AI Security (UIUC)

Refereed Conferences

2021

Fan Wu, Yunhui Long, Ce Zhang, Bo Li. LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysis. (IEEE Symposium on Security and Privacy (Oakland), 2022)
Hengtong Zhang, Tianhang Zheng, Yaliang Li, Jing Gao, Lu Su, Bo Li. Profanity-Avoiding Training Framework for Seq2seq Models with Certified Robustness (EMNLP 2021)
Mingjie Sun, Zichao Li, Chaowei Xiao, Haonan Qiu, Bhavya Kailkhura, MingyanLiu, Bo Li. Can Shape Structure Features Improve Model Robustness? (ICCV 2021)
Nezihe Merve Grel*, Xiangyu Qi*, Luka Rimanic, Ce Zhang, Bo Li. Knowledge-Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks. (ICML 2021)
Haoxiang Wang, Han Zhao, Bo Li. Bridging Multi-Task Learning and Meta-Learning: Towards Efficient Training and Effective Adaptation. (ICML 2021)
Chulin Xie, Minghao Chen, Pin-Yu Chen, Bo Li. CRFL: Certifiably Robust Federated Learning against Backdoor Attacks. (ICML 2021)
Jiawei Zhang*, Linyi Li*, Huichen Li, Xiaolu Zhang, Shuang Yang, Bo Li. Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation. (ICML 2021)
Kaizhao Liang*, Jacky Zhang*, Boxin Wang, Zhuolin Yang, Sanmi Koyejo, Bo Li. Uncovering the Connections Between Adversarial Transferability and Knowledge Transferability. (ICML 2021)
Boxin Wang*, Fan Wu*, Yunhui Long*, Luka Rimanic, Ce Zhang, Bo Li. DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation. (CCS 2021)
Linyi Li*, Maurice Weber*, Xiaojun Xu, Luka Rimanic, Bhavya Kailkhura, Tao Xie, Ce Zhang, Bo Li. TSS: Transformation-Specific Smoothing for Robustness Certification. (CCS 2021)

Yulong Cao, Ningfei Wang, Chaowei Xiao, Dawei Yang, Jin Fang, RuigangYang, Qi Alfred Chen, Mingyan Liu, Bo Li. Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks. (IEEE Symposium on Security and Privacy (Oakland), 2021) [BibTeX]

@INPROCEEDINGS {cao2021invisible,
author = {Y. Cao and N. Wang and C. Xiao and D. Yang and J. Fang and R. Yang and Q. Chen and M. Liu and B. Li},
booktitle = {2021 IEEE Symposium on Security and Privacy (SP)},
title = {Invisible for both Camera and LiDAR:  Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks},
year = {2021},
volume = {},
issn = {2375-1207},
pages = {1302-1320},
keywords = {},
doi = {10.1109/SP40001.2021.00076},
url = {https://doi.ieeecomputersociety.org/10.1109/SP40001.2021.00076},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month = {may}
}

Aria Rezaei, Chaowei Xiao, Jie Gao, Bo Li, Sirajum Munir. Application-Driven Privacy-Preserving Data Publishing with Correlated Attributes. (Embedded Wireless Systems and Networks (EWSN 2021)) (Best Paper Award)
Ruoxi Jia, Fan Wu, Xuehui Sun, Jiacen Xu, David Dao, Bhavya Kailkhura, Ce Zhang, Bo Li, Dawn Song. Scalability vs. Utility: Do We Have to Sacrifice One for the Other in Data Importance Quantification? (CVPR 2021)
Maurice Weber, Nana Liu, Bo Li, Ce Zhang, Zhikuan Zhao. Optimal Provable Robustness of Quantum Classification via Quantum Hypothesis Testing. (npj Quantum Information 2021)
Wenhao Ding, Baiming Chen, Bo Li, Ji Eun Kim, Ding Zhao. Multimodal Safety-Critical Scenarios Generation for Decision-Making Algorithms Evaluation. (ICRA 2021)

Xinyun Chen, Wenxiao Wang, Chris Bender, Yiming Ding, Ruoxi Jia, Bo Li, Dawn Song. REFIT: a Unified Watermark Removal Framework for DeepLearning Systems with Limited Data. (AsiaCCS 2021) [BibTeX]

@article{chen2019refit,
  title={Refit: a unified watermark removal framework for deep learning systems with limited data},
  author={Chen, Xinyun and Wang, Wenxiao and Bender, Chris and Ding, Yiming and Jia, Ruoxi and Li, Bo and Song, Dawn},
  journal={arXiv preprint arXiv:1911.07205},
  year={2019}
}

Huichen Li*, Linyi Li*, Xiaojun Xu, Xiaolu Zhang, Shuang Yang, Bo Li. Nonlinear Projection Based Gradient Estimation for Query Efficient Blackbox Attacks. (AISTATS 2021) [BibTeX]

@article{li2021nonlinear,
  title={Nonlinear Projection Based Gradient Estimation for Query Efficient Blackbox Attacks},
  author={Li, Huichen and Li, Linyi and Xu, Xiaojun and Zhang, Xiaolu and Yang, Shuang and Li, Bo},
  journal={arXiv preprint arXiv:2102.13184},
  year={2021}
}

Zhuolin Yang, Zhaoxi Chen, Tiffany Cai, Xinyun Chen, Bo Li, Yuandong Tian. Understanding Robustness in Teacher-Student Setting: A New Perspective. (AISTATS 2021) [BibTeX]

@article{yang2021understanding,
  title={Understanding Robustness in Teacher-Student Setting: A New Perspective},
  author={Yang, Zhuolin and Chen, Zhaoxi and Cai, Tiffany and Chen, Xinyun and Li, Bo and Tian, Yuandong},
  journal={arXiv preprint arXiv:2102.13170},
  year={2021}
}

Boxin Wang, Shuohang Wang, Yu Cheng, Zhe Gan, Ruoxi Jia, Bo Li, Jingjing Liu. InfoBERT: Improving Robustness of Language Models from An Information Theoretic Perspective. (ICLR 2021) [BibTeX]

@inproceedings{wang2021infobert,
    title={InfoBERT: Improving Robustness of Language Models from An Information Theoretic Perspective},
    author={Wang, Boxin and Wang, Shuohang and Cheng, Yu and Gan, Zhe and Jia, Ruoxi and Li, Bo and Liu, Jingjing},
    booktitle={International Conference on Learning Representations},
    year={2021}
}

Yige Li, Xingjun Ma, Nodens Koren, Lingjuan Lyu, Xixiang Lyu, Bo Li. Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks. (ICLR 2021) [BibTeX]

@inproceedings{li2021neural,
  title={Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks},
  author={Li, Yige and Koren, Nodens and Lyu, Lingjuan and Lyu, Xixiang and Li, Bo and Ma, Xingjun},
  booktitle={International Conference on Learning Representations},
  year={2021}
}

2020

Luka Rimanic, Cedric Renggli, Bo Li, Ce Zhang. On Convergence of Nearest Neighbor Classifiers over Feature Transformations. (NeurIPS 2020) [BibTeX]

@inproceedings{rimanic2020convergence,
  title={On Convergence of Nearest Neighbor Classifiers over Feature Transformations},
  author={Rimanic, Luka and Renggli, Cedric and Li, Bo and Zhang, Ce},
  booktitle={Advances in Neural Information Processing Systems (NeurIPS)},
  year={2020}
}

Huan Zhang, Hongge Chen, Chaowei Xiao, Bo Li, Mingyan Liu, Duane Boning, Cho-Jui Hsieh. Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observations. (NeurIPS 2020) [BibTeX]

@inproceedings{zhang2020robust,
  title={Robust deep reinforcement learning against adversarial perturbations on observations},
  author={Zhang, Huan and Chen, Hongge and Xiao, Chaowei and Li, Bo and Boning, Duane and Hsieh, Cho-Jui},
  booktitle={Advances in Neural Information Processing Systems (NeurIPS)},
  year={2020}
}

