Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Zhijie Xiang

dblp:313/5061 · DBLP profile ↗
← Back
6ranked-venue papers
0as first author
6since 2021 · last 2026
0000-0002-0231-8448ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Computer networks · 2 · 2 since 2021Security and privacy · 2 · 2 since 2021Artificial intelligence and machine learning · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Security and privacy of machine learning · 60% Network security · 28% Hardware security and side channels · 13%
Artificial intelligence
2 papers
Speech recognition and synthesis · 50% Trustworthy machine learning · 50%
Computer graphics and multimedia
2 papers
Audio and music processing · 100%

Topics — the 7 heaviest of 7, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › robustness
adversarial robustness
1.822026
Adversarial Attacks on Closed Box Speech Recognition Systems via Laser Injection · IEEE Trans. Dependable Secur. Comput. 2026
LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems · USENIX Security Symposium 2024
Natural language and speech › Speech recognition and synthesis
automatic speech recognition
1.822026
Adversarial Attacks on Closed Box Speech Recognition Systems via Laser Injection · IEEE Trans. Dependable Secur. Comput. 2026
LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems · USENIX Security Symposium 2024
Security and privacy of machine learning
adversarial attack
1.822026
Adversarial Attacks on Closed Box Speech Recognition Systems via Laser Injection · IEEE Trans. Dependable Secur. Comput. 2026
LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems · USENIX Security Symposium 2024
Security and privacy of machine learning › adversarial attack
audio adversarial attack
1.822026
Adversarial Attacks on Closed Box Speech Recognition Systems via Laser Injection · IEEE Trans. Dependable Secur. Comput. 2026
LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems · USENIX Security Symposium 2024
Network security › attack strategy
eavesdropping
1.622025
Ambient Light Reflection-Based Eavesdropping Enhanced With cGAN · IEEE Trans. Mob. Comput. 2025
EchoLight: Sound Eavesdropping based on Ambient Light Reflection · INFOCOM 2024
Audio and music processing › acoustic signal processing
audio signal reconstruction
1.122025
Ambient Light Reflection-Based Eavesdropping Enhanced With cGAN · IEEE Trans. Mob. Comput. 2025
EchoLight: Sound Eavesdropping based on Ambient Light Reflection · INFOCOM 2024
Hardware security and side channels › side-channel attack › acoustic side channel
acoustic eavesdropping
0.812024
EchoLight: Sound Eavesdropping based on Ambient Light Reflection · INFOCOM 2024

