lou", "Chongrong Li", "Yu Yu", "Yuncong Hu" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p9e926c89e2e1", "title": "zkTransformer: Scalable Zero-Knowledge Proofs for LLM Inference via Einsum Arithmetization and Structured Exponentiation Lookups", "year": 2026, "venue": "ACM CCS", "edition": "ccs-2026", "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html", "summary": "Scales zero-knowledge proofs for transformer inference.", "authors": "Bing-Jyue Chen, Lilia Tang, Daniel Kang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": false, "abstract_source": "", "new_in_review": false, "status": "Accepted / forthcoming", "scope_note": "", "review_note": "Included from the official title listing or earlier catalogue. Abstract retrieval remains unresolved; this is not a completed abstract review.", "added_date": "", "abstract_characters": 0, "author_names": [ "Bing-Jyue Chen", "Lilia Tang", "Daniel Kang" ], "author_source": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html" }, { "key": "p3efb9062d7b7", "title": "Adversarial Hubness in Multi-Modal Retrieval", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Creates adversarial image and audio hubs that dominate multimodal retrieval results across many queries.", "authors": "Tingwei Zhang, Fnu Suya, Rishi Jha, Collin Zhang, Vitaly Shmatikov", "author_names": [ "Tingwei Zhang", "Fnu Suya", "Rishi Jha", "Collin Zhang", "Vitaly Shmatikov" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "doi": "https://doi.org/10.1109/SP63933.2026.00158", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7a95a252df5f5e107577e12021616054a2415b93", "abstract_characters": 1456, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p1088d09b6fba", "title": "AI Wrote My Paper and All I Got Was This False Negative:* Measuring the Efficacy of Commercial AI Text Detectors", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Measures the effectiveness of commercial AI-text detectors.", "authors": "Seth Layton, Bernardo B. P. Medeiros, Kevin Butler, Patrick Traynor", "doi": "https://doi.org/10.1109/SP63933.2026.00088", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/32de00afd2ab52521d9257b428ea3efafd827200", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1499, "author_names": [ "Seth Layton", "Bernardo B. P. Medeiros", "Kevin Butler", "Patrick Traynor" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p3939617fa270", "title": "Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Tests poisoning robustness of graph models enhanced with LLMs.", "authors": "Yuhang Ma, Jie Wang, Zheng Yan", "doi": "https://doi.org/10.1109/SP63933.2026.00212", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/fc2965473f540d145e6ed1e74ef88f40202d8567", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1823, "author_names": [ "Yuhang Ma", "Jie Wang", "Zheng Yan" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p9ceccec78887", "title": "AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Attributes prompt injection and corrupted knowledge to their context sources.", "authors": "Yanting Wang, Runpeng Geng, Ying Chen, Jinyuan Jia", "doi": "https://doi.org/10.1109/SP63933.2026.00198", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e705134eb7e44fe99ef387209266b6738bb5273b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1913, "author_names": [ "Yanting Wang", "Runpeng Geng", "Ying Chen", "Jinyuan Jia" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pea51bc7e0685", "title": "Beyond Indistinguishability: Measuring Extraction Risk in LLM APIs", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Measures extraction risk exposed by LLM APIs.", "authors": "Ruixuan Liu, David Evans, Li Xiong", "doi": "https://doi.org/10.1109/SP63933.2026.00165", "areas": [ "LLM" ], "topics": [ "Model security", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0d358134f4689d6df737b8c39fe96328d986d88c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1706, "author_names": [ "Ruixuan Liu", "David Evans", "Li Xiong" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p261fec883746", "title": "Breaking Free from Ivory Tower: Evaluating and Enhancing Real-world Chinese Underground Adversarial Jargon Detection", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Measures LLM failures on adversarial Chinese underground jargon and develops a taxonomy-guided defense.", "authors": "Zhifan Jiang, Mingxuan Liu, Yue Qin, Baojun Liu", "doi": "https://doi.org/10.1109/SP63933.2026.00233", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1ee9b6e675f4306b8368056ef8dbe477fa028641", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 2429, "author_names": [ "Zhifan Jiang", "Mingxuan Liu", "Yue Qin", "Baojun Liu" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pc97786dcc811", "title": "Can Foundation LLMs Accurately Estimate Password Strength and Provide Appropriate Password Feedback?", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Evaluates LLM password-strength judgments and finds unreliable, predictable password-improvement advice.", "authors": "Madison Pickering, Garrison Hinson-Hasty, Luca Dovichi, Helena Williams, Nathaniel Kim, Aybala Esmer, Blase Ur", "doi": "https://doi.org/10.1109/SP63933.2026.00179", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/037ebce3b02f2c38597b69846654a6f8487cc5b2", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1360, "author_names": [ "Madison Pickering", "Garrison Hinson-Hasty", "Luca Dovichi", "Helena Williams", "Nathaniel Kim", "Aybala Esmer", "Blase Ur" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p9e2f444148e8", "title": "DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Automates adversarial testing of text-to-image systems using distribution modeling.", "authors": "Boheng Li, Junjie Wang, Yiming Li, Zhiyang Hu, Leyi Qi, Jianshuo Dong, Run Wang, Han Qiu, Zhan Qin, Tianwei Zhang", "doi": "https://doi.org/10.1109/SP63933.2026.00112", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/2010110fb25792d349a2f39e9ce17425d5f81ec0", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1882, "author_names": [ "Boheng Li", "Junjie Wang", "Yiming Li", "Zhiyang Hu", "Leyi Qi", "Jianshuo Dong", "Run Wang", "Han Qiu", "Zhan Qin", "Tianwei Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p8b067f1f5cf8", "title": "EnchTable: Unified Safety Alignment Transfer in Fine-tuned Large Language Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Transfers safety alignment to fine-tuned language models.", "authors": "Jialin Wu, Kecen Li, Zhicong Huang, Xinfeng Li, Xiaofeng Wang, Cheng Hong", "doi": "https://doi.org/10.1109/SP63933.2026.00072", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/75fe6885be6f608878962c2c95dbd49d5a589cbf", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 2014, "author_names": [ "Jialin Wu", "Kecen Li", "Zhicong Huang", "Xinfeng Li", "Xiaofeng Wang", "Cheng Hong" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pbab4d2d6baf9", "title": "Ensemble Conformal Predictor (EnCP): A New Conformal Predictor with Robustness Guarantees against Data Poisoning Attacks", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Provides poisoning-robust conformal prediction, including evaluations on LLM toxicity classification.", "authors": "Yuxin Yang, Qiang Li, Runyang Feng, Liren Shan, Binghui Wang", "doi": "https://doi.org/10.1109/SP63933.2026.00043", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/93ed2d87c1331970eee2e608c4a5521140bed949", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1652, "author_names": [ "Yuxin Yang", "Qiang Li", "Runyang Feng", "Liren Shan", "Binghui Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pd22df496594c", "title": "Euston: Efficient and User-Friendly Secure Transfomer Inference with Non-Interactivity", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Accelerates noninteractive encrypted Transformer inference through optimized matrix multiplication and nonlinear evaluations.", "authors": "Xinwen Gao, Shaojing Fu, Lin Liu, Zhuotao Liu, Yuchuan Luo, Yongjun Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://liuzhuotao.github.io/publications/euston/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1929, "author_names": [ "Xinwen Gao", "Shaojing Fu", "Lin Liu", "Zhuotao Liu", "Yuchuan Luo", "Yongjun Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pd66ea18b2ec3", "title": "Evaluating Concept Filtering Defenses against Child Sexual Abuse Material Generation by Text-to-Image Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Evaluates concept-filtering defenses against child-abuse image generation.", "authors": "Ana-Maria Cretu, Klim Kireev, Amro Abdalla, Wisdom Obinna, Raphael Meier, Sarah Adel Bargal, Elissa M. Redmiles, Carmela Troncoso", "doi": "https://doi.org/10.1109/SP63933.2026.00251", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/db65e66c5459f04020880502330df9d766f25e0e", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1383, "author_names": [ "Ana-Maria Cretu", "Klim Kireev", "Amro Abdalla", "Wisdom Obinna", "Raphael Meier", "Sarah Adel Bargal", "Elissa M. Redmiles", "Carmela Troncoso" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pa02eae1968d9", "title": "Exploiting Leaderboards for Large-Scale Distribution of Poisoned Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Shows how poisoned language, image, and speech models can retain high leaderboard ranks and gain distribution.", "authors": "Anshuman Suri, Harsh Chaudhari, Yuefeng Peng, Ali Naseh, Amir Houmansadr, Alina Oprea", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2507.08983", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1199, "author_names": [ "Anshuman Suri", "Harsh Chaudhari", "Yuefeng Peng", "Ali Naseh", "Amir Houmansadr", "Alina Oprea" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p2a9bdb635483", "title": "GraphRAG under Fire", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Evaluates attacks on graph-based retrieval-augmented generation.", "authors": "Jiacheng Liang, Yuhui Wang, Changjiang Li, Rongyi Zhu, Tanqiu Jiang, Neil Gong, Ting Wang", "doi": "https://doi.org/10.1109/SP63933.2026.00070", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/564878c6c53862bb9cbae8c99dfe90525b882863", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1560, "author_names": [ "Jiacheng Liang", "Yuhui Wang", "Changjiang Li", "Rongyi Zhu", "Tanqiu Jiang", "Neil Gong", "Ting Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pe84c499a4608", "title": "Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Injects imperceptible audio instructions into audio-language models.", "authors": "Meng Chen, Kun Wang, Li Lu, Jiaheng Zhang, Tianwei Zhang", "doi": "https://doi.org/10.1109/SP63933.2026.00214", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/369148e6a920001cdc29e651a5019f096600f1f4", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1682, "author_names": [ "Meng Chen", "Kun Wang", "Li Lu", "Jiaheng Zhang", "Tianwei Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pf229d679c966", "title": "Hollow-LLM Attack: Computationally Trivial Weights in Zero-Knowledge Verification of LLM Inference", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Challenges zero-knowledge inference verification using degenerate model weights.", "authors": "Chen Gong, Beijie Liu, Mengyuan Li", "doi": "https://doi.org/10.1109/SP63933.2026.00258", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b5c3415c8097a55c230dceddce46d7fc68f07860", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1718, "author_names": [ "Chen Gong", "Beijie Liu", "Mengyuan Li" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pbc5f023a4133", "title": "Investigating the Impact of Dark Patterns on LLM-Based Web Agents", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Studies how deceptive interface designs affect web agents.", "authors": "Devin Ersoy, Brandon Lee, Ananth Shreekumar, Arjun Arunasalam, Muhammad Ibrahim, Antonio Bianchi, Z. Berkay Celik", "doi": "https://doi.org/10.1109/SP63933.2026.00042", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a1224b17198ffa65a19140406014eeda6d24ed01", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1676, "author_names": [ "Devin Ersoy", "Brandon Lee", "Ananth Shreekumar", "Arjun Arunasalam", "Muhammad Ibrahim", "Antonio Bianchi", "Z. Berkay Celik" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pe591d54da549", "title": "LLM Unlearning Should Be Form-Independent", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Tests whether unlearning remains effective across input forms.", "authors": "Xiaotian Ye, Mengqi Zhang, Shu Wu", "doi": "https://doi.org/10.1109/SP63933.2026.00037", "areas": [ "LLM" ], "topics": [ "Side channels & systems", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/3f358c2dc105279e9264c67b6ba3aa6247799988", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1803, "author_names": [ "Xiaotian Ye", "Mengqi Zhang", "Shu Wu" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p5924ec13cb38", "title": "LLMThief: Evaluating Configuration Leaking Risks in Commercial LLM App Stores", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Studies configuration leakage from commercial LLM application stores.", "authors": "Pinji Chen, Jinlong Jiang, Jianjun Chen, Feiran Qin, Minghao Zhang, Jiahe Zhang, Haixin Duan, Kaiwen Shen, Hui Jiang", "doi": "https://doi.org/10.1109/SP63933.2026.00195", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b4725f2060233c13880a349e3fdc9e6b7b1c3c9a", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1806, "author_names": [ "Pinji Chen", "Jinlong Jiang", "Jianjun Chen", "Feiran Qin", "Minghao Zhang", "Jiahe Zhang", "Haixin Duan", "Kaiwen Shen", "Hui Jiang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pf855c61997d6", "title": "MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Manipulates special tokens to jailbreak deployed services.", "authors": "Wentian Zhu, Zhen Xiang, Wei Niu, Le Guan", "doi": "https://doi.org/10.1109/SP63933.2026.00095", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/5c62df7744dcac8ac372e1c3146ca1fa4a5ff8e5", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1685, "author_names": [ "Wentian Zhu", "Zhen Xiang", "Wei Niu", "Le Guan" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pc1b268aa4a57", "title": "Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Studies multi-tool MCP prompt attacks that collect and exfiltrate private data, with a large tool-ecosystem census.", "authors": "Shuli Zhao, Qinsheng Hou, Zihan Zhan, Yanhao Wang, Yuchong Xie, Yu Guo, Libo Chen, Shenghong Li, Zhi Xue", "doi": "https://doi.org/10.1109/SP63933.2026.00154", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Privacy & inference", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1763949de4f182019fdf2f21a101f60df339dd59", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1945, "author_names": [ "Shuli Zhao", "Qinsheng Hou", "Zihan Zhan", "Yanhao Wang", "Yuchong Xie", "Yu Guo", "Libo Chen", "Shenghong Li", "Zhi Xue" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pfb23edd2bee3", "title": "PromptCOS: Towards Content-only System Prompt Copyright Auditing for LLMs", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Audits ownership of system-prompt content.", "authors": "Yuchen Yang, Yiming Li, Hongwei Yao, Enhao Huang, Shuo Shao, Yuyi Wang, Zhibo Wang, Dacheng Tao, Zhan Qin", "doi": "https://doi.org/10.1109/SP63933.2026.00142", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/52165256bbc99b659d5c85cc8e98997c330dcdf3", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1815, "author_names": [ "Yuchen Yang", "Yiming Li", "Hongwei Yao", "Enhao Huang", "Shuo Shao", "Yuyi Wang", "Zhibo Wang", "Dacheng Tao", "Zhan Qin" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p4ec2de2ff51c", "title": "PromptLocate: Localizing Prompt Injection Attacks", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Locates injected instructions inside model inputs.", "authors": "Yuqi Jia, Yupei Liu, Zedian Shao, Jinyuan Jia, Neil Gong", "doi": "https://doi.org/10.1109/SP63933.2026.00105", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/532f88e78c96a7efb418c6fedd428b741a73e9af", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 979, "author_names": [ "Yuqi Jia", "Yupei Liu", "Zedian Shao", "Jinyuan Jia", "Neil Gong" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pcece00a6b4d0", "title": "Recovering and Rehosting Mobile Local LLM Conversations and Contexts via Memory Forensics", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Recovers local model conversations and context from device memory.", "authors": "Haichuan Xu, David Oygenblik, Runze Zhang, Mingxuan Yao, Muhammad Ibrahim, Brendan Saltaformaggio", "doi": "https://doi.org/10.1109/SP63933.2026.00252", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/45ca35e6aed88142d88ead208ebd6438d77a3c9f", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1620, "author_names": [ "Haichuan Xu", "David Oygenblik", "Runze Zhang", "Mingxuan Yao", "Muhammad Ibrahim", "Brendan Saltaformaggio" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p5a6928d80e0b", "title": "Site Isolation is Dead: How Site Isolation is Broken in Agentic Browsers and Extensions", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Examines site-isolation failures in agentic browsers and extensions.", "authors": "Suyoung Lee, Seongho Keum, Changoo Lee, Dongwon Shin, Sanghyun Hong, Byoungyoung Lee, Sooel Son", "doi": "https://doi.org/10.1109/SP63933.2026.00241", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/900d5304c3371bcedef4d7280da3bf326032202d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1885, "author_names": [ "Suyoung Lee", "Seongho Keum", "Changoo Lee", "Dongwon Shin", "Sanghyun Hong", "Byoungyoung Lee", "Sooel Son" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p274af289130d", "title": "SoK: Evaluating Jailbreak Guardrails for Large Language Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Systematizes evaluation of jailbreak guardrails.", "authors": "Xunguang Wang, Zhenlan Ji, Wenxuan Wang, Zongjie Li, Daoyuan Wu, Shuai Wang", "doi": "https://doi.org/10.1109/SP63933.2026.00076", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1db6f75005dd75ca51f69e0224164d7a966308c3", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1163, "author_names": [ "Xunguang Wang", "Zhenlan Ji", "Wenxuan Wang", "Zongjie Li", "Daoyuan Wu", "Shuai Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p321cc3d57d58", "title": "SoK: Robustness in Large Language Models against Jailbreak Attacks", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Systematizes LLM robustness against jailbreak attacks.", "authors": "Feiyue Xu, Hongsheng Hu, Chaoxiang He, Sheng Hang, Hanqing Hu, Xiuming Liu, Yubo Zhao, Zhengyan Zhou, Bin Benjamin Zhu, Shi-Feng Sun, Dawu Gu, Shuo Wang", "doi": "https://doi.org/10.1109/SP63933.2026.00107", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8c94a03a771b3a52b053e1a82dbfd60a2d9cc653", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1467, "author_names": [ "Feiyue Xu", "Hongsheng Hu", "Chaoxiang He", "Sheng Hang", "Hanqing Hu", "Xiuming Liu", "Yubo Zhao", "Zhengyan Zhou", "Bin Benjamin Zhu", "Shi-Feng Sun", "Dawu Gu", "Shuo Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p6b4a0334d0e7", "title": "TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Exploits Intel TDX memory-access side channels to recover private LLM prompts during tokenization.", "authors": "Tristan Hornetz, Hosein Yavarzadeh, Albert Cheu, Adria Gascon, Lukas Gerlach, Daniel Moghimi, Phillipp Schoppmann, Michael Schwarz, Ruiyi Zhang", "doi": "https://doi.org/10.1109/SP63933.2026.00170", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/921a37e24b894265d57bed4fedbffbae0cdbfb9d", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1867, "author_names": [ "Tristan Hornetz", "Hosein Yavarzadeh", "Albert Cheu", "Adria Gascon", "Lukas Gerlach", "Daniel Moghimi", "Phillipp Schoppmann", "Michael Schwarz", "Ruiyi Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pe859da28c93d", "title": "The Person Behind the Sound: Demystifying Audio Private Attribute Profiling via Multimodal Large Language Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Infers private speaker attributes using multimodal models.", "authors": "Lixu Wang, Kaixiang Yao, Xinfeng Li, Dong Yang, Haoyang Li, XiaoFeng Wang, Wei Dong", "doi": "https://doi.org/10.1109/SP63933.2026.00150", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/be2e974a67fd2d8722ff673da7fe6cb460d388b7", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 2094, "author_names": [ "Lixu Wang", "Kaixiang Yao", "Xinfeng Li", "Dong Yang", "Haoyang Li", "XiaoFeng Wang", "Wei Dong" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p8a9e1cf6ceb8", "title": "Toward Efficient Membership Inference Attacks against Federated Large Language Models: A Projection Residual Approach", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Infers training membership in federated LLMs using projection residuals.", "authors": "Guilin Deng, Silong Chen, Yuchuan Luo, Yi Liu, Songlei Wang, Zhiping Cai, Lin Liu, Xiaohua Jia, Shaojing Fu", "doi": "https://doi.org/10.1109/SP63933.2026.00205", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/fe322270b9c9d354505d385eb6edbc292b7e1dd3", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1315, "author_names": [ "Guilin Deng", "Silong Chen", "Yuchuan Luo", "Yi Liu", "Songlei Wang", "Zhiping Cai", "Lin Liu", "Xiaohua Jia", "Shaojing Fu" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pc904c197068a", "title": "Towards Automating Data Access Permissions in AI Agents", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Automates assignment of data-access permissions for AI agents.", "authors": "Yuhao Wu, Ke Yang, Franziska Roesner, Tadayoshi Kohno, Ning Zhang, Umar Iqbal", "doi": "https://doi.org/10.1109/SP63933.2026.00018", "areas": [ "Agent" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ab53a035ebac356dd532c3dd5886d2317f6f126e", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1160, "author_names": [ "Yuhao Wu", "Ke Yang", "Franziska Roesner", "Tadayoshi Kohno", "Ning Zhang", "Umar Iqbal" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p3f76c93dfffe", "title": "URLcoat: Exploiting Web Search Capability to Jailbreak Large Language Models", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Uses web-search functionality to deliver jailbreaks.", "authors": "Yiheng Sun, Linkang Du, Zhou Su, Yuntao Wang, Han Liu", "doi": "https://doi.org/10.1109/SP63933.2026.00082", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/44af8a5b01d83f32db0fee765bafb0db3ba2637b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1609, "author_names": [ "Yiheng Sun", "Linkang Du", "Zhou Su", "Yuntao Wang", "Han Liu" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p06fb65bff91f", "title": "WebCloak: Characterizing and Mitigating Threats from LLM-Driven Web Agents as Intelligent Scrapers", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Measures and mitigates scraping threats from web agents.", "authors": "Xinfeng Li, Tianze Qiu, Yingbin Jin, Lixu Wang, Hanqing Guo, Xiaojun Jia, XiaoFeng Wang, Wei Dong", "doi": "https://doi.org/10.1109/SP63933.2026.00025", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8042792d324edc6d2deab8a53086624e55788f1c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1878, "author_names": [ "Xinfeng Li", "Tianze Qiu", "Yingbin Jin", "Lixu Wang", "Hanqing Guo", "Xiaojun Jia", "XiaoFeng Wang", "Wei Dong" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "pfd8b5950ce8d", "title": "When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Examines prompt injection through third-party chatbot plugins.", "authors": "Yigitcan Kaya, Anton Landerer, Stijn Pletinckx, Michelle Zimmermann, Christopher Kruegel, Giovanni Vigna", "doi": "https://doi.org/10.1109/SP63933.2026.00062", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0e3f35c9f300156346dd5ddd75b78f768a21deb8", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1961, "author_names": [ "Yigitcan Kaya", "Anton Landerer", "Stijn Pletinckx", "Michelle Zimmermann", "Christopher Kruegel", "Giovanni Vigna" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p172506a780a2", "title": "When Designers Meet GenAI: Understanding the Role of Prompt-to-Design Generators in Privacy Dark Patterns", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Studies privacy dark patterns introduced through designers’ collaboration with prompt-to-design generators.", "authors": "Jingzhou Ye, Zhaojie Hu, Yao Li, Xueqiang Wang", "doi": "https://doi.org/10.1109/SP63933.2026.00131", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f9f257c36ebae174d681589404ea0585ffc99003", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1435, "author_names": [ "Jingzhou Ye", "Zhaojie Hu", "Yao Li", "Xueqiang Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p3b727a40077c", "title": "Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation", "year": 2026, "venue": "IEEE S&P", "edition": "sp-2026", "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html", "summary": "Attributes responsibility for corrupted knowledge in RAG systems.", "authors": "Baolei Zhang, Haoran Xin, Yuxi Chen, Zhuqing Liu, Biao Yi, Tong Li, Lihai Nie, Zheli Liu, Minghong Fang", "doi": "https://doi.org/10.1109/SP63933.2026.00053", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/df88739a298818d54bdb1454776c779e5586092c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1375, "author_names": [ "Baolei Zhang", "Haoran Xin", "Yuxi Chen", "Zhuqing Liu", "Biao Yi", "Tong Li", "Lihai Nie", "Zheli Liu", "Minghong Fang" ], "author_source": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html" }, { "key": "p748a74a4c339", "title": "A Causal Perspective for Enhancing Jailbreak Attack and Defense", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/a-causal-perspective-for-enhancing-jailbreak-attack-and-defense/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses causal analysis to improve jailbreak attacks and defenses.", "authors": "Licheng Pan, Yunsheng Lu, Jiexi Liu, Jialing Tao, Haozhe Feng, Hui Xue, Zhixuan Chu, Kui Ren", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/a-causal-perspective-for-enhancing-jailbreak-attack-and-defense/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1895, "author_names": [ "Licheng Pan", "Yunsheng Lu", "Jiexi Liu", "Jialing Tao", "Haozhe Feng", "Hui Xue", "Zhixuan Chu", "Kui Ren" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/a-causal-perspective-for-enhancing-jailbreak-attack-and-defense/" }, { "key": "pa503cad5e079", "title": "ACE: A Security Architecture for LLM-Integrated App Systems", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/ace-a-security-architecture-for-llm-integrated-app-systems/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Defines a security architecture for applications integrated with LLMs.", "authors": "Evan Li, Tushin Mallick, Evan Rose, William Robertson, Alina Oprea, Cristina Nita-Rotaru", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/ace-a-security-architecture-for-llm-integrated-app-systems/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1774, "author_names": [ "Evan Li", "Tushin Mallick", "Evan Rose", "William Robertson", "Alina Oprea", "Cristina Nita-Rotaru" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/ace-a-security-architecture-for-llm-integrated-app-systems/" }, { "key": "p91d62bfd17b0", "title": "Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/attention-is-all-you-need-to-defend-against-indirect-prompt-injection-attacks-in-llms/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses attention signals to defend against indirect injection.", "authors": "Yinan Zhong, Qianhao Miao, Yanjiao Chen, Jiangyi Deng, Yushi Cheng, Wenyuan Xu", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/attention-is-all-you-need-to-defend-against-indirect-prompt-injection-attacks-in-llms/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1142, "author_names": [ "Yinan Zhong", "Qianhao Miao", "Yanjiao Chen", "Jiangyi Deng", "Yushi Cheng", "Wenyuan Xu" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/attention-is-all-you-need-to-defend-against-indirect-prompt-injection-attacks-in-llms/" }, { "key": "pa5eef3366f2a", "title": "Beyond Jailbreak: Unveiling Risks in LLM Applications Arising from Blurred Capability Boundaries", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/beyond-jailbreak-unveiling-risks-in-llm-applications-arising-from-blurred-capability-boundaries/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Investigates application risks from unclear LLM capability boundaries.", "authors": "Yunyi Zhang, Shibo Cui, Baojun Liu, Jingkai Yu, Min Zhang, Fan Shi, Han Zheng", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/beyond-jailbreak-unveiling-risks-in-llm-applications-arising-from-blurred-capability-boundaries/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1816, "author_names": [ "Yunyi Zhang", "Shibo Cui", "Baojun Liu", "Jingkai Yu", "Min Zhang", "Fan Shi", "Han Zheng" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/beyond-jailbreak-unveiling-risks-in-llm-applications-arising-from-blurred-capability-boundaries/" }, { "key": "paa9f6dcb4be9", "title": "Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/bleeding-pathways-vanishing-discriminability-in-llm-hidden-states-fuels-jailbreak-attacks/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Links hidden-state indistinguishability to successful jailbreaks.", "authors": "Yingjie Zhang, Tong Liu, Zhe Zhao, Guozhu Meng, Kai Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/bleeding-pathways-vanishing-discriminability-in-llm-hidden-states-fuels-jailbreak-attacks/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2064, "author_names": [ "Yingjie Zhang", "Tong Liu", "Zhe Zhao", "Guozhu Meng", "Kai Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/bleeding-pathways-vanishing-discriminability-in-llm-hidden-states-fuels-jailbreak-attacks/" }, { "key": "paa1945ad4f0e", "title": "Cache Me, Catch You: Cache Related Security Threats in LLM Serving Frameworks", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/cache-me-catch-you-cache-related-security-threats-in-llm-serving-frameworks/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Analyzes cache-related vulnerabilities in LLM-serving frameworks.", "authors": "XiangFan Wu, Lingyun Ying, Guoqiang Chen, Yacong Gu, Haipeng Qu", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/cache-me-catch-you-cache-related-security-threats-in-llm-serving-frameworks/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1593, "author_names": [ "XiangFan Wu", "Lingyun Ying", "Guoqiang Chen", "Yacong Gu", "Haipeng Qu" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/cache-me-catch-you-cache-related-security-threats-in-llm-serving-frameworks/" }, { "key": "pa958ab91ec77", "title": "Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/causal-guided-detoxify-backdoor-attack-of-open-weight-lora-models/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Studies backdoors in open-weight LoRA adapters that undermine model safety through a causal-guided attack.", "authors": "Linzhi Chen, Yang Sun, Hongru Wei, Yuqi Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Poisoning & backdoors", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/causal-guided-detoxify-backdoor-attack-of-open-weight-lora-models/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1714, "author_names": [ "Linzhi Chen", "Yang Sun", "Hongru Wei", "Yuqi Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/causal-guided-detoxify-backdoor-attack-of-open-weight-lora-models/" }, { "key": "p43997218b9f7", "title": "Character-Level Perturbations Disrupt LLM Watermarks", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/character-level-perturbations-disrupt-llm-watermarks/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Tests watermark robustness against character-level perturbations.", "authors": "Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang, He Zhang, Shirui Pan, Bo Liu, Asif Gill, Leo Yu Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/character-level-perturbations-disrupt-llm-watermarks/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2707, "author_names": [ "Zhaoxi Zhang", "Xiaomei Zhang", "Yanjun Zhang", "He Zhang", "Shirui Pan", "Bo Liu", "Asif Gill", "Leo Yu Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/character-level-perturbations-disrupt-llm-watermarks/" }, { "key": "pb70d98a1f828", "title": "Characterizing the Implementation of Censorship Policies in Chinese LLM Services", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/characterizing-the-implementation-of-censorship-policies-in-chinese-llm-services/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Measures where censorship is enforced inside deployed Chinese LLM services.", "authors": "Anna Ablove, Shreyas Chandrashekaran, Xiao Qiang, Roya Ensafi", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/characterizing-the-implementation-of-censorship-policies-in-chinese-llm-services/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1791, "author_names": [ "Anna Ablove", "Shreyas Chandrashekaran", "Xiao Qiang", "Roya Ensafi" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/characterizing-the-implementation-of-censorship-policies-in-chinese-llm-services/" }, { "key": "pc8e31e6808cc", "title": "Chasing Shadows: Pitfalls in LLM Security Research", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/chasing-shadows-pitfalls-in-llm-security-research/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Examines methodological pitfalls in LLM security research.", "authors": "Jonathan Evertz, Niklas Risse, Nicolai Neuer, Andreas Müller, Philipp Normann, Gaetano Sapia, Srishti Gupta, David Pape, Soumya Shaw, Devansh Srivastav, Christian Wressnegger, Erwin Quiring, Thorsten Eisenhofer, Daniel Arp, Lea Schönherr", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/chasing-shadows-pitfalls-in-llm-security-research/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1309, "author_names": [ "Jonathan Evertz", "Niklas Risse", "Nicolai Neuer", "Andreas Müller", "Philipp Normann", "Gaetano Sapia", "Srishti Gupta", "David Pape", "Soumya Shaw", "Devansh Srivastav", "Christian Wressnegger", "Erwin Quiring", "Thorsten Eisenhofer", "Daniel Arp", "Lea Schönherr" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/chasing-shadows-pitfalls-in-llm-security-research/" }, { "key": "p90325160ef2c", "title": "DUALBREACH: Efficient Dual-Jailbreaking via Target-Driven Initialization and Multi-Target Optimization", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/dualbreach-efficient-dual-jailbreaking-via-target-driven-initialization-and-multi-target-optimization/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Optimizes jailbreaks across multiple targets.", "authors": "Xinzhe Huang, Kedong Xiu, Tianhang Zheng, Churui Zeng, Wangze Ni, Zhan Qin, Kui Ren, Chun Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/dualbreach-efficient-dual-jailbreaking-via-target-driven-initialization-and-multi-target-optimization/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1889, "author_names": [ "Xinzhe Huang", "Kedong Xiu", "Tianhang Zheng", "Churui Zeng", "Wangze Ni", "Zhan Qin", "Kui Ren", "Chun Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/dualbreach-efficient-dual-jailbreaking-via-target-driven-initialization-and-multi-target-optimization/" }, { "key": "pfbf3e9a0f845", "title": "ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/expshield-safeguarding-web-text-from-unauthorized-crawling-and-llm-exploitation/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Protects web text from unauthorized scraping and model exploitation.", "authors": "Ruixuan Liu, Toan Tran, Tianhao Wang, Hongsheng Hu, Shuo Wang, Li Xiong", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/expshield-safeguarding-web-text-from-unauthorized-crawling-and-llm-exploitation/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1690, "author_names": [ "Ruixuan Liu", "Toan Tran", "Tianhao Wang", "Hongsheng Hu", "Shuo Wang", "Li Xiong" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/expshield-safeguarding-web-text-from-unauthorized-crawling-and-llm-exploitation/" }, { "key": "pafe0fc3a0db6", "title": "In-Context Probing for Membership Inference in Fine-Tuned Language Models", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/in-context-probing-for-membership-inference-in-fine-tuned-language-models/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses in-context probing to infer membership in fine-tuning data.", "authors": "Zhexi Lu, Hongliang Chi, Nathalie Baracaldo, Swanand Ravindra Kadhe, Yuseok Jeon, Lei Yu", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/in-context-probing-for-membership-inference-in-fine-tuned-language-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1608, "author_names": [ "Zhexi Lu", "Hongliang Chi", "Nathalie Baracaldo", "Swanand Ravindra Kadhe", "Yuseok Jeon", "Lei Yu" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/in-context-probing-for-membership-inference-in-fine-tuned-language-models/" }, { "key": "p76e2bcce350d", "title": "InverTune: A Backdoor Defense Method for Multimodal Contrastive Learning via Backdoor-Adversarial Correlation Analysis", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/invertune-a-backdoor-defense-method-for-multimodal-contrastive-learning-via-backdoor-adversarial-correlation-analysis/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Detects and removes CLIP-style multimodal backdoors using adversarial simulation, trigger inversion, and limited clean data.", "authors": "Mengyuan Sun, Yu Li, Yunjie Ge, Yuchen Liu, Bo Du, Qian Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors", "Privacy & inference", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/invertune-a-backdoor-defense-method-for-multimodal-contrastive-learning-via-backdoor-adversarial-correlation-analysis/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1915, "author_names": [ "Mengyuan Sun", "Yu Li", "Yunjie Ge", "Yuchen Liu", "Bo Du", "Qian Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/invertune-a-backdoor-defense-method-for-multimodal-contrastive-learning-via-backdoor-adversarial-correlation-analysis/" }, { "key": "p6550084baf4d", "title": "Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/les-dissonances-cross-tool-harvesting-and-polluting-in-pool-of-tools-empowered-llm-agents/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Studies data harvesting and contamination across agent tools.", "authors": "Zichuan Li, Jian Cui, Xiaojing Liao, Luyi Xing", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/les-dissonances-cross-tool-harvesting-and-polluting-in-pool-of-tools-empowered-llm-agents/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1150, "author_names": [ "Zichuan Li", "Jian Cui", "Xiaojing Liao", "Luyi Xing" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/les-dissonances-cross-tool-harvesting-and-polluting-in-pool-of-tools-empowered-llm-agents/" }, { "key": "p0f746ed1c0a7", "title": "Light2Lie: Detecting Deepfake Images Using Physical Reflectance Laws", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/light2lie-detecting-deepfake-images-using-physical-reflectance-laws/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Detects synthetic images from diffusion and GAN models using physically grounded light-reflection inconsistencies.", "authors": "Kavita Kumari, Sasha Behrouzi, Alessandro Pegoraro, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/light2lie-detecting-deepfake-images-using-physical-reflectance-laws/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1833, "author_names": [ "Kavita Kumari", "Sasha Behrouzi", "Alessandro Pegoraro", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/light2lie-detecting-deepfake-images-using-physical-reflectance-laws/" }, { "key": "p741b991d55a6", "title": "Memory Backdoor Attacks on Neural Networks", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/memory-backdoor-attacks-on-neural-networks/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses training-time memory backdoors to recover client training samples, including from federated language models.", "authors": "Eden Luzon, Guy Amit, Roy Weiss, Torsten Krauß, Alexandra Dmitrienko, Yisroel Mirsky", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/memory-backdoor-attacks-on-neural-networks/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1769, "author_names": [ "Eden Luzon", "Guy Amit", "Roy Weiss", "Torsten Krauß", "Alexandra Dmitrienko", "Yisroel Mirsky" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/memory-backdoor-attacks-on-neural-networks/" }, { "key": "pf246de7f4fa7", "title": "NeuroStrike: Neuron-Level Attacks on Aligned LLMs", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/neurostrike-neuron-level-attacks-on-aligned-llms/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Targets safety-related neurons to defeat alignment.", "authors": "Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Maximilian Thang, Stjepan Picek, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/neurostrike-neuron-level-attacks-on-aligned-llms/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1837, "author_names": [ "Lichao Wu", "Sasha Behrouzi", "Mohamadreza Rostami", "Maximilian Thang", "Stjepan Picek", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/neurostrike-neuron-level-attacks-on-aligned-llms/" }, { "key": "p30c1ae3f8913", "title": "ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/obliinjection-order-oblivious-prompt-injection-attack-to-llm-agents-with-multi-source-data/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Injects instructions that remain effective across source ordering.", "authors": "Reachal Wang, Yuqi Jia, Neil Zhenqiang Gong", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/obliinjection-order-oblivious-prompt-injection-attack-to-llm-agents-with-multi-source-data/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1615, "author_names": [ "Reachal Wang", "Yuqi Jia", "Neil Zhenqiang Gong" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/obliinjection-order-oblivious-prompt-injection-attack-to-llm-agents-with-multi-source-data/" }, { "key": "p21a57e18a33f", "title": "Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/odysseus-jailbreaking-commercial-multimodal-llm-integrated-systems-via-dual-steganography/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses dual steganography to jailbreak deployed multimodal systems.", "authors": "Songze Li, Jiameng Cheng, Yiming Li, Xiaojun Jia, Dacheng Tao", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/odysseus-jailbreaking-commercial-multimodal-llm-integrated-systems-via-dual-steganography/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2511, "author_names": [ "Songze Li", "Jiameng Cheng", "Yiming Li", "Xiaojun Jia", "Dacheng Tao" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/odysseus-jailbreaking-commercial-multimodal-llm-integrated-systems-via-dual-steganography/" }, { "key": "pe62ef8e54af6", "title": "Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/paladin-defending-llm-enabled-phishing-emails-with-a-new-trigger-tag-paradigm/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Defends against LLM-generated phishing emails with a trigger-tag detection paradigm.", "authors": "Yan Pang, Wenlong Meng, Xiaojing Liao, Tianhao Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Human factors & misuse", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/paladin-defending-llm-enabled-phishing-emails-with-a-new-trigger-tag-paradigm/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1686, "author_names": [ "Yan Pang", "Wenlong Meng", "Xiaojing Liao", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/paladin-defending-llm-enabled-phishing-emails-with-a-new-trigger-tag-paradigm/" }, { "key": "p80179fcc3668", "title": "PrivCode: When Code Generation Meets Differential Privacy", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/privcode-when-code-generation-meets-differential-privacy/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Generates synthetic code with differential privacy to protect private fine-tuning data while preserving code utility.", "authors": "Zheng Liu, Chen Gong, Terry Yue Zhuo, Kecen Li, Weichen Yu, Matt Fredrikson, Tianhao Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/privcode-when-code-generation-meets-differential-privacy/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1456, "author_names": [ "Zheng Liu", "Chen Gong", "Terry Yue Zhuo", "Kecen Li", "Weichen Yu", "Matt Fredrikson", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/privcode-when-code-generation-meets-differential-privacy/" }, { "key": "pfa3c5250908d", "title": "PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learning", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/privorl-differentially-private-synthetic-dataset-for-offline-reinforcement-learning/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses differentially private diffusion generators to release synthetic transitions and trajectories for offline reinforcement learning.", "authors": "Chen GONG, Zheng Liu, Kecen Li, Tianhao Wang", "author_names": [ "Chen GONG", "Zheng Liu", "Kecen Li", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/privorl-differentially-private-synthetic-dataset-for-offline-reinforcement-learning/", "doi": "", "areas": [ "Agent", "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/privorl-differentially-private-synthetic-dataset-for-offline-reinforcement-learning/", "abstract_characters": 1604, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pf6af19fba18c", "title": "Prompt Injection Attack to Tool Selection in LLM Agents", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/prompt-injection-attack-to-tool-selection-in-llm-agents/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Manipulates agents' choice of tools through prompt injection.", "authors": "Jiawen Shi, Zenghui Yuan, Guiyao Tie, Pan Zhou, Neil Zhenqiang Gong, Lichao Sun", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/prompt-injection-attack-to-tool-selection-in-llm-agents/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1255, "author_names": [ "Jiawen Shi", "Zenghui Yuan", "Guiyao Tie", "Pan Zhou", "Neil Zhenqiang Gong", "Lichao Sun" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/prompt-injection-attack-to-tool-selection-in-llm-agents/" }, { "key": "pf7c9a421fd79", "title": "Prεεmpt: Sanitizing Sensitive Prompts for LLMs", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/pr%ce%b5%ce%b5mpt-sanitizing-sensitive-prompts-for-llms/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Sanitizes sensitive prompt tokens while preserving useful responses.", "authors": "Amrita Roy Chowdhury, David Glukhov, Divyam Anshumaan, Prasad Chalasani, Nicholas Papernot, Somesh Jha, Mihir Bellare", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/pr%ce%b5%ce%b5mpt-sanitizing-sensitive-prompts-for-llms/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1208, "author_names": [ "Amrita Roy Chowdhury", "David Glukhov", "Divyam Anshumaan", "Prasad Chalasani", "Nicholas Papernot", "Somesh Jha", "Mihir Bellare" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/pr%ce%b5%ce%b5mpt-sanitizing-sensitive-prompts-for-llms/" }, { "key": "p8f1e2683685a", "title": "Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/q-mllm-vector-quantization-for-robust-multimodal-large-language-model-security/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses vector quantization to improve multimodal model robustness.", "authors": "Wei Zhao, Zhe Li, Yige Li, Jun Sun", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/q-mllm-vector-quantization-for-robust-multimodal-large-language-model-security/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1474, "author_names": [ "Wei Zhao", "Zhe Li", "Yige Li", "Jun Sun" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/q-mllm-vector-quantization-for-robust-multimodal-large-language-model-security/" }, { "key": "p71b85a7ac0cc", "title": "SAGA: A Security Architecture for Governing AI Agentic Systems", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/saga-a-security-architecture-for-governing-ai-agentic-systems/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Implements agent identity, authorization, and delegation controls.", "authors": "Georgios Syros, Anshuman Suri, Jacob Ginesin, Cristina Nita-Rotaru, Alina Oprea", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/saga-a-security-architecture-for-governing-ai-agentic-systems/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1569, "author_names": [ "Georgios Syros", "Anshuman Suri", "Jacob Ginesin", "Cristina Nita-Rotaru", "Alina Oprea" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/saga-a-security-architecture-for-governing-ai-agentic-systems/" }, { "key": "paf37839f8417", "title": "Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/shadow-in-the-cache-unveiling-and-mitigating-privacy-risks-of-kv-cache-in-llm-inference/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Analyzes and mitigates private-information leakage through KV caches.", "authors": "Zhifan Luo, Shuo Shao, Su Zhang, Lijing Zhou, Yuke Hu, Chenxu Zhao, Zhihao Liu, Zhan Qin", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/shadow-in-the-cache-unveiling-and-mitigating-privacy-risks-of-kv-cache-in-llm-inference/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1283, "author_names": [ "Zhifan Luo", "Shuo Shao", "Su Zhang", "Lijing Zhou", "Yuke Hu", "Chenxu Zhao", "Zhihao Liu", "Zhan Qin" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/shadow-in-the-cache-unveiling-and-mitigating-privacy-risks-of-kv-cache-in-llm-inference/" }, { "key": "p079b44d6e4e9", "title": "STIP: Three-Party Privacy-Preserving and Lossless Inference for Large Transformers in Production", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/stip-three-party-privacy-preserving-and-lossless-inference-for-large-transformers-in-production/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Provides three-party private inference for large transformers.", "authors": "Mu Yuan, Lan Zhang, Yihang Cheng, Miao-Hui Song, Guoliang Xing, Xiang-Yang Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/stip-three-party-privacy-preserving-and-lossless-inference-for-large-transformers-in-production/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1753, "author_names": [ "Mu Yuan", "Lan Zhang", "Yihang Cheng", "Miao-Hui Song", "Guoliang Xing", "Xiang-Yang Li" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/stip-three-party-privacy-preserving-and-lossless-inference-for-large-transformers-in-production/" }, { "key": "p4d6a835a4706", "title": "There is No War in Ba Sing Se: A Global Analysis of Content Moderation in Large Language Models", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/there-is-no-war-in-ba-sing-se-a-global-analysis-of-content-moderation-in-large-language-models/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Compares content-moderation behavior across LLM services globally.", "authors": "Friedemann Lipphardt, Moonis Ali, Martin Banzer, Anja Feldmann, Devashish Gosain", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/there-is-no-war-in-ba-sing-se-a-global-analysis-of-content-moderation-in-large-language-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1479, "author_names": [ "Friedemann Lipphardt", "Moonis Ali", "Martin Banzer", "Anja Feldmann", "Devashish Gosain" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/there-is-no-war-in-ba-sing-se-a-global-analysis-of-content-moderation-in-large-language-models/" }, { "key": "pa6ac9d56630c", "title": "ThinkTrap: Denial-of-Service Attacks against Black-box LLM Services via Infinite Thinking", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/thinktrap-denial-of-service-attacks-against-black-box-llm-services-via-infinite-thinking/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Exhausts black-box LLM services through excessive reasoning.", "authors": "Yunzhe Li, Jianan Wang, Hongzi Zhu, James Lin, Shan Chang, Minyi Guo", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/thinktrap-denial-of-service-attacks-against-black-box-llm-services-via-infinite-thinking/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1789, "author_names": [ "Yunzhe Li", "Jianan Wang", "Hongzi Zhu", "James Lin", "Shan Chang", "Minyi Guo" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/thinktrap-denial-of-service-attacks-against-black-box-llm-services-via-infinite-thinking/" }, { "key": "pa309d8a802ae", "title": "Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/towards-effective-prompt-stealing-attack-against-text-to-image-diffusion-models/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Develops prompt-reconstruction attacks on text-to-image diffusion systems.", "authors": "Shiqian Zhao, Chong Wang, Yiming Li, Yihao Huang, Wenjie Qu, Siew-Kei Lam, Yi Xie, Kangjie Chen, Jie Zhang, Tianwei Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/towards-effective-prompt-stealing-attack-against-text-to-image-diffusion-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1956, "author_names": [ "Shiqian Zhao", "Chong Wang", "Yiming Li", "Yihao Huang", "Wenjie Qu", "Siew-Kei Lam", "Yi Xie", "Kangjie Chen", "Jie Zhang", "Tianwei Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/towards-effective-prompt-stealing-attack-against-text-to-image-diffusion-models/" }, { "key": "p86f9eb5ef40f", "title": "Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/trust-me-i-know-this-function-hijacking-llm-static-analysis-using-bias/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Uses model biases to hijack LLM-based static analysis.", "authors": "Shir Bernstein, David Beste, Daniel Ayzenshteyn, Lea Schönherr, Yisroel Mirsky", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/trust-me-i-know-this-function-hijacking-llm-static-analysis-using-bias/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1229, "author_names": [ "Shir Bernstein", "David Beste", "Daniel Ayzenshteyn", "Lea Schönherr", "Yisroel Mirsky" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/trust-me-i-know-this-function-hijacking-llm-static-analysis-using-bias/" }, { "key": "pda99ee61fc32", "title": "Unshaken by Weak Embedding: Robust Probabilistic Watermarking for Dataset Copyright Protection", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/unshaken-by-weak-embedding-robust-probabilistic-watermarking-for-dataset-copyright-protection/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Embeds probabilistic dataset watermarks to verify ownership, with evaluations including language-model generation.", "authors": "Shang Wang, Tianqing Zhu, Dayong Ye, Hua Ma, Bo Liu, Ming Ding, Shengfang Zhai, Yansong Gao", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/unshaken-by-weak-embedding-robust-probabilistic-watermarking-for-dataset-copyright-protection/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1961, "author_names": [ "Shang Wang", "Tianqing Zhu", "Dayong Ye", "Hua Ma", "Bo Liu", "Ming Ding", "Shengfang Zhai", "Yansong Gao" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/unshaken-by-weak-embedding-robust-probabilistic-watermarking-for-dataset-copyright-protection/" }, { "key": "p0dad44653273", "title": "VeriLoRA: Fine-Tuning Large Language Models with Verifiable Security via Zero-Knowledge Proofs", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/verilora-fine-tuning-large-language-models-with-verifiable-security-via-zero-knowledge-proofs/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Verifies low-rank fine-tuning with zero-knowledge proofs.", "authors": "Guofu Liao, Taotao Wang, Shengli Zhang, Jiqun Zhang, Long Shi, Dacheng Tao", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/verilora-fine-tuning-large-language-models-with-verifiable-security-via-zero-knowledge-proofs/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1425, "author_names": [ "Guofu Liao", "Taotao Wang", "Shengli Zhang", "Jiqun Zhang", "Long Shi", "Dacheng Tao" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/verilora-fine-tuning-large-language-models-with-verifiable-security-via-zero-knowledge-proofs/" }, { "key": "pd769fdff3ec0", "title": "ViGText: Deepfake Image Detection with Vision-Language Model Explanations and Graph Neural Networks", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/vigtext-deepfake-image-detection-with-vision-language-model-explanations-and-graph-neural-networks/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Combines vision-language explanations and image graphs to detect deepfakes, including customized Stable Diffusion outputs.", "authors": "Ahmad ALBarqawi, Mahmoud Nazzal, Issa Khalil, Abdallah Khreishah, NhatHai Phan", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/vigtext-deepfake-image-detection-with-vision-language-model-explanations-and-graph-neural-networks/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 2227, "author_names": [ "Ahmad ALBarqawi", "Mahmoud Nazzal", "Issa Khalil", "Abdallah Khreishah", "NhatHai Phan" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/vigtext-deepfake-image-detection-with-vision-language-model-explanations-and-graph-neural-networks/" }, { "key": "peca3f9820f43", "title": "Was My Data Used for Training? Membership Inference in Open-Source LLMs via Neural Activations", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/was-my-data-used-for-training-membership-inference-in-open-source-llms-via-neural-activations/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Infers training membership from open-model neural activations.", "authors": "Xue Tan, Hao Luan, Mingyu Luo, Zhuyang Yu, Jun Dai, Xiaoyan Sun, Ping Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/was-my-data-used-for-training-membership-inference-in-open-source-llms-via-neural-activations/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1763, "author_names": [ "Xue Tan", "Hao Luan", "Mingyu Luo", "Zhuyang Yu", "Jun Dai", "Xiaoyan Sun", "Ping Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/was-my-data-used-for-training-membership-inference-in-open-source-llms-via-neural-activations/" }, { "key": "pa3b57c01abca", "title": "When Cache Poisoning Meets LLM Systems: Semantic Cache Poisoning and Its Countermeasures", "year": 2026, "venue": "NDSS", "edition": "ndss-2026", "url": "https://www.ndss-symposium.org/ndss-paper/when-cache-poisoning-meets-llm-systems-semantic-cache-poisoning-and-its-countermeasures/", "source": "https://www.ndss-symposium.org/ndss2026/accepted-papers/", "summary": "Poisons semantic caches in LLM applications and evaluates countermeasures.", "authors": "Guanlong Wu, Taojie Wang, Yao Zhang, Zheng Zhang, Jianyu Niu, Ye Wu, Yinqian Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/when-cache-poisoning-meets-llm-systems-semantic-cache-poisoning-and-its-countermeasures/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1463, "author_names": [ "Guanlong Wu", "Taojie Wang", "Yao Zhang", "Zheng Zhang", "Jianyu Niu", "Ye Wu", "Yinqian Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/when-cache-poisoning-meets-llm-systems-semantic-cache-poisoning-and-its-countermeasures/" }, { "key": "p88b204f2e5da", "title": "\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-yi", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Measures malicious agent skills distributed in the wild.", "authors": "Yi Liu, Zhihao Chen, Yanjun Zhang, Gelei Deng, Yuekang Li, Jianting Ning, Leo Yu Zhang", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-yi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1619, "author_names": [ "Yi Liu", "Zhihao Chen", "Yanjun Zhang", "Gelei Deng", "Yuekang Li", "Jianting Ning", "Leo Yu Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-yi" }, { "key": "p1e6569b4be32", "title": "A Distortion-minimization Watermarking Framework for Large Language Models: Larger Capacity, Stronger Robustness and Higher Quality", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhai", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Balances watermark capacity, robustness, and generated-text quality.", "authors": "Liming Zhai, Xuezhou Shang, Liyun Zhang, Po Hu", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhai", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1482, "author_names": [ "Liming Zhai", "Xuezhou Shang", "Liyun Zhang", "Po Hu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhai" }, { "key": "p215db3cf150f", "title": "A Large-Scale Study of Personalized Phishing using Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/czybik", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Measures personalized phishing generated by language models.", "authors": "Stefan Czybik, Anne Josiane Kouam, Peter Heubl, Jan Magnus Nold, Konrad Rieck", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/czybik", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1289, "author_names": [ "Stefan Czybik", "Anne Josiane Kouam", "Peter Heubl", "Jan Magnus Nold", "Konrad Rieck" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/czybik" }, { "key": "p3822e8dc5f9e", "title": "Assessing LLM Response Quality in the Context of Technology-Facilitated Abuse", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/prakash", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Evaluates the safety and actionability of chatbot advice for survivors of technology-facilitated abuse.", "authors": "Vijay Prakash, Majed Almansoori, Donghan Hu, Rahul Chatterjee, Danny Yuxing Huang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/prakash", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1579, "author_names": [ "Vijay Prakash", "Majed Almansoori", "Donghan Hu", "Rahul Chatterjee", "Danny Yuxing Huang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/prakash" }, { "key": "p71a23d69a70b", "title": "Attacks on Approximate Caches in Text-to-Image Diffusion Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-desen", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Attacks approximate caching in text-to-image diffusion services.", "authors": "Desen Sun, Shuncheng Jie, Sihang Liu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-desen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1276, "author_names": [ "Desen Sun", "Shuncheng Jie", "Sihang Liu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-desen" }, { "key": "p0a93e99af1b4", "title": "Attesting Model Lineage by Consisted Knowledge Evolution with Fine-Tuning Trajectory", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/shang", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Attests model ancestry using knowledge changes across fine-tuning.", "authors": "Zhuoyi Shang, Jiasen Li, Pengzhen Chen, Yanwei Liu, Xiaoyan Gu, Weiping Wang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Provenance & watermarking", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1755, "author_names": [ "Zhuoyi Shang", "Jiasen Li", "Pengzhen Chen", "Yanwei Liu", "Xiaoyan Gu", "Weiping Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shang" }, { "key": "p1c5948996dfe", "title": "AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-yu", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Attributes tool calls causally to block indirect prompt injection.", "authors": "Yu He, Haozhe Zhu, Yiming Li, Shuo Shao, Hongwei Yao, Zhihao Liu, Zhan Qin", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Provenance & watermarking", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-yu", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1366, "author_names": [ "Yu He", "Haozhe Zhu", "Yiming Li", "Shuo Shao", "Hongwei Yao", "Zhihao Liu", "Zhan Qin" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-yu" }, { "key": "pea8d7b62b4d1", "title": "Autonomy Comes with Costs: Detecting Denial-of-Service Vulnerabilities Caused by Resource Abusing in LLM-based Agents", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/luo", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Detects resource-abuse denial of service in agent workflows.", "authors": "Jiaqi Luo, Jiarun Dai, Fengyu Liu, Songyang Peng, Youkun Shi, Tong Bu, Geng Hong, Xudong Pan, Yuan Zhang", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/luo", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1325, "author_names": [ "Jiaqi Luo", "Jiarun Dai", "Fengyu Liu", "Songyang Peng", "Youkun Shi", "Tong Bu", "Geng Hong", "Xudong Pan", "Yuan Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/luo" }, { "key": "p43e51fa0032e", "title": "BadGraph: Structural Knowledge Isolation Attacks against Graph Retrieval-Augmented Generation", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/yan-leiming", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Disrupts knowledge access in graph-based retrieval-augmented generation.", "authors": "Leiming Yan, Xinlong Xu, Ziqiang Li", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yan-leiming", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1676, "author_names": [ "Leiming Yan", "Xinlong Xu", "Ziqiang Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yan-leiming" }, { "key": "pa1f5344cee68", "title": "Behind Bars: A Side-Channel Attack on NVIDIA MIG Cache Partitioning Using Memory Barriers", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/gu-cheng", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Leaks sensitive model-inference behavior across GPU partitions.", "authors": "Cheng Gu, Reese Levine, Zhenkai Zhang, Tyler Sorensen, Yanan Guo", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gu-cheng", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1466, "author_names": [ "Cheng Gu", "Reese Levine", "Zhenkai Zhang", "Tyler Sorensen", "Yanan Guo" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gu-cheng" }, { "key": "pa20d4e15ebec", "title": "BenchChecker: Assessing the Credibility of Bug-Fixing Benchmarks for LLMs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-di", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Audits the credibility of LLM bug-fixing benchmarks.", "authors": "Di Wu, Xu He, Shu Wang, Kun Sun", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-di", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1354, "author_names": [ "Di Wu", "Xu He", "Shu Wang", "Kun Sun" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-di" }, { "key": "p9a990e92b4be", "title": "Bypassing Prompt Guards in Production with Controlled-Release Prompting", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/fairoze", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Bypasses lightweight prompt guards using controlled-release instructions.", "authors": "Jaiden Fairoze, Sanjam Garg, Keewoo Lee, Mingyuan Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/fairoze", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1284, "author_names": [ "Jaiden Fairoze", "Sanjam Garg", "Keewoo Lee", "Mingyuan Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/fairoze" }, { "key": "p2ba411a7c318", "title": "COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-junyu", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Evaluates multimodal LLM CAPTCHA solving and derives structural defenses against automated solvers.", "authors": "Junyu Wang, Changjia Zhu, Yuanbo Zhou, Lingyao Li, Xu He, Mingkui Wei, Junjie Xiong", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-junyu", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1663, "author_names": [ "Junyu Wang", "Changjia Zhu", "Yuanbo Zhou", "Lingyao Li", "Xu He", "Mingkui Wei", "Junjie Xiong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-junyu" }, { "key": "pb33dc3060bcf", "title": "CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-na", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Shows compression can amplify membership leakage, including in language models.", "authors": "Na Li, Yansong Gao, Hongsheng Hu, Boyu Kuang, Anmin Fu", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-na", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2053, "author_names": [ "Na Li", "Yansong Gao", "Hongsheng Hu", "Boyu Kuang", "Anmin Fu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-na" }, { "key": "pa0b0fbb1d43e", "title": "Confundo: Learning to Generate Robust Poison for Practical RAG Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/hu-haoyang", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Generates poisoning inputs for practical retrieval-augmented systems.", "authors": "Haoyang Hu, Zhejun Jiang, Yueming Lyu, Junyuan Zhang, Yi Liu, Ka-Ho Chow", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors", "Side channels & systems", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/hu-haoyang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1559, "author_names": [ "Haoyang Hu", "Zhejun Jiang", "Yueming Lyu", "Junyuan Zhang", "Yi Liu", "Ka-Ho Chow" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/hu-haoyang" }, { "key": "p7bc0ff7ad65e", "title": "Connect the Dots: Knowledge Graph–Guided Crawler Attack on Retrieval-Augmented Generation Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-dots", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Extracts RAG knowledge systematically using a graph-guided querying strategy.", "authors": "Mengyu Yao, Ziqi Zhang, Ning Luo, Shaofei Li, Yifeng Cai, Xiangqun Chen, Yao Guo, Ding Li", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-dots", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1919, "author_names": [ "Mengyu Yao", "Ziqi Zhang", "Ning Luo", "Shaofei Li", "Yifeng Cai", "Xiangqun Chen", "Yao Guo", "Ding Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-dots" }, { "key": "p54c29d73a8e5", "title": "Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluation", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/karanjai", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Injects malicious instructions into logs later processed by security assistants.", "authors": "Rabimba Karanjai, Yang Lu, Hemanth Hegadehalli Madhavarao, Lei Xu, Weidong Shi", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/karanjai", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1733, "author_names": [ "Rabimba Karanjai", "Yang Lu", "Hemanth Hegadehalli Madhavarao", "Lei Xu", "Weidong Shi" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/karanjai" }, { "key": "p0e82594581ee", "title": "Cordyceps: Covert Control Attacks on LLMs via Data Poisoning", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/shao-zedian", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Poisons training data to covertly control language models.", "authors": "Zedian Shao, Charles Fleming, Teodora Baluta", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shao-zedian", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1264, "author_names": [ "Zedian Shao", "Charles Fleming", "Teodora Baluta" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shao-zedian" }, { "key": "p794c1fb6762e", "title": "Cryptanalysis of LDPC-Based Pseudorandom Error-Correcting Codes", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-tianrui", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Cryptanalyzes pseudorandom-code watermarking with evaluations on language and diffusion image models.", "authors": "Tianrui Wang, Anyu Wang, Tianshuo Cong, Delong Ran, Jinyuan Liu, Xiaoyun Wang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-tianrui", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1455, "author_names": [ "Tianrui Wang", "Anyu Wang", "Tianshuo Cong", "Delong Ran", "Jinyuan Liu", "Xiaoyun Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-tianrui" }, { "key": "pbfb122708b35", "title": "Defending Jailbreak Attacks on Large Language Models via Manifold Trajectory Kinetics", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-hangtao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Detects jailbreaks using trajectories through model representations.", "authors": "Hangtao Zhang, Yucheng Zhao, Sishun Liu, Ziqi Zhou, Zeyu Ye, Wei Wan, Minghui Li, Shengshan Hu, Yanjun Zhang, Yi Liu, Leo Yu Zhang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-hangtao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1827, "author_names": [ "Hangtao Zhang", "Yucheng Zhao", "Sishun Liu", "Ziqi Zhou", "Zeyu Ye", "Wei Wan", "Minghui Li", "Shengshan Hu", "Yanjun Zhang", "Yi Liu", "Leo Yu Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-hangtao" }, { "key": "pf9683da8901b", "title": "DualSentinel: A Lightweight Framework for Detecting Targeted Attacks in Black-box LLM via Dual Entropy Lull Pattern", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-xiaoyi", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Detects targeted attacks on black-box language models using entropy signals.", "authors": "Xiaoyi Pang, Xuanyi Hao, Pengyu Liu, Qi Luo, Song Guo, Zhibo Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-xiaoyi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1778, "author_names": [ "Xiaoyi Pang", "Xuanyi Hao", "Pengyu Liu", "Qi Luo", "Song Guo", "Zhibo Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-xiaoyi" }, { "key": "p0f6a23d30161", "title": "Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-nguyen", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Infers RAG datastore membership with a small query budget.", "authors": "Nguyen Linh Bao Nguyen, Wanlun Ma, Viet Vo, Alsharif Abuadbba, Minghong Fang, Jun Zhang, Yang Xiang", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-nguyen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1682, "author_names": [ "Nguyen Linh Bao Nguyen", "Wanlun Ma", "Viet Vo", "Alsharif Abuadbba", "Minghong Fang", "Jun Zhang", "Yang Xiang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-nguyen" }, { "key": "pfb7b373cfbb8", "title": "FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/rao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Fragments and recombines requests through agent memory to bypass access control.", "authors": "Zixin Rao, Wentian Zhu, Chan Aristella Lu, Zhaorun Chen, Wei Niu, Le Guan, Bo Li, Zhen Xiang", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/rao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1958, "author_names": [ "Zixin Rao", "Wentian Zhu", "Chan Aristella Lu", "Zhaorun Chen", "Wei Niu", "Le Guan", "Bo Li", "Zhen Xiang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/rao" }, { "key": "p82d5515b5d1a", "title": "From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/gong-easy-hard", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Improves differentially private synthetic-image generation using a spatial and frequency curriculum.", "authors": "Chen GONG, Kecen Li, Zinan Lin, Tianhao Wang", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gong-easy-hard", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 2001, "author_names": [ "Chen GONG", "Kecen Li", "Zinan Lin", "Tianhao Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gong-easy-hard" }, { "key": "pb739de4c2b1a", "title": "From Length to Content: Token-Length Side-Channel Attacks on LLM API Merged Outputs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-sijia", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Reconstructs content from token-length leakage in API outputs.", "authors": "Sijia Li, Tianyu Cui, Miao Chen, Xinjie Lin, Zheyuan Gu, Xinhao Deng, Ke Xu, Qi Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-sijia", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1772, "author_names": [ "Sijia Li", "Tianyu Cui", "Miao Chen", "Xinjie Lin", "Zheyuan Gu", "Xinhao Deng", "Ke Xu", "Qi Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-sijia" }, { "key": "p6110e4d83a07", "title": "From Symmetry toward Weak Asymmetry: Secure Steganography under the Receiver's Partial Channel Knowledge", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Provides secure language-model steganography when receivers have only partial knowledge of token distributions.", "authors": "Guorui Liao, Shuyu Gan, Jinshuai Yang, Yongfeng Huang, Zhongyi Huang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liao", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1526, "author_names": [ "Guorui Liao", "Shuyu Gan", "Jinshuai Yang", "Yongfeng Huang", "Zhongyi Huang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liao" }, { "key": "p7b5a8315728a", "title": "From Zero to Hero: Cross-modal-enhanced Adversarial Item Promotion Attack against Multimodal Recommender Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-zero", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Coordinates adversarial image and text changes to promote selected items in multimodal recommender rankings.", "authors": "Mengyu Yao, Ziqi Zhang, Yifeng Cai, Junlin Liu, Xinyi Fu, Weiqiang Wang, Xiangqun Chen, Yao Guo, Ding Li", "author_names": [ "Mengyu Yao", "Ziqi Zhang", "Yifeng Cai", "Junlin Liu", "Xinyi Fu", "Weiqiang Wang", "Xiangqun Chen", "Yao Guo", "Ding Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-zero", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-zero", "abstract_characters": 1800, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pa2d55254f8b1", "title": "GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-lichao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Attacks mixture-of-experts models through their routing gates.", "authors": "Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Stjepan Picek, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-lichao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1956, "author_names": [ "Lichao Wu", "Sasha Behrouzi", "Mohamadreza Rostami", "Stjepan Picek", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wu-lichao" }, { "key": "pdd26307f7f64", "title": "GoodVibe: Security-by-Vibe for LLM-Based Code Generation", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/thang", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Integrates security requirements into informal LLM coding workflows.", "authors": "Maximilian Thang, Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Jona te Lintelo, Stjepan Picek, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/thang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1795, "author_names": [ "Maximilian Thang", "Lichao Wu", "Sasha Behrouzi", "Mohamadreza Rostami", "Jona te Lintelo", "Stjepan Picek", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/thang" }, { "key": "p59cc90fa0a07", "title": "HijackKV: New Threat in Position-Independent KV Cache Reuse", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-yichi", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Poisons reused KV-cache entries to covertly hijack later queries.", "authors": "Yichi Zhang, Zhiqi Wang, Huan Zhang, Yuchen Yang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-yichi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1515, "author_names": [ "Yichi Zhang", "Zhiqi Wang", "Huan Zhang", "Yuchen Yang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-yichi" }, { "key": "p10ccc26d4128", "title": "Identifying Provenance of Generative Text-to-Image Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/ha", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Attributes generated content to its text-to-image model of origin.", "authors": "Anna Yoo Jeong Ha, Wenxin Ding, Stanley Wu, Shawn Shan, Haitao Zheng, Ben Y. Zhao", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/ha", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1451, "author_names": [ "Anna Yoo Jeong Ha", "Wenxin Ding", "Stanley Wu", "Shawn Shan", "Haitao Zheng", "Ben Y. Zhao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/ha" }, { "key": "p0f06628ca463", "title": "Inference Attacks Against Graph Generative Diffusion Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-xiuling", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Measures graph reconstruction, property inference and membership leakage in graph-generative diffusion models.", "authors": "Xiuling Wang, Xin Huang, Guibo Luo, Jianliang Xu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-xiuling", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1319, "author_names": [ "Xiuling Wang", "Xin Huang", "Guibo Luo", "Jianliang Xu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-xiuling" }, { "key": "pd20d2dcf068b", "title": "JailbreakScope: Interpreting Jailbreak Mechanism through Representation and Circuit Analyses", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-zeqing", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Analyzes jailbreak mechanisms through representations and circuits.", "authors": "Zeqing He, Zhibo Wang, Zhixuan Chu, Huiyu Xu, Wenhui Zhang, Qinglong Wang, Rui Zheng", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-zeqing", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1512, "author_names": [ "Zeqing He", "Zhibo Wang", "Zhixuan Chu", "Huiyu Xu", "Wenhui Zhang", "Qinglong Wang", "Rui Zheng" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/he-zeqing" }, { "key": "pabf2d349d98e", "title": "Large-scale online deanonymization with LLMs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/lermen", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Studies large-scale identity linkage using language models.", "authors": "Simon Lermen, Daniel Paleka, Joshua Swanson, Michael Aerni, Nicholas Carlini, Florian Tramèr", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/lermen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1646, "author_names": [ "Simon Lermen", "Daniel Paleka", "Joshua Swanson", "Michael Aerni", "Nicholas Carlini", "Florian Tramèr" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/lermen" }, { "key": "p0207d790c259", "title": "Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-chen", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Dilutes malicious knowledge to remove LLM backdoors.", "authors": "Chen Chen, Yuchen Sun, Jiaxin Gao, Xueluan Gong, Qian Wang, Ziyao Liu, Yongsen Zheng, Kwok-Yan Lam", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-chen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1649, "author_names": [ "Chen Chen", "Yuchen Sun", "Jiaxin Gao", "Xueluan Gong", "Qian Wang", "Ziyao Liu", "Yongsen Zheng", "Kwok-Yan Lam" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-chen" }, { "key": "p78d67491cb9e", "title": "Love, Lies, and Language Models: Investigating AI's Role in Romance-Baiting Scams", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/gressel", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Investigates LLM involvement in romance-baiting scams.", "authors": "Gilad Gressel, Rahul Pankajakshan, Shir Rozenfeld, Ling Li, Ivan Franceschini, Krishnashree Achuthan, Yisroel Mirsky", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gressel", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1389, "author_names": [ "Gilad Gressel", "Rahul Pankajakshan", "Shir Rozenfeld", "Ling Li", "Ivan Franceschini", "Krishnashree Achuthan", "Yisroel Mirsky" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gressel" }, { "key": "p6cee1bfb4b8f", "title": "Low-Cost Hard-Label Adversarial Attack with Theoretical Foundations", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jun", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Develops query-efficient hard-label attacks and evaluates their transfer to CLIP-based visual models.", "authors": "Jun Liu, Leo Yu Zhang, Fengpeng Li, Isao Echizen, Jiantao Zhou", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jun", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Foundational/adjoining robustness paper with explicit language/CLIP evaluation.