Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Hanrong Zhang

dblp:285/4608 · DBLP profile ↗
← Back
9ranked-venue papers
4as first author
9since 2021 · last 2026
0000-0003-0957-6703ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 3 · 2 first-author · 3 since 2021Applied, interdisciplinary, general and emerging computing · 3 · 1 first-author · 3 since 2021Graphics, computer vision, multimedia, augmented reality and games · 2 · 1 first-author · 2 since 2021Human-computer interaction and ubiquitous computing · 2 · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Security and privacy of machine learning · 100%
Artificial intelligence
2 papers
Language models and text generation · 56% Knowledge representation and reasoning · 44%

Topics — the 6 heaviest of 7, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning › adversarial attack
backdoor attack
1.722025
Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents · ICLR 2025
Invisible Backdoor Attack against Self-supervised Learning · CVPR 2025
Natural language and speech › Language models and text generation › LLM agents
agent memory
1.012026
GAM: Hierarchical Graph-based Agentic Memory for LLM Agents · ACL (1) 2026
Security and privacy of machine learning › large language model security
LLM agent security
0.912025
Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents · ICLR 2025
Security and privacy of machine learning
prompt injection
0.912025
Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents · ICLR 2025
Security and privacy of machine learning › adversarial attack › backdoor attack
self-supervised learning backdoor
0.912025
Invisible Backdoor Attack against Self-supervised Learning · CVPR 2025
Natural language and speech › Language models and text generation
LLM agents
0.312025
Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents · ICLR 2025