Boxin Wang, Hengzhi Pei, Boyuan Pan, Qian Chen, Shuohang Wang, Bo Li. T3: Tree-Autoencoder Regularized Adversarial Text Generation for Targeted Attack. (EMNLP 2020) [BibTeX]

@inproceedings{wang2020t3,
  title={T3: Tree-Autoencoder Regularized Adversarial Text Generation for Targeted Attack},
  author={Wang, Boxin and Pei, Hengzhi and Pan, Boyuan and Chen, Qian and Wang, Shuohang and Li, Bo},
  booktitle={Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP)},
  pages={6134--6150},
  year={2020}
}

Xiaojun Xu, Qi Wang, Huichen Li, Nikita Borisov, Carl A. Gunter, Bo Li. Detecting AI Trojans Using Meta Neural Analysis. (IEEE Symposium on Security and Privacy (Oakland, 2020)) [BibTeX]

@article{xu2019detecting,
  title={Detecting ai trojans using meta neural analysis},
  author={Xu, Xiaojun and Wang, Qi and Li, Huichen and Borisov, Nikita and Gunter, Carl A and Li, Bo},
  journal={arXiv preprint arXiv:1910.03137},
  year={2019}
}

Dongqi Fu, Zhe Xu, Bo Li, Hanghang Tong, Jingrui He. A View-Adversarial Framework for Multi-View Network Embedding. (CIKM 2020) [BibTeX]

@inproceedings{fu2020view,
  title={A View-Adversarial Framework for Multi-View Network Embedding},
  author={Fu, Dongqi and Xu, Zhe and Li, Bo and Tong, Hanghang and He, Jingrui},
  booktitle={Proceedings of the 29th ACM International Conference on Information \& Knowledge Management},
  pages={2025--2028},
  year={2020}
}

Shawn Shan, Emily Wenger, Bolun Wang, Bo Li, Haitao Zheng, Ben Y. Zhao. Gotta Catch`Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks. (CCS 2020) [BibTeX]

@inproceedings{shan2020gotta,
  title={Gotta Catch'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks},
  author={Shan, Shawn and Wenger, Emily and Wang, Bolun and Li, Bo and Zheng, Haitao and Zhao, Ben Y},
  booktitle={Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security},
  pages={67--83},
  year={2020}
}

Haonan Qiu, Chaowei Xiao, Lei Yang, Xinchen Yan, Honglak Lee, Bo Li. SemanticAdv: Generating Adversarial Examples via Attribute-conditioned Image Editing. (ECCV 2020) [BibTeX]

@inproceedings{qiu2020semanticadv,
  title={SemanticAdv: Generating Adversarial Examples via Attribute-conditioned Image Editing},
  author={Qiu, Haonan and Xiao, Chaowei and Yang, Lei and Yan, Xinchen and Lee, Honglak and Li, Bo},
  booktitle={European Conference on Computer Vision},
  pages={19--37},
  year={2020},
  organization={Springer}
}

Ankit Raj, Yoram Bresler, Bo Li. Improving Robustness of Deep-Learning-Based Image Reconstruction. (ICML 2020) [BibTeX]

@inproceedings{raj2020improving,
  title={Improving robustness of deep-learning-based image reconstruction},
  author={Raj, Ankit and Bresler, Yoram and Li, Bo},
  booktitle={International Conference on Machine Learning},
  pages={7932--7942},
  year={2020},
  organization={PMLR}
}

Boyuan Pan, Yazheng Yang, Kaizhao Liang, Bhavya Kailkhura, Zhongming Jin, Xian-Sheng Hua, Deng Cai, Bo Li. Adversarial Mutual Information for Text Generation. (ICML 2020) [BibTeX]

@inproceedings{pan2020adversarial,
  title={Adversarial Mutual Information for Text Generation},
  author={Pan, Boyuan and Yang, Yazheng and Liang, Kaizhao and Kailkhura, Bhavya and Jin, Zhongming and Hua, Xian-Sheng and Cai, Deng and Li, Bo},
  booktitle={International Conference on Machine Learning},
  pages={7476--7486},
  year={2020},
  organization={PMLR}
}

Gerald Friedland, Jingkang Wang, Ruoxi Jia, Bo Li. The Helmholtz Method: Using Perceptual Compression to Reduce Machine Learning Complexity. (IEEE on Multimedia Information Processing and Retrieval 2020) [BibTeX]

@article{friedland2018helmholtz,
  title={The helmholtz method: Using perceptual compression to reduce machine learning complexity},
  author={Friedland, Gerald and Wang, Jingkang and Jia, Ruoxi and Li, Bo},
  journal={arXiv preprint arXiv:1807.10569},
  year={2018}
}

Zhenkai Zhang*, Zihao Zhan*, Daniel Balasubramanian, Bo Li, Peter Volgyesi, Xenofon Koutsoukos. Leveraging EM Side-Channel Information to Detect Rowhammer Attacks. (IEEE Symposium on Security and Privacy (Oakland, 2020)) [BibTeX]

@inproceedings{zhang2020leveraging,
  title={Leveraging em side-channel information to detect rowhammer attacks},
  author={Zhang, Zhenkai and Zhan, Zihao and Balasubramanian, Daniel and Li, Bo and Volgyesi, Peter and Koutsoukos, Xenofon},
  booktitle={2020 IEEE Symposium on Security and Privacy (SP)},
  pages={729--746},
  year={2020},
  organization={IEEE}
}

Huichen Li, Xiaojun Xu, Xiaolu Zhang, Shuang Yang, Bo Li. QEBA: Query-Efficient Boundary-Based Blackbox Attack. (CVPR 2020) [BibTeX]

@inproceedings{li2020qeba,
  title={QEBA: Query-Efficient Boundary-Based Blackbox Attack},
  author={Li, Huichen and Xu, Xiaojun and Zhang, Xiaolu and Yang, Shuang and Li, Bo},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={1221--1230},
  year={2020}
}

Yuheng Zhang, Ruoxi Jia, Hengzhi Pei, Wenxiao Wang, Bo Li, Dawn Song, Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks. (CVPR 2020) [oral] [BibTeX]

@inproceedings{zhang2020secret,
  title={The secret revealer: Generative model-inversion attacks against deep neural networks},
  author={Zhang, Yuheng and Jia, Ruoxi and Pei, Hengzhi and Wang, Wenxiao and Li, Bo and Song, Dawn},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={253--261},
  year={2020}
}

Lei Huang, Li Liu, Fan Zhu, Diwen Wan, Zehuan Yuan, Bo Li, Ling Shao, Controllable Orthogonalization in Training DNNs. (CVPR 2020) [BibTeX]

@inproceedings{huang2020controllable,
  title={Controllable orthogonalization in training dnns},
  author={Huang, Lei and Liu, Li and Zhu, Fan and Wan, Diwen and Yuan, Zehuan and Li, Bo and Shao, Ling},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={6429--6438},
  year={2020}
}

Chao Yan, Haifeng Xu, Yevgeniy Vorobeychik, Bo Li, Daniel Fabbri, Bradley Malin, To Warn or Not to Warn: Online Signaling in Audit Games. (ICDE 2020) [BibTeX]

@inproceedings{yan2020warn,
  title={To warn or not to warn: Online signaling in audit games},
  author={Yan, Chao and Xu, Haifeng and Vorobeychik, Yevgeniy and Li, Bo and Fabbri, Daniel and Malin, Bradley A},
  booktitle={2020 IEEE 36th International Conference on Data Engineering (ICDE)},
  pages={481--492},
  year={2020},
  organization={IEEE}
}

Huan Zhang, Hongge Chen, Chaowei Xiao, Sven Gowal, Robert Stanforth, Bo Li, Duane Boning, Cho-Jui Hsieh, Towards Stable and Efficient Training of Verifiably Robust Neural Networks. (ICLR 2020). [BibTeX]

