default search action
Google
Google Scholar
Semantic Scholar
Internet Archive Scholar
CiteSeerX
ORCIDKaiyuan Zhang 0002
Person information
- unicode name: 张开元
- affiliation: Purdue University, West Lafayette, IN, USA
- affiliation (former): Zhejiang University, China
Other persons with the same name
- Kaiyuan Zhang — disambiguation page
- Kaiyuan Zhang 0001 — University of Washington, Seattle, WA, USA
- Kaiyuan Zhang 0003
![[0000-0003-0786-738X]](https://dblp.dagstuhl.de/img/orcid-mark.12x12.png "0000-0003-0786-738X")
— Xi'an Jiaotong University, Xi'an, China - Kaiyuan Zhang 0004 — Dalian University of Technology, Dalian, China
- Kaiyuan Zhang 0005 — Shanghai Jiao Tong University, Shanghai, China
Refine list
refinements active!
zoomed in on ?? of ?? records
view refined list in
export refined list as
2020 – today
- 2025
[c19]Lu Yan, Siyuan Cheng, Xuan Chen, Kaiyuan Zhang, Guangyu Shen, Xiangyu Zhang:
System Prompt Hijacking via Permutation Triggers in LLM Supply Chains. ACL (Findings) 2025: 4452-4473- [c18]Kaiyuan Zhang, Siyuan Cheng, Guangyu Shen, Bruno Ribeiro, Shengwei An, Pin-Yu Chen, Xiangyu Zhang, Ninghui Li:
CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. NDSS 2025 - [c17]Guangyu Shen, Siyuan Cheng, Zhuo Zhang, Guanhong Tao, Kaiyuan Zhang, Hanxi Guo, Lu Yan, Xiaolong Jin, Shengwei An, Shiqing Ma, Xiangyu Zhang:
BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target. SP 2025: 1676-1694 - [c16]Kaiyuan Zhang, Siyuan Cheng, Hanxi Guo, Yuetian Chen, Zian Su, Shengwei An, Yuntao Du, Charles Fleming, Ashish Kundu, Xiangyu Zhang, Ninghui Li:
SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks. USENIX Security Symposium 2025: 8135-8154 - [i19]Kaiyuan Zhang, Siyuan Cheng, Guangyu Shen, Bruno Ribeiro, Shengwei An, Pin-Yu Chen, Xiangyu Zhang, Ninghui Li:
CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling. CoRR abs/2501.15718 (2025) - [i18]Zian Su, Ziyang Huang, Kaiyuan Zhang, Xiangyu Zhang:
μKE: Matryoshka Unstructured Knowledge Editing of Large Language Models. CoRR abs/2504.01196 (2025) - [i17]Kaiyuan Zhang, Zian Su, Pin-Yu Chen, Elisa Bertino, Xiangyu Zhang, Ninghui Li:
LLM Agents Should Employ Security Principles. CoRR abs/2505.24019 (2025) - [i16]Shiwei Feng, Xiangzhe Xu, Xuan Chen, Kaiyuan Zhang, Syed Yusuf Ahmed, Zian Su, Mingwei Zheng, Xiangyu Zhang:
IntenTest: Stress Testing for Intent Integrity in API-Calling LLM Agents. CoRR abs/2506.07524 (2025) - [i15]Kaiyuan Zhang, Siyuan Cheng, Hanxi Guo, Yuetian Chen, Zian Su, Shengwei An, Yuntao Du, Charles Fleming, Ashish Kundu, Xiangyu Zhang, Ninghui Li:
SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks. CoRR abs/2506.10424 (2025) - [i14]Hanxi Guo, Siyuan Cheng, Kaiyuan Zhang, Guangyu Shen, Xiangyu Zhang:
CodeMirage: A Multi-Lingual Benchmark for Detecting AI-Generated and Paraphrased Source Code from Production-Level LLMs. CoRR abs/2506.11059 (2025) - [i13]Yuntao Du, Jiacheng Li, Yuetian Chen, Kaiyuan Zhang, Zhizhen Yuan, Hanshen Xiao, Bruno Ribeiro, Ninghui Li:
Cascading and Proxy Membership Inference Attacks. CoRR abs/2507.21412 (2025) - 2024
- [c15]Shengwei An, Sheng-Yen Chou, Kaiyuan Zhang, Qiuling Xu, Guanhong Tao, Guangyu Shen, Siyuan Cheng, Shiqing Ma, Pin-Yu Chen, Tsung-Yi Ho, Xiangyu Zhang:
Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. AAAI 2024: 10847-10855 - [c14]Siyuan Cheng, Guanhong Tao, Yingqi Liu, Guangyu Shen, Shengwei An, Shiwei Feng, Xiangzhe Xu, Kaiyuan Zhang, Shiqing Ma, Xiangyu Zhang:
Lotus: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. CVPR 2024: 24798-24809 - [c13]Siyuan Cheng, Guangyu Shen, Kaiyuan Zhang, Guanhong Tao, Shengwei An, Hanxi Guo, Shiqing Ma, Xiangyu Zhang:
UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. ECCV (62) 2024: 262-281 - [c12]Hanxi Guo, Siyuan Cheng, Xiaolong Jin, Zhuo Zhang, Kaiyuan Zhang, Guanhong Tao, Guangyu Shen, Xiangyu Zhang:
BiScope: AI-generated Text Detection by Checking Memorization of Preceding Tokens. NeurIPS 2024 - [c11]Zian Su, Xiangzhe Xu, Ziyang Huang, Kaiyuan Zhang, Xiangyu Zhang:
Source Code Foundation Models are Transferable Binary Analysis Knowledge Bases. NeurIPS 2024 - [c10]Siyuan Cheng, Guangyu Shen, Guanhong Tao, Kaiyuan Zhang, Zhuo Zhang, Shengwei An, Xiangzhe Xu, Yingqi Li, Shiqing Ma, Xiangyu Zhang:
OdScan: Backdoor Scanning for Object Detection Models. SP 2024: 1703-1721 - [c9]Kaiyuan Zhang, Siyuan Cheng, Guangyu Shen, Guanhong Tao, Shengwei An, Anuran Makur, Shiqing Ma, Xiangyu Zhang:
Exploring the Orthogonality and Linearity of Backdoor Attacks. SP 2024: 2105-2123 - [c8]Shengwei An, Lu Yan, Siyuan Cheng, Guangyu Shen, Kaiyuan Zhang, Qiuling Xu, Guanhong Tao, Xiangyu Zhang:
Rethinking the Invisible Protection against Unauthorized Image Usage in Stable Diffusion. USENIX Security Symposium 2024 - [i12]Guangyu Shen, Siyuan Cheng, Kaiyuan Zhang, Guanhong Tao, Shengwei An, Lu Yan, Zhuo Zhang, Shiqing Ma, Xiangyu Zhang:
Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia. CoRR abs/2402.05467 (2024) - [i11]Siyuan Cheng, Guanhong Tao, Yingqi Liu, Guangyu Shen, Shengwei An, Shiwei Feng, Xiangzhe Xu, Kaiyuan Zhang, Shiqing Ma, Xiangyu Zhang:
LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning. CoRR abs/2403.17188 (2024) - [i10]Zian Su, Xiangzhe Xu, Ziyang Huang, Kaiyuan Zhang, Xiangyu Zhang:
Source Code Foundation Models are Transferable Binary Analysis Knowledge Bases. CoRR abs/2405.19581 (2024) - [i9]Siyuan Cheng, Guangyu Shen, Kaiyuan Zhang, Guanhong Tao, Shengwei An, Hanxi Guo, Shiqing Ma, Xiangyu Zhang:
UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening. CoRR abs/2407.11372 (2024) - [i8]Lu Yan, Siyuan Cheng, Xuan Chen, Kaiyuan Zhang, Guangyu Shen, Zhuo Zhang, Xiangyu Zhang:
ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs. CoRR abs/2410.04009 (2024) - [i7]Xiangzhe Xu, Zian Su, Jinyao Guo, Kaiyuan Zhang, Zhenting Wang, Xiangyu Zhang:
ProSec: Fortifying Code LLMs with Proactive Security Alignment. CoRR abs/2411.12882 (2024) - 2023
- [c7]Shiwei Feng, Guanhong Tao, Siyuan Cheng, Guangyu Shen, Xiangzhe Xu, Yingqi Liu, Kaiyuan Zhang, Shiqing Ma, Xiangyu Zhang:
Detecting Backdoors in Pre-trained Encoders. CVPR 2023: 16352-16362 - [c6]Kaiyuan Zhang, Guanhong Tao, Qiuling Xu, Siyuan Cheng, Shengwei An, Yingqi Liu, Shiwei Feng, Guangyu Shen, Pin-Yu Chen, Shiqing Ma, Xiangyu Zhang:
FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. ICLR 2023 - [c5]Siyuan Cheng, Guanhong Tao, Yingqi Liu, Shengwei An, Xiangzhe Xu, Shiwei Feng, Guangyu Shen, Kaiyuan Zhang, Qiuling Xu, Shiqing Ma, Xiangyu Zhang:
BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. NDSS 2023 - [c4]Guangyu Shen, Siyuan Cheng, Guanhong Tao, Kaiyuan Zhang, Yingqi Liu, Shengwei An, Shiqing Ma, Xiangyu Zhang:
Django: Detecting Trojans in Object Detection Models via Gaussian Focus Calibration. NeurIPS 2023 - [c3]Lu Yan, Zhuo Zhang, Guanhong Tao, Kaiyuan Zhang, Xuan Chen, Guangyu Shen, Xiangyu Zhang:
ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. NeurIPS 2023 - [c2]Shengwei An, Yuan Yao, Qiuling Xu, Shiqing Ma, Guanhong Tao, Siyuan Cheng, Kaiyuan Zhang, Yingqi Liu, Guangyu Shen, Ian Kelk, Xiangyu Zhang:
ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes. SP 2023: 899-916 - [c1]Zhuo Zhang, Zhiqiang Lin, Marcelo Morales, Xiangyu Zhang, Kaiyuan Zhang:
Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract. USENIX Security Symposium 2023: 1757-1774 - [i6]Siyuan Cheng, Guanhong Tao, Yingqi Liu, Shengwei An, Xiangzhe Xu, Shiwei Feng, Guangyu Shen, Kaiyuan Zhang, Qiuling Xu, Shiqing Ma, Xiangyu Zhang:
BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense. CoRR abs/2301.06241 (2023) - [i5]Shiwei Feng, Guanhong Tao, Siyuan Cheng, Guangyu Shen, Xiangzhe Xu, Yingqi Liu, Kaiyuan Zhang, Shiqing Ma, Xiangyu Zhang:
Detecting Backdoors in Pre-trained Encoders. CoRR abs/2303.15180 (2023) - [i4]Lu Yan, Zhuo Zhang, Guanhong Tao, Kaiyuan Zhang, Xuan Chen, Guangyu Shen, Xiangyu Zhang:
ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP. CoRR abs/2308.02122 (2023) - [i3]Shengwei An, Sheng-Yen Chou, Kaiyuan Zhang, Qiuling Xu, Guanhong Tao, Guangyu Shen, Siyuan Cheng, Shiqing Ma, Pin-Yu Chen, Tsung-Yi Ho, Xiangyu Zhang:
Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift. CoRR abs/2312.00050 (2023) - 2022
- [i2]Kaiyuan Zhang, Guanhong Tao, Qiuling Xu, Siyuan Cheng, Shengwei An, Yingqi Liu, Shiwei Feng, Guangyu Shen, Pin-Yu Chen, Shiqing Ma, Xiangyu Zhang:
FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning. CoRR abs/2210.12873 (2022) - 2021
- [j2]Minfeng Zhu, Wei Chen, Yuanzhe Hu, Yuxuan Hou, Liangjun Liu, Kaiyuan Zhang:
DRGraph: An Efficient Graph Layout Algorithm for Large-scale Graphs by Dimensionality Reduction. IEEE Trans. Vis. Comput. Graph. 27(2): 1666-1676 (2021) - 2020
- [i1]Minfeng Zhu, Wei Chen, Yuanzhe Hu, Yuxuan Hou, Liangjun Liu, Kaiyuan Zhang:
DRGraph: An Efficient Graph Layout Algorithm for Large-scale Graphs by Dimensionality Reduction. CoRR abs/2008.07799 (2020)
2010 – 2019
- 2019
- [j1]Xiaonan Luo, Yuan Yuan, Kaiyuan Zhang, Jiazhi Xia, Zhiguang Zhou, Liang Chang, Tianlong Gu:
Enhancing statistical charts: toward better data visualization and analysis. J. Vis. 22(4): 819-832 (2019)
Coauthor Index
manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.
Unpaywalled article links
Add open access links from 
to the list of external document links (if available).
Privacy notice: By enabling the option above, your browser will contact the API of unpaywall.org to load hyperlinks to open access articles. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Unpaywall privacy policy.
Archived links via Wayback Machine
For web page which are no longer available, try to retrieve content from the 
of the Internet Archive (if available).
Privacy notice: By enabling the option above, your browser will contact the API of archive.org to check for archived content of web pages that are no longer available. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Internet Archive privacy policy.
Reference lists
Add a list of references from 
, 
, and 
to record detail pages.
load references from crossref.org and opencitations.net
Privacy notice: By enabling the option above, your browser will contact the APIs of crossref.org, opencitations.net, and semanticscholar.org to load article reference information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the Crossref privacy policy and the OpenCitations privacy policy, as well as the AI2 Privacy Policy covering Semantic Scholar.
Citation data
Add a list of citing articles from and to record detail pages.
load citations from opencitations.net
Privacy notice: By enabling the option above, your browser will contact the API of opencitations.net and semanticscholar.org to load citation information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the OpenCitations privacy policy as well as the AI2 Privacy Policy covering Semantic Scholar.
OpenAlex data
Load additional information about publications from 
.
Privacy notice: By enabling the option above, your browser will contact the API of openalex.org to load additional information. Although we do not have any reason to believe that your call will be tracked, we do not have any control over how the remote server uses your data. So please proceed with care and consider checking the information given by OpenAlex.
last updated on 2025-11-01 22:19 CET by the dblp team
all metadata released as open data under CC0 1.0 license
see also: Terms of Use | Privacy Policy | Imprint
dblp was originally created in 1993 at:
since 2018, dblp has been operated and maintained by:
the dblp computer science bibliography is funded and supported by:
