Yang Zhang (张阳)

I have published more than 50 peer-reviewed papers so far. My publication list can also be found at DBLP and Google Scholar, however, they may not be up to date. Note that in the domain of information security, the most prestigious conferences are IEEE S&P, CCS, USENIX Security, and NDSS. Also, the author list of most of my papers before 2018 follows alphabetical order.

2023

A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots

Boyang Zhang, Xinlei He, Yun Shen, Tianhao Wang, Yang Zhang; USENIX Security 2023

2023

A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots

UnGANable: Defending Against GAN-based Face Manipulation

PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Model

Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders

On the Evolution of (Hateful) Memes by Means of Multimodal Contrastive Learning

Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning?

Backdoor Attacks Against Dataset Distillation

Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network

Prompt Stealing Attacks Against Text-to-Image Generation Models

2022

Amplifying Membership Exposure via Data Poisoning

Why So Toxic? Measuring and Triggering Toxic Behavior in Open-Domain Chatbots

On the Privacy Risks of Cell-Based NAS Architectures

Membership Inference Attacks by Exploiting Loss Trajectory

Auditing Membership Leakages of Multi-Exit Networks

Graph Unlearning

SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders

Finding MNEMON: Reviving Memories of Node Embeddings

Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning

Teacher Model Fingerprinting Attacks Against Transfer Learning

ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models

Inference Attacks Against Graph Neural Networks

On Xing Tian and the Perseverance of Anti-China Sentiment Online

Model Stealing Attacks Against Inductive Graph Neural Networks

Get a Model! Model Hijacking Attack Against Machine Learning Models

Property Inference Attacks Against GANs

Dynamic Backdoor Attacks Against Machine Learning Models

FairSR: Fairness-aware Sequential Recommendation through Multi-Task Learning with Preference Graph Embeddings

Fine-Tuning Is All You Need to Mitigate Backdoor Attacks

DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Models

Membership Inference Attacks Against Text-to-image Generation Models

Backdoor Attacks in the Supply Chain of Masked Image Modeling

Data Poisoning Attacks Against Multimodal Encoders

Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models

2021

Quantifying and Mitigating Privacy Risks of Contrastive Learning

When Machine Unlearning Jeopardizes Privacy

Membership Inference Attacks Against Recommender Systems

Membership Leakage in Label-Only Exposures

BadNL: Backdoor Attacks Against NLP Models with Semantic-preserving Improvements

Stealing Links from Graph Neural Networks

PrivSyn: Differentially Private Data Synthesis

“Go eat a bat, Chang!”: On the Emergence of Sinophobic Behavior on Web Communities in the Face of COVID-19

DatingSec: Detecting Malicious Accounts in Dating Apps Using a Content-Based Attention Network

Node-Level Membership Inference Attacks Against Graph Neural Networks

2020

LEAF: A Faster Secure Search Algorithm via Localization, Extraction, and Reconstruction

GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models

Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning

Membership Inference Against DNA Methylation Databases

Towards Plausible Graph Anonymization

Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks

BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models

Privacy Analysis of Deep Learning in the Wild: Membership Inference Attacks against Transfer Learning

2019

MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples

How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNN

A Graph-Based Approach to Explore Relationship Between Hashtags and Images

Fairwalk: Towards Fair Graph Embedding

Language in Our Time: An Empirical Analysis of Hashtags

ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models

MBeacon: Privacy-Preserving Beacons for DNA Methylation Data

2018

You Are Where You APP: An Assessment on Location Privacy of Social APPs

Tagvisor: A Privacy Advisor for Sharing Hashtags

Dissecting Privacy Risks in Biomedical Data

An Active Learning-based Approach for Location-aware Acquaintance Inference

2017

walk2friends: Inferring Social Links from Mobility Profiles

Semantic Annotation for Places in LBSN Using Graph Embedding

Does #like4like Indeed Provoke More Likes?

Quantifying Location Sociality

DeepCity: A Feature Learning Framework for Mining Location Check-ins

2016

On Impact of Weather on Human Mobility in Cities

An Empirical Study on User Access Control in Online Social Networks

2015

Location Prediction: Communities Speak Louder than Friends

Distance and Friendship: A Distance-based Model for Link Prediction in Social Networks