@inproceedings{zhang2019towards,
  title={Towards stable and efficient training of verifiably robust neural networks},
  author={Zhang, Huan and Chen, Hongge and Xiao, Chaowei and Gowal, Sven and Stanforth, Robert and Li, Bo and Boning, Duane and Hsieh, Cho-Jui},
  booktitle={International Conference on Learning Representations},
  year={2020}
}

Anand Bhattad, Min Jin Chong, Kaizhao Liang, Bo Li, David Forsyth, Unrestricted Adversarial Examples via Semantic Manipulation. (ICLR 2020). [BibTeX]

@inproceedings{bhattad2019unrestricted,
  title={Unrestricted adversarial examples via semantic manipulation},
  author={Bhattad, Anand and Chong, Min Jin and Liang, Kaizhao and Li, Bo and Forsyth, David A},
  booktitle={International Conference on Learning Representations},
  year={2020}
}

Chulin Xie, Keli Huang, Pin-Yu Chen, Bo Li, DBA: Distributed Backdoor Attacks against Federated Learning. (ICLR 2020). [BibTeX]

@inproceedings{xie2019dba,
  title={Dba: Distributed backdoor attacks against federated learning},
  author={Xie, Chulin and Huang, Keli and Chen, Pin-Yu and Li, Bo},
  booktitle={International Conference on Learning Representations},
  year={2020}
}

Yuyu Zhang, Xinshi Chen, Yuan Yang, Arun Ramamurthy, Bo Li, Yuan Qi, Le Song, Efficient Probabilistic Logic Reasoning with Graph Neural Networks. (ICLR 2020). [BibTeX]

@inproceedings{zhang2020efficient,
  title={Efficient probabilistic logic reasoning with graph neural networks},
  author={Zhang, Yuyu and Chen, Xinshi and Yang, Yuan and Ramamurthy, Arun and Li, Bo and Qi, Yuan and Song, Le},
  booktitle={International Conference on Learning Representations},
  year={2020}
}

Yunan Ye, Hengzhi Pei, Boxin Wang, Pin-Yu Chen, Yada Zhu, Bo Li, Reinforcement-Learning based Portfolio Management with Augmented Asset Movement Prediction States. (AAAI 2020). [BibTeX]

@inproceedings{ye2020reinforcement,
  title={Reinforcement-learning based portfolio management with augmented asset movement prediction states},
  author={Ye, Yunan and Pei, Hengzhi and Wang, Boxin and Chen, Pin-Yu and Zhu, Yada and Xiao, Ju and Li, Bo},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={34},
  number={01},
  pages={1112--1119},
  year={2020}
}

Jingkang Wang, Yang Liu, Bo Li, Reinforcement Learning with Perturbed Rewards. (AAAI 2020). [BibTeX]

@inproceedings{wang2020reinforcement,
  title={Reinforcement learning with perturbed rewards},
  author={Wang, Jingkang and Liu, Yang and Li, Bo},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={34},
  number={04},
  pages={6202--6209},
  year={2020}
}

2019

Ruoxi Jia, David Dao, Boxin Wang, Frances Ann Hubis, Nezihe Merve Gurel, Bo Li, Ce Zhang, Costas Spanos, Dawn Song, "Efficient Task-Specific Data Valuation for Nearest Neighbor Algorithms". (VLDB 2019)[BibTeX]

@article{jia12efficient,
  title={Efficient Task-Specific Data Valuation for Nearest Neighbor Algorithms},
  author={Jia, Ruoxi and Dao, David and Wang, Boxin and Hubis, Frances Ann and Gurel, Nezihe Merve and Li, Bo and Zhang, Ce and Spanos, Costas J and Song, Dawn},
  journal={Proceedings of the VLDB Endowment},
  volume={12},
  number={11}
}

Chaowei Xiao, Ruizhi Deng, Bo Li, Taesung Lee, Benjamin Edwards, Jinfeng Yi, Dawn Song, Mingyan Liu, Ian Molloy, "AdvIT: Adversarial Frames Identifier Based on Temporal Consistency In Videos". (ICCV 2019)[BibTeX]

@inproceedings{xiao2019advit,
  title={Advit: Adversarial frames identifier based on temporal consistency in videos},
  author={Xiao, Chaowei and Deng, Ruizhi and Li, Bo and Lee, Taesung and Edwards, Benjamin and Yi, Jinfeng and Song, Dawn and Liu, Mingyan and Molloy, Ian},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={3968--3977},
  year={2019}
}

Kin Sum Liu, Chaowei Xiao, Bo Li, and Jie Gao, "Performing Co-Membership Attacks Against Deep Generative Models ". (ICDM 2019)[BibTeX]

@inproceedings{liu2019performing,
  title={Performing Co-membership Attacks Against Deep Generative Models},
  author={Liu, Kin Sum and Xiao, Chaowei and Li, Bo and Gao, Jie},
  booktitle={Proceedings of the 19th IEEE International Conference on Data Mining (ICDM'19)},
  year={2019}
}

Xiaofei Xie, Lei Ma, Felix Juefei-Xu, Minhui Xue, Hongxu Chen, Yang Liu, Jianjun Zhao, Bo Li, Jianxiong Yin, Simon See, "DeepHunter: a coverage-guided fuzz testing framework for deep neural networks". (In Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis.)[BibTeX]

@inproceedings{xie2019deephunter,
  title={DeepHunter: a coverage-guided fuzz testing framework for deep neural networks},
  author={Xie, Xiaofei and Ma, Lei and Juefei-Xu, Felix and Xue, Minhui and Chen, Hongxu and Liu, Yang and Zhao, Jianjun and Li, Bo and Yin, Jianxiong and See, Simon},
  booktitle={Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis},
  pages={146--157},
  year={2019}
}

Liang Tong, Bo Li, Chen Hajaj, Chaowei Xiao, Ning Zhang, Yevgeniy Vorobeychik, "Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features". (USENIX Security, 2019)[BibTeX]

@inproceedings{tong2019improving,
  title={Improving robustness of $\{$ML$\}$ classifiers against realizable evasion attacks using conserved features},
  author={Tong, Liang and Li, Bo and Hajaj, Chen and Xiao, Chaowei and Zhang, Ning and Vorobeychik, Yevgeniy},
  booktitle={28th $\{$USENIX$\}$ Security Symposium ($\{$USENIX$\}$ Security 19)},
  pages={285--302},
  year={2019}
}

Linyi Li, Zexuan Zhong, Tao Xie, Bo Li. "Robustra: Training Provable Robust Neural Networks over Reference Adversarial Space". (IJCAI 2019)[BibTeX]

@inproceedings{li2019robustra,
  title={Robustra: Training Provable Robust Neural Networks over Reference Adversarial Space.},
  author={Li, Linyi and Zhong, Zexuan and Li, Bo and Xie, Tao},
  booktitle={IJCAI},
  pages={4711--4717},
  year={2019}
}

Kimin Lee, Sukmin Yun, Kibok Lee, Honglak Lee, Bo Li, Jinwoo Shin. "Robust Inference via Generative Classifiers for Handling Noisy Labels". (ICML 2019)[BibTeX]

@inproceedings{lee2019robust,
  title={Robust inference via generative classifiers for handling noisy labels},
  author={Lee, Kimin and Yun, Sukmin and Lee, Kibok and Lee, Honglak and Li, Bo and Shin, Jinwoo},
  booktitle={International Conference on Machine Learning},
  pages={3763--3772},
  year={2019},
  organization={PMLR}
}

Chaowei Xiao, Dawei Yang, Bo Li, Jia Deng, Mingyan Liu. "Realistic Adversarial Examples in 3D Meshes". (CVPR 2019) [Oral][BibTeX]

@inproceedings{xiao2019meshadv,
  title={Meshadv: Adversarial meshes for visual recognition},
  author={Xiao, Chaowei and Yang, Dawei and Li, Bo and Deng, Jia and Liu, Mingyan},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={6898--6907},
  year={2019}
}