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1535, "author_names": [ "Jun Liu", "Leo Yu Zhang", "Fengpeng Li", "Isao Echizen", "Jiantao Zhou" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jun" }, { "key": "p407b77f22d48", "title": "MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/cao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Removes image watermarks through latent-space manipulation.", "authors": "Jie Cao, Qi Li, Zelin Zhang, Xiaodong Wu, Lingshuang Liu, Xiangman Li, Jianbing Ni", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/cao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1754, "author_names": [ "Jie Cao", "Qi Li", "Zelin Zhang", "Xiaodong Wu", "Lingshuang Liu", "Xiangman Li", "Jianbing Ni" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/cao" }, { "key": "pac9e97a5519c", "title": "MASLeak: Investigating and Exposing Intellectual Property Leakage Vulnerabilities in Multi-Agent Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-liwen", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Exposes intellectual-property leakage in multi-agent systems.", "authors": "Liwen Wang, Wenxuan Wang, Shuai Wang, Zongjie Li, Zhenlan Ji, Zongyi Lyu, Daoyuan Wu, Shing-Chi Cheung", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Privacy & inference", "Agents & permissions", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-liwen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1464, "author_names": [ "Liwen Wang", "Wenxuan Wang", "Shuai Wang", "Zongjie Li", "Zhenlan Ji", "Zongyi Lyu", "Daoyuan Wu", "Shing-Chi Cheung" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-liwen" }, { "key": "p04a6c970fbb5", "title": "MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/jiang-changyue", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Audits mobile agents against policy requirements.", "authors": "Changyue Jiang, Jiayi Wang, Xin Wen, Jiarun Dai, Geng Hong, Xudong Pan", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jiang-changyue", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1576, "author_names": [ "Changyue Jiang", "Jiayi Wang", "Xin Wen", "Jiarun Dai", "Geng Hong", "Xudong Pan" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jiang-changyue" }, { "key": "pde8903452014", "title": "Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-mohan", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Measures prompt injection in deployed resume-screening workflows.", "authors": "Mohan Zhang, Yuqi Jia, Zhen Tan, Steven Jiang, Neil Zhenqiang Gong, Tianlong Chen, Dawn Song", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-mohan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1442, "author_names": [ "Mohan Zhang", "Yuqi Jia", "Zhen Tan", "Steven Jiang", "Neil Zhenqiang Gong", "Tianlong Chen", "Dawn Song" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-mohan" }, { "key": "pafe63f657073", "title": "Membership Inference Attacks on Tokenizers of Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/tong", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Exposes training-data membership through LLM tokenizers.", "authors": "Meng Tong, Yuntao Du, Kejiang Chen, Weiming Zhang, Ninghui Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/tong", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1377, "author_names": [ "Meng Tong", "Yuntao Du", "Kejiang Chen", "Weiming Zhang", "Ninghui Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/tong" }, { "key": "p9a620eae737a", "title": "MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/syros", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Automates adversarial evaluation of web agents against indirect injection.", "authors": "Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, Alina Oprea", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/syros", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1786, "author_names": [ "Georgios Syros", "Evan Rose", "Brian Grinstead", "Christoph Kerschbaumer", "William Robertson", "Cristina Nita-Rotaru", "Alina Oprea" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/syros" }, { "key": "p813f21f86926", "title": "Network-Level Prompt and Trait Leakage in Local Research Agents", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/jeong", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Infers research-agent prompts and user traits from network activity.", "authors": "Hyejun Jeong, Mohammadreza Teymoorianfard, Abhinav Kumar, Amir Houmansadr, Eugene Bagdasarian", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Privacy & inference", "Agents & permissions", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jeong", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1453, "author_names": [ "Hyejun Jeong", "Mohammadreza Teymoorianfard", "Abhinav Kumar", "Amir Houmansadr", "Eugene Bagdasarian" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jeong" }, { "key": "pe925ca8e4bcf", "title": "NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-khoa", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Protects privacy during open-source code generation.", "authors": "Khoa Nguyen, Khiem Ton, NhatHai Phan, Issa Khalil, Khang Tran, Cristian Borcea, Ruoming Jin, Abdallah Khreishah, My T. Thai", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-khoa", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1417, "author_names": [ "Khoa Nguyen", "Khiem Ton", "NhatHai Phan", "Issa Khalil", "Khang Tran", "Cristian Borcea", "Ruoming Jin", "Abdallah Khreishah", "My T. Thai" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nguyen-khoa" }, { "key": "p1c77b12a185b", "title": "On Evaluating the Robustness of Large Vision-Language Models via Untargeted Modality Alignment Breaking Adversarial Attack", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-zhichao", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Evaluates multimodal robustness by disrupting modality alignment.", "authors": "Zhichao Li, Hongshan Yang, Zhibo Wang, Huiyu Xu, Junhong Lai, Yaopeng Wang, Kui Ren, Chun Chen", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Unlearning & fine-tuning", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-zhichao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1560, "author_names": [ "Zhichao Li", "Hongshan Yang", "Zhibo Wang", "Huiyu Xu", "Junhong Lai", "Yaopeng Wang", "Kui Ren", "Chun Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-zhichao" }, { "key": "p6b91113921dd", "title": "On Improving Robustness of Deepfake Image Detectors", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/shahjahan", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Improves adversarial robustness of synthetic-image detectors through residual and frequency-statistics features.", "authors": "Abu Taib Mohammed Shahjahan, Mohammad Mannan, Abdessamad Ben Hamza, Amr Youssef", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shahjahan", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1807, "author_names": [ "Abu Taib Mohammed Shahjahan", "Mohammad Mannan", "Abdessamad Ben Hamza", "Amr Youssef" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/shahjahan" }, { "key": "pfea34df4c310", "title": "One Bad Token Spoils the Barrel: Assessment, Detection, and Remediation of Glitch Tokens in Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/tang-kunsheng", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Assesses and repairs problematic glitch tokens.", "authors": "Kunsheng Tang, Peigui Qi, Yide Song, Wenbo Zhou, Zhicong Huang, Qing Guo, Tianwei Zhang, Weiming Zhang, Nenghai Yu, Jie Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/tang-kunsheng", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1484, "author_names": [ "Kunsheng Tang", "Peigui Qi", "Yide Song", "Wenbo Zhou", "Zhicong Huang", "Qing Guo", "Tianwei Zhang", "Weiming Zhang", "Nenghai Yu", "Jie Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/tang-kunsheng" }, { "key": "p6dcf19c79031", "title": "Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/chang-hongyan", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Demonstrates realistic retrieval-mediated attacks on RAG and agent workflows.", "authors": "Hongyan Chang, Ergute Bao, Xinjian Luo, Ting Yu", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Prompt injection", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chang-hongyan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1691, "author_names": [ "Hongyan Chang", "Ergute Bao", "Xinjian Luo", "Ting Yu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chang-hongyan" }, { "key": "pcd056e597c85", "title": "Patcher: Post-Hoc Patching of Backdoored Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/gao-anjun", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Repairs backdoored LLMs after training.", "authors": "Anjun Gao, Yueyang Quan, Yufei Xia, Zhuqing Liu, Minghong Fang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gao-anjun", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1457, "author_names": [ "Anjun Gao", "Yueyang Quan", "Yufei Xia", "Zhuqing Liu", "Minghong Fang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/gao-anjun" }, { "key": "pfd254e5e7059", "title": "PatchWeaver: Risk-Bounded Autonomous Vulnerability Remediation Under Change-Management Policies", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-rui", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Constrains autonomous remediation agents using change-management policies.", "authors": "Rui Li, Shuang Cao", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-rui", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2272, "author_names": [ "Rui Li", "Shuang Cao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/li-rui" }, { "key": "p1f49cb141c20", "title": "Provable Secure Steganography Based on Adaptive Dynamic Sampling", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-kaiyi", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Hides information securely using adaptive language-model sampling.", "authors": "Kaiyi Pang, Minhao Bai", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-kaiyi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1316, "author_names": [ "Kaiyi Pang", "Minhao Bai" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pang-kaiyi" }, { "key": "p02e7d1661a07", "title": "PVMark: Enabling Public Verifiability for LLM Watermarking Schemes", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/duan", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Makes LLM watermarks publicly verifiable.", "authors": "Haohua Duan, Liyao Xiang, Xin Zhang, Baochun Li, Bo Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/duan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1270, "author_names": [ "Haohua Duan", "Liyao Xiang", "Xin Zhang", "Baochun Li", "Bo Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/duan" }, { "key": "p12371dad6277", "title": "Quantifying Large Language Model Attacks Through the Lens of Model Cognition", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-xiuming", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Analyzes LLM attacks using a model-cognition perspective.", "authors": "Xiuming Liu, Chaoxiang He, Xuanran Yu, Jichen Chai, Feiyue Xu, Sheng Hang, Hanqing Hu, Bin Benjamin Zhu, Hongsheng Hu, Shi-Feng Sun, Dawu Gu, Shuo Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-xiuming", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1479, "author_names": [ "Xiuming Liu", "Chaoxiang He", "Xuanran Yu", "Jichen Chai", "Feiyue Xu", "Sheng Hang", "Hanqing Hu", "Bin Benjamin Zhu", "Hongsheng Hu", "Shi-Feng Sun", "Dawu Gu", "Shuo Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-xiuming" }, { "key": "p14c068254f25", "title": "Robust Watermarks Meet Backdoored Models: Evading Diffusion Semantic Watermarks via Stealthy Backdoor", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jinyuan", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Uses model backdoors to evade semantic diffusion watermarks.", "authors": "Jinyuan Liu, Tianshuo Cong, Pei Li, Tianrui Wang, Xinlei He, Anyu Wang, Xiaoyun Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors", "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jinyuan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1469, "author_names": [ "Jinyuan Liu", "Tianshuo Cong", "Pei Li", "Tianrui Wang", "Xinlei He", "Anyu Wang", "Xiaoyun Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-jinyuan" }, { "key": "p1f88a50c3137", "title": "Securing Retrieval-Augmented Code Generation via Contextual Knowledge Injection: A Case for Embedded IoT Applications", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-tong", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Uses version-aware repository knowledge to prevent vulnerable API choices during retrieval-augmented code generation.", "authors": "Tong Sun, Jingyi Su, Yi Gao, Wei Dong", "doi": "", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-tong", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1786, "author_names": [ "Tong Sun", "Jingyi Su", "Yi Gao", "Wei Dong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/sun-tong" }, { "key": "p26f7c035adb0", "title": "Sirens' Whisper: Inaudible Near-Ultrasonic Jailbreaks of Speech-Driven LLMs", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/ling", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Jailbreaks speech-driven models using near-ultrasonic audio.", "authors": "Zijian Ling, Pingyi Hu, Xiuyong Gao, Xiaojing Ma, Man Zhou, Jun Feng, Songfeng Lu, Dongmei Zhang, Bin Benjamin Zhu", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/ling", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1548, "author_names": [ "Zijian Ling", "Pingyi Hu", "Xiuyong Gao", "Xiaojing Ma", "Man Zhou", "Jun Feng", "Songfeng Lu", "Dongmei Zhang", "Bin Benjamin Zhu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/ling" }, { "key": "p13a14557c360", "title": "SMASH: Scalable Maliciously Secure Hybrid Multi-party Computation Framework for Privacy-Preserving Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/lv", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Supports private LLM computation with malicious-party security.", "authors": "Yunlv Lv, Rui Zhang, Zhiyuan Zhang, Ziyi Wan, Lanxue Zhang, Minhui Xue, Jiangtao Li, Yanan Cao", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/lv", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1420, "author_names": [ "Yunlv Lv", "Rui Zhang", "Zhiyuan Zhang", "Ziyi Wan", "Lanxue Zhang", "Minhui Xue", "Jiangtao Li", "Yanan Cao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/lv" }, { "key": "pbf009d2011eb", "title": "SoK: Attack and Defense Landscape of Agentic AI Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/kim-juhee-agentic", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Systematizes attacks and defenses for agentic AI.", "authors": "Juhee Kim, Wenbo Guo, Dawn Song", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/kim-juhee-agentic", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 792, "author_names": [ "Juhee Kim", "Wenbo Guo", "Dawn Song" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/kim-juhee-agentic" }, { "key": "p7f48d8c40181", "title": "Sok: Private Transformer-based Model Inference", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuntian", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Systematizes private transformer inference techniques and tradeoffs.", "authors": "Yuntian Chen, Tianpei Lu, Zhanyong Tang, Bingsheng Zhang, Zhiying Shi, Yuxiang Luan, Zhuzhu Wang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuntian", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 768, "author_names": [ "Yuntian Chen", "Tianpei Lu", "Zhanyong Tang", "Bingsheng Zhang", "Zhiying Shi", "Yuxiang Luan", "Zhuzhu Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuntian" }, { "key": "p9841b9d87786", "title": "The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against LLM Jailbreaks and Prompt Injections", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/nasr", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Tests defenses against stronger attacks adapted to those defenses.", "authors": "Milad Nasr, Nicholas Carlini, Chawin Sitawarin, Sander V. Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Guha Thakurta, Kai Yuanqing Xiao, Andreas Terzis, Florian Tramèr", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nasr", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1225, "author_names": [ "Milad Nasr", "Nicholas Carlini", "Chawin Sitawarin", "Sander V. Schulhoff", "Jamie Hayes", "Michael Ilie", "Juliette Pluto", "Shuang Song", "Harsh Chaudhari", "Ilia Shumailov", "Abhradeep Guha Thakurta", "Kai Yuanqing Xiao", "Andreas Terzis", "Florian Tramèr" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/nasr" }, { "key": "pe2b8f06dae85", "title": "The Impact of Security and Privacy Controls on Users' Emotional Engagement with Generative AI Chatbots", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/kwesi", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Studies how privacy controls affect engagement with generative chatbots.", "authors": "Jabari Kwesi, Jiaxun Cao, Hailee Cunningham, Pardis Emami-Naeini", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/kwesi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1319, "author_names": [ "Jabari Kwesi", "Jiaxun Cao", "Hailee Cunningham", "Pardis Emami-Naeini" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/kwesi" }, { "key": "pb2e090a423e6", "title": "The Prompt Stealing Fallacy: Rethinking Metrics, Attacks, and Defenses", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/deng", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Reassesses assumptions and metrics used in prompt-stealing research.", "authors": "Zehang Deng, Haoyang Li, Wanlun Ma, Ruoxi Sun, Derui Wang, Minhui Xue, Haibo Hu, Sheng Wen, Yang Xiang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/deng", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2368, "author_names": [ "Zehang Deng", "Haoyang Li", "Wanlun Ma", "Ruoxi Sun", "Derui Wang", "Minhui Xue", "Haibo Hu", "Sheng Wen", "Yang Xiang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/deng" }, { "key": "p912ffdd2808f", "title": "Trusting What You Cannot See: Auditable Fine-Tuning and Inference for Proprietary AI", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/jin", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Audits whether proprietary-model training and inference follow agreed settings.", "authors": "Heng Jin, Chaoyu Zhang, Hexuan Yu, Shanghao Shi, Ning Zhang, Y. Thomas Hou, Wenjing Lou", "doi": "", "areas": [ "LLM" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jin", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1233, "author_names": [ "Heng Jin", "Chaoyu Zhang", "Hexuan Yu", "Shanghao Shi", "Ning Zhang", "Y. Thomas Hou", "Wenjing Lou" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/jin" }, { "key": "pf2540f3b2200", "title": "VIPER Strike: Defeating Visual Reasoning CAPTCHAs via Structured Vision–Language Inference", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/qi-minfeng", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Combines structured visual perception and language-model reasoning to solve visual-reasoning CAPTCHAs.", "authors": "Minfeng Qi, Dongyang He, Qin Wang, Lefeng Zhang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/qi-minfeng", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1579, "author_names": [ "Minfeng Qi", "Dongyang He", "Qin Wang", "Lefeng Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/qi-minfeng" }, { "key": "p93c400840fe4", "title": "VOID: Defeating Unauthorized Mimicry in Latent Diffusion Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/qiu-chunlin", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Defends against unauthorized mimicry by latent diffusion models.", "authors": "Chunlin Qiu, Ang Li, Tianxiao Huang, Ruilin Gan, Yunjie Ge, Shenyi Zhang, Huayi Duan, Lingchen Zhao, Chao Shen, Qian Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/qiu-chunlin", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1472, "author_names": [ "Chunlin Qiu", "Ang Li", "Tianxiao Huang", "Ruilin Gan", "Yunjie Ge", "Shenyi Zhang", "Huayi Duan", "Lingchen Zhao", "Chao Shen", "Qian Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/qiu-chunlin" }, { "key": "p79f51db91e1d", "title": "What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/yang-qin", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Exploits differences between human and model interpretation of text.", "authors": "Qin Yang, Lu Malloy, Joshua Lee, Xiaohan Chang, Meisam Mohammady, Doowon Kim, Yuan Hong", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yang-qin", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1715, "author_names": [ "Qin Yang", "Lu Malloy", "Joshua Lee", "Xiaohan Chang", "Meisam Mohammady", "Doowon Kim", "Yuan Hong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/yang-qin" }, { "key": "p5db57dbdb32e", "title": "What Users Ask, Policies Miss: Unveiling the Gap Between Community-Expressed Privacy Concerns and LLM Provider Policies", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-zhihuang", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Compares user privacy concerns with LLM providers' policies.", "authors": "Zhihuang Liu, Zhen Huang, Ling Hu, Yifan Yang, Zhiping Cai", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-zhihuang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1597, "author_names": [ "Zhihuang Liu", "Zhen Huang", "Ling Hu", "Yifan Yang", "Zhiping Cai" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/liu-zhihuang" }, { "key": "p84780b5e6e73", "title": "When AIOps Become \"AI Oops\": Subverting LLM-driven IT Operations via Telemetry Manipulation", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/pasquini", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Manipulates telemetry consumed by autonomous IT-operations assistants.", "authors": "Dario Pasquini, Evgenios M. Kornaropoulos, Giuseppe Ateniese, Omer Akgul, Athanasios Theocharis, Petros Efstathopoulos", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pasquini", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1626, "author_names": [ "Dario Pasquini", "Evgenios M. Kornaropoulos", "Giuseppe Ateniese", "Omer Akgul", "Athanasios Theocharis", "Petros Efstathopoulos" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/pasquini" }, { "key": "p9b30bc9d79ef", "title": "When HTTP 402 Meets the Blockchain: Risks on Emerging x402 Payments", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-qinying", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Analyzes authorization and payment failures in x402 services used by autonomous agents.", "authors": "Qinying Wang, Yong Yang, Yuan Chen, Shouling Ji, Mathias Payer", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-qinying", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1968, "author_names": [ "Qinying Wang", "Yong Yang", "Yuan Chen", "Shouling Ji", "Mathias Payer" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/wang-qinying" }, { "key": "p783a7d66b4c5", "title": "When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhao-shiqian", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Exploits conversational memory for multi-turn image-generation jailbreaks.", "authors": "Shiqian Zhao, Jiayang Liu, Yiming Li, Runyi Hu, Xiaojun Jia, Wenshu Fan, Xiaobao Wu, Xinfeng Li, Jie Zhang, Wei Dong, Tianwei Zhang, Luu Anh Tuan", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhao-shiqian", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1860, "author_names": [ "Shiqian Zhao", "Jiayang Liu", "Yiming Li", "Runyi Hu", "Xiaojun Jia", "Wenshu Fan", "Xiaobao Wu", "Xinfeng Li", "Jie Zhang", "Wei Dong", "Tianwei Zhang", "Luu Anh Tuan" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhao-shiqian" }, { "key": "p0fcdeaaad926", "title": "When the Aggregator Cheats: Data-Free Backdoors in Federated LLM-based QA Systems", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhu-chenqing", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Studies malicious aggregation in federated LLM question answering.", "authors": "Chenqing Zhu, Yanbo Dai, Yulong Tian, Qingming Li, Songze Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhu-chenqing", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1850, "author_names": [ "Chenqing Zhu", "Yanbo Dai", "Yulong Tian", "Qingming Li", "Songze Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/zhu-chenqing" }, { "key": "p6cbf33421252", "title": "Window-based Membership Inference Attacks Against Fine-tuned Large Language Models", "year": 2026, "venue": "USENIX Security", "edition": "usenix-2026", "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuetian", "source": "https://www.usenix.org/conference/usenixsecurity26/technical-sessions", "summary": "Uses text windows to infer membership in fine-tuning data.", "authors": "Yuetian Chen, Yuntao Du, Kaiyuan Zhang, Ashish Kundu, Charles Fleming, Bruno Ribeiro, Ninghui Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuetian", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1241, "author_names": [ "Yuetian Chen", "Yuntao Du", "Kaiyuan Zhang", "Ashish Kundu", "Charles Fleming", "Bruno Ribeiro", "Ninghui Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity26/presentation/chen-yuetian" }, { "key": "pac714cc20f7a", "title": "Adversarial Observations in Weather Forecasting", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765076", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Attacks autoregressive diffusion weather forecasters through sparse, subtle perturbations to input observations; included as adjacent diffusion-model security.", "authors": "Erik Imgrund, Thorsten Eisenhofer, Konrad Rieck", "doi": "10.1145/3719027.3765076", "areas": [ "Image & diffusion" ], "topics": [ "Side channels & systems", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e70ec2042950b2c98e41de0890a4df429485097d", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1154, "author_names": [ "Erik Imgrund", "Thorsten Eisenhofer", "Konrad Rieck" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pd9aac0145510", "title": "Adversarially Robust Assembly Language Model for Packed Executables Detection", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765157", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Builds an assembly language model for packed-executable detection that withstands adversarial manipulation.", "authors": "Shijia Li, Jiang Ming, Lanqing Liu, Longwei Yang, Ni Zhang, Chunfu Jia", "author_names": [ "Shijia Li", "Jiang Ming", "Lanqing Liu", "Longwei Yang", "Ni Zhang", "Chunfu Jia" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b145233e52735c7915d84f15008f8a533cf28cb0", "abstract_characters": 1665, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p211d677debaf", "title": "AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765064", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Provides runtime defenses for computer-use agents.", "authors": "Haitao Hu, Peng Chen, Yanpeng Zhao, Yuqi Chen", "doi": "10.1145/3719027.3765064", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/42ac5855d1f9a4714fbc09d9518f6f33f744302b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1461, "author_names": [ "Haitao Hu", "Peng Chen", "Yanpeng Zhao", "Yuqi Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p009885c73648", "title": "Analyzing PDFs like Binaries: Adversarially Robust PDF Malware Analysis via Intermediate Representation and Language Model", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744829", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Combines an intermediate representation with a language model to detect malicious PDFs while resisting adversarial transformations.", "authors": "Side Liu, Jiang Ming, Guodong Zhou, Xinyi Liu, Jianming Fu, Guojun Peng", "author_names": [ "Side Liu", "Jiang Ming", "Guodong Zhou", "Xinyi Liu", "Jianming Fu", "Guojun Peng" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ce4fc808ad53b036ecc4e730f503aedfdcf93614", "abstract_characters": 1414, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf9a34bfb7c7c", "title": "Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3744794", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Audits unauthorized use of a user’s training data by marking a small subset and testing membership signals.", "authors": "Zitao Chen, Karthik Pattabiraman", "author_names": [ "Zitao Chen", "Karthik Pattabiraman" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Provenance & watermarking", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/c47fa137b55eab81138fbb1ef1bd521c1585424d", "abstract_characters": 1460, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p83a975eb82c5", "title": "Can Personal Health Information Be Secured in LLM? Privacy Attack and Defense in the Medical Domain", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765105", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Studies privacy attacks and defenses for medical language models.", "authors": "Yujin Kang, Eunsun Kim, Yoon-Sik Cho", "doi": "10.1145/3719027.3765105", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/84e7e38a4d7012ffadf68930d6c289b6eb6362ad", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1152, "author_names": [ "Yujin Kang", "Eunsun Kim", "Yoon-Sik Cho" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p9634a2c0df27", "title": "Cascading Adversarial Bias from Injection to Distillation in Language Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765122", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Examines adversarial bias propagating through injection and distillation.", "authors": "Harsh Chaudhari, Jamie Hayes, Matthew Jagielski, Ilia Shumailov, Milad Nasr, Alina Oprea", "doi": "10.1145/3719027.3765122", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/84d15aaec52d32c9978ddb5ab3e29941bbe23a2c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1308, "author_names": [ "Harsh Chaudhari", "Jamie Hayes", "Matthew Jagielski", "Ilia Shumailov", "Milad Nasr", "Alina Oprea" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p7fd0d152d502", "title": "DCMI: A Differential Calibration Membership Inference Attack Against Retrieval-Augmented Generation", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765103", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Uses differential calibration to infer whether documents belong to a retrieval-augmented generation system’s retrieval corpus.", "authors": "Xinyu Gao, Xiangtao Meng, Yingkai Dong, Zheng Li, Shanqing Guo", "author_names": [ "Xinyu Gao", "Xiangtao Meng", "Yingkai Dong", "Zheng Li", "Shanqing Guo" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/17cef55807e90fdfe03e788d762d2432ca8654c4", "abstract_characters": 1480, "new_in_review": true, "status": "Published", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p5a29d8bdf809", "title": "Differentiation-Based Extraction of Proprietary Data from Fine-tuned LLMs", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744856", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Extracts proprietary fine-tuning data through differential probing.", "authors": "Zongjie Li, Daoyuan Wu, Shuai Wang, Zhendong Su", "doi": "10.1145/3719027.3744856", "areas": [ "LLM" ], "topics": [ "Unlearning & fine-tuning", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/46e5ef52e1ba63b486ea721e4ef479ad961e66dc", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1351, "author_names": [ "Zongjie Li", "Daoyuan Wu", "Shuai Wang", "Zhendong Su" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pd768a87e31cf", "title": "DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765045", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Benchmarks differentially private image synthesis methods under a unified evaluation and examines privacy flaws in evaluation protocols.", "authors": "Chen GONG, Kecen Li, Zinan Lin, Tianhao Wang", "author_names": [ "Chen GONG", "Kecen Li", "Zinan Lin", "Tianhao Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b5dbeb828f56f6889969ac9d02a868359f779b8d", "abstract_characters": 1610, "new_in_review": true, "status": "Published", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p0a6388c81020", "title": "FlippedRAG: Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765023", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Manipulates opinions produced by RAG systems without internal access.", "authors": "Zhuo Chen, Yuyang Gong, Miaokun Chen, Haotan Liu, Qikai Cheng, Fan Zhang, Wei Lu, Xiaozhong Liu, Jiawei Liu", "doi": "10.1145/3719027.3765023", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2501.02968", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1897, "author_names": [ "Zhuo Chen", "Yuyang Gong", "Miaokun Chen", "Haotan Liu", "Qikai Cheng", "Fan Zhang", "Wei Lu", "Xiaozhong Liu", "Jiawei Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p4ca7d32333ed", "title": "GASLITEing the Retrieval: Exploring Vulnerabilities in Dense Embedding-based Search", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3765095", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Crafts adversarial passages that manipulate dense embedding search rankings, exposing a poisoning surface for retrieval-augmented systems.", "authors": "Matan Ben-Tov, Mahmood Sharif", "author_names": [ "Matan Ben-Tov", "Mahmood Sharif" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/529a806ea4f9dac1b10248c05ce4d98a7ea38862", "abstract_characters": 2151, "new_in_review": true, "status": "Published", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p11d7addfe68b", "title": "Give LLMs a Security Course: Securing Retrieval-Augmented Code Generation via Knowledge Injection", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765049", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Injects security knowledge to protect retrieval-augmented code generation.", "authors": "Bo Lin, Shangwen Wang, Yihao Qin, Liqian Chen, Xiaoguang Mao", "doi": "10.1145/3719027.3765049", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1b581383b39088dd9e4e3e8f3227c4bd6bffa856", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1715, "author_names": [ "Bo Lin", "Shangwen Wang", "Yihao Qin", "Liqian Chen", "Xiaoguang Mao" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p3826753f7e33", "title": "GPU Travelling: Efficient Confidential Collaborative Training with TEE-Enabled GPUs", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765029", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Protects collaborative training datasets with confidential GPU migration and evaluates the design on an LLM training workload.", "authors": "Shixuan Zhao, Zhongshu Gu, Salman Ahmed, Enriquillo Valdez, Hani Jamjoom, Zhiqiang Lin", "doi": "10.1145/3719027.3765029", "areas": [ "LLM" ], "topics": [ "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f10005c33cb135e09337de296238bfe3bf5ad02d", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1296, "author_names": [ "Shixuan Zhao", "Zhongshu Gu", "Salman Ahmed", "Enriquillo Valdez", "Hani Jamjoom", "Zhiqiang Lin" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p681a8bd457b4", "title": "Here Comes The AI Worm: Preventing the Propagation of Adversarial Self-Replicating Prompts Within GenAI Ecosystems", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765196", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Studies containment of self-replicating malicious prompts.", "authors": "Stav Cohn, Ron Bitton, Nassi Ben", "doi": "10.1145/3719027.3765196", "areas": [ "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/21c1a489f60e3cf11b7adffe2c16df44e16fd712", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1562, "author_names": [ "Stav Cohn", "Ron Bitton", "Nassi Ben" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p64fa7d1b9967", "title": "ImportSnare: Directed ”Code Manual” Hijacking in Retrieval-Augmented Code Generation", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765161", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Poisons retrieved code documentation to induce malicious dependency recommendations in LLM-generated code.", "authors": "Kai Ye, Liangcai Su, Chenxiong Qian", "doi": "10.1145/3719027.3765161", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0858d2acc2abf2f36da75f8758b033c5786ff9a0", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1932, "author_names": [ "Kai Ye", "Liangcai Su", "Chenxiong Qian" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pedcad97d9653", "title": "IOValve: Leakage-Free I/O Sandbox for Large-Scale Untrusted Data Processing", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765121", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Protects sensitive data from untrusted large-scale computation with an isolated network sandbox, evaluated on LLM fine-tuning and batch inference.", "authors": "Sangho Lee, Jules Drean, Yue Tan, Marcus Peinado", "doi": "10.1145/3719027.3765121", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1d0bdcced6758a8cd8f7c781c3d26df7c2edad58", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1682, "author_names": [ "Sangho Lee", "Jules Drean", "Yue Tan", "Marcus Peinado" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pc64a79188877", "title": "Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744818", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Examines reliability and disparities in membership-based privacy audits, and combines attacks in an ensemble to improve assessment.", "authors": "Zhiqi Wang, Chengyu Zhang, Yuetian Chen, Nathalie Baracaldo, Swanand R Kadhe, Lei Yu", "author_names": [ "Zhiqi Wang", "Chengyu Zhang", "Yuetian Chen", "Nathalie Baracaldo", "Swanand R Kadhe", "Lei Yu" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8788799fc50f053a37feafbf36741362ccb74799", "abstract_characters": 1296, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p1f6381df0301", "title": "MoEcho: Exploiting Side-Channel Attacks to Compromise User Privacy in Mixture-of-Experts LLMs", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765174", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Exploits mixture-of-experts side channels to compromise user privacy.", "authors": "Ruyi Ding, Tianhong Xu, Xinyi Shen, Aidong Adam Ding, Yunsi Fei", "doi": "10.1145/3719027.3765174", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f6ab135a925626ff3946b5360b0cf71891323e40", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 2212, "author_names": [ "Ruyi Ding", "Tianhong Xu", "Xinyi Shen", "Aidong Adam Ding", "Yunsi Fei" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p8948a632f3d4", "title": "Mosformer: Maliciously Secure Three-Party Inference Framework for Large Transformers", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765028", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Provides maliciously secure three-party transformer inference.", "authors": "Ke Cheng, Yuheng Xia, Anxiao Song, Jiaxuan Fu, Wenjie Qu, Yulong Shen, Jiaheng Zhang", "doi": "10.1145/3719027.3765028", "areas": [ "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2025/1510", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1861, "author_names": [ "Ke Cheng", "Yuheng Xia", "Anxiao Song", "Jiaxuan Fu", "Wenjie Qu", "Yulong Shen", "Jiaheng Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pde97777ed590", "title": "Oedipus: LLM-enchanced Reasoning CAPTCHA Solver", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3744872", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Decomposes reasoning CAPTCHAs into subtasks that language models can solve, evaluating misuse against automated-abuse controls.", "authors": "Gelei Deng, Haoran Ou, Yi Liu, Jie Zhang, Tianwei Zhang, Yang Liu", "author_names": [ "Gelei Deng", "Haoran Ou", "Yi Liu", "Jie Zhang", "Tianwei Zhang", "Yang Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "LLM", "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f416c4172149ef188275842abfb87917d1be3e18", "abstract_characters": 1745, "new_in_review": true, "status": "Published", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf1cef04fd5d0", "title": "On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744845", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Tests whether adversarially mislabeled data can poison image generation.", "authors": "Stanley Wu, Ronik Bhaskar, Anna Yoo Jeong Ha, Shawn Shan, Haitao Zheng, Ben Y. Zhao", "doi": "10.1145/3719027.3744845", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/54a9492d80506b2865988d4e2bcc2ed78a7a45ce", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1542, "author_names": [ "Stanley Wu", "Ronik Bhaskar", "Anna Yoo Jeong Ha", "Shawn Shan", "Haitao Zheng", "Ben Y. Zhao" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pc5fea611657a", "title": "One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744859", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Uses CLIP to craft transferable targeted image perturbations, including successful attacks against GPT-4 and Claude vision-language models.", "authors": "Binyan Xu, Xilin Dai, Di Tang, Kehuan Zhang", "doi": "10.1145/3719027.3744859", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/599c7350a33198b782a3772af349a23499aafb83", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1576, "author_names": [ "Binyan Xu", "Xilin Dai", "Di Tang", "Kehuan Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p262816db284f", "title": "PreferCare: Preference Dataset Copyright Protection in LLM Alignment by Watermark Injection and Verification", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765223", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Watermarks preference data to protect its use in model alignment.", "authors": "Jian Lou, Chenyang Zhang, Xiaoyu Zhang, Kai Wu", "doi": "10.1145/3719027.3765223", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/15c3ec637043e85e0f89f6393a0f542f025bb9ab", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1307, "author_names": [ "Jian Lou", "Chenyang Zhang", "Xiaoyu Zhang", "Kai Wu" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pb1374f0e6482", "title": "Prompt Inference Attack on Distributed Large Language Model Inference Frameworks", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744820", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Reconstructs prompts in distributed LLM inference.", "authors": "Xinjian Luo, Ting Yu, Xiaokui Xiao", "doi": "10.1145/3719027.3744820", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/3466f4bfda1c53e6b8db9ce2860ff99f49c528dd", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 2188, "author_names": [ "Xinjian Luo", "Ting Yu", "Xiaokui Xiao" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pfa095eeba9ca", "title": "Prototype Surgery: Tailoring Neural Prototypes via Soft Labels for Efficient Machine Unlearning", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744827", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Adjusts neural prototypes through soft labels to remove training-data influence with less retraining.", "authors": "Gaoyang Liu, Xijie Wang, Zixiong Wang, Chen Wang, Ahmed M. Abdelmoniem, Desheng Wang", "author_names": [ "Gaoyang Liu", "Xijie Wang", "Zixiong Wang", "Chen Wang", "Ahmed M. Abdelmoniem", "Desheng Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/3e25efdd3b165ead3ccf1638291673752e97a9e7", "abstract_characters": 1956, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p6af88b11be23", "title": "RAG-WM: An Efficient Black-Box Watermarking Approach for Retrieval-Augmented Generation of Large Language Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744813", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Watermarks retrieval-augmented systems through black-box access.", "authors": "Peizhuo Lv, Mengjie Sun, Hao Wang, XiaoFeng Wang, Shengzhi Zhang, Yuxuan Chen, Kai Chen, Limin Sun", "doi": "10.1145/3719027.3744813", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a3e55c874fa220fc42eb2ee43acfe24c7a309ffe", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1637, "author_names": [ "Peizhuo Lv", "Mengjie Sun", "Hao Wang", "XiaoFeng Wang", "Shengzhi Zhang", "Yuxuan Chen", "Kai Chen", "Limin Sun" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p4762ab0c0603", "title": "Removal Attack and Defense on AI Generated Content Latent-based Watermarking", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765175", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Exploits leaked watermark boundaries to remove latent watermarks and evaluates a secret-transformation defense on Stable Diffusion.", "authors": "De Zhang Lee, Han Fang, Hanyi Wang, Ee-Chien Chang", "doi": "10.1145/3719027.3765175", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/74658de908d270b250bb3128fd866678bc434ff5", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1362, "author_names": [ "De Zhang Lee", "Han Fang", "Hanyi Wang", "Ee-Chien Chang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p5aa0d86cc11f", "title": "Rethinking Machine Unlearning in Image Generation Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744793", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Reassesses machine unlearning in image-generation models.", "authors": "Renyang Liu, Wenjie Feng, Tianwei Zhang, Wei Zhou, Xueqi Cheng, See-Kiong Ng", "doi": "10.1145/3719027.3744793", "areas": [ "Image & diffusion" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7048972074923a8610ad01b22fa61a39fe47c4e3", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1878, "author_names": [ "Renyang Liu", "Wenjie Feng", "Tianwei Zhang", "Wei Zhou", "Xueqi Cheng", "See-Kiong Ng" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p3d06399031f6", "title": "Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744840", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Infers document membership in RAG stores using natural-looking queries and generated answers, reducing detectability and query cost.", "authors": "Ali Naseh, Yuefeng Peng, Anshuman Suri, Harsh Chaudhari, Alina Oprea, Amir Houmansadr", "doi": "10.1145/3719027.3744840", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Detection & robustness", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/be43884bfae5c6c6add21640a41b1d19197cbee5", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1206, "author_names": [ "Ali Naseh", "Yuefeng Peng", "Anshuman Suri", "Harsh Chaudhari", "Alina Oprea", "Amir Houmansadr" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p8d849fb2d204", "title": "SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744835", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Controls unsafe text-to-image content through robust guidance.", "authors": "Peigui Qi, Kunsheng Tang, Wenbo Zhou, Weiming Zhang, Nenghai Yu, Tianwei Zhang, Qing Guo, Jie Zhang", "doi": "10.1145/3719027.3744835", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/340b4bb6555ad6d0b78ba69cd173cf8c7a5ee944", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1880, "author_names": [ "Peigui Qi", "Kunsheng Tang", "Wenbo Zhou", "Weiming Zhang", "Nenghai Yu", "Tianwei Zhang", "Qing Guo", "Jie Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pb3ef3f3efe78", "title": "SecAlign: Defending Against Prompt Injection with Preference Optimization", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3744836", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Trains injection resistance using preference optimization.", "authors": "Sizhe Chen, Arman Zharmagambetov, Saeed Mahloujifar, Kamalika Chaudhuri, David Wagner, Chuan Guo", "doi": "10.1145/3719027.3744836", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/3e1d812a1ef4b02b7d60020cc8aaa596d28373da", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1437, "author_names": [ "Sizhe Chen", "Arman Zharmagambetov", "Saeed Mahloujifar", "Kamalika Chaudhuri", "David Wagner", "Chuan Guo" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p1407f6cf0a5d", "title": "Split Unlearning", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744787", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Decouples client–server training to enable SISA-style unlearning in split learning, with an extension protecting client labels.", "authors": "Yanna Jiang, Guangsheng Yu, QIN WANG, Xu Wang, Baihe Ma, Caijun Sun, Wei Ni, Ren Ping Liu", "author_names": [ "Yanna Jiang", "Guangsheng Yu", "QIN WANG", "Xu Wang", "Baihe Ma", "Caijun Sun", "Wei Ni", "Ren Ping Liu" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "10.1145/3719027.3744787", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/9e02aa66e8f335d5b2a8203441c55eb77e3eee9a", "abstract_characters": 1449, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p4ee44687b87b", "title": "Systematic Assessment of Tabular Data Synthesis", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3765067", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Evaluates fidelity, privacy and utility of tabular synthesizers, including diffusion- and language-model-based approaches; included as adjacent generative-model privacy.", "authors": "Yuntao Du, Ninghui Li", "doi": "10.1145/3719027.3765067", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8e6f5f4e20267636f5081d773c2d6ed4ef127868", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1134, "author_names": [ "Yuntao Du", "Ninghui Li" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pc0df68ecee21", "title": "The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765091", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Studies how discretization affects end-to-end privacy in synthetic tabular data generation and proposes privacy-preserving preprocessing.", "authors": "Georgi Ganev, Meenatchi Sundaram Muthu Selva Annamalai, Sofiane Mahiou, Emiliano De Cristofaro", "author_names": [ "Georgi Ganev", "Meenatchi Sundaram Muthu Selva Annamalai", "Sofiane Mahiou", "Emiliano De Cristofaro" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a328b99345f3ec57dfa958ea968b8fde31c02e6a", "abstract_characters": 1609, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p7524c3917942", "title": "The Odyssey of robots.txt Governance: Measuring Convention Implications of Web Bots in Large Language Model Services", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765063", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Measures robots.txt governance for LLM-service crawlers.", "authors": "Jian Cui, Mingming Zha, XiaoFeng Wang, Xiaojing Liao", "doi": "10.1145/3719027.3765063", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7efc75f584fd571dff0e348198f2f0f6acb089e5", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1578, "author_names": [ "Jian Cui", "Mingming Zha", "XiaoFeng Wang", "Xiaojing Liao" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p8a3e82f12f92", "title": "The Phantom Menace in PET-Hardened Deep Learning Models: Invisible Configuration-Induced Attacks", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765107", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Shows how malicious configurations in cryptographic privacy-enhancing deep-learning frameworks can conceal attacks on model behavior.", "authors": "Yiteng Peng, Dongwei Xiao, Zhibo Liu, Zhenlan Ji, Daoyuan Wu, Shuai Wang, Juergen Rahmel", "author_names": [ "Yiteng Peng", "Dongwei Xiao", "Zhibo Liu", "Zhenlan Ji", "Daoyuan Wu", "Shuai Wang", "Juergen Rahmel" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://daoyuan14.github.io/papers/CCS25_ConPETro.pdf", "abstract_characters": 2960, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pe5e77e49b659", "title": "THOR: Secure Transformer Inference with Homomorphic Encryption", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765150", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Performs private transformer inference with homomorphic encryption.", "authors": "Jungho Moon, Dongwoo Yoo, Xiaoqian Jiang, Miran Kim", "doi": "10.1145/3719027.3765150", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2024/1881", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1320, "author_names": [ "Jungho Moon", "Dongwoo Yoo", "Xiaoqian Jiang", "Miran Kim" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "ped2b055d1e9c", "title": "UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://doi.org/10.1145/3719027.3765088", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Benchmarks image-safety classifiers on real and generated imagery.", "authors": "Yiting Qu, Xinyue Shen, Yixin Wu, Michael Backes, Savvas Zannettou, Yang Zhang", "doi": "10.1145/3719027.3765088", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/fc15dd222e75743b909ea376e317e5fa2e22e6ab", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1606, "author_names": [ "Yiting Qu", "Xinyue Shen", "Yixin Wu", "Michael Backes", "Savvas Zannettou", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "pb42a6309cfc0", "title": "What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765052", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Audits shared diffusion models for sensitive or unwanted concepts.", "authors": "Xiaoyong (Biran) Yuan, Xiaolong Ma, Linke Guo, Lan Zhang", "doi": "10.1145/3719027.3765052", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ea08767799d93bd43e11a4f4a2bb851ab6a0e4b9", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 2609, "author_names": [ "Xiaoyong (Biran) Yuan", "Xiaolong Ma", "Linke Guo", "Lan Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p8c890b2b0f78", "title": "What’s Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3744868", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Uses concept shifts in pretrained multimodal models to examine training integrity, attribution, and privacy risks.", "authors": "Jiamin Chang, Haoyang Li, Hammond Pearce, Ruoxi Sun, Bo Li, Jason (Minhui) Xue", "author_names": [ "Jiamin Chang", "Haoyang Li", "Hammond Pearce", "Ruoxi Sun", "Bo Li", "Jason (Minhui) Xue" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "LLM", "Image & diffusion" ], "topics": [ "Model security", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/537b34daea842b186e5f4bde7eaa1198a4cbbe09", "abstract_characters": 1239, "new_in_review": true, "status": "Published", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "pf4c69673a334", "title": "You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765124", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Replaces textual system prompts with vectors to reduce leakage.", "authors": "Bochuan Cao, Yuanpu Cao, Changjiang Li, Yameng Ge, Ting Wang, Jinghui Chen", "doi": "10.1145/3719027.3765124", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/1391f84c5232c8e6104eb30046276827b11e02c4", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1384, "author_names": [ "Bochuan Cao", "Yuanpu Cao", "Changjiang Li", "Yameng Ge", "Ting Wang", "Jinghui Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p1e1851dd0a3f", "title": "YouthSafe: A Youth-Centric Safety Benchmark and Safeguard Model for Large Language Models", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765168", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Benchmarks and safeguards model behavior for younger users.", "authors": "Yaman Yu, Yiren Liu, Yuqi Zhang, Yun Huang, Yang Wang", "doi": "10.1145/3719027.3765168", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/05c990aafdaa4f7344878e705a09821439094c8b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "", "abstract_characters": 1319, "author_names": [ "Yaman Yu", "Yiren Liu", "Yuqi Zhang", "Yun Huang", "Yang Wang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/assets/accepted-papers.json" }, { "key": "p426bef8098c1", "title": "Zero-Knowledge AI Inference with High Precision", "year": 2025, "venue": "ACM CCS", "edition": "ccs-2025", "url": "https://dl.acm.org/doi/10.1145/3719027.3765056", "source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "summary": "Verifies high-precision floating-point AI inference with zero-knowledge proofs, including language-processing workloads.", "authors": "Arman Riasi, Haodi Wang, Rouzbeh Behnia, Viet Vo, Thang Hoang", "author_names": [ "Arman Riasi", "Haodi Wang", "Rouzbeh Behnia", "Viet Vo", "Thang Hoang" ], "author_source": "https://www.sigsac.org/ccs/CCS2025/accepted-papers/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://eprint.iacr.org/2025/1732", "abstract_characters": 1526, "new_in_review": true, "status": "Published", "scope_note": "Selected general machine-learning security/privacy foundation; not an LLM-specific result.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23" }, { "key": "p94c1e47a58b6", "title": "Alleviating the Fear of Losing Alignment in LLM Fine-tuning", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Preserves safety alignment during model fine-tuning.", "authors": "Kang Yang, Guanhong Tao, Xun Chen, Jun Xu", "doi": "https://doi.org/10.1109/SP61157.2025.00171", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b7da11dd594d4b098a70de25f3719702d6181d3b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1529, "author_names": [ "Kang Yang", "Guanhong Tao", "Xun Chen", "Jun Xu" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p66fdec0f03c7", "title": "BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Scans LLMs for backdoors by recovering attacker targets.", "authors": "Guangyu Shen, Siyuan Cheng, Zhuo Zhang, Guanhong Tao, Kaiyuan Zhang, Hanxi Guo, Lu Yan, Xiaolong Jin, Shengwei An, Shiqing Ma, Xiangyu Zhang", "doi": "https://doi.org/10.1109/SP61157.2025.00103", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/c33104edec1477f852e167dd6826a8aff16595f6", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1727, "author_names": [ "Guangyu Shen", "Siyuan Cheng", "Zhuo Zhang", "Guanhong Tao", "Kaiyuan Zhang", "Hanxi Guo", "Lu Yan", "Xiaolong Jin", "Shengwei An", "Shiqing Ma", "Xiangyu Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pb95c8ba518be", "title": "Codebreaker: Dynamic Extraction Attacks on Code Language Models", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Studies dynamic extraction attacks against code language models.", "authors": "Changzhou Han, Zehang Deng, Wanlun Ma, Xiaogang Zhu, Jason Xue, Tianqing Zhu, Sheng Wen, Yang Xiang", "doi": "https://doi.org/10.1109/SP61157.2025.00124", "areas": [ "LLM" ], "topics": [ "Model security", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/264da08888af2fde79f541c222097d648667547c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1948, "author_names": [ "Changzhou Han", "Zehang Deng", "Wanlun Ma", "Xiaogang Zhu", "Jason Xue", "Tianqing Zhu", "Sheng Wen", "Yang Xiang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p327b06301a41", "title": "Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Accelerates private inference using predicted activation sparsity.", "authors": "Guang Yan, Yuhui Zhang, Zimu Guo, Lutan Zhao, Xiaojun Chen, Chen Wang, Wenhao Wang, Dan Meng, Rui Hou", "doi": "https://doi.org/10.1109/SP61157.2025.00182", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/bd7f594215a228135936300690be7af689cd74c7", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1374, "author_names": [ "Guang Yan", "Yuhui Zhang", "Zimu Guo", "Lutan Zhao", "Xiaojun Chen", "Chen Wang", "Wenhao Wang", "Dan Meng", "Rui Hou" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pfaea02eeecb6", "title": "DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Detects prompt injection using a game-theoretic approach.", "authors": "Yupei Liu, Yuqi Jia, Jinyuan Jia, Dawn Song, Neil Zhenqiang Gong", "doi": "https://doi.org/10.1109/SP61157.2025.00250", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a90068513bf2eae66c81ff80b5060ce115097176", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1164, "author_names": [ "Yupei Liu", "Yuqi Jia", "Jinyuan Jia", "Dawn Song", "Neil Zhenqiang Gong" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pe2fb5b71f323", "title": "Edge Unlearning is Not \"on Edge\"! An Adaptive Exact Unlearning System on Resource-Constrained Devices", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Adapts exact unlearning to constrained edge devices using shard management, caching, and model pruning.", "authors": "Xiaoyu Xia, Ziqi Wang, Ruoxi Sun, Bowen Liu, Ibrahim Khalil, Minhui Xue", "author_names": [ "Xiaoyu Xia", "Ziqi Wang", "Ruoxi Sun", "Bowen Liu", "Ibrahim Khalil", "Minhui Xue" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "doi": "https://doi.org/10.1109/SP61157.2025.00095", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/048d58e0740ae3987be660e97bd282fa4b439dae", "abstract_characters": 1906, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p585c1a4a04db", "title": "Exploring Parent-Child Perspectives on Safety in Generative AI: Concerns, Mitigation Strategies, and Design Implications", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Studies parents' and children's concerns about generative AI safety.", "authors": "Yaman Yu, Tanusree Sharma, Melinda Hu, Justin Wang, Yang Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2406.10461", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1419, "author_names": [ "Yaman Yu", "Tanusree Sharma", "Melinda Hu", "Justin Wang", "Yang Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p1f7717c6f114", "title": "From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Improves differentially private diffusion-model image synthesis using an initial stage trained on aggregated images.", "authors": "Kecen Li, Chen Gong, Xiaochen Li, Yuzhong Zhao, Xinwen Hou, Tianhao Wang", "doi": "https://doi.org/10.1109/SP61157.2025.00217", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/42715e4b28798589a988203ad5de57a33316adbb", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1421, "author_names": [ "Kecen Li", "Chen Gong", "Xiaochen Li", "Yuzhong Zhao", "Xinwen Hou", "Tianhao Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pcdf4ad0c2649", "title": "Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Uses a fine-tuning interface to optimize prompt-injection attacks.", "authors": "Andrey Labunets, Nishit V. Pandya, Ashish Hooda, Xiaohan Fu, Earlence Fernandes", "doi": "https://doi.org/10.1109/SP61157.2025.00121", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7c7ba94eb5d96b665397db77f765910e5acde5c6", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1097, "author_names": [ "Andrey Labunets", "Nishit V. Pandya", "Ashish Hooda", "Xiaohan Fu", "Earlence Fernandes" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pf8ad953af347", "title": "Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Uses agent-driven fuzz testing to jailbreak text-to-image systems.", "authors": "Yingkai Dong, Xiangtao Meng, Ning Yu, Zheng Li, Shanqing Guo", "doi": "https://doi.org/10.1109/SP61157.2025.00119", "areas": [ "Image & diffusion", "Agent", "LLM" ], "topics": [ "Jailbreaks & safety", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/32a101766e67a5f6db9042a672d1bbaef74c81aa", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1850, "author_names": [ "Yingkai Dong", "Xiangtao Meng", "Ning Yu", "Zheng Li", "Shanqing Guo" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p5496f1b4abe7", "title": "GPTracker: A Large-Scale Measurement of Misused GPTs", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Measures misuse of custom GPT applications.", "authors": "Xinyue Shen, Yun Shen, Michael Backes, Yang Zhang", "doi": "https://doi.org/10.1109/SP61157.2025.00118", "areas": [ "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7bc922fe50558b5c2752841473c87cdf42a016ee", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1983, "author_names": [ "Xinyue Shen", "Yun Shen", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pabd385792e39", "title": "GuardAIn: Protecting Emerging Generative AI Workloads on Heterogeneous NPU", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Protects generative-AI models and data on discrete NPUs with authenticated encryption, isolation, and attestation.", "authors": "Aritra Dhar, Clément Thorens, Lara Magdalena Lazier, Lukas Cavigelli", "doi": "https://doi.org/10.1109/SP61157.2025.00221", "areas": [ "LLM" ], "topics": [ "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/5b8baa63f115ae5657b6203933250a24599fa9f1", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1312, "author_names": [ "Aritra Dhar", "Clément Thorens", "Lara Magdalena Lazier", "Lukas Cavigelli" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pa91c5b17c788", "title": "Make a Feint to the East While Attacking in the West: Blinding LLM-Based Code Auditors with Flashboom Attacks", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Manipulates code auditors to overlook vulnerabilities.", "authors": "Xiao Li, Yue Li, Hao Wu, Yue Zhang, Kaidi Xu, Xiuzhen Cheng, Sheng Zhong, Fengyuan Xu", "doi": "https://doi.org/10.1109/SP61157.2025.00125", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8b7dce18c4eab6599350236b760ff1ee7356b772", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1964, "author_names": [ "Xiao Li", "Yue Li", "Hao Wu", "Yue Zhang", "Kaidi Xu", "Xiuzhen Cheng", "Sheng Zhong", "Fengyuan Xu" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pc6938a9573d1", "title": "Modifier Unlocked: Jailbreaking Text-to-Image Models Through Prompts", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Manipulates prompt modifiers to bypass image-generation safety controls.", "authors": "Shuofeng Liu, Mengyao Ma, Minhui Xue, Guangdong Bai", "doi": "https://doi.org/10.1109/SP61157.2025.00242", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/5be92a4e6b5b9460b3fcbefecde571cdf11a58e5", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1561, "author_names": [ "Shuofeng Liu", "Mengyao Ma", "Minhui Xue", "Guangdong Bai" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pa924b854799a", "title": "My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Shows how TensorFlow model APIs can conceal file leaks, network access, and code execution in shared AI models.", "authors": "Ruofan Zhu, Ganhao Chen, Wenbo Shen, Xiaofei Xie, Rui Chang", "author_names": [ "Ruofan Zhu", "Ganhao Chen", "Wenbo Shen", "Xiaofei Xie", "Rui Chang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "doi": "https://doi.org/10.1109/SP61157.2025.00012", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e2e738a58e155c05f1613041e4d9793bc7290a33", "abstract_characters": 1475, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pe597e984a697", "title": "On the (In)Security of LLM App Stores", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Analyzes security risks in LLM application marketplaces.", "authors": "Xinyi Hou, Yanjie Zhao, Haoyu Wang", "doi": "https://doi.org/10.1109/SP61157.2025.00117", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f8e289b53bf32d64abb8e2826cf88b415e95fe97", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1495, "author_names": [ "Xinyi Hou", "Yanjie Zhao", "Haoyu Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p989f38c224e6", "title": "On the Effectiveness of Prompt Stealing Attacks on In-The-Wild Prompts", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Evaluates prompt stealing against prompts used in practice.", "authors": "Yicong Tan, Xinyue Shen, Yun Shen, Michael Backes, Yang Zhang", "doi": "https://doi.org/10.1109/SP61157.2025.00120", "areas": [ "LLM" ], "topics": [ "Model security", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/2852d128dafa651b9161d4e6a2eddb6aa20812f6", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1442, "author_names": [ "Yicong Tan", "Xinyue Shen", "Yun Shen", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p3127000fc5a0", "title": "PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Detects backdoors introduced through parameter-efficient fine-tuning.", "authors": "Zhen Sun, Tianshuo Cong, Yule Liu, Chenhao Lin, Xinlei He, Rongmao Chen, Xingshuo Han, Xinyi Huang", "doi": "https://doi.org/10.1109/SP61157.2025.00161", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Unlearning & fine-tuning", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/d403c77364df70115f0f905ef1f9f4891bf40e9d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1724, "author_names": [ "Zhen Sun", "Tianshuo Cong", "Yule Liu", "Chenhao Lin", "Xinlei He", "Rongmao Chen", "Xingshuo Han", "Xinyi Huang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p00d8cd696898", "title": "Preference Poisoning Attacks on Reward Model Learning", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Poisons preference data used to train reward models.", "authors": "Junlin Wu, Jiongxiao Wang, Chaowei Xiao, Chenguang Wang, Ning Zhang, Yevgeniy Vorobeychik", "doi": "https://doi.org/10.1109/SP61157.2025.00094", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/287ba9333a7c40181a2b4f723159b15c0ad30600", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1716, "author_names": [ "Junlin Wu", "Jiongxiao Wang", "Chaowei Xiao", "Chenguang Wang", "Ning Zhang", "Yevgeniy Vorobeychik" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p35e96adb1d02", "title": "Prevalence Overshadows Concerns? Understanding Chinese Users' Privacy Awareness and Expectations Towards LLM-based Healthcare Consultation", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Studies privacy expectations around LLM healthcare consultations.", "authors": "Zhihuang Liu, Ling Hu, Tongqing Zhou, Yonghao Tang, Zhiping Cai", "doi": "https://doi.org/10.1109/SP61157.2025.00092", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/8506f944e524fea02f2059feb6bb6b9e34c59a52", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1394, "author_names": [ "Zhihuang Liu", "Ling Hu", "Tongqing Zhou", "Yonghao Tang", "Zhiping Cai" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pe8e0fea2aab9", "title": "Prompt Inversion Attack against Collaborative Inference of Large Language Models", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Reconstructs private prompts during collaborative inference.", "authors": "Wenjie Qu, Yuguang Zhou, Yongji Wu, Tingsong Xiao, Binhang Yuan, Yiming Li, Jiaheng Zhang", "doi": "https://doi.org/10.1109/SP61157.2025.00160", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ad87bcbdedaaac98278266094875c0e610d6dffc", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1951, "author_names": [ "Wenjie Qu", "Yuguang Zhou", "Yongji Wu", "Tingsong Xiao", "Binhang Yuan", "Yiming Li", "Jiaheng Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pa6640dcd9134", "title": "Provably Robust and Secure Steganography in Asymmetric Resource Scenarios", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Builds provably secure generative steganography with a lightweight decoder independent of the generating model.", "authors": "Minhao Bai, Jinshuai Yang, Kaiyi Pang, Xin Xu, Zhen Yang, Yongfeng Huang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2407.13499", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1642, "author_names": [ "Minhao Bai", "Jinshuai Yang", "Kaiyi Pang", "Xin Xu", "Zhen Yang", "Yongfeng Huang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p5ca982f369f1", "title": "Rigging the Foundation: Manipulating Pre-training for Advanced Membership Inference Attacks", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Manipulates pretraining to amplify subsequent membership inference.", "authors": "Zihao Wang, Rui Zhu, Zhikun Zhang, Haixu Tang, XiaoFeng Wang", "doi": "https://doi.org/10.1109/SP61157.2025.00177", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/29c1a0e29e841eed38449853691fd34c8ef9f8db", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1661, "author_names": [ "Zihao Wang", "Rui Zhu", "Zhikun Zhang", "Haixu Tang", "XiaoFeng Wang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pe59fdc24b37f", "title": "SoK: Watermarking for AI-Generated Content", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Systematizes watermarking methods for AI-generated content.", "authors": "Xuandong Zhao, Sam Gunn, Miranda Christ, Jaiden Fairoze, Andres Fabrega, Nicholas Carlini, Sanjam Garg, Sanghyun Hong, Milad Nasr, Florian Tramer, Somesh Jha, Lei Li, Yu-Xiang Wang, Dawn Song", "doi": "https://doi.org/10.1109/SP61157.2025.00178", "areas": [ "Foundations" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ad200cf8c1e4659e42510aa339d71299a1abc9d9", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1424, "author_names": [ "Xuandong Zhao", "Sam Gunn", "Miranda Christ", "Jaiden Fairoze", "Andres Fabrega", "Nicholas Carlini", "Sanjam Garg", "Sanghyun Hong", "Milad Nasr", "Florian Tramer", "Somesh Jha", "Lei Li", "Yu-Xiang Wang", "Dawn Song" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p05af88a16507", "title": "SV-TrustEval-C: Evaluating Structure and Semantic Reasoning in Large Language Models for Source Code Vulnerability Analysis", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Benchmarks structural and semantic consistency in LLM vulnerability reasoning under code perturbations.", "authors": "Yansong Li, Paula Branco, Alexander M. Hoole, Manish Marwah, Hari Manassery Koduvely, Guy-Vincent Jourdan, Stephan Jou", "doi": "https://doi.org/10.1109/SP61157.2025.00191", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/80fd0f930b242bdaedcb371b5ac47d2bc1bb9261", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1411, "author_names": [ "Yansong Li", "Paula Branco", "Alexander M. Hoole", "Manish Marwah", "Hari Manassery Koduvely", "Guy-Vincent Jourdan", "Stephan Jou" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p38b5ad26071f", "title": "The Digital Cybersecurity Expert: How Far Have We Come?", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Measures cybersecurity knowledge gaps across language models using a fine-grained benchmark.", "authors": "Dawei Wang, Geng Zhou, Xianglong Li, Yu Bai, Li Chen, Ting Qin, Jian Sun, Dan Li", "doi": "https://doi.org/10.1109/SP61157.2025.00198", "areas": [ "LLM", "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/00b55a814c9425aa8e25ee900dd225408742963a", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1631, "author_names": [ "Dawei Wang", "Geng Zhou", "Xianglong Li", "Yu Bai", "Li Chen", "Ting Qin", "Jian Sun", "Dan Li" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p3e3dae626377", "title": "The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against ``Truly Anonymous'' Synthetic Datasets", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Shows that similarity-based synthetic-data privacy tests can pass despite membership, attribute, and reconstruction leakage.", "authors": "Georgi Ganev, Emiliano De Cristofaro", "author_names": [ "Georgi Ganev", "Emiliano De Cristofaro" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "doi": "https://doi.org/10.1109/SP61157.2025.00218", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/95b429f935022b2f7df97b17855eda8bcdd521d2", "abstract_characters": 1267, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pf8d40d54d9c0", "title": "Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Verifies unauthorized training-data use in personalized diffusion models.", "authors": "Boheng Li, Yanhao Wei, Yankai Fu, Zhenting Wang, Yiming Li, Jie Zhang, Run Wang, Tianwei Zhang", "doi": "https://doi.org/10.1109/SP61157.2025.00073", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/50e81448a6c5d61cada9991cf767b48eb29e1616", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1907, "author_names": [ "Boheng Li", "Yanhao Wei", "Yankai Fu", "Zhenting Wang", "Yiming Li", "Jie Zhang", "Run Wang", "Tianwei Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p6cedacd8962f", "title": "Understanding Users' Security and Privacy Concerns and Attitudes Towards Conversational AI Platforms", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Studies users' security and privacy concerns about conversational AI.", "authors": "Mutahar Ali, Arjun Arunasalam, Habiba Farrukh", "doi": "https://doi.org/10.1109/SP61157.2025.00241", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/6cd21774ec4a989a52945b9fe7ba7bc0b5a79aba", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1511, "author_names": [ "Mutahar Ali", "Arjun Arunasalam", "Habiba Farrukh" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p45bd06a5fe32", "title": "UnMarker: A Universal Attack on Defensive Image Watermarking", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Removes defensive image watermarks through spectral optimization without detector feedback, including semantic watermarks.", "authors": "Andre Kassis, Urs Hengartner", "doi": "https://doi.org/10.1109/SP61157.2025.00005", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/84de8c422fa38c72dc2a43938ada789bd43e62c7", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1425, "author_names": [ "Andre Kassis", "Urs Hengartner" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "p53a961726051", "title": "Watermarking Language Models for Many Adaptive Users", "year": 2025, "venue": "IEEE S&P", "edition": "sp-2025", "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html", "summary": "Studies watermark guarantees under adaptive, multi-user access.", "authors": "Aloni Cohen, Alexander Hoover, Gabe Schoenbach", "doi": "https://doi.org/10.1109/SP61157.2025.00084", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a5eaf891edd07c3a3faa7e56dd19be40a0cc0261", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1611, "author_names": [ "Aloni Cohen", "Alexander Hoover", "Gabe Schoenbach" ], "author_source": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html" }, { "key": "pf2ced7689f67", "title": "A New PPML Paradigm for Quantized Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/a-new-ppml-paradigm-for-quantized-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Uses private lookup-table evaluation to accelerate encrypted inference for quantized models, including GPT and Llama models.", "authors": "Tianpei Lu, Bingsheng Zhang, Xiaoyuan Zhang, Kui Ren", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/a-new-ppml-paradigm-for-quantized-models/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1512, "author_names": [ "Tianpei Lu", "Bingsheng Zhang", "Xiaoyuan Zhang", "Kui Ren" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/a-new-ppml-paradigm-for-quantized-models/" }, { "key": "p006bf5b3cb98", "title": "Black-box Membership Inference Attacks against Fine-tuned Diffusion Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/black-box-membership-inference-attacks-against-fine-tuned-diffusion-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Infers training membership in fine-tuned diffusion models through black-box access.", "authors": "Yan Pang, Tianhao Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/black-box-membership-inference-attacks-against-fine-tuned-diffusion-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 878, "author_names": [ "Yan Pang", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/black-box-membership-inference-attacks-against-fine-tuned-diffusion-models/" }, { "key": "p001f9e610b0c", "title": "BumbleBee: Secure Two-party Inference Framework for Large Transformers", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/bumblebee-secure-two-party-inference-framework-for-large-transformers/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Provides secure two-party transformer inference.", "authors": "Wen-jie Lu, Zhicong Huang, Zhen Gu, Jingyu Li, Jian Liu, Cheng Hong, Kui Ren, Tao Wei, WenGuang Chen", "doi": "", "areas": [ "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/bumblebee-secure-two-party-inference-framework-for-large-transformers/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1464, "author_names": [ "Wen-jie Lu", "Zhicong Huang", "Zhen Gu", "Jingyu Li", "Jian Liu", "Cheng Hong", "Kui Ren", "Tao Wei", "WenGuang Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/bumblebee-secure-two-party-inference-framework-for-large-transformers/" }, { "key": "p5ab400fe9658", "title": "CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/clibe-detecting-dynamic-backdoors-in-transformer-based-nlp-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Detects dynamic backdoors in transformer NLP models.", "authors": "Rui Zeng, Xi Chen, Yuwen Pu, Xuhong Zhang, Tianyu Du, Shouling Ji", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/clibe-detecting-dynamic-backdoors-in-transformer-based-nlp-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2182, "author_names": [ "Rui Zeng", "Xi Chen", "Yuwen Pu", "Xuhong Zhang", "Tianyu Du", "Shouling Ji" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/clibe-detecting-dynamic-backdoors-in-transformer-based-nlp-models/" }, { "key": "p89c2406c5f1f", "title": "Diffence: Fencing Membership Privacy With Diffusion Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/diffence-fencing-membership-privacy-with-diffusion-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Regenerates inputs with diffusion models before inference to reduce membership signals while preserving predicted labels.", "authors": "Yuefeng Peng, Ali Naseh, Amir Houmansadr", "author_names": [ "Yuefeng Peng", "Ali Naseh", "Amir Houmansadr" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/diffence-fencing-membership-privacy-with-diffusion-models/", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/diffence-fencing-membership-privacy-with-diffusion-models/", "abstract_characters": 2310, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p60d2e55369e9", "title": "GAP-Diff: Protecting JPEG-Compressed Images from Diffusion-based Facial Customization", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/gap-diff-protecting-jpeg-compressed-images-from-diffusion-based-facial-customization/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Protects compressed images from diffusion-based facial customization.", "authors": "Haotian Zhu, Shuchao Pang, Zhigang Lu, Yongbin Zhou, Minhui Xue", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/gap-diff-protecting-jpeg-compressed-images-from-diffusion-based-facial-customization/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1778, "author_names": [ "Haotian Zhu", "Shuchao Pang", "Zhigang Lu", "Yongbin Zhou", "Minhui Xue" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/gap-diff-protecting-jpeg-compressed-images-from-diffusion-based-facial-customization/" }, { "key": "p6617c6872d26", "title": "I Know What You Asked: Prompt Leakage via KV-Cache Sharing in Multi-Tenant LLM Serving", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/i-know-what-you-asked-prompt-leakage-via-kv-cache-sharing-in-multi-tenant-llm-serving/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Leaks private prompts through shared KV caches.", "authors": "Guanlong Wu, Zheng Zhang, Yao Zhang, Weili Wang, Jianyu Niu, Ye Wu, Yinqian Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/i-know-what-you-asked-prompt-leakage-via-kv-cache-sharing-in-multi-tenant-llm-serving/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1308, "author_names": [ "Guanlong Wu", "Zheng Zhang", "Yao Zhang", "Weili Wang", "Jianyu Niu", "Ye Wu", "Yinqian Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/i-know-what-you-asked-prompt-leakage-via-kv-cache-sharing-in-multi-tenant-llm-serving/" }, { "key": "pece34a358ebb", "title": "IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/isolategpt-an-execution-isolation-architecture-for-llm-based-agentic-systems/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Isolates execution and communication in agentic LLM applications.", "authors": "Yuhao Wu, Franziska Roesner, Tadayoshi Kohno, Ning Zhang, Umar Iqbal", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/isolategpt-an-execution-isolation-architecture-for-llm-based-agentic-systems/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1524, "author_names": [ "Yuhao Wu", "Franziska Roesner", "Tadayoshi Kohno", "Ning Zhang", "Umar Iqbal" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/isolategpt-an-execution-isolation-architecture-for-llm-based-agentic-systems/" }, { "key": "pde98c515945a", "title": "Privacy-Preserving Data Deduplication for Enhancing Federated Learning of Language Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/privacy-preserving-data-deduplication-for-enhancing-federated-learning-of-language-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Deduplicates data privately for federated language-model training.", "authors": "Aydin Abadi, Vishnu Asutosh Dasu, Sumanta Sarkar", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/privacy-preserving-data-deduplication-for-enhancing-federated-learning-of-language-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1147, "author_names": [ "Aydin Abadi", "Vishnu Asutosh Dasu", "Sumanta Sarkar" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/privacy-preserving-data-deduplication-for-enhancing-federated-learning-of-language-models/" }, { "key": "p449158d19ab4", "title": "Reinforcement Unlearning", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/reinforcement-unlearning/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Develops methods to make reinforcement-learning agents forget environments and evaluates removal using environment inference.", "authors": "Dayong Ye, Tianqing Zhu, Congcong Zhu, Derui Wang, Kun Gao, Zewei Shi, Sheng Shen, Wanlei Zhou, Minhui Xue", "author_names": [ "Dayong Ye", "Tianqing Zhu", "Congcong Zhu", "Derui Wang", "Kun Gao", "Zewei Shi", "Sheng Shen", "Wanlei Zhou", "Minhui Xue" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/reinforcement-unlearning/", "doi": "", "areas": [ "Agent", "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/reinforcement-unlearning/", "abstract_characters": 1755, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p33715ccaccd3", "title": "Safety Misalignment Against Large Language Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/safety-misalignment-against-large-language-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Studies how model modification defeats safety alignment.", "authors": "Yichen Gong, Delong Ran, Xinlei He, Tianshuo Cong, Anyu