Methods — techniques the papers use, named apart from their topics

benchmarking · 1.7attack and defense evaluation · 1.7optimized trigger · 0.9disentangled augmentation · 0.9
YearPublicationVenuePosition
2026 GAM: Hierarchical Graph-based Agentic Memory for LLM Agents
abstract
Zhaofen Wu, Hanrong Zhang, Fulin Lin, Wujiang Xu, Xinran Xu, Yankai Chen, Henry Peng Zou, Shaowen Chen, Weizhi Zhang, Xue Liu, Philip S. Yu, Hongwei Wang. Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 2026.
Zhaofen Wu, Hanrong Zhang, Fulin Lin, Wujiang Xu, Xinran Xu, Yankai Chen 0001, Henry Peng Zou, Shaowen Chen, Weizhi Zhang 0001, Xue (Steve) Liu, Philip S. Yu
ACL (1)2
2025 Industrial Data Synthesis Framework for Fault Diagnosis Using Diffusion and Flow-Based Models
abstract
Fault diagnosis plays a significant role in the intelligent maintenance of industrial processes. Although there are numerous deep learning methods designed for fault diagnosis, certain challenges remain difficult to address in real-world industrial scenarios. These challenges include ensuring high- precision fault detection while maintaining industrial privacy in the presence of sensitive data, as well as achieving accurate detection when fault samples are limited. This paper proposes an industrial data generation framework using diffusion and flow- based models. The proposed approach learns the distribution of the original data to generate synthetic samples with similar characteristics, effectively resolving the dual challenges of data sensitivity and scarcity. Experiments on the Tennessee Eastman dataset demonstrate that our approach outperforms existing methods in fault diagnosis performance.
Shuting Tao, Xiangming Meng, Hanrong Zhang
CSCWD3
2025 Invisible Backdoor Attack against Self-supervised Learning
abstract
Self-supervised learning (SSL) models are vulnerable to backdoor attacks. Existing backdoor attacks that are effective in SSL often involve noticeable triggers, like colored patches or visible noise, which are vulnerable to human inspection. This paper proposes an imperceptible and effective backdoor attack against self-supervised models. We first find that existing imperceptible triggers designed for supervised learning are less effective in compromising self-supervised models. We then identify this ineffectiveness is attributed to the overlap in distributions between the backdoor and augmented samples used in SSL. Building on this insight, we design an attack using optimized triggers disentangled with the augmented transformation in the SSL, while remaining imperceptible to human vision. Experiments on five datasets and six SSL algorithms demonstrate our attack is highly effective and stealthy. It also has strong resistance to existing backdoor defenses. Our code can be found at https://github.com/Zhang-Henry/INACTIVE.
Hanrong Zhang, Zhenting Wang, Boheng Li, Fulin Lin, Tingxu Han, Mingyu Jin, Chenlu Zhan, Mengnan Du, Hongwei Wang 0001, Shiqing Ma
CVPR1
2025 Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents
abstract
Although LLM-based agents, powered by Large Language Models (LLMs), can use external tools and memory mechanisms to solve complex real-world tasks, they may also introduce critical security vulnerabilities. However, the existing literature does not comprehensively evaluate attacks and defenses against LLM-based agents. To address this, we introduce Agent Security Bench (ASB), a comprehensive framework designed to formalize, benchmark, and evaluate the attacks and defenses of LLM-based agents, including 10 scenarios (e.g., e-commerce, autonomous driving, finance), 10 agents targeting the scenarios, over 400 tools, 27 different types of attack/defense methods, and 7 evaluation metrics. Based on ASB, we benchmark 10 prompt injection attacks, a memory poisoning attack, a novel Plan-of-Thought backdoor attack, 4 mixed attacks, and 11 corresponding defenses across 13 LLM backbones. Our benchmark results reveal critical vulnerabilities in different stages of agent operation, including system prompt, user prompt handling, tool usage, and memory retrieval, with the highest average attack success rate of 84.30\%, but limited effectiveness shown in current defenses, unveiling important works to be done in terms of agent security for the community. We also introduce a new metric to evaluate the agents' capability to balance utility and security. Our code can be found at https://github.com/agiresearch/ASB.
Hanrong Zhang, Kai Mei, Yifei Yao, Zhenting Wang, Chenlu Zhan, Hongwei Wang 0001, Yongfeng Zhang 0003
ICLR1
2025 Class Incremental Fault Diagnosis Under Limited Fault Data via Supervised Contrastive Knowledge Distillation
abstract
Class-incremental fault diagnosis requires a model to adapt to new fault classes while retaining previous knowledge. However, limited research exists for imbalanced and long-tailed data. Extracting discriminative features from few-shot fault data is challenging, and adding new fault classes often demands costly model retraining. Moreover, incremental training of existing methods risks catastrophic forgetting, and severe class imbalance can bias the model's decisions toward normal classes. To tackle these issues, we introduce a supervised contrastive knowledge distillation for class incremental fault diagnosis (SCLIFD) framework proposing supervised contrastive knowledge distillation for improved representation learning capability and less forgetting, a novel prioritized exemplar selection method for sample replay to alleviate catastrophic forgetting, and the random forest classifier to address the class imbalance. Extensive experimentation on simulated and real-world industrial datasets across various imbalance ratios demonstrates the superiority of SCLIFD over existing approaches.
Hanrong Zhang, Yifei Yao, Zixuan Wang 0028, Jiayuan Su, Mengxuan Li 0003, Peng Peng 0006, Hongwei Wang 0001
IEEE Trans. Ind. Informatics1
2024 Generalized Out-of-Distribution Fault Diagnosis (GOOFD) via Internal Contrastive Learning
abstract
Fault diagnosis is crucial in monitoring machines within industrial processes. With the increasing complexity of working conditions and demand for safety during production, diverse diagnosis methods are required, and an integrated fault diagnosis system capable of handling multiple tasks is highly desired. However, the diagnosis subtasks are often studied separately, and the current methods still need improvement for such a generalized system. To address this issue, we propose the generalized out-of-distribution fault diagnosis (GOOFD) framework to integrate diagnosis subtasks. Additionally, a unified fault diagnosis method based on internal contrastive learning and Mahalanobis distance is put forward to underpin the proposed generalized framework. The method involves feature extraction through internal contrastive learning and outlier recognition based on the Mahalanobis distance. Our proposed method can be applied to multiple fault diagnosis tasks and achieve better performance than the existing single-task methods. Experiments are conducted on benchmark and practical process datasets, indicating the effectiveness of the proposed framework.
Hanrong Zhang, Xinlong Qiao, Shuting Tao, Peng Peng 0006, Hongwei Wang 0001
IEEE Trans. Ind. Informatics2
2023 Multi-gate Mixture-of-Expert Combined with Synthetic Minority Over-sampling Technique for Multimode Imbalanced Fault Diagnosis
abstract
Compared with traditional multivariate statistical techniques, deep neural networks have been frequently used for single-mode fault diagnosis and have shown promising results. However, in the real world, a complex industrial process may have several modes and fewer fault samples than normal. Although several multivariate statistical techniques focus on multimode fault diagnosis, those methods usually identify modes and then locally diagnose faults while ignoring relative information across modes and data imbalance problems. In this paper, a deep learning-based method combining Multi-gate Mixture-of-Experts (MMOE) and Synthetic Minority Over-sampling Technique (SMOTE) is proposed to address multimode imbalance fault diagnosis. Specifically, MMOE can identify modes and diagnose faults in each mode simultaneously. Furthermore, it investigates the common information of multiple modes by sharing network parameters. Moreover, SMOTE can address the fault imbalance problem by over-sampling minority fault samples. The experiment results show the performance improvements of multimode imbalance fault diagnosis using MMOE-SMOTE on the Tennessee Eastman (TE) Chemical benchmark process.
Wanqiu Huang, Hanrong Zhang, Peng Peng 0006, Hongwei Wang 0001
CSCWD2
2023 Debiasing Medical Visual Question Answering via Counterfactual Training
Chenlu Zhan, Peng Peng 0006, Hanrong Zhang, Haiyue Sun, Chunnan Shang, Hongsen Wang, Gaoang Wang, Hongwei Wang 0001
MICCAI (2)3
2023 SAKA: an intelligent platform for semi-automated knowledge graph construction and application
Hanrong Zhang, Hongwei Wang 0001
Serv. Oriented Comput. Appl.1