Chong Xiang, Charles R. Qi, Bo Li. "Generating 3D Adversarial Point Clouds". (CVPR 2019)[BibTeX]

@inproceedings{xiang2019generating,
  title={Generating 3d adversarial point clouds},
  author={Xiang, Chong and Qi, Charles R and Li, Bo},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={9136--9144},
  year={2019}
}

Xinlei Pan, Weiyao Wang, Xiaoshuai Zhang, Bo Li, Jinfeng Yi, Dawn Song. "How You Act Tells a Lot: Privacy-Leakage Attack on Deep Reinforcement Learning". (AAMAS 2019) [Oral] [BibTeX]

Ruoxi Jia, David Dao, Boxin Wang, Frances Ann Hubis, Nick Hynes, Bo Li, Ce Zhang, Dawn Song, Costas Spanos. "Towards Efficient Data Valuation Based on the Shapley Value". (AISTATS 2019)[BibTeX]

@article{jia2019towards,
  title={Towards Efficient Data Valuation Based on the Shapley Value},
  author={Jia, Ruoxi and Dao, David and Wang, Boxin and Hubis, Frances A and G{\"u}rel, Nezihe M and Hynes, Nick and Li, Bo and Zhang, Ce and Song, Dawn and Spanos, Costas J},
  journal={Proceedings of AISTATS 2019},
  year={2019}
}

Zhuolin Yang, Bo Li, Pin-Yu Chen, Dawn Song. "Characterizing Audio Adversarial Examples Using Temporal Dependency". (ICLR 2019) [BibTeX]

@inproceedings{yang2018characterizing,
  title={Characterizing Audio Adversarial Examples Using Temporal Dependency},
  author={Yang, Zhuolin and Li, Bo and Chen, Pin-Yu and Song, Dawn},
  booktitle={International Conference on Learning Representations},
  year={2019}
}

Press: Nature

Jinfeng Li, Shouling Ji, Tianyu Du, Bo Li, Ting Wang. "TextBugger: Generating Adversarial Text Against Real-world Applications". (NDSS 2019) [BibTeX]

@inproceedings{li2019textbugger,
  title={TextBugger: Generating Adversarial Text Against Real-world Applications},
  author={Li, Jinfeng and Ji, Shouling and Du, Tianyu and Li, Bo and Wang, Ting},
  booktitle={26th Annual Network and Distributed System Security Symposium},
  year={2019}
}

Xiang Ling, Shouling Ji, Jiaxu Zou, Jiannan Wang, Chunming Wu, Bo Li, Ting Wang. "DeepSec: A Uniform Platform for Security Analysis of Deep Learning Models". (Oakland, 2019) [BibTeX]

@inproceedings{ling2019deepsec,
  title={Deepsec: A uniform platform for security analysis of deep learning model},
  author={Ling, Xiang and Ji, Shouling and Zou, Jiaxu and Wang, Jiannan and Wu, Chunming and Li, Bo and Wang, Ting},
  booktitle={2019 IEEE Symposium on Security and Privacy (SP)},
  pages={673--690},
  year={2019},
  organization={IEEE}
}

2018

Ruoxi Jia, Ioannis Konstantakopoulos, Bo Li, Dawn Song, Costas J. Spanos. "Poisoning Attacks on Data-Driven Utility Learning in Games". (ACC, 2018) [BibTeX]

@inproceedings{jia2018poisoning,
  title={Poisoning attacks on data-driven utility learning in games},
  author={Jia, Ruoxi and Konstantakopoulos, Ioannis C and Li, Bo and Spanos, Costas},
  booktitle={2018 Annual American Control Conference (ACC)},
  pages={5774--5780},
  year={2018},
  organization={IEEE}
}

Arjun Nitin Bhagoji, Warren He, Bo Li, Dawn Song. "Practical black-box attacks on deep neural networks using efficient query mechanisms". (ECCV, 2018) [BibTeX]

@inproceedings{bhagoji2018practical,
  title={Practical black-box attacks on deep neural networks using efficient query mechanisms},
  author={Bhagoji, Arjun Nitin and He, Warren and Li, Bo and Song, Dawn},
  booktitle={Proceedings of the European Conference on Computer Vision (ECCV)},
  pages={154--169},
  year={2018}
}

Chaowei Xiao, Duizhi Deng, Bo Li, Fisher Yu, Jinfeng Yi, Mingyan Liu and Dawn Song. "Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation". (ECCV, 2018) [BibTeX]

@inproceedings{xiao2018characterizing,
  title={Characterizing adversarial examples based on spatial consistency information for semantic segmentation},
  author={Xiao, Chaowei and Deng, Ruizhi and Li, Bo and Yu, Fisher and Liu, Mingyan and Song, Dawn},
  booktitle={Proceedings of the European Conference on Computer Vision (ECCV)},
  pages={217--234},
  year={2018}
}

Lei Ma, Felix Juefei-Xu, Fuyuan Zhang, Jiyuan Sun, Minhui Xue, Bo Li, Chunyang Chen, Ting Su, Li Li, Yang Liu, Jianjun Zhao, and Yadong Wang. "DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems". (ASE, 2018) [Distinguished Paper Award] [BibTeX]

@inproceedings{ma2018deepgauge,
  title={Deepgauge: Multi-granularity testing criteria for deep learning systems},
  author={Ma, Lei and Juefei-Xu, Felix and Zhang, Fuyuan and Sun, Jiyuan and Xue, Minhui and Li, Bo and Chen, Chunyang and Su, Ting and Li, Li and Liu, Yang and others},
  booktitle={Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering},
  pages={120--131},
  year={2018}
}

Chaowei Xiao, Armin Sarabi, Yang Liu, Bo Li, Mingyan Liu, Tudor Dumitras. " From Patching Delays to Infection Symptoms: Using Risk Profiles for an Early Discovery of Vulnerabilities Exploited in the Wild". (USENIX Security, 2018) [BibTeX]

@inproceedings{xiao2018patching,
  title={From patching delays to infection symptoms: Using risk profiles for an early discovery of vulnerabilities exploited in the wild},
  author={Xiao, Chaowei and Sarabi, Armin and Liu, Yang and Li, Bo and Liu, Mingyan and Dumitras, Tudor},
  booktitle={27th $\{$USENIX$\}$ Security Symposium ($\{$USENIX$\}$ Security 18)},
  pages={903--918},
  year={2018}
}

Chaowei Xiao, Bo Li, Jun-Yan Zhu, Warren He, Mingyan Liu, Dawn Song. " Generating Adversarial Examples with Adversarial Networks". (IJCAI, 2018) [BibTeX]

@article{xiao2018generating,
  title={Generating adversarial examples with adversarial networks},
  author={Xiao, Chaowei and Li, Bo and Zhu, Jun-Yan and He, Warren and Liu, Mingyan and Song, Dawn},
  journal={arXiv preprint arXiv:1801.02610},
  year={2018}
}

Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, Bo Li. "Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning". (Oakland, 2018) [BibTeX]

@inproceedings{jagielski2018manipulating,
  title={Manipulating machine learning: Poisoning attacks and countermeasures for regression learning},
  author={Jagielski, Matthew and Oprea, Alina and Biggio, Battista and Liu, Chang and Nita-Rotaru, Cristina and Li, Bo},
  booktitle={2018 IEEE Symposium on Security and Privacy (SP)},
  pages={19--35},
  year={2018},
  organization={IEEE}
}