Wang, Xiaoyun Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/safety-misalignment-against-large-language-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1502, "author_names": [ "Yichen Gong", "Delong Ran", "Xinlei He", "Tianshuo Cong", "Anyu Wang", "Xiaoyun Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/safety-misalignment-against-large-language-models/" }, { "key": "p030942ca3b66", "title": "Secure Transformer Inference Made Non-interactive", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/secure-transformer-inference-made-non-interactive/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Provides transformer inference requiring only one communication round.", "authors": "Jiawen Zhang, Xinpeng Yang, Lipeng He, Kejia Chen, Wen-jie Lu, Yinghao Wang, Xiaoyang Hou, Jian Liu, Kui Ren, Xiaohu Yang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/secure-transformer-inference-made-non-interactive/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1221, "author_names": [ "Jiawen Zhang", "Xinpeng Yang", "Lipeng He", "Kejia Chen", "Wen-jie Lu", "Yinghao Wang", "Xiaoyang Hou", "Jian Liu", "Kui Ren", "Xiaohu Yang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/secure-transformer-inference-made-non-interactive/" }, { "key": "p07f3540c0af0", "title": "SHAFT: Secure, Handy, Accurate and Fast Transformer Inference", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/shaft-secure-handy-accurate-and-fast-transformer-inference/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Optimizes secure transformer inference for practical deployment.", "authors": "Andes Y. L. Kei, Sherman S. M. Chow", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/shaft-secure-handy-accurate-and-fast-transformer-inference/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2092, "author_names": [ "Andes Y. L. Kei", "Sherman S. M. Chow" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/shaft-secure-handy-accurate-and-fast-transformer-inference/" }, { "key": "pa26a12f72288", "title": "The Philosopher’s Stone: Trojaning Plugins of Large Language Models", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/the-philosophers-stone-trojaning-plugins-of-large-language-models/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Uses malicious low-rank adapters to control outputs and tool use.", "authors": "Tian Dong, Minhui Xue, Guoxing Chen, Rayne Holland, Yan Meng, Shaofeng Li, Zhen Liu, Haojin Zhu", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Poisoning & backdoors", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/the-philosophers-stone-trojaning-plugins-of-large-language-models/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1629, "author_names": [ "Tian Dong", "Minhui Xue", "Guoxing Chen", "Rayne Holland", "Yan Meng", "Shaofeng Li", "Zhen Liu", "Haojin Zhu" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/the-philosophers-stone-trojaning-plugins-of-large-language-models/" }, { "key": "pa5937f221b38", "title": "THEMIS: Regulating Textual Inversion for Personalized Concept Censorship", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/themis-regulating-textual-inversion-for-personalized-concept-censorship/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Embeds protective backdoors in textual-inversion embeddings to censor sensitive personalized image generation.", "authors": "Yutong Wu, Jie Zhang, Florian Kerschbaum, Tianwei Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety", "Poisoning & backdoors", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/themis-regulating-textual-inversion-for-personalized-concept-censorship/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 2768, "author_names": [ "Yutong Wu", "Jie Zhang", "Florian Kerschbaum", "Tianwei Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/themis-regulating-textual-inversion-for-personalized-concept-censorship/" }, { "key": "pb2271437b88d", "title": "Towards Understanding Unsafe Video Generation", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/towards-understanding-unsafe-video-generation/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Builds a human-annotated unsafe-video dataset and studies defenses operating inside video-diffusion sampling.", "authors": "Yan Pang, Aiping Xiong, Yang Zhang, Tianhao Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety", "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/towards-understanding-unsafe-video-generation/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 2101, "author_names": [ "Yan Pang", "Aiping Xiong", "Yang Zhang", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/towards-understanding-unsafe-video-generation/" }, { "key": "p0605d0e4de79", "title": "TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agents", "year": 2025, "venue": "NDSS", "edition": "ndss-2025", "url": "https://www.ndss-symposium.org/ndss-paper/trajdeleter-enabling-trajectory-forgetting-in-offline-reinforcement-learning-agents/", "source": "https://www.ndss-symposium.org/ndss2025/accepted-papers/", "summary": "Removes selected trajectories from offline reinforcement-learning agents and introduces an audit of trajectory forgetting.", "authors": "Chen Gong, Kecen Li, Jin Yao, Tianhao Wang", "author_names": [ "Chen Gong", "Kecen Li", "Jin Yao", "Tianhao Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/trajdeleter-enabling-trajectory-forgetting-in-offline-reinforcement-learning-agents/", "doi": "", "areas": [ "Agent", "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/trajdeleter-enabling-trajectory-forgetting-in-offline-reinforcement-learning-agents/", "abstract_characters": 1532, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p82f8eb77b00e", "title": "A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/lin-junhua", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Removes Tree-Ring image watermarks using public knowledge of the watermarking scheme.", "authors": "Junhua Lin, Marc Juarez", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/lin-junhua", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1271, "author_names": [ "Junhua Lin", "Marc Juarez" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/lin-junhua" }, { "key": "p4c00022a5b15", "title": "Activation Approximations Can Incur Safety Vulnerabilities in Aligned LLMs: Comprehensive Analysis and Defense", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-jiawen", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Shows how approximate activations can undermine model safety.", "authors": "Jiawen Zhang, Kejia Chen, Lipeng He, Jian Lou, Dan Li, Zunlei Feng, Mingli Song, Jian Liu, Kui Ren, Xiaohu Yang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-jiawen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1793, "author_names": [ "Jiawen Zhang", "Kejia Chen", "Lipeng He", "Jian Lou", "Dan Li", "Zunlei Feng", "Mingli Song", "Jian Liu", "Kui Ren", "Xiaohu Yang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-jiawen" }, { "key": "p249dcbe136dc", "title": "Are CAPTCHAs Still Bot-hard? Generalized Visual CAPTCHA Solving with Agentic Vision Language Model", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/teoh", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Builds an agentic vision-language solver that generalizes to unseen visual CAPTCHAs, challenging bot-hardness assumptions.", "authors": "Xiwen Teoh, Yun Lin, Siqi Li, Ruofan Liu, Avi Sollomoni, Yaniv Harel, Jin Song Dong", "doi": "", "areas": [ "Image & diffusion", "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/teoh", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1759, "author_names": [ "Xiwen Teoh", "Yun Lin", "Siqi Li", "Ruofan Liu", "Avi Sollomoni", "Yaniv Harel", "Jin Song Dong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/teoh" }, { "key": "p05c4bde47749", "title": "Backdooring Bias (B^2) into Stable Diffusion Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/naseh", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Backdoors Stable Diffusion to introduce attacker-chosen bias.", "authors": "Ali Naseh, Jaechul Roh, Eugene Bagdasarian, Amir Houmansadr", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/naseh", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1786, "author_names": [ "Ali Naseh", "Jaechul Roh", "Eugene Bagdasarian", "Amir Houmansadr" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/naseh" }, { "key": "pe13c750fd03b", "title": "Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/vekaria", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Audits tracking, profiling, and personalization by generative AI assistants.", "authors": "Yash Vekaria, Aurelio Loris Canino, Jonathan Levitsky, Alex Ciechonski, Patricia Callejo, Anna Maria Mandalari, Zubair Shafiq", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/vekaria", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1823, "author_names": [ "Yash Vekaria", "Aurelio Loris Canino", "Jonathan Levitsky", "Alex Ciechonski", "Patricia Callejo", "Anna Maria Mandalari", "Zubair Shafiq" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/vekaria" }, { "key": "p67f38a5cdc11", "title": "Breaking the Layer Barrier: Remodeling Private Transformer Inference with Hybrid CKKS and MPC", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/xu-tianshi", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Combines homomorphic encryption and secure computation for private inference.", "authors": "Tianshi Xu, Wen-jie Lu, Jiangrui Yu, Yi Chen, Chenqi Lin, Runsheng Wang, Meng Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/xu-tianshi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1229, "author_names": [ "Tianshi Xu", "Wen-jie Lu", "Jiangrui Yu", "Yi Chen", "Chenqi Lin", "Runsheng Wang", "Meng Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/xu-tianshi" }, { "key": "p12d309f5bd2d", "title": "Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-yiting", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Examines cross-modal gaps in recognizing unsafe concepts.", "authors": "Yiting Qu, Michael Backes, Yang Zhang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-yiting", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1640, "author_names": [ "Yiting Qu", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-yiting" }, { "key": "p96a42c6809b1", "title": "Characterizing the MrDeepFakes Sexual Deepfake Marketplace", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/han", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Characterizes a sexual-deepfake marketplace, including its economics, targets, attacker motivations, and enforcement practices.", "authors": "Catherine Han, Anne Li, Deepak Kumar, Zakir Durumeric", "author_names": [ "Catherine Han", "Anne Li", "Deepak Kumar", "Zakir Durumeric" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/han", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/han", "abstract_characters": 914, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p9325fdbf79b4", "title": "Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/park", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Crafts recaptured synthetic images that evade deepfake and recapture detection despite camera signatures.", "authors": "Seongbin Park, Alexander Vilesov, Jinghuai Zhang, Hossein Khalili, Yuan Tian, Achuta Kadambi, Nader Sehatbakhsh", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/park", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1865, "author_names": [ "Seongbin Park", "Alexander Vilesov", "Jinghuai Zhang", "Hossein Khalili", "Yuan Tian", "Achuta Kadambi", "Nader Sehatbakhsh" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/park" }, { "key": "p3a661bde7faa", "title": "Cloak, Honey, Trap: Proactive Defenses Against LLM Agents", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ayzenshteyn", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses deception to disrupt malicious autonomous LLM agents.", "authors": "Daniel Ayzenshteyn, Roy Weiss, Yisroel Mirsky", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ayzenshteyn", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1370, "author_names": [ "Daniel Ayzenshteyn", "Roy Weiss", "Yisroel Mirsky" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ayzenshteyn" }, { "key": "p5b99b5927f61", "title": "Cross-Modal Prompt Inversion: Unifying Threats to Text and Image Generative AI Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-inversion", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Studies prompt reconstruction across text and image generation.", "authors": "Dayong Ye, Tianqing Zhu, Feng He, Bo Liu, Minhui Xue, Wanlei Zhou", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-inversion", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1524, "author_names": [ "Dayong Ye", "Tianqing Zhu", "Feng He", "Bo Liu", "Minhui Xue", "Wanlei Zhou" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-inversion" }, { "key": "pa5ed22afb713", "title": "Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-duplication", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Shows how duplicated and near-duplicated training data can frustrate forgetting or degrade unlearned models.", "authors": "Dayong Ye, Tianqing Zhu, Jiayang Li, Kun Gao, Bo Liu, Leo Yu Zhang, Wanlei Zhou, Yang Zhang", "author_names": [ "Dayong Ye", "Tianqing Zhu", "Jiayang Li", "Kun Gao", "Bo Liu", "Leo Yu Zhang", "Wanlei Zhou", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-duplication", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-duplication", "abstract_characters": 1670, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pb2f01a99caee", "title": "Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-attacks", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses generative AI to facilitate extraction, inversion and membership attacks on image and text models without training data.", "authors": "Dayong Ye, Tianqing Zhu, Shang Wang, Bo Liu, Leo Yu Zhang, Wanlei Zhou, Yang Zhang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-attacks", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1103, "author_names": [ "Dayong Ye", "Tianqing Zhu", "Shang Wang", "Bo Liu", "Leo Yu Zhang", "Wanlei Zhou", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-attacks" }, { "key": "pdd78aa038a3b", "title": "DeepFold: Efficient Multilinear Polynomial Commitment from Reed-Solomon Code and Its Application to Zero-knowledge Proofs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-yanpei", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Develops polynomial commitments with a demonstrated verifiable GPT-2 matrix-computation application.", "authors": "Yanpei Guo, Xuanming Liu, Kexi Huang, Wenjie Qu, Tianyang Tao, Jiaheng Zhang", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-yanpei", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1512, "author_names": [ "Yanpei Guo", "Xuanming Liu", "Kexi Huang", "Wenjie Qu", "Tianyang Tao", "Jiaheng Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-yanpei" }, { "key": "pe57acd92e2c4", "title": "Depth Gives a False Sense of Privacy: LLM Internal States Inversion", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/dong-tian", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Reconstructs private inputs from intermediate model representations.", "authors": "Tian Dong, Yan Meng, Shaofeng Li, Guoxing Chen, Zhen Liu, Haojin Zhu", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/dong-tian", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1714, "author_names": [ "Tian Dong", "Yan Meng", "Shaofeng Li", "Guoxing Chen", "Zhen Liu", "Haojin Zhu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/dong-tian" }, { "key": "p0eb372d09d73", "title": "Effective PII Extraction from LLMs through Augmented Few-Shot Learning", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/cheng-shuai", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Improves extraction of memorized personal information through demonstrations.", "authors": "Shuai Cheng, Shu Meng, Haitao Xu, Haoran Zhang, Shuai Hao, Chuan Yue, Wenrui Ma, Meng Han, Fan Zhang, Zhao Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/cheng-shuai", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1263, "author_names": [ "Shuai Cheng", "Shu Meng", "Haitao Xu", "Haoran Zhang", "Shuai Hao", "Chuan Yue", "Wenrui Ma", "Meng Han", "Fan Zhang", "Zhao Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/cheng-shuai" }, { "key": "pe42e52848927", "title": "EmbedX: Embedding-Based Cross-Trigger Backdoor Attack Against Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-nan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Constructs embedding-based backdoors with transferable triggers.", "authors": "Nan Yan, Yuqing Li, Xiong Wang, Jing Chen, Kun He, Bo Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-nan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1379, "author_names": [ "Nan Yan", "Yuqing Li", "Xiong Wang", "Jing Chen", "Kun He", "Bo Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-nan" }, { "key": "pf204b651a736", "title": "Evaluating LLM-based Personal Information Extraction and Countermeasures", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-yupei", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Evaluates personal-information extraction and candidate countermeasures.", "authors": "Yupei Liu, Yuqi Jia, Jinyuan Jia, Neil Zhenqiang Gong", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-yupei", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1217, "author_names": [ "Yupei Liu", "Yuqi Jia", "Jinyuan Jia", "Neil Zhenqiang Gong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-yupei" }, { "key": "pbdc31b2ae729", "title": "Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-lan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Benchmarks jailbreaks targeting task-level weaknesses.", "authors": "Lan Zhang, Xinben Gao, Liuyi Yao, Jinke Song, Yaliang Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-lan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1413, "author_names": [ "Lan Zhang", "Xinben Gao", "Liuyi Yao", "Jinke Song", "Yaliang Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-lan" }, { "key": "pbc53cd352bdb", "title": "Exploring User Security and Privacy Attitudes and Concerns Toward the Use of General-Purpose LLM Chatbots for Mental Health", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/kwesi", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Studies privacy and security concerns about mental-health chatbots.", "authors": "Jabari Kwesi, Jiaxun Cao, Riya Manchanda, Pardis Emami-Naeini", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/kwesi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1284, "author_names": [ "Jabari Kwesi", "Jiaxun Cao", "Riya Manchanda", "Pardis Emami-Naeini" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/kwesi" }, { "key": "p1737a4c7a865", "title": "Exposing the Guardrails: Reverse-Engineering and Jailbreaking Safety Filters in DALL·E Text-to-Image Pipelines", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/villa", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Reverse-engineers and bypasses safety filters in DALL·E generation pipelines.", "authors": "Corban Villa, Shujaat Mirza, Christina Pöpper", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/villa", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1466, "author_names": [ "Corban Villa", "Shujaat Mirza", "Christina Pöpper" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/villa" }, { "key": "pd051fbe24a73", "title": "Found in Translation: A Generative Language Modeling Approach to Memory Access Pattern Attacks", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/jia-grace", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses generative language modeling to reconstruct sensitive application accesses from confidential-computing page traces.", "authors": "Grace Jia, Alex Wong, Anurag Khandelwal", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/jia-grace", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1753, "author_names": [ "Grace Jia", "Alex Wong", "Anurag Khandelwal" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/jia-grace" }, { "key": "p453350c787b3", "title": "From Meme to Threat: On the Hateful Meme Understanding and Induced Hateful Content Generation in Open-Source Vision Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ma-yihan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Examines harmful-content generation induced through hateful memes.", "authors": "Yihan Ma, Xinyue Shen, Yiting Qu, Ning Yu, Michael Backes, Savvas Zannettou, Yang Zhang", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ma-yihan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1449, "author_names": [ "Yihan Ma", "Xinyue Shen", "Yiting Qu", "Ning Yu", "Michael Backes", "Savvas Zannettou", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/ma-yihan" }, { "key": "p46fe14282272", "title": "From Purity to Peril: Backdooring Merged Models From \"Harmless\" Benign Components", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-lijin", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Builds backdoored merged models from seemingly benign components.", "authors": "Lijin Wang, Jingjing Wang, Tianshuo Cong, Xinlei He, Zhan Qin, Xinyi Huang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-lijin", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1551, "author_names": [ "Lijin Wang", "Jingjing Wang", "Tianshuo Cong", "Xinlei He", "Zhan Qin", "Xinyi Huang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-lijin" }, { "key": "pc11f7ff53e5b", "title": "Game of Arrows: On the (In-)Security of Weight Obfuscation for On-Device TEE-Shielded LLM Partition Algorithms", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-pengli", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Tests weight obfuscation protecting partitioned on-device LLMs.", "authors": "Pengli Wang, Bingyou Dong, Yifeng Cai, Zheng Zhang, Junlin Liu, Huanran Xue, Ye Wu, Yao Zhang, Ziqi Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-pengli", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1822, "author_names": [ "Pengli Wang", "Bingyou Dong", "Yifeng Cai", "Zheng Zhang", "Junlin Liu", "Huanran Xue", "Ye Wu", "Yao Zhang", "Ziqi Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-pengli" }, { "key": "pdfe051a48c52", "title": "Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/akkus", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Shows privacy risks surviving fine-tuning on generated data.", "authors": "Atilla Akkus, Masoud Poorghaffar Aghdam, Mingjie Li, Junjie Chu, Michael Backes, Yang Zhang, Sinem Sav", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/akkus", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2010, "author_names": [ "Atilla Akkus", "Masoud Poorghaffar Aghdam", "Mingjie Li", "Junjie Chu", "Michael Backes", "Yang Zhang", "Sinem Sav" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/akkus" }, { "key": "pdc87d91c7a98", "title": "GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/meng", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses gradients to evade detectors of AI-generated text.", "authors": "Wenlong Meng, Shuguo Fan, Chengkun Wei, Min Chen, Yuwei Li, Yuanchao Zhang, Zhikun Zhang, Wenzhi Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/meng", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1489, "author_names": [ "Wenlong Meng", "Shuguo Fan", "Chengkun Wei", "Min Chen", "Yuwei Li", "Yuanchao Zhang", "Zhikun Zhang", "Wenzhi Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/meng" }, { "key": "pc9d3a99ad429", "title": "Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/russinovich", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Escalates benign-looking conversations into harmful requests over multiple turns.", "authors": "Mark Russinovich, Ahmed Salem, Ronen Eldan", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/russinovich", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1594, "author_names": [ "Mark Russinovich", "Ahmed Salem", "Ronen Eldan" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/russinovich" }, { "key": "p79fd2c66d54b", "title": "HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/shen", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Evaluates hate-speech detectors against model-generated campaigns.", "authors": "Xinyue Shen, Yixin Wu, Yiting Qu, Michael Backes, Savvas Zannettou, Yang Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/shen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1514, "author_names": [ "Xinyue Shen", "Yixin Wu", "Yiting Qu", "Michael Backes", "Savvas Zannettou", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/shen" }, { "key": "p4d10f116fb03", "title": "I Cannot Write This Because It Violates Our Content Policy\": Understanding Content Moderation Policies and User Experiences in Generative AI Products", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-lan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Studies generative AI content policies and users' moderation experiences.", "authors": "Lan Gao, Oscar Chen, Rachel Lee, Nick Feamster, Chenhao Tan, Marshini Chetty", "doi": "", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-lan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1142, "author_names": [ "Lan Gao", "Oscar Chen", "Rachel Lee", "Nick Feamster", "Chenhao Tan", "Marshini Chetty" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-lan" }, { "key": "peeeb8511a2e1", "title": "I Know What You Said: Unveiling Hardware Cache Side-Channels in Local Large Language Model Inference", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-zibo", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Exploits hardware cache leakage during local LLM inference.", "authors": "Zibo Gao, Junjie Hu, Feng Guo, Yixin Zhang, Yinglong Han, Siyuan Liu, Haiyang Li, Zhiqiang Lv", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-zibo", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1420, "author_names": [ "Zibo Gao", "Junjie Hu", "Feng Guo", "Yixin Zhang", "Yinglong Han", "Siyuan Liu", "Haiyang Li", "Zhiqiang Lv" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gao-zibo" }, { "key": "p875c0816863a", "title": "JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-shenyi", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Manipulates activated concepts to defend against jailbreaks.", "authors": "Shenyi Zhang, Yuchen Zhai, Keyan Guo, Hongxin Hu, Shengnan Guo, Zheng Fang, Lingchen Zhao, Chao Shen, Cong Wang, Qian Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-shenyi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1820, "author_names": [ "Shenyi Zhang", "Yuchen Zhai", "Keyan Guo", "Hongxin Hu", "Shengnan Guo", "Zheng Fang", "Lingchen Zhao", "Chao Shen", "Cong Wang", "Qian Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-shenyi" }, { "key": "pad4c4f48efab", "title": "LightShed: Defeating Perturbation-based Image Copyright Protections", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/foerster", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Removes perturbation-based image copyright protections, exposing protected images to unauthorized generative-model use.", "authors": "Hanna Foerster, Sasha Behrouzi, Phillip Rieger, Murtuza Jadliwala, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/foerster", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1453, "author_names": [ "Hanna Foerster", "Sasha Behrouzi", "Phillip Rieger", "Murtuza Jadliwala", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/foerster" }, { "key": "paa101742ff01", "title": "LLMmap: Fingerprinting for Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/pasquini", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Fingerprints the model underlying an LLM service.", "authors": "Dario Pasquini, Evgenios M. Kornaropoulos, Giuseppe Ateniese", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/pasquini", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1025, "author_names": [ "Dario Pasquini", "Evgenios M. Kornaropoulos", "Giuseppe Ateniese" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/pasquini" }, { "key": "p0ef6d3c281a3", "title": "Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/shafran", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Poisons retrieval with documents that prevent useful answers.", "authors": "Avital Shafran, Roei Schuster, Vitaly Shmatikov", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/shafran", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1123, "author_names": [ "Avital Shafran", "Roei Schuster", "Vitaly Shmatikov" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/shafran" }, { "key": "p3a220802ef0c", "title": "Make Agent Defeat Agent: Automatic Detection of Taint-Style Vulnerabilities in LLM-based Agents", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-fengyu", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses adversarial agents to detect taint-style agent vulnerabilities.", "authors": "Fengyu Liu, Yuan Zhang, Jiaqi Luo, Jiarun Dai, Tian Chen, Letian Yuan, Zhengmin Yu, Youkun Shi, Ke Li, Chengyuan Zhou, Hao Chen, Min Yang", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Agents & permissions", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-fengyu", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1475, "author_names": [ "Fengyu Liu", "Yuan Zhang", "Jiaqi Luo", "Jiarun Dai", "Tian Chen", "Letian Yuan", "Zhengmin Yu", "Youkun Shi", "Ke Li", "Chengyuan Zhou", "Hao Chen", "Min Yang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/liu-fengyu" }, { "key": "p3215590e6749", "title": "Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Studies conversational manipulation that elicits users' personal information.", "authors": "Xiao Zhan, Juan Carlos Carrillo, William Seymour, Jose Such", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1475, "author_names": [ "Xiao Zhan", "Juan Carlos Carrillo", "William Seymour", "Jose Such" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhan" }, { "key": "p3dff5b57aa6c", "title": "Membership Inference Attacks Against Vision-Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/hu-yuke", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Tests training-membership leakage from vision-language models.", "authors": "Yuke Hu, Zheng Li, Zhihao Liu, Yang Zhang, Zhan Qin, Kui Ren, Chun Chen", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/hu-yuke", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1311, "author_names": [ "Yuke Hu", "Zheng Li", "Zhihao Liu", "Yang Zhang", "Zhan Qin", "Kui Ren", "Chun Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/hu-yuke" }, { "key": "pea5a63bc8510", "title": "Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/yu-jiahao", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Investigates weaknesses near aligned models' refusal boundaries.", "authors": "Jiahao Yu, Haozheng Luo, Jerry Yao-Chieh Hu, Yan Chen, Wenbo Guo, Han Liu, Xinyu Xing", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yu-jiahao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1563, "author_names": [ "Jiahao Yu", "Haozheng Luo", "Jerry Yao-Chieh Hu", "Yan Chen", "Wenbo Guo", "Han Liu", "Xinyu Xing" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yu-jiahao" }, { "key": "pc2c24a2de5af", "title": "Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yining", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Manipulates multimodal attention to induce hallucinations.", "authors": "Yining Wang, Mi Zhang, Junjie Sun, Chenyue Wang, Min Yang, Hui Xue, Jialing Tao, Ranjie Duan, Jiexi Liu", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yining", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1309, "author_names": [ "Yining Wang", "Mi Zhang", "Junjie Sun", "Chenyue Wang", "Min Yang", "Hui Xue", "Jialing Tao", "Ranjie Duan", "Jiexi Liu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yining" }, { "key": "pf9b4fdf0669b", "title": "On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-generation", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Studies how benign-looking prompts can induce unsafe image generation.", "authors": "Yixin Wu, Ning Yu, Michael Backes, Yun Shen, Yang Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-generation", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 976, "author_names": [ "Yixin Wu", "Ning Yu", "Michael Backes", "Yun Shen", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-generation" }, { "key": "p8890f47febaf", "title": "PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-xueluan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses fuzz testing to produce stealthy jailbreaks.", "authors": "Xueluan Gong, Mingzhe Li, Yilin Zhang, Fengyuan Ran, Chen Chen, Yanjiao Chen, Qian Wang, Kwok-Yan Lam", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-xueluan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1899, "author_names": [ "Xueluan Gong", "Mingzhe Li", "Yilin Zhang", "Fengyuan Ran", "Chen Chen", "Yanjiao Chen", "Qian Wang", "Kwok-Yan Lam" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-xueluan" }, { "key": "pc5ce48aff950", "title": "PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zou-poisonedrag", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Corrupts RAG knowledge through attacker-supplied documents.", "authors": "Wei Zou, Runpeng Geng, Binghui Wang, Jinyuan Jia", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zou-poisonedrag", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1635, "author_names": [ "Wei Zou", "Runpeng Geng", "Binghui Wang", "Jinyuan Jia" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zou-poisonedrag" }, { "key": "p8e737271bec9", "title": "Pretender: Universal Active Defense against Diffusion Finetuning Attacks", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/sun-zekun", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Defends images against unauthorized diffusion-model fine-tuning.", "authors": "Zekun Sun, Zijian Liu, Shouling Ji, Chenhao Lin, Na Ruan", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/sun-zekun", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1707, "author_names": [ "Zekun Sun", "Zijian Liu", "Shouling Ji", "Chenhao Lin", "Na Ruan" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/sun-zekun" }, { "key": "pd40a55b5f2b8", "title": "PrivacyXray: Detecting Privacy Breaches in LLMs through Semantic Consistency and Probability Certainty", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-jinwen", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Detects privacy leakage using semantic and confidence signals.", "authors": "Jinwen He, Yiyang Lu, Zijin Lin, Kai Chen, Yue Zhao", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-jinwen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1636, "author_names": [ "Jinwen He", "Yiyang Lu", "Zijin Lin", "Kai Chen", "Yue Zhao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-jinwen" }, { "key": "pabad596c3753", "title": "Private Investigator: Extracting Personally Identifiable Information from Large Language Models Using Optimized Prompts", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/keum", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Optimizes prompts to extract personally identifiable information.", "authors": "Seongho Keum, Dongwon Shin, Leo Marchyok, Sanghyun Hong, Sooel Son", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/keum", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1498, "author_names": [ "Seongho Keum", "Dongwon Shin", "Leo Marchyok", "Sanghyun Hong", "Sooel Son" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/keum" }, { "key": "p256a3cf940d8", "title": "Prompt Obfuscation for Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/pape", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Obfuscates prompts to protect their contents during model use.", "authors": "David Pape, Sina Mavali, Thorsten Eisenhofer, Lea Schönherr", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/pape", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1655, "author_names": [ "David Pape", "Sina Mavali", "Thorsten Eisenhofer", "Lea Schönherr" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/pape" }, { "key": "pc7dccd118deb", "title": "Provably Robust Multi-bit Watermarking for AI-generated Text", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-watermarking", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Encodes multiple watermark bits with robustness guarantees.", "authors": "Wenjie Qu, Wengrui Zheng, Tianyang Tao, Dong Yin, Yanze Jiang, Zhihua Tian, Wei Zou, Jinyuan Jia, Jiaheng Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-watermarking", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1616, "author_names": [ "Wenjie Qu", "Wengrui Zheng", "Tianyang Tao", "Dong Yin", "Yanze Jiang", "Zhihua Tian", "Wei Zou", "Jinyuan Jia", "Jiaheng Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-watermarking" }, { "key": "p8a6ebb4e4f9c", "title": "PRSA: Prompt Stealing Attacks against Real-World Prompt Services", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/yang-yong", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Reconstructs proprietary prompts from deployed prompt services.", "authors": "Yong Yang, Changjiang Li, Qingming Li, Oubo Ma, Haoyu Wang, Zonghui Wang, Yandong Gao, Wenzhi Chen, Shouling Ji", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yang-yong", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1884, "author_names": [ "Yong Yang", "Changjiang Li", "Qingming Li", "Oubo Ma", "Haoyu Wang", "Zonghui Wang", "Yandong Gao", "Wenzhi Chen", "Shouling Ji" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yang-yong" }, { "key": "pa49d40436c75", "title": "Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/naderloui", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Evaluates unlearning efficacy and privacy per example through a likelihood-based inference attack.", "authors": "Nima Naderloui, Shenao Yan, Binghui Wang, Jie Fu, Wendy Hui Wang, Weiran Liu, Yuan Hong", "author_names": [ "Nima Naderloui", "Shenao Yan", "Binghui Wang", "Jie Fu", "Wendy Hui Wang", "Weiran Liu", "Yuan Hong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/naderloui", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/naderloui", "abstract_characters": 1585, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p4543999823fc", "title": "Refusal Is Not an Option: Unlearning Safety Alignment of Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/song-minkyoo", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Removes safety alignment using machine unlearning.", "authors": "Minkyoo Song, Hanna Kim, Jaehan Kim, Seungwon Shin, Sooel Son", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/song-minkyoo", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1906, "author_names": [ "Minkyoo Song", "Hanna Kim", "Jaehan Kim", "Seungwon Shin", "Sooel Son" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/song-minkyoo" }, { "key": "p27f1bb0c389b", "title": "Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-yuqin", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Exploits ciphertext frequency patterns in confidential VMs to expose sensitive values, including sparse-LLM tokens.", "authors": "Yuqin Yan, Wei Huang, Ilya Grishchenko, Gururaj Saileshwar, Aastha Mehta, David Lie", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-yuqin", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1160, "author_names": [ "Yuqin Yan", "Wei Huang", "Ilya Grishchenko", "Gururaj Saileshwar", "Aastha Mehta", "David Lie" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/yan-yuqin" }, { "key": "p05ce4b9ccea2", "title": "SEAF: Secure Evaluation on Activation Functions with Dynamic Precision for Secure Two-Party Inference", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-hao-seaf", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses dynamic precision to accelerate secure activation evaluation and end-to-end private BERT inference.", "authors": "Hao Guo, Zhaoqian Liu, Ximing Fu, Zhusen Liu", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-hao-seaf", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1218, "author_names": [ "Hao Guo", "Zhaoqian Liu", "Ximing Fu", "Zhusen Liu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/guo-hao-seaf" }, { "key": "p3308b0d41408", "title": "Self-interpreting Adversarial Images", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-tingwei", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Embeds hidden interpretation instructions in apparently natural images.", "authors": "Tingwei Zhang, Collin Zhang, John X. Morris, Eugene Bagdasarian, Vitaly Shmatikov", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-tingwei", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1117, "author_names": [ "Tingwei Zhang", "Collin Zhang", "John X. Morris", "Eugene Bagdasarian", "Vitaly Shmatikov" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-tingwei" }, { "key": "p83eec9b05afd", "title": "SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-xunguang", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses LLM-based self-defense against jailbreaks.", "authors": "Xunguang Wang, Daoyuan Wu, Zhenlan Ji, Zongjie Li, Pingchuan Ma, Shuai Wang, Yingjiu Li, Yang Liu, Ning Liu, Juergen Rahmel", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-xunguang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1667, "author_names": [ "Xunguang Wang", "Daoyuan Wu", "Zhenlan Ji", "Zongjie Li", "Pingchuan Ma", "Shuai Wang", "Yingjiu Li", "Yang Liu", "Ning Liu", "Juergen Rahmel" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-xunguang" }, { "key": "p82e7445fd12c", "title": "SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/nam-slothe", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Optimizes encrypted nonlinear-function evaluation to improve private BERT inference accuracy and latency.", "authors": "Kevin Nam, Youyeon Joo, Seungjin Ha, Yunheung Paek", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/nam-slothe", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1232, "author_names": [ "Kevin Nam", "Youyeon Joo", "Seungjin Ha", "Yunheung Paek" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/nam-slothe" }, { "key": "pb6f6eada783b", "title": "SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-kaiyuan", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Obfuscates