Ee-Chien Chang
Associate Professor
Works on information security, including cloud security, adversarial machine learning, applied cryptography and multimedia watermarking.
Ee-Chien Chang's lab at NUS works on trustworthy & safe ML and security & privacy. 41 papers since 2023, 14 at top venues, mostly AAAI and ACM MM. 4 PhD students. 16 alumni, most often to CE-Infosys Pte Ltd and Huawei. Applications close .
At a glance
- papers, 2023–2026
- 11/ year
- at T1 venues
- 34%
- PhD students
- 4
- MS students
- 0
- alumni listed
- 16
Papers by yearfrom the lab homepage, 2023–2026
- 8 papers2026 · T1 3 · collecting
- 14 papers2025 · T1 6
- 7 papers2024 · T1 2
- 12 papers2023 · T1 3
T1 venuesOtherVenues: AAAI, ACM MM, ICCV, CCS, ICML
Research focuspaper titles that use each topic's words
- Security & privacy2 papers
- security1 paper
- Trustworthy & safe ML0 papers
- adversarial machine0 papers
- cryptography0 papers
Paper list
From the lab homepage.
20268 papers
- TDSCDRAW: Deep Robustness-Adjustable Watermarking
- —Effectiveness of Distillation Attack and Countermeasure on Neural Network Watermarking (opens in a new tab)
- Improving Adversarial Transferability and Imperceptibility with Loss Landscape and Diffusion ModelPattern Recognition, 2026
- CCS (T1)Proof-of-Authorship for Diffusion-based AI Generated Content
- ICML (T1)Revisiting Coding-Based Approaches to Overcome the Curse of Dimensionality in Learning-Based Watermarking
- PKCSecret-Shared Shuffle from Authenticated Correlations
- DAC (T1)Targeted Bit-flip Attacks on LLM-Based Agents
- TIFSTrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning
202514 papers
- —Adaptive Attractors: A Defense Strategy against Adversarial Collusion Attacks in Machine Learning (opens in a new tab)
- Computers & SecurityAttacKG+: Boosting attack graph construction with Large Language Models (opens in a new tab)
- IEEE Open Journal of the Industrial Electronics SocietyAuto-SGCR: Automated Generation of Smart Grid Cyber Range Using IEC 61850 Standard Models (opens in a new tab)
- A Practical and Secure Byzantine Robust AggregatorCCS 2025
- AAAI (T1)CoSDA: Enhancing the Robustness of Inversion-based Generative Image Watermarking Framework
- TIFSFOADA: Towards Robust Open-World Mobile App Fingerprinting
- ASEImproving LLM-based Log Parsing by Learning from Errors in Reasoning Traces
- NeurIPS (T1)Lie Detector: Unified Backdoor Detection via Cross-Examination Framework
- ICML (T1)Lightweight-Mark:Rethinking Deep Learning-Based Watermarking
- CCS (T1)Removal Attack and Defense on AI Generated Content Latent-based Watermarking
- ICCV (T1)ROAR: Reducing Inversion Error in Generative Image Watermarking
- CyberICPSSignals and Symptoms: ICS Attack Dataset from Railway Cyber Range (opens in a new tab)
20247 papers
- CVPR (T1)BadCLIP: Dual-embedding guided backdoor attack on multimodal contrastive learning (opens in a new tab)
- ACM MMDERO:Diffusion-Model-Erasure Robust Watermarking
- ASIACCSDISCO: Dynamic Searchable Encryption with Constant State (opens in a new tab)
- ACM MMFinding Input Data Domains of Image Classification Models with Hard-Label Black-Box Access (opens in a new tab)
- ASIACCSOn Practicality of Using ARM TrustZone Trusted Execution Environment for Securing Programmable Logic Controllers (opens in a new tab)
- NDSS (T1)Secret-Shared Shuffle with Malicious Security (opens in a new tab)
- ACSACT-Edge: Trusted Heterogeneous Edge Computing (opens in a new tab)
202312 papers
- SoftwareX 23: 101415An open-source framework for publishing/subscribing IEC 61850 R-GOOSE and R-SV
- J. 17(3): 4603-4614Analysis of False Data Injection Attacks Against Automated Control for Parallel Generators in IEC 61850-Based Smart Grid Systems (opens in a new tab)
- TMMDe-END: Decoder-driven Watermarking Network
- ACM MMDeNoL: A Few-Shot-Sample-Based Decoupling Noise Layer for Cross-channel Watermarking Robustness (opens in a new tab)
- ISGTEnd-to-End Performance Evaluation of R-SV / R-GOOSE Messages for Wide Area Protection and Control Applications
- AAAI (T1)Flow-based Robust Watermarking with Invertible Noise Layer for Black-box Distortions (opens in a new tab)
- ASIACCSMitigating Adversarial Attacks by Distributing Different Copies to Different Users (opens in a new tab)
- ACSACMostree: Malicious Secure Private Decision Tree Evaluation with Sublinear Communication
- DSNPoisoning Online Learning Filters by Shifting on the Move (opens in a new tab)
- AAAI (T1)Purifier: Defending Data Inference Attacks via Transforming Confidence Scores (opens in a new tab)
- DSN-STowards Automated Generation of Smart Grid Cyber Range for Cybersecurity Experiments and Training
- ICCV (T1)Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence (opens in a new tab)
Where alumni went16 listed, 38% to industry
Industry 5Academia 8
Most often to
- CE-Infosys Pte Ltd
- Huawei
Also to
- Institute for Infocomm Research
- EPFL
- Institute for Infocom Research
Apply to NUSFall 2027
School of Computing PhD in Computer Science
- Round
- Main
- Opens
- —
- GRE
- See program page
- English
- See program page
- Fee
- See program page
Not yet confirmed for this intake.
Similar labsnearest by research summary
- CNZhejiang
Shouling Ji
- Trustworthy & safe ML
- USGeorgia Tech
Mayya Zhilova
- Learning theory & optimization
- CNZhejiang
Jie Song
- Generative & foundation models
- USUT Austin
Sujay Sanghavi
- Learning theory & optimization
- CNPeking
Cong Fang
- Learning theory & optimization
- CNSJTU
Jiangchao Yao
- Learning theory & optimization
Your notes
Save this lab to keep notes.
Data
Checked against the lab homepage.
- Collected
- Verified
- Papers
- The lab homepage
- Members
- Lab homepage
- Alumni
- Lab homepage
Tiers are venue classifications, not lab rankings.
NUScloses