Ivan Evtimov, Kevin Eykholt, Earlence Fernandes, Bo Li, Amir Rahmati, Chaowei Xiao, Atul Prakash, Tadayoshi Kohno, Dawn Song. "Robust Physical-World Attacks on Deep Learning Visual Classification". (CVPR, 2018) [BibTeX]
```
@inproceedings{eykholt2018robust,
  title={Robust physical-world attacks on deep learning visual classification},
  author={Eykholt, Kevin and Evtimov, Ivan and Fernandes, Earlence and Li, Bo and Rahmati, Amir and Xiao, Chaowei and Prakash, Atul and Kohno, Tadayoshi and Song, Dawn},
  booktitle={Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
  pages={1625--1634},
  year={2018}
}
```
Press: IEEE Spectrum, Yahoo News, Wired, Engagdet, Telegraph, Car and Driver, CNET, Digital Trends, SCMagazine, Schneier on Security, Ars Technica, Fortune

Xingjun Ma, Bo Li, Yisen Wang, Sarah M. Erfani, Sudanthi Wijewickrema, Grant Schoenebeck , Dawn Song, Michael E. Houle, and James Bailey. "Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality". (ICLR, 2018) [Oral].[BibTeX]

@inproceedings{ma2018characterizing,
    title={Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality},
    author={Ma, Xingjun and Li, Bo and Wang, Yisen and Erfani, Sarah M and Wijewickrema, Sudanthi and Schoenebeck, Grant and Song, Dawn and Houle, Michael E and Bailey, James},
    booktitle={International Conference on Learning Representations},
    year={2018},
    url={https://openreview.net/forum?id=B1gJ1L2aW},
}

Chaowei Xiao, Jun-Yan Zhu, Bo Li, Warren He, Mingyan Liu, and Dawn Song. "Spatially Transformed Adversarial Examples". (ICLR, 2018) [BibTeX]

@inproceedings{xiao2018spatially,
  title={Spatially transformed adversarial examples},
  author={Xiao, Chaowei and Zhu, Jun Yan and Li, Bo and He, Warren and Liu, Mingyan and Song, Dawn},
  booktitle={6th International Conference on Learning Representations, ICLR 2018},
  year={2018}
}

Warren He, Bo Li and Dawn Song. "Decision Boundary Analysis of Adversarial Examples". (ICLR, 2018) [BibTeX]

@inproceedings{he2018decision,
  title={Decision boundary analysis of adversarial examples},
  author={He, Warren and Li, Bo and Song, Dawn},
  booktitle={International Conference on Learning Representations},
  year={2018}
}

Xiaojie Wang, Jianzhong Qi, Ramamohanarao Kotagiri, Yu Sun, Bo Li, and Rui Zhang. "A Joint Optimization Approach for Personalized Recommendation Diversification". (PAKDD, 2018) [BibTeX]

@inproceedings{wang2018joint,
  title={A joint optimization approach for personalized recommendation diversification},
  author={Wang, Xiaojie and Qi, Jianzhong and Ramamohanarao, Kotagiri and Sun, Yu and Li, Bo and Zhang, Rui},
  booktitle={Pacific-Asia Conference on Knowledge Discovery and Data Mining},
  pages={597--609},
  year={2018},
  organization={Springer}
}

Chao Yan, Bo Li, Yevgeniy Vorobeychik, Aron Laszka, Daniel Fabbri, Bradley Malin. " Get Your Workload in Order: Game Theoretic Prioritization of Database Auditing". (ICDE, 2018) [BibTeX]

@inproceedings{yan2018get,
  title={Get your workload in order: Game theoretic prioritization of database auditing},
  author={Yan, Chao and Li, Bo and Vorobeychik, Yevgeniy and Laszka, Aron and Fabbri, Daniel and Malin, Bradley},
  booktitle={2018 IEEE 34th International Conference on Data Engineering (ICDE)},
  pages={1304--1307},
  year={2018},
  organization={IEEE}
}

2017

Qingrong Chen, Minhui Xue, Chong Xiang, Bo Li, Haizhong Zheng, and Haojin Zhu. "Do We Need Original Data for Training? Toward Designing Privacy-Preserving Machine Learning". (DLSRF, 2017, Research Forum Award)). [BibTeX]

@inproceedings{qingrong2017do,
  title={Do We Need Original Data for Training? Toward Designing Privacy-Preserving Machine Learning},
  author={Chen, Qingrong and Xue, Minhui and Xiang, Chong and Li, Bo and Zheng, Haizhong and Zhu, Haojin}
   booktitle={DLSRF},
    year={2017}
}

Lei Huang, Xianglong Liu, Bo Lang, Adams Wei Yu, Bo Li. "Orthogonal Weight Normalization: Solution to Optimization over Multiple Dependent Stiefel Manifolds in Deep Neural Networks". (AAAI, 2017) [BibTeX]

@inproceedings{huang2018orthogonal,
  title={Orthogonal weight normalization: Solution to optimization over multiple dependent stiefel manifolds in deep neural networks},
  author={Huang, Lei and Liu, Xianglong and Lang, Bo and Yu, Adams and Wang, Yongliang and Li, Bo},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={32},
  number={1},
  year={2018}
}

Chang Liu, Bo Li, Yevgeniy Vorobeychik, and Alina Oprea. "Robust Linear Regression Against Training Data Poisoning". (AISec, 2017, Best paper award) [BibTeX]

@inproceedings{liu2017robust,
  title={Robust linear regression against training data poisoning},
  author={Liu, Chang and Li, Bo and Vorobeychik, Yevgeniy and Oprea, Alina},
  booktitle={Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security},
  pages={91--102},
  year={2017}
}

B. Li, K. Roundy, C. Gates and Y. Vorobeychik. “Large-scale identification of malicious singleton files”. In ACM Conference on Data and Application Security and Privacy (CODASPY). Arizona, USA, 2017. [BibTeX]

@inproceedings{li2017large,
  title={Large-scale identification of malicious singleton files},
  author={Li, Bo and Roundy, Kevin and Gates, Chris and Vorobeychik, Yevgeniy},
  booktitle={Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy},
  pages={227--238},
  year={2017}
}

J. Gao, B. Li, G. Schoenebeck and F. Yu. "Engineering Agreement: The Naming Game with Asymmetric and Heterogeneous Agents," In Proceedings of the 30th International Conference on Artificial Intelligence (AAAI). San Francisco, USA, 2017.[BibTeX]

@inproceedings{gao2017engineering,
  title={Engineering agreement: the naming game with asymmetric and heterogeneous agents},
  author={Gao, Jie and Li, Bo and Schoenebeck, Grant and Yu, Fang-Yi},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={31},
  number={1},
  year={2017}
}

Before 2016

B. Li, Y. Wang, A. Singh, Y. Vorobeychik, "Data poisoning attacks on factorization-based collaborative filtering," In Proc. of the Neural Information Processing Systems (NIPS). Barcelona, Spain, 2016. [BibTeX]

@inproceedings{NIPS2016_83fa5a43,
 author = {Li, Bo and Wang, Yining and Singh, Aarti and Vorobeychik, Yevgeniy},
 booktitle = {Advances in Neural Information Processing Systems},
 editor = {D. Lee and M. Sugiyama and U. Luxburg and I. Guyon and R. Garnett},
 pages = {},
 publisher = {Curran Associates, Inc.},
 title = {Data Poisoning Attacks on Factorization-Based Collaborative Filtering},
 url = {https://proceedings.neurips.cc/paper/2016/file/83fa5a432ae55c253d0e60dbfa716723-Paper.pdf},
 volume = {29},
 year = {2016}
}

C. Yan, B. Li, Y. Chen, D. Liebovitz, and B. Malin, "Learning clinical workflows to identify subgroups of heart failure patients", In Proc. Of the American Medical Informatics Association Annual Fall Symposium (AMIA), Chicago, USA, 2016. [BibTeX]

@inproceedings{yan2016learning,
  title={Learning clinical workflows to identify subgroups of heart failure patients},
  author={Yan, Chao and Chen, You and Li, Bo and Liebovitz, David and Malin, Bradley},
  booktitle={AMIA Annual Symposium Proceedings},
  volume={2016},
  pages={1248},
  year={2016},
  organization={American Medical Informatics Association}
}