fine-tuning data to reduce membership leakage.", "authors": "Kaiyuan Zhang, Siyuan Cheng, Hanxi Guo, Yuetian Chen, Zian Su, Shengwei An, Yuntao Du, Charles Fleming, Ashish Kundu, Xiangyu Zhang, Ninghui Li", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-kaiyuan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1131, "author_names": [ "Kaiyuan Zhang", "Siyuan Cheng", "Hanxi Guo", "Yuetian Chen", "Zian Su", "Shengwei An", "Yuntao Du", "Charles Fleming", "Ashish Kundu", "Xiangyu Zhang", "Ninghui Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-kaiyuan" }, { "key": "p0ff0f3cb6b93", "title": "SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/chung-yunsung", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Reviews privacy and utility tradeoffs in synthetic image generation.", "authors": "Yunsung Chung, Yunbei Zhang, Nassir Marrouche, Jihun Hamm", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/chung-yunsung", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1403, "author_names": [ "Yunsung Chung", "Yunbei Zhang", "Nassir Marrouche", "Jihun Hamm" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/chung-yunsung" }, { "key": "pb645d86be8a2", "title": "SparSamp: Efficient Provably Secure Steganography Based on Sparse Sampling", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yaofei", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Provides provably secure text steganography using sparse sampling.", "authors": "Yaofei Wang, Gang Pei, Kejiang Chen, Jinyang Ding, Chao Pan, Weilong Pang, Donghui Hu, Weiming Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yaofei", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1253, "author_names": [ "Yaofei Wang", "Gang Pei", "Kejiang Chen", "Jinyang Ding", "Chao Pan", "Weilong Pang", "Donghui Hu", "Weiming Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yaofei" }, { "key": "pe57aecf0ad30", "title": "StruQ: Defending Against Prompt Injection with Structured Queries", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/chen-sizhe", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Separates instructions from data to resist prompt injection.", "authors": "Sizhe Chen, Julien Piet, Chawin Sitawarin, David Wagner", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/chen-sizhe", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1484, "author_names": [ "Sizhe Chen", "Julien Piet", "Chawin Sitawarin", "David Wagner" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/chen-sizhe" }, { "key": "p5a6586d94328", "title": "Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-auditing", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Audits downstream use of synthetic data generated by LLMs.", "authors": "Yixin Wu, Ziqing Yang, Yun Shen, Michael Backes, Yang Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-auditing", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1808, "author_names": [ "Yixin Wu", "Ziqing Yang", "Yun Shen", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wu-yixin-auditing" }, { "key": "p9bbd3bca7a87", "title": "Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-yuyang", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Poisons retrieval to steer opinions on selected topics.", "authors": "Yuyang Gong, Zhuo Chen, Jiawei Liu, Miaokun Chen, Fengchang Yu, Wei Lu, XiaoFeng Wang, Xiaozhong Liu", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection", "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-yuyang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1461, "author_names": [ "Yuyang Gong", "Zhuo Chen", "Jiawei Liu", "Miaokun Chen", "Fengchang Yu", "Wei Lu", "XiaoFeng Wang", "Xiaozhong Liu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/gong-yuyang" }, { "key": "p096e11df72cb", "title": "Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-yu", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Infers membership using limited model-output access.", "authors": "Yu He, Boheng Li, Liu Liu, Zhongjie Ba, Wei Dong, Yiming Li, Zhan Qin, Kui Ren, Chun Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-yu", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1985, "author_names": [ "Yu He", "Boheng Li", "Liu Liu", "Zhongjie Ba", "Wei Dong", "Yiming Li", "Zhan Qin", "Kui Ren", "Chun Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/he-yu" }, { "key": "p5fba7e737a66", "title": "Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-cheng-long", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Measures whether requested sample-level unlearning has been completed.", "authors": "Cheng-Long Wang, Qi Li, Zihang Xiang, Yinzhi Cao, Di Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Unlearning & fine-tuning", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-cheng-long", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1439, "author_names": [ "Cheng-Long Wang", "Qi Li", "Zihang Xiang", "Yinzhi Cao", "Di Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-cheng-long" }, { "key": "pea9931e473b6", "title": "TracLLM: A Generic Framework for Attributing Long Context LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yanting", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Attributes ownership of long-context language models.", "authors": "Yanting Wang, Wei Zou, Runpeng Geng, Jinyuan Jia", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yanting", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1741, "author_names": [ "Yanting Wang", "Wei Zou", "Runpeng Geng", "Jinyuan Jia" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yanting" }, { "key": "pe357653ed83a", "title": "TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/krauss", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses paired prompts to bypass safety alignment.", "authors": "Torsten Krauß, Hamid Dashtbani, Alexandra Dmitrienko", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/krauss", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1509, "author_names": [ "Torsten Krauß", "Hamid Dashtbani", "Alexandra Dmitrienko" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/krauss" }, { "key": "pef6f78081475", "title": "Unlocking the Power of Differentially Private Zeroth-order Optimization for Fine-tuning LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/bao-ergute", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Develops differentially private zeroth-order LLM fine-tuning.", "authors": "Ergute Bao, Yangfan Jiang, Fei Wei, Xiaokui Xiao, Zitao Li, Yaliang Li, Bolin Ding", "doi": "", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/bao-ergute", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1376, "author_names": [ "Ergute Bao", "Yangfan Jiang", "Fei Wei", "Xiaokui Xiao", "Zitao Li", "Yaliang Li", "Bolin Ding" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/bao-ergute" }, { "key": "p6db6e3d9d5b8", "title": "Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/luo-zeren", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Measures unsafe responses in LLM-based web search and evaluates mitigations.", "authors": "Zeren Luo, Zifan Peng, Yule Liu, Zhen Sun, Mingchen Li, Jingyi Zheng, Xinlei He", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/luo-zeren", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1579, "author_names": [ "Zeren Luo", "Zifan Peng", "Yule Liu", "Zhen Sun", "Mingchen Li", "Jingyi Zheng", "Xinlei He" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/luo-zeren" }, { "key": "p65c908a106cd", "title": "USD: NSFW Content Detection for Text-to-Image Models via Scene Graph", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-yuyang", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Uses scene graphs to detect unsafe text-to-image content.", "authors": "Yuyang Zhang, Kangjie Chen, Xudong Jiang, Jiahui Wen, Yihui Jin, Ziyou Liang, Yihao Huang, Run Wang, Lina Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-yuyang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1567, "author_names": [ "Yuyang Zhang", "Kangjie Chen", "Xudong Jiang", "Jiahui Wen", "Yihui Jin", "Ziyou Liang", "Yihao Huang", "Run Wang", "Lina Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/zhang-yuyang" }, { "key": "p5c4f062ad4c2", "title": "Watch the Watchers! On the Security Risks of Robustness-Enhancing Diffusion Models", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/li-changjiang", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Backdoors diffusion models used for adversarial purification to undermine their robustness guarantees.", "authors": "Changjiang Li, Ren Pang, Bochuan Cao, Jinghui Chen, Fenglong Ma, Shouling Ji, Ting Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/li-changjiang", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1253, "author_names": [ "Changjiang Li", "Ren Pang", "Bochuan Cao", "Jinghui Chen", "Fenglong Ma", "Shouling Ji", "Ting Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/li-changjiang" }, { "key": "p80490bcf23bd", "title": "We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/spracklen", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Measures package hallucinations and their software supply-chain implications.", "authors": "Joseph Spracklen, Raveen Wijewickrama, A H M Nazmus Sakib, Anindya Maiti, Bimal Viswanath, Murtuza Jadliwala", "doi": "", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/spracklen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1779, "author_names": [ "Joseph Spracklen", "Raveen Wijewickrama", "A H M Nazmus Sakib", "Anindya Maiti", "Bimal Viswanath", "Murtuza Jadliwala" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/spracklen" }, { "key": "p1583d43df696", "title": "When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/kim-hanna", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Investigates threats introduced when LLMs access the web.", "authors": "Hanna Kim, Minkyoo Song, Seung Ho Na, Seungwon Shin, Kimin Lee", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/kim-hanna", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1488, "author_names": [ "Hanna Kim", "Minkyoo Song", "Seung Ho Na", "Seungwon Shin", "Kimin Lee" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/kim-hanna" }, { "key": "p6d5a80ef6872", "title": "zkGPT: An Efficient Non-interactive Zero-knowledge Proof Framework for LLM Inference", "year": 2025, "venue": "USENIX Security", "edition": "usenix-2025", "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-zkgpt", "source": "https://www.usenix.org/conference/usenixsecurity25/technical-sessions", "summary": "Produces noninteractive proofs of LLM inference correctness.", "authors": "Wenjie Qu, Yijun Sun, Xuanming Liu, Tao Lu, Yanpei Guo, Kai Chen, Jiaheng Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-zkgpt", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1222, "author_names": [ "Wenjie Qu", "Yijun Sun", "Xuanming Liu", "Tao Lu", "Yanpei Guo", "Kai Chen", "Jiaheng Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity25/presentation/qu-zkgpt" }, { "key": "p6807ef83ede5", "title": "``Do Anything Now'': Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Analyzes 1,405 real-world jailbreak prompts and their communities, then evaluates persistent safeguard bypasses across six language models.", "authors": "Xinyue Shen, Zeyuan Chen, Michael Backes, Yun Shen, Yang Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2308.03825", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Complete abstract read; title and ordered authors corroborated against the official CCS 2024 listing. Directly addresses LLM security, safety or generated-content provenance.", "added_date": "", "abstract_characters": 1436, "author_names": [ "Xinyue Shen", "Zeyuan Chen", "Michael Backes", "Yun Shen", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "a4952764a83d587b3ad7791fc2d36ee729e2c4a4ca64ec093001deb81c146ccc" }, { "key": "pdc145b0b8ebc", "title": "A Causal Explainable Guardrails for Large Language Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690217", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Provides causally explainable guardrails for LLM behavior.", "authors": "Zhixuan Chu, Yan Wang, Longfei Li, Zhibo Wang, Zhan Qin, Kui Ren", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a658fd83058ee4727ae41317ec5ced0dd7c2a13c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 959, "author_names": [ "Zhixuan Chu", "Yan Wang", "Longfei Li", "Zhibo Wang", "Zhan Qin", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p57cbdc843e88", "title": "Air Gap: Protecting Privacy-Conscious Conversational Agents", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Restricts conversational agents to task-relevant user data to defend against third-party context hijacking and unintended private-information disclosure.", "authors": "Eugene Bagdasaryan, Ren Yi, Sahra Ghalebikesabi, Peter Kairouz, Marco Gruteser, Sewoong Oh, Borja Balle, Daniel Ramage", "doi": "", "areas": [ "Agent", "LLM" ], "topics": [ "Privacy & inference", "Agents & permissions", "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2405.05175v1", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Direct agent privacy defense against adversarial third-party context hijacking; arXiv v1 exactly matches the official title and all eight ordered authors.", "added_date": "", "abstract_characters": 1120, "author_names": [ "Eugene Bagdasaryan", "Ren Yi", "Sahra Ghalebikesabi", "Peter Kairouz", "Marco Gruteser", "Sewoong Oh", "Borja Balle", "Daniel Ramage" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "63175e0861dcabe3184ffa556f182d6ac642ce7ba6f5e9a58195ffa3b1be1582" }, { "key": "p7a01baecca0f", "title": "Demystifying RCE Vulnerabilities in LLM-Integrated Apps", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "LLMSmith combines static call-chain analysis with prompt-based testing to find and exploit code-execution flaws in LLM frameworks and applications.", "authors": "Tong Liu, Zizhuang Deng, Guozhu Meng, Yuekang Li, Kai Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security", "Prompt injection", "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2309.02926", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Complete abstract read; exact title and ordered authors match the official CCS 2024 listing and arXiv v4. Studies prompt-injection-triggered code execution in LLM-integrated applications.", "added_date": "", "abstract_characters": 1877, "author_names": [ "Tong Liu", "Zizhuang Deng", "Guozhu Meng", "Yuekang Li", "Kai Chen" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "15878f49b1a109038f761e25faf89be957141953e1215f2e4a8b66284d9066b9" }, { "key": "p1426ffff4b49", "title": "Dye4AI: Assuring Data Boundary on Generative AI Services", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670299", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Enforces boundaries on data used by generative AI services.", "authors": "Shu Wang, Kun Sun, Yan Zhai", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/711dd9fb30d31ecd6e2da24873de5293910b36d2", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1612, "author_names": [ "Shu Wang", "Kun Sun", "Yan Zhai" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pf46aba67bedb", "title": "ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Coordinates unlearning with inference serving to reduce stale-service and delayed-deletion privacy risks.", "authors": "Yuke Hu, Jian Lou, Jiaqi Liu, Wangze Ni, Feng Lin, Zhan Qin, Kui Ren", "author_names": [ "Yuke Hu", "Jian Lou", "Jiaqi Liu", "Wangze Ni", "Feng Lin", "Zhan Qin", "Kui Ren" ], "author_source": "https://arxiv.org/abs/2311.16136", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2311.16136", "abstract_characters": 1798, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-unlearning privacy foundation; not LLM-specific.", "review_note": "All-years recheck: author preprint abstract reviewed and matched to official conference title.", "added_date": "2026-10-23" }, { "key": "pa636ac9982b8", "title": "Fast and Accurate Homomorphic Softmax Evaluation", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670369", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Develops scalable homomorphic Softmax algorithms and evaluates encrypted Softmax operations for LLaMA, supporting private LLM inference.", "authors": "Wonhee Cho, Guillaume Hanrot, Taeseong Kim, Minje Park, Damien Stehlé", "doi": "10.1145/3658644.3670369", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/41277a90dd659c085fb9eb593b1ee786ac2858bc", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 2799, "author_names": [ "Wonhee Cho", "Guillaume Hanrot", "Taeseong Kim", "Minje Park", "Damien Stehlé" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p26586c0d0136", "title": "GenderCARE: A Comprehensive Framework for Assessing and Reducing Gender Bias in Large Language Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670284", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Evaluates and reduces gender bias in LLMs.", "authors": "Kunsheng Tang, Wenbo Zhou, Jie Zhang, Aishan Liu, Gelei Deng, Shuai Li, Peigui Qi, Weiming Zhang, Tianwei Zhang, NengHai Yu", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/be3690748239e85e164a0f9eed3b4db7eb4407b0", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1874, "author_names": [ "Kunsheng Tang", "Wenbo Zhou", "Jie Zhang", "Aishan Liu", "Gelei Deng", "Shuai Li", "Peigui Qi", "Weiming Zhang", "Tianwei Zhang", "NengHai Yu" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pe286fb8af421", "title": "Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolution", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690288", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Examines how model evolution affects image-generation safety, bias, and authenticity.", "authors": "Yixin Wu, Yun Shen, Michael Backes, Yang Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/6d9c5cbee7b3388895b47eb0846c29460a9aad7a", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1424, "author_names": [ "Yixin Wu", "Yun Shen", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pc7e31bdb21e4", "title": "Legilimens: Practical and Unified Content Moderation for Large Language Model Services", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690322", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Moderates harmful content in deployed language-model services.", "authors": "Jialin Wu, Jiangyi Deng, Shengyuan Pang, Yanjiao Chen, Jiayang Xu, Xinfeng Li, Wenyuan Xu", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/45af32e2e65d828b28402e1c89546512ac3d1bbe", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1498, "author_names": [ "Jialin Wu", "Jiangyi Deng", "Shengyuan Pang", "Yanjiao Chen", "Jiayang Xu", "Xinfeng Li", "Wenyuan Xu" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p23e30e0a343d", "title": "Membership Inference Attacks Against In-Context Learning", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690306", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Infers whether examples appeared in an LLM in-context prompt from generated text alone and evaluates data, instruction and output defenses.", "authors": "Rui Wen, Zheng Li, Michael Backes, Yang Zhang", "doi": "10.1145/3658644.3690306", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/6e8e815f6f0c5370e86651ed959f1c77657d607b", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1255, "author_names": [ "Rui Wen", "Zheng Li", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pmgtbench2024", "title": "MGTBench: Benchmarking Machine-Generated Text Detection", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670344", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Benchmarks generated-text detection and attribution across language models, datasets, and adversarial text transformations.", "authors": "Xinlei He, Xinyue Shen, Zeyuan Chen, Michael Backes, Yang Zhang", "author_names": [ "Xinlei He", "Xinyue Shen", "Zeyuan Chen", "Michael Backes", "Yang Zhang" ], "author_source": "https://arxiv.org/abs/2303.14822", "doi": "10.1145/3658644.3670344", "areas": [ "LLM" ], "topics": [ "Detection & robustness", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2303.14822", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Author abstract reviewed and publication year verified independently against the official CCS 2024 listing.", "added_date": "2026-10-23", "abstract_characters": 1858 }, { "key": "p10700cf719ac", "title": "Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policies", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690327", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Applies detailed context-based moderation policies to diffusion generation.", "authors": "Peiran Wang, Qiyu Li, Longxuan Yu, Ziyao Wang, Ang Li, Haojian Jin", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/69ba51d375ac140f5a4ac3e6e08c1866f3cd90bd", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1354, "author_names": [ "Peiran Wang", "Qiyu Li", "Longxuan Yu", "Ziyao Wang", "Ang Li", "Haojian Jin" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p8eb171a1c13f", "title": "On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writing", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Introduces GPABench2 and CheckGPT to benchmark detection of generated and edited academic abstracts and evaluate detector transferability and robustness.", "authors": "Zeyan Liu, Zijun Yao, Fengjun Li, Bo Luo", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness", "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2306.05524", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Complete abstract read; title and ordered authors corroborated against the official CCS 2024 listing. Directly addresses LLM security, safety or generated-content provenance.", "added_date": "", "abstract_characters": 1492, "author_names": [ "Zeyan Liu", "Zijun Yao", "Fengjun Li", "Bo Luo" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "fb4753c6979b46c44db90ba5bbd5b11342947fdc1e34014f54ecf8991b589e55" }, { "key": "p1501671454b8", "title": "Optimization-based Prompt Injection Attack to LLM-as-a-Judge", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690291", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Optimizes prompt injections targeting LLM judges.", "authors": "Jiawen Shi, Zenghui Yuan, Yinuo Liu, Yue Huang, Pan Zhou, Lichao Sun, Neil Gong", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e56f14ced9f7ce344ed14bdcb46860ccac72ac83", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1328, "author_names": [ "Jiawen Shi", "Zenghui Yuan", "Yinuo Liu", "Yue Huang", "Pan Zhou", "Lichao Sun", "Neil Gong" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p59122ff46ce5", "title": "Organic or Diffused: Can We Distinguish Human Art from AI-generated Images?", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670306", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Tests whether human artwork can be distinguished from generated images.", "authors": "Anna Yoo Jeong Ha, Josephine Passananti, Ronik Bhaskar, Shawn Shan, Reid Southen, Haitao Zheng, Ben Y. Zhao", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/dd44a086729e962af046aff808385b523fbcd856", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1558, "author_names": [ "Anna Yoo Jeong Ha", "Josephine Passananti", "Ronik Bhaskar", "Shawn Shan", "Reid Southen", "Haitao Zheng", "Ben Y. Zhao" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p3d92d01670c2", "title": "PLeak: Prompt Leaking Attacks against Large Language Model Applications", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670370", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Extracts hidden prompts from LLM applications.", "authors": "Bo Hui, Haolin Yuan, Neil Gong, Philippe Burlina, Yinzhi Cao", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/59665f0126b3442edcf93ae58285b610b5fe9991", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1882, "author_names": [ "Bo Hui", "Haolin Yuan", "Neil Gong", "Philippe Burlina", "Yinzhi Cao" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pebe5789113df", "title": "PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690279", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Manipulates pretrained models to amplify later privacy leakage.", "authors": "Ruixuan Liu, Tianhao Wang, Yang Cao, Li Xiong", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/fe247e06d4371a67208a33c27caf0b34c4206829", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1750, "author_names": [ "Ruixuan Liu", "Tianhao Wang", "Yang Cao", "Li Xiong" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p2b041a38085f", "title": "ProFake: Detecting Deepfakes in the Wild against Quality Degradation with Progressive Quality-adaptive Learning", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690238", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Improves visual deepfake detection under real-world compression and quality degradation through progressive training.", "authors": "Huiyu Xu, Yaopeng Wang, Zhibo Wang, Zhongjie Ba, Wenxin Liu, Lu Jin, Haiqin Weng, Tao Wei, Kui Ren", "author_names": [ "Huiyu Xu", "Yaopeng Wang", "Zhibo Wang", "Zhongjie Ba", "Wenxin Liu", "Lu Jin", "Haiqin Weng", "Tao Wei", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/9accdd96f8f9b1c393aaca0965fc137ecc9c9647", "abstract_characters": 2181, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pfd19be02feb9", "title": "PromSec: Prompt Optimization for Secure Generation of Functional Source Code with Large Language Models (LLMs)", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690298", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Optimizes prompts for secure, functional code generation.", "authors": "Mahmoud Nazzal, Issa Khalil, Abdallah Khreishah, NhatHai Phan", "doi": "", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/c9eba8da86c21df1779f2b1458b9f8e5228b090c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 2356, "author_names": [ "Mahmoud Nazzal", "Issa Khalil", "Abdallah Khreishah", "NhatHai Phan" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p503107f5c302", "title": "Pulsar: Secure Steganography for Diffusion Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690218", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Provides secure information hiding using diffusion generation.", "authors": "Tushar M. Jois, Gabrielle Beck, Gabriel Kaptchuk", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/befcbef81ca1b6b7be46d292617e2760316e13e7", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1123, "author_names": [ "Tushar M. Jois", "Gabrielle Beck", "Gabriel Kaptchuk" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p36213905495d", "title": "SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670295", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Mitigates sexually explicit outputs from text-to-image models.", "authors": "Xinfeng Li, Yuchen Yang, Jiangyi Deng, Chen Yan, Yanjiao Chen, Xiaoyu Ji, Wenyuan Xu", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/970111f19cbb20af52a8a1772e8d4b36570b5679", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1305, "author_names": [ "Xinfeng Li", "Yuchen Yang", "Jiangyi Deng", "Chen Yan", "Yanjiao Chen", "Xiaoyu Ji", "Wenyuan Xu" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p4e1ea33eb4f8", "title": "SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "SurrogatePrompt automates substitutions in risky prompts using language and image modules to bypass text-to-image safety filters, reporting 88% success against Midjourney in its evaluation.", "authors": "Zhongjie Ba, Jieming Zhong, Jiachen Lei, Peng Cheng, Qinglong Wang, Zhan Qin, Zhibo Wang, Kui Ren", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2309.14122", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Directly studies adversarial bypass of text-to-image safety mechanisms; the full abstract supports inclusion in generative-model safety.", "added_date": "", "abstract_characters": 1300, "author_names": [ "Zhongjie Ba", "Jieming Zhong", "Jiachen Lei", "Peng Cheng", "Qinglong Wang", "Zhan Qin", "Zhibo Wang", "Kui Ren" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "e34b5b64d58de6b096588e75756e233b31b19622fdbecd40ae6efed67beb78b2" }, { "key": "p8e6a17e21bbd", "title": "The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Risks", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Janus uses fine-tuning to recover personally identifiable information forgotten during LLM pretraining, reporting over tenfold greater privacy risk than its baseline.", "authors": "Xiaoyi Chen, Siyuan Tang, Rui Zhu, Shijun Yan, Lei Jin, Zihao Wang, Liya Su, Zhikun Zhang, XiaoFeng Wang, Haixu Tang", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2310.15469", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Cloud review proposal; abstract retrieved and screened. Directly studies extraction of pretraining personal information through LLM fine-tuning interfaces; the full abstract supports inclusion in LLM privacy.", "added_date": "", "abstract_characters": 1460, "author_names": [ "Xiaoyi Chen", "Siyuan Tang", "Rui Zhu", "Shijun Yan", "Lei Jin", "Zihao Wang", "Liya Su", "Zhikun Zhang", "XiaoFeng Wang", "Haixu Tang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "abstract_sha256": "1af31742368f28cccdfeea43e01746864e1edce02d0b1f82f9594b10c6511fee" }, { "key": "p453a1e8a47b9", "title": "Uncovering Gradient Inversion Risks in Practical Language Model Training", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690292", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Reconstructs private text from language-model training gradients.", "authors": "Xinguo Feng, Zhongkui Ma, Zihan Wang, Chegne Eu Joe, Mengyao Ma, Alsharif Abuadbba, Guangdong Bai", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f5e188bf62ea4340cd78fbee2c3f97b315907395", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1364, "author_names": [ "Xinguo Feng", "Zhongkui Ma", "Zihan Wang", "Chegne Eu Joe", "Mengyao Ma", "Alsharif Abuadbba", "Guangdong Bai" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pf0cff25af109", "title": "Understanding Implosion in Text-to-Image Generative Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690205", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Investigates implosion failures in text-to-image generative models.", "authors": "Wenxin Ding, Cathy Yuanchen Li, Shawn Shan, Ben Y. Zhao, Haitao Zheng", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/98048df70d84f62ea0ef753675631bb147ae091d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1718, "author_names": [ "Wenxin Ding", "Cathy Yuanchen Li", "Shawn Shan", "Ben Y. Zhao", "Haitao Zheng" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pe8f90ee1adac", "title": "Unveiling the Vulnerability of Private Fine-Tuning in Split-Based Frameworks for Large Language Models: A Bidirectionally Enhanced Attack", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690295", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Attacks private fine-tuning in split-model architectures.", "authors": "Guanzhong Chen, Zhenghan Qin, Mingxin Yang, Yajie Zhou, Tao Fan, Tianyu Du, Zenglin Xu", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/64c354f76a2dd1825a2cf431cb2a1623021d874e", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1855, "author_names": [ "Guanzhong Chen", "Zhenghan Qin", "Mingxin Yang", "Yajie Zhou", "Tao Fan", "Tianyu Du", "Zenglin Xu" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pf8bb5dbe5703", "title": "ZeroFake: Zero-Shot Detection of Fake Images Generated and Edited by Text-to-Image Generation Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3690297", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Detects images generated or edited by text-to-image systems without target-specific training.", "authors": "Zeyang Sha, Yicong Tan, Mingjie Li, Michael Backes, Yang Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/cbf1cf177ea6c4be00fa697b39b6f2fccd6ba22e", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1731, "author_names": [ "Zeyang Sha", "Yicong Tan", "Mingjie Li", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "p36cb3bd8acb2", "title": "zkLLM: Zero Knowledge Proofs for Large Language Models", "year": 2024, "venue": "ACM CCS", "edition": "ccs-2024", "url": "https://doi.org/10.1145/3658644.3670334", "source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html", "summary": "Constructs zero-knowledge proofs of LLM computation.", "authors": "Haochen Sun, Jason Li, Hongyang Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Private & verifiable computation" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/2b811ec0e19346a5e2654e5189f3f9fe2230cd8d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1737, "author_names": [ "Haochen Sun", "Jason Li", "Hongyang Zhang" ], "author_source": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html" }, { "key": "pd9fa86c2e812", "title": "An Analysis of Recent Advances in Deepfake Image Detection in an Evolving Threat Landscape", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Tests synthetic-image detectors against customized generators and semantic evasion attacks.", "authors": "Sifat Muhammad Abdullah, Aravind Cheruvu, Shravya Kanchi, Taejoong Chung, Peng Gao, Murtuza Jadliwala, Bimal Viswanath", "doi": "https://doi.org/10.1109/SP54263.2024.00194", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/63e1d03d504bda4ebc08c61ea3a531e983ae8726", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1572, "author_names": [ "Sifat Muhammad Abdullah", "Aravind Cheruvu", "Shravya Kanchi", "Taejoong Chung", "Peng Gao", "Murtuza Jadliwala", "Bimal Viswanath" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p130f795da4b2", "title": "AVA: Inconspicuous Attribute Variation-based Adversarial Attack bypassing DeepFake Detection", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Changes inconspicuous semantic attributes of deepfake images to evade detection while remaining difficult for people to notice.", "authors": "Xiangtao Meng, Li Wang, Shanqing Guo, Lei Ju, Qingchuan Zhao", "author_names": [ "Xiangtao Meng", "Li Wang", "Shanqing Guo", "Lei Ju", "Qingchuan Zhao" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "doi": "https://doi.org/10.1109/SP54263.2024.00155", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a3e57f7cee3792584204677f9e62ed55a2b626a9", "abstract_characters": 1314, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p90489837e552", "title": "Backdooring Multimodal Learning", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Studies backdoors in multimodal representation learning.", "authors": "Xingshuo Han, Yutong Wu, Qingjie Zhang, Yuan Zhou, Yuan Xu, Han Qiu, Guowen Xu, Tianwei Zhang", "doi": "https://doi.org/10.1109/SP54263.2024.00031", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/d2ae82e545ba9afa8e5b4f4c270fed848f63afdb", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 2217, "author_names": [ "Xingshuo Han", "Yutong Wu", "Qingjie Zhang", "Yuan Zhou", "Yuan Xu", "Han Qiu", "Guowen Xu", "Tianwei Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p93587df0c924", "title": "BOLT: Privacy-Preserving, Accurate and Efficient Inference for Transformers", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Provides private, efficient transformer inference.", "authors": "Qi Pang, Jinhao Zhu, Helen Möllering, Wenting Zheng, Thomas Schneider", "doi": "https://doi.org/10.1109/SP54263.2024.00130", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0f7bbe9837026560a934de8a74d233678bd55f57", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 928, "author_names": [ "Qi Pang", "Jinhao Zhu", "Helen Möllering", "Wenting Zheng", "Thomas Schneider" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p98655d9dbac4", "title": "Combing for Credentials: Active Pattern Extraction from Smart Reply", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Extracts sensitive credential patterns from smart-reply systems.", "authors": "Bargav Jayaraman, Esha Ghosh, Melissa Chase, Sambuddha Roy, Wei Dai, David Evans, Huseyin A. Inan", "doi": "https://doi.org/10.1109/SP54263.2024.00041", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ab3da5ee7c7a920f084ee2d3b7255141cace4dc7", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1663, "author_names": [ "Bargav Jayaraman", "Esha Ghosh", "Melissa Chase", "Sambuddha Roy", "Wei Dai", "David Evans", "Huseyin A. Inan" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p57c7b8155c3d", "title": "FCert: Certifiably Robust Few-Shot Classification with Foundation Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Certifies few-shot foundation-model predictions against poisoned support examples in vision and text domains.", "authors": "Yanting Wang, Wei Zou, Jinyuan Jia", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2404.08631", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1365, "author_names": [ "Yanting Wang", "Wei Zou", "Jinyuan Jia" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p08d24ec891b2", "title": "Few-shot Unlearning", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Removes a target dataset’s influence using only a few identified examples, with model inversion to obtain proxy data.", "authors": "Youngsik Yoon, Jinhwan Nam, Hyojeong Yun, Jaeho Lee, Dongwoo Kim, Jungseul Ok", "author_names": [ "Youngsik Yoon", "Jinhwan Nam", "Hyojeong Yun", "Jaeho Lee", "Dongwoo Kim", "Jungseul Ok" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "doi": "https://doi.org/10.1109/SP54263.2024.00249", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e9d18b1fe2a081617c076cb0b58222463062bf0f", "abstract_characters": 1157, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pfa41aff31d0f", "title": "From Chatbots to Phishbots?: Phishing Scam Generation in Commercial Large Language Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Examines commercial models' ability to generate phishing scams.", "authors": "Sayak Saha Roy, Poojitha Thota, Krishna Vamsi Naragam, Shirin Nilizadeh", "doi": "https://doi.org/10.1109/SP54263.2024.00182", "areas": [ "LLM" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/9de002fec41b2298b1f4074c1a9b0214b9ab7eb1", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1827, "author_names": [ "Sayak Saha Roy", "Poojitha Thota", "Krishna Vamsi Naragam", "Shirin Nilizadeh" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p86f07fcea1bd", "title": "Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Recovers features and labels of deleted examples by comparing original and unlearned models.", "authors": "Hongsheng Hu, Shuo Wang, Tian Dong, Minhui Xue", "author_names": [ "Hongsheng Hu", "Shuo Wang", "Tian Dong", "Minhui Xue" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "doi": "https://doi.org/10.1109/SP54263.2024.00248", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0ef8f6ef0ba5fddda7d4e260068424417bdfa245", "abstract_characters": 1711, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p565ccfd4ee3c", "title": "LLMs Cannot Reliably Identify and Reason About Security Vulnerabilities (Yet?): A Comprehensive Evaluation, Framework, and Benchmarks", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Benchmarks vulnerability-analysis reliability and shows small code changes can derail LLM reasoning.", "authors": "Saad Ullah, Mingji Han, Saurabh Pujar, Hammond Pearce, Ayse Kivilcim Coskun, Gianluca Stringhini", "doi": "https://doi.org/10.1109/SP54263.2024.00210", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/12c404768dc2448aac428130a613f5ac5b2a5572", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1116, "author_names": [ "Saad Ullah", "Mingji Han", "Saurabh Pujar", "Hammond Pearce", "Ayse Kivilcim Coskun", "Gianluca Stringhini" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "pf9a4db89b6cf", "title": "Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Poisons image training data so targeted text prompts produce corrupted outputs.", "authors": "Shawn Shan, Wenxin Ding, Josephine Passananti, Stanley Wu, Haitao Zheng, Ben Y. Zhao", "doi": "https://doi.org/10.1109/SP54263.2024.00207", "areas": [ "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/f1d7b25937ce014d3173e76f43507872300917f2", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1633, "author_names": [ "Shawn Shan", "Wenxin Ding", "Josephine Passananti", "Stanley Wu", "Haitao Zheng", "Ben Y. Zhao" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p5d76b4dc2a11", "title": "On Large Language Models' Resilience to Coercive Interrogation", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Evaluates model resistance to coercive questioning.", "authors": "Zhuo Zhang, Guangyu Shen, Guanhong Tao, Siyuan Cheng, Xiangyu Zhang", "doi": "https://doi.org/10.1109/SP54263.2024.00208", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/bf4762503a450fae3d81891372145526a469db7b", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1496, "author_names": [ "Zhuo Zhang", "Guangyu Shen", "Guanhong Tao", "Siyuan Cheng", "Xiangyu Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "pf5993ffd36fb", "title": "Poisoned ChatGPT Finds Work for Idle Hands: Exploring Developers' Coding Practices with Insecure Suggestions from Poisoned AI Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Studies developers' responses to insecure suggestions from poisoned assistants.", "authors": "Sanghak Oh, Kiho Lee, Seonhye Park, Doowon Kim, Hyoungshick Kim", "doi": "https://doi.org/10.1109/SP54263.2024.00046", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/5f5cdbaebeab7fb5d7bbb8ffd59d9e5770949403", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1988, "author_names": [ "Sanghak Oh", "Kiho Lee", "Seonhye Park", "Doowon Kim", "Hyoungshick Kim" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p14969400ee60", "title": "Poisoning Web-Scale Training Datasets is Practical", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Demonstrates practical poisoning of web-scale model-training datasets.", "authors": "Nicholas Carlini, Matthew Jagielski, Christopher A. Choquette-Choo, Daniel Paleka, Will Pearce, Hyrum Anderson, Andreas Terzis, Kurt Thomas, Florian Tramer", "doi": "https://doi.org/10.1109/SP54263.2024.00179", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/2cf43a61d0937ad25f23eaef7c90253ab799b3c7", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1015, "author_names": [ "Nicholas Carlini", "Matthew Jagielski", "Christopher