[1] Chaoxiang He, Bin Benjamin Zhu, Xiaojing Ma, Hai Jin, Shengshan Hu. Feature-Indistinguishable Attack to Circumvent Trapdoor-Enabled Defense. ACM CCS 2021 (CCF-A).
[2] Chaoxiang He, Xiaojing Ma, Bin Benjamin Zhu, Yimiao Zeng, Xiaofan Bai, Hai Jin, Dongmei Zhang. DorPatch: Distributed and Occlusion-Robust Adversarial Patch to Evade Certifiable Defenses. NDSS 2024 (CCF-A).
[3] Xiaofan Bai#, Chaoxiang He#, Xiaojing Ma, Bin Benjamin Zhu, Hai Jin. Intersecting Boundary Sensitive Fingerprinting for Tampering Detection of DNN Models. ICML 2024 (CCF-A).
[4] Chaoxiang He, Xiaofan Bai, Xiaojing Ma, Bin Benjamin Zhu, Pingyi Hu, Jiayun Fu, Hai Jin, Dongmei Zhang. Towards Stricter Black-box Integrity Verification of Deep Neural Network Models. MM 2024 (CCF-A).
[5] Chaoxiang He, Yimiao Zeng, Xiaojing Ma, Bin Benjamin Zhu, Zewei Li, Shixin Li, Hai Jin. MysticMask:Adversarial Mask for Impersonation Attack Against Face Recognition Systems. IEEE ICME 2024 (CCF-B).