B. Li, Y. Vorobeychik, M. Li, and B. Malin, "Iterative classification for sanitizing large-scale datasets," In Proc. of the IEEE International Conference on Data Mining (ICDM). Atlantic City, NJ, USA, 2015. [BibTeX]

@inproceedings{li2015iterative,
  title={Iterative classification for sanitizing large-scale datasets},
  author={Li, Bo and Vorobeychik, Yevgeniy and Li, Muqun and Malin, Bradley},
  booktitle={2015 IEEE International Conference on Data Mining},
  pages={841--846},
  year={2015},
  organization={IEEE}
}

B. Li, "Secure learning and mining in adversarial environments," In Proc. of the IEEE International Conference on Data Mining (ICDM) Phd forum. Atlantic City, NJ, USA, 2015. [BibTeX]

@inproceedings{li2015secure,
  title={Secure learning and mining in adversarial environments},
  author={Li, Bo},
  booktitle={2015 IEEE International Conference on Data Mining Workshop (ICDMW)},
  pages={1538--1539},
  year={2015},
  organization={IEEE}
}

L. Ke, B. Li , Y. Vorobeychik, "Behavioral Experiments in Email Filter Evasion" In Proc. of the 30th International Conference on Artificial Intelligence (AAAI). Phoenix, AZ, USA, 2016. [BibTeX]

@inproceedings{ke2016behavioral,
  title={Behavioral experiments in email filter evasion},
  author={Ke, Liyiming and Li, Bo and Vorobeychik, Yevgeniy},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={30},
  number={1},
  year={2016}
}

B. Li and Y. Vorobeychik, "Scalable Optimization of Randomized Operational Decisions in Adversarial Classification Settings," in Proc. of the 18th International Conference on Artificial Intelligence and Statistics (AISTATS). San Diego, CA, USA, 2015. [BibTeX]

@inproceedings{li2015scalable,
  title={Scalable optimization of randomized operational decisions in adversarial classification settings},
  author={Li, Bo and Vorobeychik, Yevgeniy},
  booktitle={Artificial Intelligence and Statistics},
  pages={599--607},
  year={2015},
  organization={PMLR}
}

B. Li and Y. Vorobeychik, "Feature corss-substitution in adversarial classification," In Proc. of the Neural Information Processing Systems (NIPS). Quebec, Canada, 2014. [BibTeX]

@inproceedings{li2014feature,
  title={Feature cross-substitution in adversarial classification},
  author={Li, Bo and Vorobeychik, Yevgeniy},
  booktitle={Advances in neural information processing systems},
  pages={2087--2095},
  year={2014}
}

Y. Vorobeychik and B. Li, "Optimal randomized classification in adversarial settings," In Proc. of the International Joint Conference on Autonomous Agents and Multiagent Systems (AAMAS). Paris, France, 2014. [BibTeX]

@inproceedings{vorobeychik2014optimal,
  title={Optimal randomized classification in adversarial settings.},
  author={Vorobeychik, Yevgeniy and Li, Bo},
  booktitle={International Foundation for Autonomous Agents and Multiagent Systems},
  pages={485--492},
  year={2014}
}

Y. H. Wang, J. S. Lee, B. Li, "A Hybrid Illumination Refinement Technique based on Double Niblack Thresholds", In Proc. of the International Conference on Communication and Information Systems (ICCIS). Roma, Italy, 2015. [BibTeX]

@article{wang2015hybrid,
  title={A Hybrid Illumination Refinement Technique Based on Double Niblack Thresholds},
  author={Wang, Yi-Hua and Lee, Jung-San and Li, Bo},
  journal={International Journal of Future Computer and Communication},
  volume={4},
  number={6},
  pages={426},
  year={2015},
  publisher={IACSIT Press}
}

J. S. Lee, K. J. Wei, B. R. Huang, and B. Li, "Note on an anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics," In Proc. of the Cryptography and Information Security Conference (CISC), Kaohsiung, Taiwan, 2015. [BibTeX]

@inproceedings{j2015note,
    title={Note on an anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics,},
    author={J. S. Lee, K. J. Wei, B. R. Huang, and B. Li},
    booktitle={In Proc. of the Cryptography and Information Security Conference (CISC)},
    year={2015}
}

M. E. Koran, B. Li, N. Jahanshad, T. A. Thornton-Wells, D. C. Glahn, P. M. Thompson, J. Blangero, T. E. Nichols, P. Kochunov, and B. A. Landman. "The impact of family structure and common environment on heritability estimation for neuroimaging genetics studies using SOLAR", In Proc. of the International Imaging Genetics Conference (GC). Irvine, CA, USA, 2014. [BibTeX]

@inproceedings{m2014familystruct,
    title={The impact of family structure and common environment on heritability estimation for neuroimaging genetics studies using SOLAR},
    author={M. E. Koran, B. Li, N. Jahanshad, T. A. Thornton-Wells, D. C. Glahn, P. M. Thompson, J. Blangero, T. E. Nichols, P. Kochunov, and B. A. Landman},
    booktitle={In Proc. of the International Imaging Genetics Conference (GC)},
    year={2014}
}

M. E. Koran, B. Li, N. Jahanshad, T. A. Thornton-Wells, D. C. Glahn, P. M. Thompson, J. Blangero, T. E. Nichols, P. Kochunov, and B. A. Landman. "Neuroimaging Genetics Study Design: A Comparison of the OpenMX and SOLAR Software Packages for Estimating Heritability of Neuroimaging Traits". In Proc. of the International Imaging Genetics Conference (GC). Irvine, CA, USA, 2014. [BibTeX]

@inproceedings{m2014neuroimaging,
    title={Neuroimaging Genetics Study Design: A Comparison of the OpenMX and SOLAR Software Packages for Estimating Heritability of Neuroimaging Traits},
    author={M. E. Koran, B. Li, N. Jahanshad, T. A. Thornton-Wells, D. C. Glahn, P. M. Thompson, J. Blangero, T. E. Nichols, P. Kochunov, and B. A. Landman},
    booktitle={In Proc. of the International Imaging Genetics Conference (GC)},
    year={2014}
}

M. E. Koran, B. Li, N. Jahanshad, T. A. Thornton-Wells, D. C. Glahn, P. M. Thompson, J. Blangero, T. E. Nichols, P. Kochunov, and B. A. Landman. "On study design in neuroimaging heritability analyses." In Proc. of the SPIE Medical Imaging Conference. San Diego (SPIE), CA, USA, 2014.[BibTeX]

@inproceedings{koran2014study,
  title={On study design in neuroimaging heritability analyses},
  author={Koran, Mary Ellen and Li, Bo and Jahanshad, Neda and Thornton-Wells, Tricia A and Glahn, David C and Thompson, Paul M and Blangero, John and Nichols, Thomas E and Kochunov, Peter and Landman, Bennett A},
  booktitle={Medical Imaging 2014: Image Processing},
  volume={9034},
  pages={90342P},
  year={2014},
  organization={International Society for Optics and Photonics}
}

Z. Xu, B. Li, S. Panda, A. J. Asman, K. L. Merkle, P. L. Shanahan, R. G. Abramson, and B. A. Landman. "Shape-Constrained Multi-Atlas Segmentation of Spleen in CT." In Proc. of the SPIE Medical Imaging Conference. San Diego (SPIE), CA, USA, 2014.[BibTeX]

@inproceedings{xu2014shape,
  title={Shape-constrained multi-atlas segmentation of spleen in CT},
  author={Xu, Zhoubing and Li, Bo and Panda, Swetasudha and Asman, Andrew J and Merkle, Kristen L and Shanahan, Peter L and Abramson, Richard G and Landman, Bennett A},
  booktitle={Medical Imaging 2014: Image Processing},
  volume={9034},
  pages={903446},
  year={2014},
  organization={International Society for Optics and Photonics}
}