A. Choquette-Choo", "Daniel Paleka", "Will Pearce", "Hyrum Anderson", "Andreas Terzis", "Kurt Thomas", "Florian Tramer" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p4c6e2b92048b", "title": "PromptCARE: Prompt Copyright Protection by Watermark Injection and Verification", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Protects prompt ownership through watermark-based verification.", "authors": "Hongwei Yao, Jian Lou, Zhan Qin, Kui Ren", "doi": "https://doi.org/10.1109/SP54263.2024.00209", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e476b207fffb2b15f0adc39f8f8c1c8643a63311", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1483, "author_names": [ "Hongwei Yao", "Jian Lou", "Zhan Qin", "Kui Ren" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p27f2595daa11", "title": "SneakyPrompt: Jailbreaking Text-to-image Generative Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Uses reinforcement learning to perturb prompts and bypass text-to-image safety filters.", "authors": "Yuchen Yang, Bo Hui, Haolin Yuan, Neil Gong, Yinzhi Cao", "doi": "https://doi.org/10.1109/SP54263.2024.00123", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/9867456c81f262162c2fdf9c8498218a8936c84d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1423, "author_names": [ "Yuchen Yang", "Bo Hui", "Haolin Yuan", "Neil Gong", "Yinzhi Cao" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p114c52f3d221", "title": "SoK: Privacy-Preserving Data Synthesis", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Systematizes statistical and deep-learning approaches to private data synthesis and benchmarks private image generation.", "authors": "Yuzheng Hu, Fan Wu, Qinbin Li, Yunhui Long, Gonzalo Munilla Garrido, Chang Ge, Bolin Ding, David Forsyth, Bo Li, Dawn Song", "author_names": [ "Yuzheng Hu", "Fan Wu", "Qinbin Li", "Yunhui Long", "Gonzalo Munilla Garrido", "Chang Ge", "Bolin Ding", "David Forsyth", "Bo Li", "Dawn Song" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "doi": "https://doi.org/10.1109/SP54263.2024.00002", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a82690177d548e68fb96bb949f3c3ea7f82ef139", "abstract_characters": 1654, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pb6c1d3e7fa06", "title": "SOPHON: Non-Fine-Tunable Learning to Restrain Task Transferability For Pre-trained Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Constrains pretrained-model fine-tuning to prevent transfer to prohibited tasks, including unsafe generation.", "authors": "Jiangyi Deng, Shengyuan Pang, Yanjiao Chen, Liangming Xia, Yijie Bai, Haiqin Weng, Wenyuan Xu", "doi": "https://doi.org/10.1109/sp54263.2024.00234", "areas": [ "Foundations" ], "topics": [ "Jailbreaks & safety", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://openalex.org/W4402264344", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1675, "author_names": [ "Jiangyi Deng", "Shengyuan Pang", "Yanjiao Chen", "Liangming Xia", "Yijie Bai", "Haiqin Weng", "Wenyuan Xu" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "pb603e78e470d", "title": "SrcMarker: Dual-Channel Source Code Watermarking via Scalable Code Transformations", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Embeds ownership identifiers in source code through semantics-preserving transformations in two channels.", "authors": "Borui Yang, Wei Li, Liyao Xiang, Bo Li", "author_names": [ "Borui Yang", "Wei Li", "Liyao Xiang", "Bo Li" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "doi": "https://doi.org/10.1109/SP54263.2024.00097", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/09e84566ab295b36d1bc22d0e18a46f8ebc5acad", "abstract_characters": 1455, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p27f871a22a12", "title": "Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Certifies robustness against multiple types of adversarial text edits.", "authors": "Xinyu Zhang, Hanbin Hong, Yuan Hong, Peng Huang, Binghui Wang, Zhongjie Ba, Kui Ren", "doi": "https://doi.org/10.1109/SP54263.2024.00053", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/ca114b547c06eeb9911b685736679ca4dddf395c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1622, "author_names": [ "Xinyu Zhang", "Hanbin Hong", "Yuan Hong", "Peng Huang", "Binghui Wang", "Zhongjie Ba", "Kui Ren" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "pd3a459d60582", "title": "Transferable Multimodal Attack on Vision-Language Pre-training Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Constructs transferable attacks on pretrained vision-language models.", "authors": "Haodi Wang, Kai Dong, Zhilei Zhu, Haotong Qin, Aishan Liu, Xiaolin Fang, Jiakai Wang, Xianglong Liu", "doi": "https://doi.org/10.1109/SP54263.2024.00102", "areas": [ "Image & diffusion", "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a42df2cc7f85e133f2ea38b2bbd2cb2b21a0f904", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1724, "author_names": [ "Haodi Wang", "Kai Dong", "Zhilei Zhu", "Haotong Qin", "Aishan Liu", "Xiaolin Fang", "Jiakai Wang", "Xianglong Liu" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "p09633aa553a4", "title": "TROJANPUZZLE: Covertly Poisoning Code-Suggestion Models", "year": 2024, "venue": "IEEE S&P", "edition": "sp-2024", "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html", "summary": "Poisons code suggestions while concealing the malicious payload.", "authors": "Hojjat Aghakhani, Wei Dai, Andre Manoel, Xavier Fernandes, Anant Kharkar, Christopher Kruegel, Giovanni Vigna, David Evans, Benjamin Zorn, Robert Sim", "doi": "https://doi.org/10.1109/SP54263.2024.00140", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Side channels & systems", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/dae74645479f7c1fa3671066f9e24ec6c20c17ec", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1611, "author_names": [ "Hojjat Aghakhani", "Wei Dai", "Andre Manoel", "Xavier Fernandes", "Anant Kharkar", "Christopher Kruegel", "Giovanni Vigna", "David Evans", "Benjamin Zorn", "Robert Sim" ], "author_source": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html" }, { "key": "pb6bbc0dba21c", "title": "A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/a-duty-to-forget-a-right-to-be-assured-exposing-vulnerabilities-in-machine-unlearning-services/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Exploits over-unlearning to degrade models offered through machine-learning services.", "authors": "Hongsheng Hu, Shuo Wang, Jiamin Chang, Haonan Zhong, Ruoxi Sun, Shuang Hao, Haojin Zhu, Minhui Xue", "author_names": [ "Hongsheng Hu", "Shuo Wang", "Jiamin Chang", "Haonan Zhong", "Ruoxi Sun", "Shuang Hao", "Haojin Zhu", "Minhui Xue" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/a-duty-to-forget-a-right-to-be-assured-exposing-vulnerabilities-in-machine-unlearning-services/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/a-duty-to-forget-a-right-to-be-assured-exposing-vulnerabilities-in-machine-unlearning-services/", "abstract_characters": 1350, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pd81c94496ee8", "title": "DEMASQ: Unmasking the ChatGPT Wordsmith", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/demasq-unmasking-the-chatgpt-wordsmith/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Detects text produced by ChatGPT.", "authors": "Kavita Kumari, Alessandro Pegoraro, Hossein Fereidooni, Ahmad-Reza Sadeghi", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/demasq-unmasking-the-chatgpt-wordsmith/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1432, "author_names": [ "Kavita Kumari", "Alessandro Pegoraro", "Hossein Fereidooni", "Ahmad-Reza Sadeghi" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/demasq-unmasking-the-chatgpt-wordsmith/" }, { "key": "pbbcf2b8c8f6c", "title": "Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/improving-the-robustness-of-transformer-based-large-language-models-with-dynamic-attention/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Uses dynamic attention to improve transformer language-model robustness.", "authors": "Lujia Shen, Yuwen Pu, Shouling Ji, Changjiang Li, Xuhong Zhang, Chunpeng Ge, Ting Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/improving-the-robustness-of-transformer-based-large-language-models-with-dynamic-attention/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1630, "author_names": [ "Lujia Shen", "Yuwen Pu", "Shouling Ji", "Changjiang Li", "Xuhong Zhang", "Chunpeng Ge", "Ting Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/improving-the-robustness-of-transformer-based-large-language-models-with-dynamic-attention/" }, { "key": "p3e536ebba3a1", "title": "LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/lmsanitator-defending-prompt-tuning-against-task-agnostic-backdoors/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Detects and removes backdoors affecting prompt-tuned models.", "authors": "Chengkun Wei, Wenlong Meng, Zhikun Zhang, Min Chen, Minghu Zhao, Wenjing Fang, Lei Wang, Zihui Zhang, Wenzhi Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/lmsanitator-defending-prompt-tuning-against-task-agnostic-backdoors/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1414, "author_names": [ "Chengkun Wei", "Wenlong Meng", "Zhikun Zhang", "Min Chen", "Minghu Zhao", "Wenjing Fang", "Lei Wang", "Zihui Zhang", "Wenzhi Chen" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/lmsanitator-defending-prompt-tuning-against-task-agnostic-backdoors/" }, { "key": "p1941b6ab2303", "title": "MASTERKEY: Automated Jailbreaking of Large Language Model Chatbots", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/masterkey-automated-jailbreaking-of-large-language-model-chatbots/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Automates jailbreaking of chatbot safety controls.", "authors": "Gelei Deng, Yi Liu, Yuekang Li, Kailong Wang, Ying Zhang, Zefeng Li, Haoyu Wang, Tianwei Zhang, Yang Liu", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/masterkey-automated-jailbreaking-of-large-language-model-chatbots/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1266, "author_names": [ "Gelei Deng", "Yi Liu", "Yuekang Li", "Kailong Wang", "Ying Zhang", "Zefeng Li", "Haoyu Wang", "Tianwei Zhang", "Yang Liu" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/masterkey-automated-jailbreaking-of-large-language-model-chatbots/" }, { "key": "p28dab29ebc35", "title": "SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-Supervised Learning", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/ssl-wm-a-black-box-watermarking-approach-for-encoders-pre-trained-by-self-supervised-learning/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Watermarks self-supervised encoders to verify ownership after downstream adaptation, including NLP tasks.", "authors": "Peizhuo Lv, Pan Li, Shenchen Zhu, Shengzhi Zhang, Kai Chen, Ruigang Liang, Chang Yue, Fang Xiang, Yuling Cai, Hualong Ma, Yingjun Zhang, Guozhu Meng", "doi": "", "areas": [ "Foundations" ], "topics": [ "Provenance & watermarking", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/ssl-wm-a-black-box-watermarking-approach-for-encoders-pre-trained-by-self-supervised-learning/", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1657, "author_names": [ "Peizhuo Lv", "Pan Li", "Shenchen Zhu", "Shengzhi Zhang", "Kai Chen", "Ruigang Liang", "Chang Yue", "Fang Xiang", "Yuling Cai", "Hualong Ma", "Yingjun Zhang", "Guozhu Meng" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/ssl-wm-a-black-box-watermarking-approach-for-encoders-pre-trained-by-self-supervised-learning/" }, { "key": "p3b489228dc0e", "title": "TextGuard: Provable Defense against Backdoor Attacks on Text Classification", "year": 2024, "venue": "NDSS", "edition": "ndss-2024", "url": "https://www.ndss-symposium.org/ndss-paper/textguard-provable-defense-against-backdoor-attacks-on-text-classification/", "source": "https://www.ndss-symposium.org/ndss2024/accepted-papers/", "summary": "Provides certified defenses against text-classification backdoors.", "authors": "Hengzhi Pei, Jinyuan Jia, Wenbo Guo, Bo Li, Dawn Song", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/textguard-provable-defense-against-backdoor-attacks-on-text-classification/", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1704, "author_names": [ "Hengzhi Pei", "Jinyuan Jia", "Wenbo Guo", "Bo Li", "Dawn Song" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/textguard-provable-defense-against-backdoor-attacks-on-text-classification/" }, { "key": "p262826e0beef", "title": "Adversarial Illusions in Multi-Modal Embeddings", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-tingwei", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Creates cross-modal adversarial embeddings that mislead downstream text generation, image generation and retrieval.", "authors": "Tingwei Zhang, Rishi Jha, Eugene Bagdasaryan, Vitaly Shmatikov", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-tingwei", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1367, "author_names": [ "Tingwei Zhang", "Rishi Jha", "Eugene Bagdasaryan", "Vitaly Shmatikov" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-tingwei" }, { "key": "pe34226e6ac8d", "title": "An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/yan", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Poisons code completion to suggest disguised vulnerabilities.", "authors": "Shenao Yan, Shen Wang, Yue Duan, Hanbin Hong, Kiho Lee, Doowon Kim, Yuan Hong", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors", "Detection & robustness", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1350, "author_names": [ "Shenao Yan", "Shen Wang", "Yue Duan", "Hanbin Hong", "Kiho Lee", "Doowon Kim", "Yuan Hong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yan" }, { "key": "peb5504d32b2a", "title": "Deciphering Textual Authenticity: A Generalized Strategy through the Lens of Large Language Semantics for Detecting Human vs. Machine-Generated Text", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/bethany", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Detects generated text and attributes its originating generator.", "authors": "Mazal Bethany, Brandon Wherry, Emet Bethany, Nishant Vishwamitra, Anthony Rios, Peyman Najafirad", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/bethany", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1892, "author_names": [ "Mazal Bethany", "Brandon Wherry", "Emet Bethany", "Nishant Vishwamitra", "Anthony Rios", "Peyman Najafirad" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/bethany" }, { "key": "p2c877a80ffeb", "title": "Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/meeus", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Tests whether documents were present in an LLM's training corpus.", "authors": "Matthieu Meeus, Shubham Jain, Marek Rei, Yves-Alexandre de Montjoye", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/meeus", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1799, "author_names": [ "Matthieu Meeus", "Shubham Jain", "Marek Rei", "Yves-Alexandre de Montjoye" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/meeus" }, { "key": "p00d9ad5d3eea", "title": "Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-zhiyuan", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Characterizes jailbreak prompts and explores their effectiveness.", "authors": "Zhiyuan Yu, Xiaogeng Liu, Shunning Liang, Zach Cameron, Chaowei Xiao, Ning Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-zhiyuan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1389, "author_names": [ "Zhiyuan Yu", "Xiaogeng Liu", "Shunning Liang", "Zach Cameron", "Chaowei Xiao", "Ning Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-zhiyuan" }, { "key": "p0958aed69f13", "title": "dp-promise: Differentially Private Diffusion Probabilistic Models for Image Synthesis", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-haichen", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Trains diffusion image generators with differential privacy.", "authors": "Haichen Wang, Shuchao Pang, Zhigang Lu, Yihang Rao, Yongbin Zhou, Minhui Xue", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-haichen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1230, "author_names": [ "Haichen Wang", "Shuchao Pang", "Zhigang Lu", "Yihang Rao", "Yongbin Zhou", "Minhui Xue" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-haichen" }, { "key": "pfef364244087", "title": "EaTVul: ChatGPT-based Evasion Attack Against Software Vulnerability Detection", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-shigang", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Uses ChatGPT to evade software vulnerability detectors.", "authors": "Shigang Liu, Di Cao, Junae Kim, Tamas Abraham, Paul Montague, Seyit Camtepe, Jun Zhang, Yang Xiang", "doi": "", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-shigang", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1257, "author_names": [ "Shigang Liu", "Di Cao", "Junae Kim", "Tamas Abraham", "Paul Montague", "Seyit Camtepe", "Jun Zhang", "Yang Xiang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-shigang" }, { "key": "p28783052a183", "title": "Exploring ChatGPT's Capabilities on Vulnerability Management", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-peiyu", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Evaluates ChatGPT on vulnerability management to identify capabilities and practical limitations.", "authors": "Peiyu Liu, Junming Liu, Lirong Fu, Kangjie Lu, Yifan Xia, Xuhong Zhang, Wenzhi Chen, Haiqin Weng, Shouling Ji, Wenhai Wang", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-peiyu", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1823, "author_names": [ "Peiyu Liu", "Junming Liu", "Lirong Fu", "Kangjie Lu", "Yifan Xia", "Xuhong Zhang", "Wenzhi Chen", "Haiqin Weng", "Shouling Ji", "Wenhai Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-peiyu" }, { "key": "p80ee0cab3544", "title": "Forget and Rewire: Enhancing the Resilience of Transformer-based Models against Bit-Flip Attacks", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/nazari", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Rewires transformer layers to reduce the impact of parameter bit-flip attacks on LLMs and vision transformers.", "authors": "Najmeh Nazari, Hosein Mohammadi Makrani, Chongzhou Fang, Hossein Sayadi, Setareh Rafatirad, Khaled N. Khasawneh, Houman Homayoun", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/nazari", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1328, "author_names": [ "Najmeh Nazari", "Hosein Mohammadi Makrani", "Chongzhou Fang", "Hossein Sayadi", "Setareh Rafatirad", "Khaled N. Khasawneh", "Houman Homayoun" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/nazari" }, { "key": "p2c0ec27c4e69", "title": "Formalizing and Benchmarking Prompt Injection Attacks and Defenses", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-yupei", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Formalizes prompt injection and compares attacks and defenses.", "authors": "Yupei Liu, Yuqi Jia, Runpeng Geng, Jinyuan Jia, Neil Zhenqiang Gong", "doi": "", "areas": [ "LLM" ], "topics": [ "Prompt injection" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-yupei", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 938, "author_names": [ "Yupei Liu", "Yuqi Jia", "Runpeng Geng", "Jinyuan Jia", "Neil Zhenqiang Gong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-yupei" }, { "key": "p3e65423c9784", "title": "How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-guangsheng", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Compares privacy attacks across neural architectures, including transformers.", "authors": "Guangsheng Zhang, Bo Liu, Huan Tian, Tianqing Zhu, Ming Ding, Wanlei Zhou", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-guangsheng", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1318, "author_names": [ "Guangsheng Zhang", "Bo Liu", "Huan Tian", "Tianqing Zhu", "Ming Ding", "Wanlei Zhou" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-guangsheng" }, { "key": "p106d0caec7e0", "title": "Information Flow Control in Machine Learning through Modular Model Architecture", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/tiwari", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Enforces access-control policies inside transformer language models by isolating training information in expert modules.", "authors": "Trishita Tiwari, Suchin Gururangan, Chuan Guo, Weizhe Hua, Sanjay Kariyappa, Udit Gupta, Wenjie Xiong, Kiwan Maeng, Hsien-Hsin S. Lee, G. Edward Suh", "doi": "", "areas": [ "LLM" ], "topics": [ "Agents & permissions" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/tiwari", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1109, "author_names": [ "Trishita Tiwari", "Suchin Gururangan", "Chuan Guo", "Weizhe Hua", "Sanjay Kariyappa", "Udit Gupta", "Wenjie Xiong", "Kiwan Maeng", "Hsien-Hsin S. Lee", "G. Edward Suh" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/tiwari" }, { "key": "p319ec2eb1305", "title": "Instruction Backdoor Attacks Against Customized LLMs", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-rui", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Plants instruction-triggered backdoors in customized language models.", "authors": "Rui Zhang, Hongwei Li, Rui Wen, Wenbo Jiang, Yuan Zhang, Michael Backes, Yun Shen, Yang Zhang", "doi": "", "areas": [ "LLM" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-rui", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1400, "author_names": [ "Rui Zhang", "Hongwei Li", "Rui Wen", "Wenbo Jiang", "Yuan Zhang", "Michael Backes", "Yun Shen", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-rui" }, { "key": "p41334dde7fcd", "title": "It Doesn't Look Like Anything to Me: Using Diffusion Model to Subvert Visual Phishing Detectors", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/hao-qingying", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Uses diffusion-generated logo variants to evade visual phishing detection while preserving recognizable brand semantics.", "authors": "Qingying Hao, Nirav Diwan, Ying Yuan, Giovanni Apruzzese, Mauro Conti, Gang Wang", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Human factors & misuse", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/hao-qingying", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1406, "author_names": [ "Qingying Hao", "Nirav Diwan", "Ying Yuan", "Giovanni Apruzzese", "Mauro Conti", "Gang Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/hao-qingying" }, { "key": "p8f6b34378024", "title": "Large Language Models for Code Analysis: Do LLMs Really Do Their Job?", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/fang", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Evaluates code-analysis reliability of LLMs, including their handling of obfuscated code.", "authors": "Chongzhou Fang, Ning Miao, Shaurya Srivastav, Jialin Liu, Ruoyu Zhang, Ruijie Fang, Asmita, Ryan Tsang, Najmeh Nazari, Han Wang, Houman Homayoun", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/fang", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1057, "author_names": [ "Chongzhou Fang", "Ning Miao", "Shaurya Srivastav", "Jialin Liu", "Ruoyu Zhang", "Ruijie Fang", "Asmita", "Ryan Tsang", "Najmeh Nazari", "Han Wang", "Houman Homayoun" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/fang" }, { "key": "p8ef88fcb012a", "title": "LLM-Fuzzer: Scaling Assessment of Large Language Model Jailbreaks", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-jiahao", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Uses fuzzing to assess chatbot jailbreak susceptibility.", "authors": "Jiahao Yu, Xingwei Lin, Zheng Yu, Xinyu Xing", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-jiahao", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1296, "author_names": [ "Jiahao Yu", "Xingwei Lin", "Zheng Yu", "Xinyu Xing" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/yu-jiahao" }, { "key": "p17d7e33e76a5", "title": "Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-tong", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Jailbreaks models through disguised questions and reconstructed answers.", "authors": "Tong Liu, Yingjie Zhang, Zhe Zhao, Yinpeng Dong, Guozhu Meng, Kai Chen", "doi": "", "areas": [ "LLM" ], "topics": [ "Jailbreaks & safety", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-tong", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 901, "author_names": [ "Tong Liu", "Yingjie Zhang", "Zhe Zhao", "Yinpeng Dong", "Guozhu Meng", "Kai Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-tong" }, { "key": "paf8cb324d17f", "title": "Malla: Demystifying Real-world Large Language Model Integrated Malicious Services", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/lin-zilong", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Studies malicious services built around language models.", "authors": "Zilong Lin, Jian Cui, Xiaojing Liao, XiaoFeng Wang", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/lin-zilong", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1136, "author_names": [ "Zilong Lin", "Jian Cui", "Xiaojing Liao", "XiaoFeng Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/lin-zilong" }, { "key": "pea69ba7c5926", "title": "Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-hongbin", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Patches deployed vision and language foundation models to remove backdoors while preserving utility.", "authors": "Hongbin Liu, Michael K. Reiter, Neil Zhenqiang Gong", "author_names": [ "Hongbin Liu", "Michael K. Reiter", "Neil Zhenqiang Gong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-hongbin", "doi": "", "areas": [ "LLM", "Image & diffusion" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-hongbin", "abstract_characters": 1127, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p604c3daa1d4c", "title": "Privacy Side Channels in Machine Learning Systems", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/debenedetti", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Exploits preprocessing and filtering components to expose private model data.", "authors": "Edoardo Debenedetti, Giorgio Severi, Nicholas Carlini, Christopher A. Choquette-Choo, Matthew Jagielski, Milad Nasr, Eric Wallace, Florian Tramèr", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Side channels & systems", "Membership inference", "Training data extraction", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/debenedetti", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1266, "author_names": [ "Edoardo Debenedetti", "Giorgio Severi", "Nicholas Carlini", "Christopher A. Choquette-Choo", "Matthew Jagielski", "Milad Nasr", "Eric Wallace", "Florian Tramèr" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/debenedetti" }, { "key": "p0b52065df7a9", "title": "PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/li-kecen", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Generates synthetic images with differential privacy and semantic-aware pretraining.", "authors": "Kecen Li, Chen Gong, Zhixiang Li, Yuzhong Zhao, Xinwen Hou, Tianhao Wang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/li-kecen", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1759, "author_names": [ "Kecen Li", "Chen Gong", "Zhixiang Li", "Yuzhong Zhao", "Xinwen Hou", "Tianhao Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/li-kecen" }, { "key": "p0325b087c07e", "title": "Prompt Stealing Attacks Against Text-to-Image Generation Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/shen-xinyue", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Reconstructs prompts used to generate images, exposing prompt intellectual property.", "authors": "Xinyue Shen, Yiting Qu, Michael Backes, Yang Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference", "Prompt leakage" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/shen-xinyue", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1604, "author_names": [ "Xinyue Shen", "Yiting Qu", "Michael Backes", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/shen-xinyue" }, { "key": "p2b291c7f1059", "title": "Property Existence Inference against Generative Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-lijin", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Infers whether training data contain a sensitive property using generative-model access.", "authors": "Lijin Wang, Jingjing Wang, Jie Wan, Lin Long, Ziqi Yang, Zhan Qin", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-lijin", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1530, "author_names": [ "Lijin Wang", "Jingjing Wang", "Jie Wan", "Lin Long", "Ziqi Yang", "Zhan Qin" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/wang-lijin" }, { "key": "p5942086c8b0d", "title": "REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-ruisi", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Watermarks generated language for subsequent attribution.", "authors": "Ruisi Zhang, Shehzeen Samarah Hussain, Paarth Neekhara, Farinaz Koushanfar", "doi": "", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-ruisi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1394, "author_names": [ "Ruisi Zhang", "Shehzeen Samarah Hussain", "Paarth Neekhara", "Farinaz Koushanfar" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-ruisi" }, { "key": "p982ac54b27fe", "title": "Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/an", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Evaluates protections against unauthorized use of images in Stable Diffusion.", "authors": "Shengwei An, Lu Yan, Siyuan Cheng, Guangyu Shen, Kaiyuan Zhang, Qiuling Xu, Guanhong Tao, Xiangyu Zhang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/an", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1137, "author_names": [ "Shengwei An", "Lu Yan", "Siyuan Cheng", "Guangyu Shen", "Kaiyuan Zhang", "Qiuling Xu", "Guanhong Tao", "Xiangyu Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/an" }, { "key": "pae4a027d951c", "title": "SoK: The Good, The Bad, and The Unbalanced: Measuring Structural Limitations of Deepfake Media Datasets", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/layton", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Systematizes deepfake datasets and reveals class imbalance and evaluation choices that undermine detector comparisons.", "authors": "Seth Layton, Tyler Tucker, Daniel Olszewski, Kevin Warren, Kevin Butler, Patrick Traynor", "author_names": [ "Seth Layton", "Tyler Tucker", "Daniel Olszewski", "Kevin Warren", "Kevin Butler", "Patrick Traynor" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/layton", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/layton", "abstract_characters": 1582, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p443480c43fb6", "title": "UBA-Inf: Unlearning Activated Backdoor Attack with Influence-Driven Camouflage", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/huang-zirui", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Camouflages a backdoor that is activated later through machine-unlearning requests.", "authors": "Zirui Huang, Yunlong Mao, Sheng Zhong", "author_names": [ "Zirui Huang", "Yunlong Mao", "Sheng Zhong" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/huang-zirui", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/huang-zirui", "abstract_characters": 1390, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p399c545bf1dc", "title": "What Was Your Prompt? A Remote Keylogging Attack on AI Assistants", "year": 2024, "venue": "USENIX Security", "edition": "usenix-2024", "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/weiss", "source": "https://www.usenix.org/conference/usenixsecurity24/technical-sessions", "summary": "Infers assistant content through encrypted traffic side channels.", "authors": "Roy Weiss, Daniel Ayzenshteyn, Guy Amit, Yisroel Mirsky", "doi": "", "areas": [ "LLM" ], "topics": [ "Side channels & systems" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/weiss", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1318, "author_names": [ "Roy Weiss", "Daniel Ayzenshteyn", "Guy Amit", "Yisroel Mirsky" ], "author_source": "https://www.usenix.org/conference/usenixsecurity24/presentation/weiss" }, { "key": "pac82e726dd55", "title": "Control, Confidentiality, and the Right to be Forgotten", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://doi.org/10.1145/3576915.3616585", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Formalizes deletion as control in interactive systems and connects it to differential privacy and machine unlearning.", "authors": "Aloni Cohen, Adam Smith, Marika Swanberg, Prashant Nalini Vasudevan", "author_names": [ "Aloni Cohen", "Adam Smith", "Marika Swanberg", "Prashant Nalini Vasudevan" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "abstract_characters": 1529, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pb87fd6ae3ed8", "title": "DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Models", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://doi.org/10.1145/3576915.3616588", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Detects generated images and attributes their originating generators.", "authors": "Zeyang Sha, Zheng Li, Ning Yu, Yang Zhang", "doi": "10.1145/3576915.3616588", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1686, "author_names": [ "Zeyang Sha", "Zheng Li", "Ning Yu", "Yang Zhang" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "pf7d896068fae", "title": "DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3616592", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Applies differential privacy in language-model forward passes.", "authors": "Minxin Du, Xiang Yue, Sherman S. M. Chow, Tianhao Wang, Chenyu Huang, Huan Sun", "doi": "10.1145/3576915.3616592", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1245, "author_names": [ "Minxin Du", "Xiang Yue", "Sherman S. M. Chow", "Tianhao Wang", "Chenyu Huang", "Huan Sun" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "pc8892a2ba482", "title": "Evading Watermark based Detection of AI-Generated Content", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3623189", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Evades watermark-based detection of AI-generated content.", "authors": "Zhengyuan Jiang, Jinghuai Zhang, Neil Zhenqiang Gong", "doi": "10.1145/3576915.3623189", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1341, "author_names": [ "Zhengyuan Jiang", "Jinghuai Zhang", "Neil Zhenqiang Gong" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "p9a574cc494cf", "title": "Large Language Models for Code: Security Hardening and Adversarial Testing", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3623175", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Hardens code models and evaluates them adversarially.", "authors": "Jingxuan He, Martin Vechev", "doi": "10.1145/3576915.3623175", "areas": [ "LLM" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1570, "author_names": [ "Jingxuan He", "Martin Vechev" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "pdcffcfb12fdb", "title": "Protecting Intellectual Property of Large Language Model-Based Code Generation APIs via Watermarks", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3623120", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Watermarks code-generation APIs to verify ownership.", "authors": "Zongjie Li, Chaozheng Wang, Shuai Wang, Cuiyun Gao", "doi": "10.1145/3576915.3623120", "areas": [ "LLM" ], "topics": [ "Provenance & watermarking", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1625, "author_names": [ "Zongjie Li", "Chaozheng Wang", "Shuai Wang", "Cuiyun Gao" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "pfdf1f776fb7b", "title": "Stealing the Decoding Algorithms of Language Models", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3616652", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Infers the decoding algorithm used by a language-model service.", "authors": "Ali Naseh, Kalpesh Krishna, Mohit Iyyer, Amir Houmansadr", "doi": "10.1145/3576915.3616652", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 980, "author_names": [ "Ali Naseh", "Kalpesh Krishna", "Mohit Iyyer", "Amir Houmansadr" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "p045e9429993d", "title": "Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models", "year": 2023, "venue": "ACM CCS", "edition": "ccs-2023", "url": "https://dl.acm.org/doi/10.1145/3576915.3616679", "source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html", "summary": "Measures unsafe image and hateful-meme generation by text-to-image systems.", "authors": "Yiting Qu, Xinyue Shen, Xinlei He, Michael Backes, Savvas Zannettou, Yang Zhang", "doi": "10.1145/3576915.3616679", "areas": [ "Image & diffusion" ], "topics": [ "Jailbreaks & safety" ], "abstract_reviewed": true, "abstract_source": "https://www.sigsac.org/ccs/CCS2023/tocs/tocs-main.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 2042, "author_names": [ "Yiting Qu", "Xinyue Shen", "Xinlei He", "Michael Backes", "Savvas Zannettou", "Yang Zhang" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2023/tocs/tocs-ccs23.html" }, { "key": "pe202ee1994fa", "title": "A Theory to Instruct Differentially-Private Learning via Clipping Bias Reduction", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Analyzes clipping bias in private training and improves DP-SGD, including a private recurrent NLP model.", "authors": "Hanshen Xiao, Zihang Xiang, Di Wang, Srinivas Devadas", "doi": "https://doi.org/10.1109/SP46215.2023.10179409", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/5b2e8a8f779cec56561d6a2c549d923cbc10319e", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 2219, "author_names": [ "Hanshen Xiao", "Zihang Xiang", "Di Wang", "Srinivas Devadas" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "p691e066d7418", "title": "Analyzing Leakage of Personally Identifiable Information in Language Models", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Analyzes personally identifiable information exposed by language models.", "authors": "Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin", "doi": "https://doi.org/10.1109/SP46215.2023.10179300", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/d1101476c85ae324142440e9f568ecbf41625be5", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1575, "author_names": [ "Nils Lukas", "Ahmed Salem", "Robert Sim", "Shruti Tople", "Lukas Wutschitz", "Santiago Zanella-Béguelin" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "p0447d652ca61", "title": "Deepfake Text Detection: Limitations and Opportunities", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Examines limits and opportunities in detecting generated text.", "authors": "Jiameng Pu, Zain Sarwar, Sifat Muhammad Abdullah, Abdullah Rehman, Yoonjin Kim, Parantapa Bhattacharya, Mobin Javed, Bimal Viswanath", "doi": "https://doi.org/10.1109/SP46215.2023.10179387", "areas": [ "Image & diffusion" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a279d7d05ce4cf849879e6948c34613b2dade858", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1166, "author_names": [ "Jiameng Pu", "Zain Sarwar", "Sifat Muhammad Abdullah", "Abdullah Rehman", "Yoonjin Kim", "Parantapa Bhattacharya", "Mobin Javed", "Bimal Viswanath" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "p3d4334baf159", "title": "Discop: Provably Secure Steganography in Practice Based on “Distribution Copies”", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Constructs distribution-preserving steganographic generation with formal security and experiments across generated media.", "authors": "Jinyang Ding, Kejiang Chen, Yaofei Wang, Na Zhao, Weiming Zhang, Nenghai Yu", "doi": "https://doi.org/10.1109/SP46215.2023.10179287", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/200526f0cfaf9ac9e452890b3ef7bc1a4b42c98a", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1670, "author_names": [ "Jinyang Ding", "Kejiang Chen", "Yaofei Wang", "Na Zhao", "Weiming Zhang", "Nenghai Yu" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "pd06fbb0e1e53", "title": "Examining Zero-Shot Vulnerability Repair with Large Language Models", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Evaluates whether code language models can repair vulnerabilities while preserving functional correctness.", "authors": "Hammond Pearce, Benjamin Tan, Baleegh Ahmad, Ramesh Karri, Brendan Dolan-Gavitt", "doi": "https://doi.org/10.1109/SP46215.2023.10179324", "areas": [ "LLM" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/a5731122200fbb8b37f048010a1e1ca4474aa606", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1099, "author_names": [ "Hammond Pearce", "Benjamin Tan", "Baleegh Ahmad", "Ramesh Karri", "Brendan Dolan-Gavitt" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "pceb868aa209f", "title": "Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models", "year": 2023, "venue": "IEEE S&P", "edition": "sp-2023", "url": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2023/program-papers.html", "summary": "Removes backdoor behavior through deliberate forgetting and recovery, evaluating both image and NLP models.", "authors": "Rui Zhu, Di Tang, Siyuan Tang, XiaoFeng Wang, Haixu Tang", "doi": "https://doi.org/10.1109/SP46215.2023.10351028", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/2d0a129f928c955e4ee5cd030dc853f4b80845ea", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 2357, "author_names": [ "Rui Zhu", "Di Tang", "Siyuan Tang", "XiaoFeng Wang", "Haixu Tang" ], "author_source": "https://www.ieee-security.org/TC/SP2023/accepted-papers.html" }, { "key": "p68cff3db64cf", "title": "Machine Unlearning of Features and Labels", "year": 2023, "venue": "NDSS", "edition": "ndss-2023", "url": "https://www.ndss-symposium.org/ndss-paper/machine-unlearning-of-features-and-labels/", "source": "https://www.ndss-symposium.org/ndss2023/accepted-papers/", "summary": "Uses influence-based parameter updates to unlearn features and labels rather than individual records alone.", "authors": "Alexander Warnecke, Lukas Pirch, Christian Wressnegger, Konrad Rieck", "author_names": [ "Alexander Warnecke", "Lukas Pirch", "Christian Wressnegger", "Konrad Rieck" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/machine-unlearning-of-features-and-labels/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/machine-unlearning-of-features-and-labels/", "abstract_characters": 1171, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pe55c9d9651d8", "title": "A Data-free Backdoor Injection Approach in Neural Networks", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/lv", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Injects data-free backdoors across text, image-generation and multimodal models using unrelated substitute data.", "authors": "Peizhuo Lv, Chang Yue, Ruigang Liang, Yunfei Yang, Shengzhi Zhang, Hualong Ma, Kai Chen", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/lv", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1486, "author_names": [ "Peizhuo Lv", "Chang Yue", "Ruigang Liang", "Yunfei Yang", "Shengzhi Zhang", "Hualong Ma", "Kai Chen" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/lv" }, { "key": "pab549ca387d4", "title": "CAPatch: Physical Adversarial Patch against Image Captioning Systems", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-shibo", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Uses physical adversarial patches to alter captions produced by multimodal image-captioning systems.", "authors": "Shibo Zhang, Yushi Cheng, Wenjun Zhu, Xiaoyu Ji, Wenyuan Xu", "author_names": [ "Shibo Zhang", "Yushi Cheng", "Wenjun Zhu", "Xiaoyu Ji", "Wenyuan Xu" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-shibo", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-shibo", "abstract_characters": 1522, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pc737126f426c", "title": "CodexLeaks: Privacy Leaks from Code Generation Language Models in GitHub Copilot", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/niu", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Extracts sensitive information from a deployed code assistant.", "authors": "Liang Niu, Shujaat Mirza, Zayd Maradni, Christina Pöpper", "doi": "", "areas": [ "LLM" ], "topics": [ "Privacy & inference", "Code assistants", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/niu", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1268, "author_names": [ "Liang Niu", "Shujaat Mirza", "Zayd Maradni", "Christina Pöpper" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/niu" }, { "key": "p888b18e5eee2", "title": "DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-jiawei", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Combines diffusion purification and local smoothing to certify robustness against adversarial inputs.", "authors": "Jiawei Zhang, Zhongzhu Chen, Huan Zhang, Chaowei Xiao, Bo Li", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Side channels & systems", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-jiawei", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Related model backbone, diffusion-enabled security, or AI-assistance reliability; retained with a scope note.