Check out LLM & Agent Security and Privacy, a searchable index of LLM and agent security and privacy papers from the top four security conferences.
A preprint on “Activation-Conditioned Self-Distillation” is now available on arXiv. PDF
A preprint on membership inference against on-policy distillation, “Leaky Students: Membership Inference against On-Policy Distillation”, is now available on arXiv. PDF
Our paper “SHE-LoRA: Selective Homomorphic Encryption for Federated Tuning with Heterogeneous LoRA” has been accepted to ICLR 2026. PDF
Our paper “In-Context Probing for Membership Inference in Fine-Tuned Language Models” has been accepted to NDSS 2026. Congratulations to Zhexi! PDFCode
A preprint on selective homomorphic encryption for joint federated learning in cross-device scenarios is now available on arXiv. PDF
A preprint on the dynamics of membership privacy in deep learning is now available on arXiv. PDF
Our paper “On the Adversarial Robustness of Graph Neural Networks with Graph Reduction” has been accepted to ESORICS 2025. Congratulations to our undergraduate researcher Kerui Wu! PDFCode
Our paper “Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble” has been accepted to CCS 2025. Congratulations to our undergraduate researchers Zhiqi Wang (first author), Chengyu Zhang, and Yuetian Chen! PDFCode
Our paper “Privacy and Accuracy-Aware AI/ML Model Deduplication” has been accepted to SIGMOD 2025. PDF
A preprint on the adversarial robustness of graph neural networks is now available on arXiv. PDF
Our paper “CMASan: Custom Memory Allocator-aware Address Sanitizer” has been accepted to the IEEE Symposium on Security and Privacy (S&P) 2025. PDFCode
Served on the TPC for AsiaCCS 2025.
Our paper “On the Robustness of Graph Reduction Against GNN Backdoor” has been accepted to the 17th ACM Workshop on Artificial Intelligence and Security (AISec 2024). PDF
Our paper “Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control” has been accepted to IJCAI 2024. PDFCode
Our survey on privacy in vertical federated learning is now available on arXiv. If you’re interested in VFL privacy research, please check it out! PDF
A preprint on LLM-guided backdoor attacks is now available on arXiv. PDFCode
Invited to serve as a PC member for IEEE ICDCS 2024 (Track of Security, Privacy, and Trust in Distributed Systems).
We have been awarded an AIRC RPI-IBM research grant.
Our paper “A Comparison of End-to-End Decision Forest Inference Pipelines” has been accepted to ACM SoCC 2023. Thanks to all the co-authors!
Our paper “Privacy-Preserving Redaction of Diagnosis Data through Source Code Analysis” has been accepted to SSDBM 2023. Many thanks to Lixi, Prof. Jia Zou, and Hong Min!