J. S. Lee, K. J. Wei, and B. Li, "On the security of two ECC-based authentication mechanisms for confirming authorization," In Proc. of the Cryptography- 20 years of Cryptography in Taiwan, McGraw-Hill International Enterprises, LLC., Taiwan, 2014. [BibTeX]

@inproceedings{j2014eccauthen,
    title={On the security of two ECC-based authentication mechanisms for confirming authorization},
    author={J. S. Lee, K. J. Wei, and B. Li},
    booktitle={ In Proc. of the Cryptography- 20 years of Cryptography in Taiwan, McGraw-Hill International Enterprises},
    year={2014}
}

Q. Lin, Z. Xu, B. Li, R. Baucom, B. Poulose, B. A. Landman, and R. E. Bodenheimer. "Immersive Virtual Reality for Visualization of Abdominal CT." In Proc. of the SPIE Medical Imaging Conference. Orlando (SPIE), FL, USA, 2013. [BibTeX]

@inproceedings{lin2013immersive,
  title={Immersive virtual reality for visualization of abdominal CT},
  author={Lin, Qiufeng and Xu, Zhoubing and Li, Bo and Baucom, Rebeccah and Poulose, Benjamin and Landman, Bennett A and Bodenheimer, Robert E},
  booktitle={Medical Imaging 2013: Image Perception, Observer Performance, and Technology Assessment},
  volume={8673},
  pages={867317},
  year={2013},
  organization={International Society for Optics and Photonics}
}

B. Li, S. Panda, Z. Xu, A. J. Asman, P. L. Shanahan, R. G. Abramson, and B. A. Landman. "Regression forest region recognition enhances multi-atlas spleen labeling". In Proc. of the Medical Image Computing and Computer Assisted Intervention (MICCAI). Nagoya, Japan, 2013. [BibTeX]

@inproceedings{li2013regression,
  title={Regression forest region recognition enhances multi-atlas spleen labeling},
  author={Li, Bo and Panda, Swetasudha and Xu, Zhoubing and Asman, Andrew J and Shanahan, Peter L and Abramson, Richard G and Landman, Bennett A},
  booktitle={MICCAI Challenge Workshop on Segmentation: Algorithms, Theory and Applications (SATA)},
  pages={82--92},
  year={2013},
  organization={Citeseer}
}

B. Li, P. Volgyesi, and A. Ledeczi: "Rapid Prototyping of Image Processing Workflows on Massively Parallel Architectures", In Proc. of Intelligent Solutions in Embedded Systems (WISES), Carinthia, Austria, 2012. [BibTeX]

@inproceedings{li2012rapid,
  title={Rapid prototyping of image processing workflows on massively parallel architectures},
  author={Li, Bo and Sallai, J{\'a}nos and V{\"o}lgyesi, P{\'e}ter and L{\'e}deczi, {\'A}kos},
  booktitle={Proceedings of the 10th International Workshop on Intelligent Solutions in Embedded Systems},
  pages={15--20},
  year={2012},
  organization={IEEE}
}

J. S. Lee, B. Li , and H. Y. Tsai. "An Effective Preprocessor for Enhancing Edge Detection in Speckle Images," In Proc. of the 8th International Conference on Information Science and Digital Content Technology (ICIDT), Jeju, Korea, 2012. [BibTeX]

@inproceedings{lee2012effective,
  title={An effective preprocessor for enhancing edge detection in speckle images},
  author={Lee, Jung-San and Li, Bo and Tsai, Hsin-Yi},
  booktitle={2012 8th International Conference on Information Science and Digital Content Technology (ICIDT2012)},
  volume={3},
  pages={546--550},
  year={2012},
  organization={IEEE}
}

F. P. Lin, B. Li and J. S. Lee. "A neoteric progressive scheme for visual secret sharing," In the Proc. of the First National Conference on Web Intelligence and Applications (CWIA). Kaohsiung, Taiwan, 2011. [BibTeX]

@inproceedings{f2011neoteric,
    title={A neoteric progressive scheme for visual secret sharing},
    author={F. P. Lin, B. Li and J. S. Lee},
    booktitle={In the Proc. of the First National Conference on Web Intelligence and Applications (CWIA)},
    year={2011}
}

B. Li, and J. S. Lee. "A wally watermarking scheme with blind extraction based on structured encoding system," In Proc. of International Conference on 2nd World Congress on Computer Science and Information Engineering (CSIE), Changchun, China, 2011. [BibTeX]

@inproceedings{b2011wallywatermarking,
    title={A wally watermarking scheme with blind extraction based on structured encoding system},
    author={B. Li, and J. S. Lee},
    booktitle={International Conference on 2nd World Congress on Computer Science and Information Engineering (CSIE)},
    year={2011}
}

B. Li, J. S. Lee, and C. C. Chang. "Providing Anonymous Channels and Mutual Authentication in GSM," In Proc. of International Conference on the Fourth International Conference on Genetic and Evolutionary Computing (WCECS), Shenzhen, China, 2010. [BibTeX]

@inproceedings{li2010providing,
  title={Providing Anonymous Channels and Mutual Authentication for Mobile Communications},
  author={Li, Bo and Chang, Chin-Chen and Lee, Jung-San},
  booktitle={2010 Fourth International Conference on Genetic and Evolutionary Computing},
  pages={618--621},
  year={2010},
  organization={IEEE}
}

J. S. Lee, B. Li and Y. C. Chou. "A Brand-new Mobile Value-added Service: M-Check," In Proc. of International Conference on Networked Computing, Advanced Information Management and Digital Content and Multimedia Technologies (AICIT), Seoul, Korea, 2009.[BibTeX]

@inproceedings{lee2009brand,
  title={A Brand-New Mobile Value-Added Service: M-Check},
  author={Lee, Jung-San and Li, Bo and Chou, Yung-Chen},
  booktitle={2009 Fifth International Joint Conference on INC, IMS and IDC},
  pages={2050--2055},
  year={2009},
  organization={IEEE}
}

Refereed Journals

Tao Bai, Jun Zhao, Jinlin Zhu, Shoudong Han, Jiefeng Chen, Bo Li, Alex Kot. Towards Efficiently Evaluating the Robustness of Deep Neural Networks in IoT Systems: A GAN-based Method. IEEE Internet of Things Journal.

Wenhao Ding, Baiming Chen, Bo Li, Ji Eun Kim, Ding Zhao. Multimodal Safety-Critical Scenarios Generation for Decision-Making Algorithms Evaluation. IEEE Robotics and Automation Letters (RA-L) 2021. [BibTeX]

@article{ding2021multimodal,
  title={Multimodal safety-critical scenarios generation for decision-making algorithms evaluation},
  author={Ding, Wenhao and Chen, Baiming and Li, Bo and Kim, Ji Eun and Zhao, Ding},
  journal={IEEE Robotics and Automation Letters},
  year={2021},
  publisher={IEEE}
}

Saikiran Bulusu, Bhavya Kailkhura,Bo Li, Pramod K. Varshney, Dawn Song, "Anomalous Example Detection in Deep Learning: A Survey.", IEEE Access 2020. [BibTeX]

@article{bulusu2020anomalous,
  title={Anomalous example detection in deep learning: A survey},
  author={Bulusu, Saikiran and Kailkhura, Bhavya and Li, Bo and Varshney, Pramod K and Song, Dawn},
  journal={IEEE Access},
  volume={8},
  pages={132330--132347},
  year={2020},
  publisher={IEEE}
}

Chao Yan, Bo Li, Yevgeniy Vorobeychik, Aron Laszka, Daniel Fabbri, Bradley Malin, "Database Audit Workload Prioritization via Game Theory", ACM Transactions on Privacy and Security (TOPS), 2018. [BibTeX]