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1324, "author_names": [ "Jiawei Zhang", "Zhongzhu Chen", "Huan Zhang", "Chaowei Xiao", "Bo Li" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-jiawei" }, { "key": "p872db8f3db62", "title": "Extracting Training Data from Diffusion Models", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/carlini", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Recovers memorized training examples from diffusion image generators.", "authors": "Nicholas Carlini, Jamie Hayes, Milad Nasr, Matthew Jagielski, Vikash Sehwag, Florian Tramèr, Borja Balle, Daphne Ippolito, Eric Wallace", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/carlini", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 832, "author_names": [ "Nicholas Carlini", "Jamie Hayes", "Milad Nasr", "Matthew Jagielski", "Vikash Sehwag", "Florian Tramèr", "Borja Balle", "Daphne Ippolito", "Eric Wallace" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/carlini" }, { "key": "pde2704930dc8", "title": "Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/shan", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Perturbs artworks to impede unauthorized style imitation by image generators.", "authors": "Shawn Shan, Jenna Cryan, Emily Wenger, Haitao Zheng, Rana Hanocka, Ben Y. Zhao", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/shan", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1127, "author_names": [ "Shawn Shan", "Jenna Cryan", "Emily Wenger", "Haitao Zheng", "Rana Hanocka", "Ben Y. Zhao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/shan" }, { "key": "pcc3987a2e787", "title": "Inductive Graph Unlearning", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/wang-cheng-long", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Introduces GUIDE for efficient graph unlearning when new nodes and evolving graphs must generalize beyond training.", "authors": "Cheng-Long Wang, Mengdi Huai, Di Wang", "author_names": [ "Cheng-Long Wang", "Mengdi Huai", "Di Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/wang-cheng-long", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/wang-cheng-long", "abstract_characters": 1504, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pce29ad0ffd29", "title": "Lost at C: A User Study on the Security Implications of Large Language Model Code Assistants", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/sandoval", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Measures how coding assistance affects vulnerabilities in users' C code.", "authors": "Gustavo Sandoval, Hammond Pearce, Teo Nys, Ramesh Karri, Siddharth Garg, Brendan Dolan-Gavitt", "doi": "", "areas": [ "LLM" ], "topics": [ "Human factors & misuse", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/sandoval", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 871, "author_names": [ "Gustavo Sandoval", "Hammond Pearce", "Teo Nys", "Ramesh Karri", "Siddharth Garg", "Brendan Dolan-Gavitt" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/sandoval" }, { "key": "p35001d272b7e", "title": "PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/lukas", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Watermarks pretrained image generators through pivotal tuning.", "authors": "Nils Lukas, Florian Kerschbaum", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Provenance & watermarking" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/lukas", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1421, "author_names": [ "Nils Lukas", "Florian Kerschbaum" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/lukas" }, { "key": "pceadff3ff0ed", "title": "Two-in-One: A Model Hijacking Attack Against Text Generation Models", "year": 2023, "venue": "USENIX Security", "edition": "usenix-2023", "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/si", "source": "https://www.usenix.org/conference/usenixsecurity23/technical-sessions", "summary": "Hijacks language models to perform concealed secondary tasks.", "authors": "Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem", "doi": "", "areas": [ "LLM" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/si", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1029, "author_names": [ "Wai Man Si", "Michael Backes", "Yang Zhang", "Ahmed Salem" ], "author_source": "https://www.usenix.org/conference/usenixsecurity23/presentation/si" }, { "key": "p1541763739d9", "title": "Graph Unlearning", "year": 2022, "venue": "ACM CCS", "edition": "ccs-2022", "url": "https://doi.org/10.1145/3548606.3559352", "source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "summary": "Introduces GraphEraser to remove graph training data while preserving structure through partitioning and learned aggregation.", "authors": "Min Chen, Zhi-Kun Zhang, Tian-Hao Wang, M. Backes, Mathias Humbert, Yang Zhang", "author_names": [ "Min Chen", "Zhi-Kun Zhang", "Tian-Hao Wang", "M. Backes", "Mathias Humbert", "Yang Zhang" ], "author_source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "abstract_characters": 1320, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p803f6c53d803", "title": "Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models", "year": 2022, "venue": "ACM CCS", "edition": "ccs-2022", "url": "https://doi.org/10.1145/3548606.3560683", "source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "summary": "Studies extraction and adversarial manipulation of black-box neural passage rankers using surrogate models and short token triggers; included as an NLP/retrieval-security precursor.", "authors": "Jiawei Liu, Yangyang Kang, Di Tang, Kaisong Song, Changlong Sun, Xiao-Feng Wang, Wei Lu, Xiao-Zhong Liu", "doi": "10.1145/3548606.3560683", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors", "Detection & robustness", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1651, "author_names": [ "Jiawei Liu", "Yangyang Kang", "Di Tang", "Kaisong Song", "Changlong Sun", "Xiao-Feng Wang", "Wei Lu", "Xiao-Zhong Liu" ], "author_source": "https://www.semanticscholar.org/paper/d03f4ca6facd18b30ab4c6034350d430bca0bc33" }, { "key": "pf7e4173a8e63", "title": "StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning", "year": 2022, "venue": "ACM CCS", "edition": "ccs-2022", "url": "https://doi.org/10.1145/3548606.3560586", "source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "summary": "Demonstrates extraction of pretrained image encoders, including OpenAI CLIP, through feature-vector queries and evaluates defenses.", "authors": "Yupei Liu, Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong", "doi": "10.1145/3548606.3560586", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Model security", "Model extraction" ], "abstract_reviewed": true, "abstract_source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1408, "author_names": [ "Yupei Liu", "Jinyuan Jia", "Hongbin Liu", "Neil Zhenqiang Gong" ], "author_source": "https://arxiv.org/abs/2201.05889" }, { "key": "pf549d9fbf9a1", "title": "Why So Toxic?: Measuring and Triggering Toxic Behavior in Open-Domain Chatbots", "year": 2022, "venue": "ACM CCS", "edition": "ccs-2022", "url": "https://doi.org/10.1145/3548606.3560599", "source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "summary": "Measures and triggers toxic behavior in open-domain chatbots.", "authors": "Wai-Man Si, M. Backes, Jeremy Blackburn, Emiliano De Cristofaro, G. Stringhini, Savvas Zannettou, Yang Zhang", "doi": "10.1145/3548606.3560599", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://sigsac.org/ccs/CCS2022/proceedings/ccs-proceedings.html", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1582, "author_names": [ "Wai-Man Si", "M. Backes", "Jeremy Blackburn", "Emiliano De Cristofaro", "G. Stringhini", "Savvas Zannettou", "Yang Zhang" ], "author_source": "https://www.semanticscholar.org/paper/089c3a879253d730e98eaed7b945fa6c4113ca1f" }, { "key": "p96c3a5ae8f09", "title": "Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions", "year": 2022, "venue": "IEEE S&P", "edition": "sp-2022", "url": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2022/program-papers.html", "summary": "Measures insecure code suggestions produced by GitHub Copilot.", "authors": "Hammond Pearce, Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, Ramesh Karri", "doi": "https://doi.org/10.1145/3610721", "areas": [ "LLM", "Foundations" ], "topics": [ "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/6e5eb6167d9766fbb4d14611d15cf95d7b75fb9d", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1260, "author_names": [ "Hammond Pearce", "Baleegh Ahmad", "Benjamin Tan", "Brendan Dolan-Gavitt", "Ramesh Karri" ], "author_source": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html" }, { "key": "p283e134de1e9", "title": "Bad Characters: Imperceptible NLP Attacks", "year": 2022, "venue": "IEEE S&P", "edition": "sp-2022", "url": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2022/program-papers.html", "summary": "Studies visually subtle character changes that disrupt NLP systems.", "authors": "Nicholas Boucher, Ilia Shumailov, Ross Anderson, Nicolas Papernot", "doi": "https://doi.org/10.1109/sp46214.2022.9833641", "areas": [ "Foundations" ], "topics": [ "Model security" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/cbc1e8bbfe98f94c0d13d111b824cf603b62712c", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1760, "author_names": [ "Nicholas Boucher", "Ilia Shumailov", "Ross Anderson", "Nicolas Papernot" ], "author_source": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html" }, { "key": "p2f19433f9dc2", "title": "BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning", "year": 2022, "venue": "IEEE S&P", "edition": "sp-2022", "url": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2022/program-papers.html", "summary": "Backdoors pretrained visual and CLIP encoders so downstream tasks inherit attacker-controlled behavior.", "authors": "Jinyuan Jia, Yupei Liu, Neil Zhenqiang Gong", "doi": "https://doi.org/10.1109/sp46214.2022.9833644", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/83ff3789f54577c13dda82b2e0a07cdbbf498c97", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1671, "author_names": [ "Jinyuan Jia", "Yupei Liu", "Neil Zhenqiang Gong" ], "author_source": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html" }, { "key": "p74713e1e7751", "title": "PICCOLO: Exposing Complex Backdoors in NLP Transformer Models", "year": 2022, "venue": "IEEE S&P", "edition": "sp-2022", "url": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2022/program-papers.html", "summary": "Finds complex backdoors in transformer-based NLP models.", "authors": "Yingqi Liu, Guangyu Shen, Guanhong Tao, Shengwei An, Shiqing Ma, Xiangyu Zhang", "doi": "https://doi.org/10.1109/sp46214.2022.9833579", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/08aaaf7ae3d61875e7bcf5c1bb0df4f17066e300", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1418, "author_names": [ "Yingqi Liu", "Guangyu Shen", "Guanhong Tao", "Shengwei An", "Shiqing Ma", "Xiangyu Zhang" ], "author_source": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html" }, { "key": "p0f02958e8327", "title": "Spinning Language Models: Risks of Propaganda-as-a-Service and Countermeasures", "year": 2022, "venue": "IEEE S&P", "edition": "sp-2022", "url": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2022/program-papers.html", "summary": "Poisons language generation to insert attacker-chosen spin.", "authors": "Eugene Bagdasaryan, Vitaly Shmatikov", "doi": "https://doi.org/10.1109/SP46214.2022.9833572", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/0429020abad6f22ea17681fa403aa591693bb607", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 2208, "author_names": [ "Eugene Bagdasaryan", "Vitaly Shmatikov" ], "author_source": "https://www.ieee-security.org/TC/SP2022/accepted-papers.html" }, { "key": "p34273a4b9747", "title": "On Utility and Privacy in Synthetic Genomic Data", "year": 2022, "venue": "NDSS", "edition": "ndss-2022", "url": "https://www.ndss-symposium.org/ndss-paper/auto-draft-231/", "source": "https://www.ndss-symposium.org/ndss2022/accepted-papers/", "summary": "Evaluates synthetic genomic generators and shows that useful synthetic data can still expose training membership.", "authors": "Bristena Oprisanu, Georgi Ganev, Emiliano De Cristofaro", "author_names": [ "Bristena Oprisanu", "Georgi Ganev", "Emiliano De Cristofaro" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/auto-draft-231/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/auto-draft-231/", "abstract_characters": 1494, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p37999cda91fb", "title": "Property Inference Attacks Against GANs", "year": 2022, "venue": "NDSS", "edition": "ndss-2022", "url": "https://www.ndss-symposium.org/ndss-paper/auto-draft-240/", "source": "https://www.ndss-symposium.org/ndss2022/accepted-papers/", "summary": "Infers aggregate properties of GAN training datasets from generated samples, including black-box settings.", "authors": "Junhao Zhou, Yufei Chen, Chao Shen, Yang Zhang", "author_names": [ "Junhao Zhou", "Yufei Chen", "Chao Shen", "Yang Zhang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/auto-draft-240/", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/auto-draft-240/", "abstract_characters": 1635, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pb9622393b472", "title": "Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks", "year": 2022, "venue": "USENIX Security", "edition": "usenix-2022", "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-huiying", "source": "https://www.usenix.org/conference/usenixsecurity22/technical-sessions", "summary": "Detects similar adversarial queries to defend black-box neural services, with an extension to text classification.", "authors": "Huiying Li, Shawn Shan, Emily Wenger, Jiayun Zhang, Haitao Zheng, Ben Y. Zhao", "doi": "", "areas": [ "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-huiying", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Foundational/adjoining robustness paper with explicit language/CLIP evaluation.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1492, "author_names": [ "Huiying Li", "Shawn Shan", "Emily Wenger", "Jiayun Zhang", "Haitao Zheng", "Ben Y. Zhao" ], "author_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-huiying" }, { "key": "pa5f278864d10", "title": "Hidden Trigger Backdoor Attack on NLP Models via Linguistic Style Manipulation", "year": 2022, "venue": "USENIX Security", "edition": "usenix-2022", "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/pan-hidden", "source": "https://www.usenix.org/conference/usenixsecurity22/technical-sessions", "summary": "Uses writing style as a concealed trigger for NLP backdoors.", "authors": "Xudong Pan, Mi Zhang, Beina Sheng, Jiaming Zhu, Min Yang", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/pan-hidden", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1727, "author_names": [ "Xudong Pan", "Mi Zhang", "Beina Sheng", "Jiaming Zhu", "Min Yang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/pan-hidden" }, { "key": "p256863ec4318", "title": "On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning", "year": 2022, "venue": "USENIX Security", "edition": "usenix-2022", "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/thudi", "source": "https://www.usenix.org/conference/usenixsecurity22/technical-sessions", "summary": "Shows limitations of verifying unlearning from model states and argues for auditing the underlying algorithm.", "authors": "Anvith Thudi, Hengrui Jia, Ilia Shumailov, Nicolas Papernot", "author_names": [ "Anvith Thudi", "Hengrui Jia", "Ilia Shumailov", "Nicolas Papernot" ], "author_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/thudi", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/thudi", "abstract_characters": 1372, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p1e2056bcc39a", "title": "Seeing is Living? Rethinking the Security of Facial Liveness Verification in the Deepfake Era", "year": 2022, "venue": "USENIX Security", "edition": "usenix-2022", "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-changjiang", "source": "https://www.usenix.org/conference/usenixsecurity22/technical-sessions", "summary": "Audits facial-liveness verification services against deepfake-powered attacks and evaluates downstream application risks.", "authors": "Changjiang Li, Li Wang, Shouling Ji, Xuhong Zhang, Zhaohan Xi, Shanqing Guo, Ting Wang", "author_names": [ "Changjiang Li", "Li Wang", "Shouling Ji", "Xuhong Zhang", "Zhaohan Xi", "Shanqing Guo", "Ting Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-changjiang", "doi": "", "areas": [ "Image & diffusion" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-changjiang", "abstract_characters": 1846, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "peb14e840b57f", "title": "Synthetic Data – Anonymisation Groundhog Day", "year": 2022, "venue": "USENIX Security", "edition": "usenix-2022", "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/stadler", "source": "https://www.usenix.org/conference/usenixsecurity22/technical-sessions", "summary": "Evaluates synthetic-data publishing and finds that privacy gains and utility can be weaker and less predictable than expected.", "authors": "Theresa Stadler, Bristena Oprisanu, Carmela Troncoso", "author_names": [ "Theresa Stadler", "Bristena Oprisanu", "Carmela Troncoso" ], "author_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/stadler", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity22/presentation/stadler", "abstract_characters": 1326, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pe4415609b25a", "title": "Backdoor Pre-trained Models Can Transfer to All", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3485370", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Plants pretrained-language-model backdoors that survive transfer to downstream tasks.", "authors": "Lujia Shen, Shouling Ji, Xuhong Zhang, Jinfeng Li, Jing Chen, Jie Shi, Chengfang Fang, Jianwei Yin, Ting Wang", "doi": "10.1145/3460120.3485370", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/dea3b07c92017525f443b527824dff502e5ed590", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1516, "author_names": [ "Lujia Shen", "Shouling Ji", "Xuhong Zhang", "Jinfeng Li", "Jing Chen", "Jie Shi", "Chengfang Fang", "Jianwei Yin", "Ting Wang" ], "author_source": "https://doi.org/10.1145/3460120.3485370" }, { "key": "p0c1fdf6190bd", "title": "DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3484579", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Uses compressed and aggregated teacher gradients to train differentially private generative models.", "authors": "Boxin Wang, Fan Wu, Yunhui Long, Luka Rimanic, Ce Zhang, Bo Li", "author_names": [ "Boxin Wang", "Fan Wu", "Yunhui Long", "Luka Rimanic", "Ce Zhang", "Bo Li" ], "author_source": "https://www.semanticscholar.org/paper/7a3cf7aa2a25d70255c32c2a2c9768a71f6e5e38", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/7a3cf7aa2a25d70255c32c2a2c9768a71f6e5e38", "abstract_characters": 2123, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p6b37917d644d", "title": "EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3484749", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Infers whether images were used to train contrastive encoders, including OpenAI CLIP, through black-box feature queries.", "authors": "Hongbin Liu, Jinyuan Jia, Wenjie Qu, Neil Zhenqiang Gong", "doi": "10.1145/3460120.3484749", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/dcf115bd311988638bf4791bf6f88b1aeed0322d", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "2026-10-23", "abstract_characters": 1705, "author_names": [ "Hongbin Liu", "Jinyuan Jia", "Wenjie Qu", "Neil Zhenqiang Gong" ], "author_source": "https://doi.org/10.1145/3460120.3484749" }, { "key": "p466dfae216f5", "title": "Hidden Backdoors in Human-Centric Language Models", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3484576", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Plants concealed backdoors in human-centric language models.", "authors": "Shaofeng Li, Hui Liu, Tian Dong, Benjamin Zi Hao Zhao, Minhui Xue, Haojin Zhu, Jialiang Lu", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors", "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/c586f3a69102fffdff178ca79b0be767d384da43", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1672, "author_names": [ "Shaofeng Li", "Hui Liu", "Tian Dong", "Benjamin Zi Hao Zhao", "Minhui Xue", "Haojin Zhu", "Jialiang Lu" ], "author_source": "https://doi.org/10.1145/3460120.3484576" }, { "key": "p74f54cb18120", "title": "TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3485251", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Recovers GAN training records through membership collisions in released synthetic tabular data.", "authors": "Ao-Ting Hu, Renjie Xie, Zhigang Lu, Ai-Qun Hu, Min-Hui Xue", "author_names": [ "Ao-Ting Hu", "Renjie Xie", "Zhigang Lu", "Ai-Qun Hu", "Min-Hui Xue" ], "author_source": "https://www.semanticscholar.org/paper/e95d584d7e4374fafc087e1090b3f21a678ea42d", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Membership inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/e95d584d7e4374fafc087e1090b3f21a678ea42d", "abstract_characters": 1800, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "pbb8053a93f2b", "title": "When Machine Unlearning Jeopardizes Privacy", "year": 2021, "venue": "ACM CCS", "edition": "ccs-2021", "url": "https://doi.org/10.1145/3460120.3484756", "source": "https://www.sigsac.org/ccs/CCS2021/accepted-papers.html", "summary": "Shows that comparing original and unlearned models can reveal whether a deleted record was in the training set.", "authors": "Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Mathias Humbert, Yang Zhang", "author_names": [ "Min Chen", "Zhikun Zhang", "Tianhao Wang", "Michael Backes", "Mathias Humbert", "Yang Zhang" ], "author_source": "https://arxiv.org/abs/2005.02205", "doi": "", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning", "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/2005.02205", "abstract_characters": 1748, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-unlearning privacy foundation; not LLM-specific.", "review_note": "All-years recheck: author preprint abstract reviewed and matched to official conference title.", "added_date": "2026-10-23" }, { "key": "p95c9ae8f9fc0", "title": "Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding", "year": 2021, "venue": "IEEE S&P", "edition": "sp-2021", "url": "https://www.ieee-security.org/TC/SP2021/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2021/program-papers.html", "summary": "Embeds hidden provenance information in generated text.", "authors": "Sahar Abdelnabi, Mario Fritz", "doi": "https://doi.org/10.1109/sp40001.2021.00083", "areas": [ "LLM", "Foundations" ], "topics": [ "Provenance & watermarking", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://openalex.org/W3083360291", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. The abstract was obtained from scholarly metadata; the official listing verifies the venue.", "added_date": "", "abstract_characters": 1147, "author_names": [ "Sahar Abdelnabi", "Mario Fritz" ], "author_source": "https://www.ieee-security.org/TC/SP2021/accepted-papers.html" }, { "key": "p0f2e6d6d0f95", "title": "Detecting AI Trojans Using Meta Neural Analysis", "year": 2021, "venue": "IEEE S&P", "edition": "sp-2021", "url": "https://www.ieee-security.org/TC/SP2021/accepted-papers.html", "source": "https://www.ieee-security.org/TC/SP2021/program-papers.html", "summary": "Detects model backdoors with a learned meta-classifier, including experiments on natural-language models.", "authors": "Xiaojun Xu, Qi Wang, Huichen Li, Nikita Borisov, Carl A. Gunter, Bo Li", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/1910.03137", "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "Adjacent scope: NLP predecessor, vision-language backbone, generative steganography, or security-assistant reliability.", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "2026-10-23", "abstract_characters": 1606, "author_names": [ "Xiaojun Xu", "Qi Wang", "Huichen Li", "Nikita Borisov", "Carl A. Gunter", "Bo Li" ], "author_source": "https://www.ieee-security.org/TC/SP2021/accepted-papers.html" }, { "key": "pmachineunlearning2021", "title": "Machine Unlearning", "year": 2021, "venue": "IEEE S&P", "edition": "sp-2021", "url": "https://doi.org/10.1109/SP40001.2021.00019", "source": "https://www.ieee-security.org/TC/SP2021/accepted-papers.html", "summary": "Introduces SISA training to reduce the retraining needed to remove individual training examples from a model.", "authors": "Lucas Bourtoule, Varun Chandrasekaran, Christopher A. Choquette-Choo, Hengrui Jia, Adelin Travers, Baiwu Zhang, David Lie, Nicolas Papernot", "author_names": [ "Lucas Bourtoule", "Varun Chandrasekaran", "Christopher A. Choquette-Choo", "Hengrui Jia", "Adelin Travers", "Baiwu Zhang", "David Lie", "Nicolas Papernot" ], "author_source": "https://arxiv.org/abs/1912.03817", "doi": "10.1109/SP40001.2021.00019", "areas": [ "Foundations" ], "topics": [ "Unlearning & fine-tuning", "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://arxiv.org/abs/1912.03817", "abstract_characters": 1763, "new_in_review": true, "status": "Published", "scope_note": "Foundational machine unlearning framework. First preprint: December 9, 2019; conference publication: IEEE S&P 2021.", "review_note": "Abstract reviewed; preprint history explicitly confirms publication in IEEE S&P 2021. Conference-year grouping does not use the preprint year.", "added_date": "2026-10-23", "preprint_year": 2019, "preprint_url": "https://arxiv.org/abs/1912.03817" }, { "key": "p69707980f137", "title": "Extracting Training Data from Large Language Models", "year": 2021, "venue": "USENIX Security", "edition": "usenix-2021", "url": "https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-extracting", "source": "https://www.usenix.org/conference/usenixsecurity21/technical-sessions", "summary": "Demonstrates recovery of memorized training text from GPT-2.", "authors": "Nicholas Carlini, Florian Tramèr, Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom Brown, Dawn Song, Úlfar Erlingsson, Alina Oprea, Colin Raffel", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Model security", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-extracting", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1059, "author_names": [ "Nicholas Carlini", "Florian Tramèr", "Eric Wallace", "Matthew Jagielski", "Ariel Herbert-Voss", "Katherine Lee", "Adam Roberts", "Tom Brown", "Dawn Song", "Úlfar Erlingsson", "Alina Oprea", "Colin Raffel" ], "author_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-extracting" }, { "key": "p9c011109d42b", "title": "T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification", "year": 2021, "venue": "USENIX Security", "edition": "usenix-2021", "url": "https://www.usenix.org/conference/usenixsecurity21/presentation/azizi", "source": "https://www.usenix.org/conference/usenixsecurity21/technical-sessions", "summary": "Detects trojans in neural text classifiers using generated probes.", "authors": "Ahmadreza Azizi, Ibrahim Asadullah Tahmid, Asim Waheed, Neal Mangaokar, Jiameng Pu, Mobin Javed, Chandan K. Reddy, Bimal Viswanath", "doi": "", "areas": [ "Foundations" ], "topics": [ "Poisoning & backdoors", "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/azizi", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1590, "author_names": [ "Ahmadreza Azizi", "Ibrahim Asadullah Tahmid", "Asim Waheed", "Neal Mangaokar", "Jiameng Pu", "Mobin Javed", "Chandan K. Reddy", "Bimal Viswanath" ], "author_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/azizi" }, { "key": "p9af92db1442c", "title": "You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion", "year": 2021, "venue": "USENIX Security", "edition": "usenix-2021", "url": "https://www.usenix.org/conference/usenixsecurity21/presentation/schuster", "source": "https://www.usenix.org/conference/usenixsecurity21/technical-sessions", "summary": "Poisons neural code completion to suggest insecure implementations.", "authors": "Roei Schuster, Congzheng Song, Eran Tromer, Vitaly Shmatikov", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors", "Code assistants" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/schuster", "new_in_review": false, "status": "Listed in conference proceedings / program", "scope_note": "", "review_note": "Abstract screened with keyword-assisted retrieval and review of scope matches. Abstract obtained from the linked official or author source.", "added_date": "", "abstract_characters": 1294, "author_names": [ "Roei Schuster", "Congzheng Song", "Eran Tromer", "Vitaly Shmatikov" ], "author_source": "https://www.usenix.org/conference/usenixsecurity21/presentation/schuster" }, { "key": "pd2ec9ade96c9", "title": "Analyzing Information Leakage of Updates to Natural Language Models", "year": 2020, "venue": "ACM CCS", "edition": "ccs-2020", "url": "https://dl.acm.org/doi/10.1145/3372297.3417880", "source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "summary": "Compares language-model snapshots to infer sensitive changes in their training data after updates.", "authors": "Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Rühle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt", "author_names": [ "Santiago Zanella-Béguelin", "Lukas Wutschitz", "Shruti Tople", "Victor Rühle", "Andrew Paverd", "Olga Ohrimenko", "Boris Köpf", "Marc Brockschmidt" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://dl.acm.org/doi/10.1145/3372297.3417880", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 948 }, { "key": "p55b14679bc7c", "title": "GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models", "year": 2020, "venue": "ACM CCS", "edition": "ccs-2020", "url": "https://dl.acm.org/doi/10.1145/3372297.3417238", "source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "summary": "Systematizes membership inference against generative models and evaluates attacks across images, medical data, and locations.", "authors": "Dingfan Chen, Ning Yu, Yang Zhang, Mario Fritz", "author_names": [ "Dingfan Chen", "Ning Yu", "Yang Zhang", "Mario Fritz" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://dl.acm.org/doi/10.1145/3372297.3417238", "new_in_review": true, "status": "Published", "scope_note": "Earlier generative image-model security (GAN); predates diffusion models.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1836 }, { "key": "pd9a336b3abc3", "title": "Information Leakage in Embedding Models", "year": 2020, "venue": "ACM CCS", "edition": "ccs-2020", "url": "https://dl.acm.org/doi/10.1145/3372297.3417270", "source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "summary": "Demonstrates input reconstruction, sensitive-attribute inference, and membership leakage from text embeddings.", "authors": "Congzheng Song, Ananth Raghunathan", "author_names": [ "Congzheng Song", "Ananth Raghunathan" ], "author_source": "https://sigsac.hosting.acm.org/ccs/CCS2020/proceedings.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://dl.acm.org/doi/10.1145/3372297.3417270", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1841 }, { "key": "p21611c01f9e4", "title": "Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning", "year": 2020, "venue": "IEEE S&P", "edition": "sp-2020", "url": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "source": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "summary": "Poisons public training corpora to manipulate word embeddings and downstream retrieval, recognition, and translation.", "authors": "Roei Schuster, Tal Schuster, Yoav Meri, Vitaly Shmatikov", "author_names": [ "Roei Schuster", "Tal Schuster", "Yoav Meri", "Vitaly Shmatikov" ], "author_source": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Poisoning & backdoors" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/318a3f40e6384729e371d046a4738cea72d7075d", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 1584 }, { "key": "pe37e79140d14", "title": "Privacy Risks of General-Purpose Language Models", "year": 2020, "venue": "IEEE S&P", "edition": "sp-2020", "url": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "source": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "summary": "Shows how embeddings from pretrained language models reveal sensitive input attributes and evaluates defenses.", "authors": "Xudong Pan, Mi Zhang, Shouling Ji, Min Yang", "author_names": [ "Xudong Pan", "Mi Zhang", "Shouling Ji", "Min Yang" ], "author_source": "https://www.ieee-security.org/TC/SP2020/program-papers.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference" ], "abstract_reviewed": true, "abstract_source": "https://www.semanticscholar.org/paper/b3c73de96640ee858f83c3f0eda2a3d15d59b847", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Re-audit: available abstract reviewed against the conference title. Author metadata follows the official conference listing.", "added_date": "2026-10-23", "abstract_characters": 2302 }, { "key": "p75eb55733ebb", "title": "TextShield: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation", "year": 2020, "venue": "USENIX Security", "edition": "usenix-2020", "url": "https://www.usenix.org/conference/usenixsecurity20/presentation/li-jinfeng", "source": "https://www.usenix.org/conference/usenixsecurity20/technical-sessions", "summary": "Defends Chinese text classifiers against adversarial text using multimodal embeddings and neural translation.", "authors": "Jinfeng Li, Tianyu Du, Shouling Ji, Rong Zhang, Quan Lu, Min Yang, Ting Wang", "author_names": [ "Jinfeng Li", "Tianyu Du", "Shouling Ji", "Rong Zhang", "Quan Lu", "Min Yang", "Ting Wang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity20/technical-sessions", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity20/presentation/li-jinfeng", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1240 }, { "key": "p432901c08b58", "title": "Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning", "year": 2020, "venue": "USENIX Security", "edition": "usenix-2020", "url": "https://www.usenix.org/conference/usenixsecurity20/presentation/salem", "source": "https://www.usenix.org/conference/usenixsecurity20/technical-sessions", "summary": "Uses changes in model outputs across updates to infer and reconstruct the newly added training dataset.", "authors": "Ahmed Salem, Apratim Bhattacharya, Michael Backes, Mario Fritz, Yang Zhang", "author_names": [ "Ahmed Salem", "Apratim Bhattacharya", "Michael Backes", "Mario Fritz", "Yang Zhang" ], "author_source": "https://www.usenix.org/conference/usenixsecurity20/technical-sessions", "doi": "", "areas": [ "Foundations" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity20/presentation/salem", "abstract_characters": 1329, "new_in_review": true, "status": "Listed in conference proceedings / program", "scope_note": "General machine-learning privacy or unlearning foundation; not an LLM-specific result.", "review_note": "All-years recheck: abstract reviewed; author list matched to official conference or bibliographic metadata.", "added_date": "2026-10-23" }, { "key": "p8c2ecff34b47", "title": "Exploiting Unintended Feature Leakage in Collaborative Learning", "year": 2019, "venue": "IEEE S&P", "edition": "sp-2019", "url": "https://www.ieee-security.org/TC/SP2019/program-papers.html", "source": "https://www.ieee-security.org/TC/SP2019/program-papers.html", "summary": "Shows that shared model updates reveal training membership and unintended private properties, including leakage through embedding gradients.", "authors": "Luca Melis, Congzheng Song, Emiliano De Cristofaro, Vitaly Shmatikov", "author_names": [ "Luca Melis", "Congzheng Song", "Emiliano De Cristofaro", "Vitaly Shmatikov" ], "author_source": "https://www.ieee-security.org/TC/SP2019/program-papers.html", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference", "Membership inference" ], "abstract_reviewed": true, "abstract_source": "https://www.ieee-security.org/TC/SP2019/program-papers.html", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1027 }, { "key": "p4f8857c7d4cf", "title": "TextBugger: Generating Adversarial Text Against Real-world Applications", "year": 2019, "venue": "NDSS", "edition": "ndss-2019", "url": "https://www.ndss-symposium.org/ndss-paper/textbugger-generating-adversarial-text-against-real-world-applications/", "source": "https://www.ndss-symposium.org/ndss2019/accepted-papers/", "summary": "Generates meaning-preserving adversarial text that fools text classifiers and deployed NLP services.", "authors": "Jinfeng Li, Shouling Ji, Tianyu Du, Bo Li, Ting Wang", "author_names": [ "Jinfeng Li", "Shouling Ji", "Tianyu Du", "Bo Li", "Ting Wang" ], "author_source": "https://www.ndss-symposium.org/ndss-paper/textbugger-generating-adversarial-text-against-real-world-applications/", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Detection & robustness" ], "abstract_reviewed": true, "abstract_source": "https://www.ndss-symposium.org/ndss-paper/textbugger-generating-adversarial-text-against-real-world-applications/", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1640 }, { "key": "p5ae0b7b312e7", "title": "CT-GAN: Malicious Tampering of 3D Medical Imagery using Deep Learning", "year": 2019, "venue": "USENIX Security", "edition": "usenix-2019", "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/mirsky", "source": "https://www.usenix.org/conference/usenixsecurity19/technical-sessions", "summary": "Uses a conditional GAN to add or remove signs of disease in medical scans, demonstrating realistic image-manipulation attacks.", "authors": "Yisroel Mirsky, Tom Mahler, Ilan Shelef, Yuval Elovici", "author_names": [ "Yisroel Mirsky", "Tom Mahler", "Ilan Shelef", "Yuval Elovici" ], "author_source": "https://www.usenix.org/conference/usenixsecurity19/technical-sessions", "doi": "", "areas": [ "Image & diffusion", "Foundations" ], "topics": [ "Human factors & misuse" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity19/presentation/mirsky", "new_in_review": true, "status": "Published", "scope_note": "Earlier generative image-model security (GAN); predates diffusion models.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1229 }, { "key": "pc486ae12df1b", "title": "The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks", "year": 2019, "venue": "USENIX Security", "edition": "usenix-2019", "url": "https://www.usenix.org/conference/usenixsecurity19/presentation/carlini", "source": "https://www.usenix.org/conference/usenixsecurity19/technical-sessions", "summary": "Quantifies unintended memorization in generative sequence models and demonstrates extraction of rare training secrets.", "authors": "Nicholas Carlini, Chang Liu, Úlfar Erlingsson, Jernej Kos, Dawn Song", "author_names": [ "Nicholas Carlini", "Chang Liu", "Úlfar Erlingsson", "Jernej Kos", "Dawn Song" ], "author_source": "https://www.usenix.org/conference/usenixsecurity19/technical-sessions", "doi": "", "areas": [ "LLM", "Foundations" ], "topics": [ "Privacy & inference", "Training data extraction" ], "abstract_reviewed": true, "abstract_source": "https://www.usenix.org/conference/usenixsecurity19/presentation/carlini", "new_in_review": true, "status": "Published", "scope_note": "Foundational language/NLP security or privacy research; predates current LLM agents.", "review_note": "Official conference authors verified. Abstract retrieved and screened for scope.", "added_date": "2026-10-23", "abstract_characters": 1055 } ]