EDBT 2026 Demo / reviewers in the wild / expert
Zhonghao Yang 0003
dblp:86/4307-3
· DBLP profile ↗
4ranked-venue papers
1as first author
4since 2021 · last 2026
0009-0009-3107-8146ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 1 first-author · 3 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Toward efficient testing of graph neural networks via test input prioritization
Lichen Yang, Qiang Wang 0001, Zhonghao Yang 0003, Daojing He, Yu Li 0007 |
Autom. Softw. Eng. | 3 |
| 2026 | VLM-Guard: Defending Jailbreaks by Monitoring Only Hundreds of Safety-Critical Neurons
Jinyin Hu, Jiawei Zhou 0013, Minshan Xie, Zhonghao Yang 0003, Jing Li 0034, Huadi Zheng, Jie Shi 0005, Daojing He, Yu Li 0007 |
IEEE Trans. Inf. Forensics Secur. | 4 |
| 2025 | ArcGen: Generalizing Neural Backdoor Detection Across Diverse ArchitecturesabstractBackdoor attacks pose a significant threat to the security and reliability of deep learning models. To mitigate such attacks, one promising approach is to learn to extract features from the target model and use these features for backdoor detection. However, we discover that existing learning-based neural backdoor detection methods do not generalize well to new architectures not seen during the learning phase. In this paper, we analyze the root cause of this issue and propose a novel black-box neural backdoor detection method called ARCGEN. Our method aims to obtain architecture-invariant model features, i.e.,aligned features, for effective backdoor detection. Specifically, in contrast to existing methods directly using model outputs as model features, we introduce an additional alignment layer in the feature extraction function to further process these features. This reduces the direct influence of architecture information on the features. Then, we design two alignment losses to train the feature extraction function. These losses explicitly require that features from models with similar backdoor behaviors but different architectures are aligned at both the distribution and sample levels. With these techniques, our method demonstrates up to 42.5% improvements in detection performance (e.g., AUC) on unseen model architectures. This is based on a large-scale evaluation involving 16,896 models trained on diverse datasets, subjected to various backdoor attacks, and utilizing different model architectures. Our code is available at https://github.com/SeRAlab/ArcGen. Zhonghao Yang 0003, Daojing He, Yiming Li 0004, Yu Li 0007 |
IEEE Trans. Inf. Forensics Secur. | 1 |
| 2021 | Algebraic Attacks on Round-Reduced Keccak
Fukang Liu, Takanori Isobe 0001, Willi Meier, Zhonghao Yang 0003 |
ACISP | 4 |