@article{yan2019database,
  title={Database audit workload prioritization via game theory},
  author={Yan, Chao and Li, Bo and Vorobeychik, Yevgeniy and Laszka, Aron and Fabbri, Daniel and Malin, Bradley},
  journal={ACM Transactions on Privacy and Security (TOPS)},
  volume={22},
  number={3},
  pages={1--21},
  year={2019},
  publisher={ACM New York, NY, USA}
}

B. Li, Y. Vorobeychik, "Evasion-Robust Classification on Binary Domains," ACM Transactions on Knowledge Discovery from Data (TKDD), February. 2018. [BibTeX]

@article{li2018evasion,
  title={Evasion-robust classification on binary domains},
  author={Li, Bo and Vorobeychik, Yevgeniy},
  journal={ACM Transactions on Knowledge Discovery from Data (TKDD)},
  volume={12},
  number={4},
  pages={1--32},
  year={2018},
  publisher={ACM New York, NY, USA}
}

S. Chen, M. Xue, L. Fan, S. Hao, L. Xu, H. Zhu, and B. Li, "Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approach," [BibTeX]

@article{chen2018automated,
  title={Automated poisoning attacks and defenses in malware detection systems: An adversarial machine learning approach},
  author={Chen, Sen and Xue, Minhui and Fan, Lingling and Hao, Shuang and Xu, Lihua and Zhu, Haojin and Li, Bo},
  journal={computers \& security},
  volume={73},
  pages={326--344},
  year={2018},
  publisher={Elsevier}
}

B. Li, Y. Vorobeychik, M. Li, B. Malin, "Scalable Iterative Classification for Sanitizing Large-Scale Datasets," IEEE Transactions on Knowledge and Data Engineering (TKDE), Oct. 2016. [BibTeX]

@article{li2016scalable,
  title={Scalable iterative classification for sanitizing large-scale datasets},
  author={Li, Bo and Vorobeychik, Yevgeniy and Li, Muqun and Malin, Bradley},
  journal={IEEE transactions on knowledge and data engineering},
  volume={29},
  number={3},
  pages={698--711},
  year={2016},
  publisher={IEEE}
}

J. S. Lee, B. Li, and B. R. Huang, "Oblivious Transfer System for Information Concealing and Recovery in Cloud Computing," Journal of Internet Technology, vol. 20, pp. 132-145, March 2015. [BibTeX]

@article{san2017oblivious,
  title={Oblivious transfer system for information concealing and recovery in cloud computing},
  author={San Lee, Jung and Li, Bo and Huang, Bo Ruei},
  journal={Journal of Internet Technology},
  volume={18},
  number={1},
  pages={55--63},
  year={2017},
  publisher={Taiwan Academic Network Management Committee}
}

J. S. Lee, K. R. Wen, and B. Li, "Renovating Contaminative Image Archives based on Patch Propagation and Adaptive Confidence Collation" IEEE Transactions on Circuits and Systems for Video Technology, vol. 14, pp. 112-134, April 2015.[BibTeX]

@article{lee2015renovating,
  title={Renovating contaminative image archives based on patch propagation and adaptive confidence collation},
  author={Lee, Jung-San and Wen, Kai-Rui and Li, Bo},
  journal={IEEE Transactions on Circuits and Systems for Video Technology},
  volume={26},
  number={5},
  pages={1004--1011},
  year={2015},
  publisher={IEEE}
}

M. Li, D. Carrell, J. Aberdeen, L. Hirschman, B. Li, Y.Vorobeychik, and B.Malin, "Optimizing Annotation Resources for Natural Language De-identification via a Game Theoretic Framework," Journal of Biomedical Informatics, vol. 30, pp.142-179, October 2015 [BibTeX]

@article{li2016optimizing,
  title={Optimizing annotation resources for natural language de-identification via a game theoretic framework},
  author={Li, Muqun and Carrell, David and Aberdeen, John and Hirschman, Lynette and Kirby, Jacqueline and Li, Bo and Vorobeychik, Yevgeniy and Malin, Bradley A},
  journal={Journal of biomedical informatics},
  volume={61},
  pages={97--109},
  year={2016},
  publisher={Elsevier}
}

J. S. Lee, and B. Li, "Self-recognized Watermarking Technique with Resistance to Large Scale Cropping," IEEE Multimedia, vol. 21, pp. 60-73, March 2014. [BibTeX]

@article{j2014selfrecognized,
author = {Lee, Jung-San and Li, Bo},
year = {2014},
month = {01},
pages = {60-73},
title = {Self-Recognized Image Protection Technique that Resists Large-Scale Cropping},
volume = {21},
journal = {MultiMedia, IEEE},
doi = {10.1109/MMUL.2014.14}
}

J. S. Lee, W. C. Kao, and B. Li, "Aryabhata Remainder Theorem-Based Non-Iterative Electronic Lottery Mechanism with Robustness," IET Information Security, vol. 7, pp. 172-182, May 2013. [BibTeX]

@article{j2013aryabhata,
author = {Lee, Jung-San and Kao, Wei-Chiang and Li, Bo},
year = {2013},
month = {09},
pages = {172-180},
title = {Aryabhata remainder theorem-based non-iterative electronic lottery mechanism with robustness},
volume = {7},
journal = {Information Security, IET},
doi = {10.1049/iet-ifs.2011.0327}
}

J. S. Lee, and B. Li, "Note on ‘Authentication protocol using an identifier in an ad hoc network environment’," Mathematical and Computer Modeling, vol. 57, pp. 1572-1575, July 2013. [BibTeX]

@article{j2013note,
author = {Lee, Jung-San and Li, Bo},
year = {2013},
month = {03},
pages = {1572–1575},
title = {Notes on “Authentication protocol using an identifier in an ad hoc network environment”},
volume = {57},
journal = {Mathematical and Computer Modelling},
doi = {10.1016/j.mcm.2012.11.018}
}

B. Li, F. Bryan, and B. A. Landman, "Next Generation of the JAVA Image Science Toolkit (JIST) Visualization and Validation". InSight Journal, vol. 12, pp. 23-34, February 2012. [BibTeX]

@article{li2012next,
  title={Next generation of the java image science toolkit (jist): visualization and validation},
  author={Li, Bo and Bryan, Frederick and Landman, Bennett A},
  journal={The insight journal},
  volume={2012},
  pages={1},
  year={2012},
  publisher={NIH Public Access}
}

C. C. Yang, K. J. Wei, B. Li and J. S. Lee, "HORME: Hierarchical-Object-Relational Medical management for Electronic record," Security and Communication Networks, vol. 17, pp. 53-65, November 2012. [BibTeX]

@article{yang2013horme,
  title={HORME: hierarchical--object--relational medical management for electronic record},
  author={Yang, Chien-Chang and Wei, Kuo-Jui and Li, Bo and Lee, Jung-San},
  journal={Security and Communication Networks},
  volume={6},
  number={10},
  pages={1261--1270},
  year={2013},
  publisher={Wiley Online Library}
}

C. C. Chang, B. Li and J. S. Lee, "Secret Sharing Using Visual Cryptography," Journal of Electronic Science and Technology, vol. 8, pp. 289-299, June 2010. [BibTeX]

@article{chang2010secret,
  title={Secret sharing using visual cryptography},
  author={Chang, Chin-Chen and Li, Bo and Lee, Jung-San},
  journal={Journal of Electronic Science and Technology},
  volume={8},
  number={4},
  pages={289--299},
  year={2010},
  publisher={Journal of Electronic Science and Technology}
}

B. Li and J. S. Lee, "A Cryptographic Alternative for Preserving PHI in Compliance with HIPAA Privacy/Security Regulations," Journal of Computers, vol. 21, pp. 27-36, March 2010. [BibTeX]

@article{li2010cryptographic,
  title={A Cryptographic Alternative for Preserving PHI in Compliance with HIPAA Privacy/Security Regulations},
  author={Li, Bo and Lee, Jung-San},
  journal={Journal of Computers},
  volume={21},
  number={3},
  pages={27--36},
  year={2010},
}