Shixuan Zhai

dblp:336/4249 · DBLP profile ↗
← Back
5ranked-venue papers
0as first author
5since 2021 · last 2024
0009-0003-8391-1829ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 3 since 2021Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 since 2021
YearPublicationVenuePosition
2024 Your Firmware Has Arrived: A Study of Firmware Update Vulnerabilities
Yuhao Wu 0006, Shixuan Zhai, Yi He 0020, Kun Sun 0001, Qi Li 0002, Ning Zhang 0017
USENIX Security Symposium4
2023 AntiFake: Using Adversarial Audio to Prevent Unauthorized Speech Synthesis
abstract
The rapid development of deep neural networks and generative AI has catalyzed growth in realistic speech synthesis. While this technology has great potential to improve lives, it also leads to the emergence of ''DeepFake'' where synthesized speech can be misused to deceive humans and machines for nefarious purposes. In response to this evolving threat, there has been a significant amount of interest in mitigating this threat by DeepFake detection.
Zhiyuan Yu 0001, Shixuan Zhai, Ning Zhang 0017
CCS2
2023 RIATIG: Reliable and Imperceptible Adversarial Text-to-Image Generation with Natural Prompts
abstract
The field of text-to-image generation has made remarkable strides in creating high-fidelity and photorealistic images. As this technology gains popularity, there is a growing concern about its potential security risks. However, there has been limited exploration into the robustness of these models from an adversarial perspective. Existing research has primarily focused on untargeted settings, and lacks holistic consideration for reliability (attack success rate) and stealthiness (imperceptibility). In this paper, we propose RIATIG, a reliable and imperceptible adversarial attack against text-to-image models via inconspicuous examples. By formulating the example crafting as an optimization process and solving it using a genetic-based method, our proposed attack can generate imperceptible prompts for text-to-image generation models in a reliable way. Evaluation of six popular text-to-image generation models demonstrates the efficiency and stealthiness of our attack in both white-box and black-box settings. To allow the community to build on top of our findings, we've made the artifacts available11Code is available at: https://github.com/WUSTL-CSPL/RIATIG.
Yuhao Wu 0006, Shixuan Zhai, Bo Yuan 0002, Ning Zhang 0017
CVPR3
2023 XCheck: Verifying Integrity of 3D Printed Patient-Specific Devices via Computing Tomography
Zhiyuan Yu 0001, Yuanhaur Chang, Shixuan Zhai, Nicholas Deily, XiaoFeng Wang 0001, Uday Jammalamadaka, Ning Zhang 0017
USENIX Security Symposium3
2022 Work-in-Progress: Measuring Security Protection in Real-time Embedded Firmware
abstract
The proliferation of real-time cyber-physical systems (CPS) is making profound changes to our daily life. Many real-time CPSs are security and safety-critical because of their continuous interactions with the physical world. While the general perception is that the security protection mechanism deployment is often absent in real-time embedded systems, there is no existing empirical study that measures the adoption of these mechanisms in the ecosystem. To bridge this gap, we conduct a measurement study for real-time embedded firmware from both a security perspective and a real-time perspective. To begin with, we collected more than 16 terabytes of embedded firmware and sampled 1,000 of them for the study. Then, we analyzed the adoption of security protection mechanisms and their potential impacts on the timeliness of real-time embedded systems. Besides, we measured the scheduling algorithms supported by real-time embedded systems since they are also security-critical.
Yuhao Wu 0006, Shixuan Zhai, Ao Li 0006, Ning Zhang 0017
RTSS3