Methods — techniques the papers use, named apart from their topics

time-frequency domain perturbation · 2.0selective amplitude enhancement · 2.0conditional generative adversarial network (cGAN) · 1.7conditional GAN · 1.5
YearPublicationVenuePosition
2026 Adversarial Attacks on Closed Box Speech Recognition Systems via Laser Injection
abstract
Audio adversarial perturbations are designed to remain imperceptible to humans while deceiving automatic speech recognition (ASR) models. However, operating within the audible frequency range makes existing methods partially detectable in practice. In this paper, we present LaserAdv, a laser-based adversarial attack that injects carefully crafted perturbations via laser signals, which are superimposed on speech rather than masking it. This design exploits a well-established property of adversarial examples—the ability to mislead models through minimal, often imperceptible, modifications—while preserving the underlying speech, thereby enabling higher attack efficiency and a longer effective attack range. To mitigate distortion introduced during laser transmission, we propose SAE-TFI, a selective amplitude enhancement method in the time–frequency domain. LaserAdv enables physically realizable attacks that are inaudible and black-box, while supporting targeted and universal attack settings without requiring signal synchronization. Experimental results demonstrate that a single perturbation can cause DeepSpeech, Whisper, and iFlytek to misinterpret any of the 12,260 voice commands as target with accuracy of up to 100%, 92% and 88%, respectively. The maximum effective attack distance reaches 120 m.
Zhijie Xiang, Yanni Yang 0003, Xiaoyu Ji 0001, Xiuzhen Cheng, Pengfei Hu 0001
IEEE Trans. Dependable Secur. Comput.4
2025 Study on multimodal spatially-constrained contrastive learning for knee osteoarthritis severity grading
abstract
To address the limitations of single-modal feature coverage and class distribution imbalance in knee osteoarthritis (KOA) classification, this study proposes a Multimodal Spatial-constraint Contrastive Learning (MSCL) model. First, dynamic and static plantar pressure data and human keypoint trajectories are synchronously acquired. The model first feeds dynamic plantar pressure and keypoint data into a multimodal spatial-temporal fusion branch, where graph convolutional networks and Transformers extract spatial-temporal representations of human keypoints and dynamic pressure patterns respectively, followed by Cross Attention fusion. Subsequently, static plantar pressure is processed through a pyramid CNN architecture to generate coarse-grained spatial constraint vectors, which serve as anatomical priors to regularize the fused representations. Finally, a contrastive learning framework is integrated to establish explicit mapping between the enhanced representations and Kellgren-Lawrence (KL) grading system, enabling precise KOA severity stratification. Experimental results demonstrate that the MSCL model achieves 0.94 macro-average accuracy in KL grading, with 7% improvement in F1-scores for imbalanced categories with limited samples. This work establishes a novel paradigm for accurate KOA assessment through multimodal gait analysis.
Zhijie Xiang, Yuzhe Tan, Jiayue Hu, Haicheng Wei
J. Biomed. Informatics2
2025 Ambient Light Reflection-Based Eavesdropping Enhanced With cGAN
abstract
Sound eavesdropping using light has been an area of considerable interest and concern, as it can be achieved over long distances. However, previous work has often lacked stealth (e.g., active emission of laser beams) or been limited in the range of realistic applications (e.g., using direct light from a device’s indicator LED or a hanging light bulb). In this paper, we presentEchoLight, a non-intrusive, passive and long-range sound eavesdropping method that utilizes the extensive reflection of ambient light from vibrating objects to reconstruct sound. We analyze the relationship between reflection light signals and sound signals, particularly in situations where the frequency response of reflective objects and the efficiency of diffuse reflection are suboptimal. Based on this analysis, we have introduced an algorithm based on cGAN to address the issues of nonlinear distortion and spectral absence in the frequency domain of sound. We extensively evaluateEchoLight’s performance in a variety of real-world scenarios. It demonstrates the ability to accurately reconstruct audio from a variety of source distances, attack distances, sound levels, light sources, and reflective materials. Our results reveal that the reconstructed audio exhibits a high degree of similarity to the original audio over 40 meters of attack distance.
Heqiang Fu, Zhijie Xiang, Pengfei Hu 0001, Xiuzhen Cheng, Yanni Yang 0003
IEEE Trans. Mob. Comput.3
2024 EchoLight: Sound Eavesdropping based on Ambient Light Reflection
abstract
Sound eavesdropping using light has been an area of considerable interest and concern, as it can be achieved over long distances. However, previous work has often lacked stealth (e.g., active emission of laser beams) or been limited in the range of realistic applications (e.g., using direct light from a device’s indicator LED or a hanging light bulb). In this paper, we present EchoLight, a non-intrusive, passive and long-range sound eavesdropping method that utilizes the extensive reflection of ambient light from vibrating objects to reconstruct sound. We analyze the relationship between reflection light signals and sound signals, particularly in situations where the frequency response of reflective objects and the efficiency of diffuse reflection are suboptimal. Based on this analysis, we have introduced an algorithm based on cGAN to address the issues of nonlinear distortion and spectral absence in the frequency domain of sound. We extensively evaluate EchoLight’s performance in a variety of real-world scenarios. It demonstrates the ability to accurately reconstruct audio from a variety of source distances, attack distances, sound levels, light intensity, light sources, and reflective materials. Our results reveal that the reconstructed audio exhibits a high degree of similarity to the original audio over 40 meters of attack distance.
Zhijie Xiang, Heqiang Fu, Yanni Yang 0003, Pengfei Hu 0001
INFOCOM2
2024 LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems
Zhijie Xiang, Xiaoyu Ji 0001, Yanni Yang 0003, Xiuzhen Cheng, Pengfei Hu 0001
USENIX Security Symposium4
2022 Unified model for collective and point anomaly detection using stacked temporal convolution networks
Zhijie Xiang, Weijia Gong, Hong Wang 0015
Appl. Intell.2