Kui Ren
求是讲席教授
Studies data security and privacy, AI security, and security of IoT, smart devices and connected vehicles.
Kui Ren's lab at Zhejiang works on trustworthy & safe ML. 295 papers since 2023, 120 at top venues, mostly USENIX Security and NDSS. 11 PhD students and 5 master's students. 23 alumni, most often to Meta and Qualcomm. Applications close .
At a glance
- papers, 2023–2026
- 77/ year
- at T1 venues
- 41%
- PhD students
- 11
- MS students
- 5
- alumni listed
- 23
Papers by yearfrom DBLP, 2023–2026
- 63 papers2026 · T1 20 · collecting
- 80 papers2025 · T1 36
- 79 papers2024 · T1 33
- 73 papers2023 · T1 31
T1 venuesOtherVenues: USENIX Security, NDSS, VLDB, CCS, CVPR
Research focuspaper titles that use each topic's words
- security10 papers
- Trustworthy & safe ML2 papers
- connected vehicles0 papers
- studies data0 papers
- data security0 papers
Paper list
From DBLP.
202663 papers
- IEEE Trans. Dependable Secur. Comput.$\mathsf {CipherGPT}$CipherGPT: Secure Two-Party GPT Inference (opens in a new tab)
- NDSS (T1)A Causal Perspective for Enhancing Jailbreak Attack and Defense (opens in a new tab)
- ITC-AsiaA Layout-Level Camouflaging IC Design against Boolean Satisfiability-Based Attacks (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.A Passive Defense Against Out-of-Band Injection Threats to Microphone-Based Devices (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.A Scalable Coercion-Resistant Voting Scheme for Blockchain Decision-Making (opens in a new tab)
- TKDE (T1)A Survey on Medical Large Language Models: Technology, Application, Trustworthiness, and Future Directions (opens in a new tab)
- Appl. Soft Comput.A systematic analysis of LLM backdoor-integrated cyberattacks: Feasibility, impact factors, and realistic case studies in agent systems (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.A User Threat-Driven Multi-Objective Adaptive VM Allocation Framework for Cloud Security (opens in a new tab)
- ACL (T1)APPSI-139: A Parallel Corpus of English Application Privacy Policy Summarization and Interpretation (opens in a new tab)
- SIGMOD (T1)ASSS : Adaptive Stratified Sampling for Shapley-like Values (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Blockchain-Enhanced Verifiable Secure Inference for Regulatable Privacy-Preserving Transactions (opens in a new tab)
- VLDB (T1)CaSh: Shapley Value Computation with Cache Optimization (opens in a new tab)
202580 papers
- IEEE Trans. Computers$\mathsf{Aurora}$Aurora: Leaderless State-Machine Replication With High Throughput (opens in a new tab)
- IACR Cryptol. ePrint Arch.A New Paradigm for Privacy-Preserving Decision Tree Evaluation (opens in a new tab)
- NDSS (T1)A New PPML Paradigm for Quantized Models (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.ACL: Account Linking in Online Social Networks With Robust Camera Fingerprint Matching (opens in a new tab)
- USENIX Security (T1)Activation Approximations Can Incur Safety Vulnerabilities in Aligned LLMs: Comprehensive Analysis and Defense (opens in a new tab)
- IEEE Trans. Serv. Comput.An Active Defense Adjudication Method Based on Adaptive Anomaly Sensing for Mimic IoT (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Anomaly Detection in Event-Triggered Traffic Time Series via Similarity Learning (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Arena: Multi-Leader Synchronous Byzantine Fault Tolerance (opens in a new tab)
- ASIACRYPTAttention is still what you need: Another Round of Exploring Shoup's GGM (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Attributed Graph Clustering in Collaborative Settings (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.AV-Agent: A Bottom-Up Interpretable Malware Classifier Based on Large Language Models (opens in a new tab)
- SIGMOD (T1)B2Mark: A Blind and Buyer-Traceable Watermarking Scheme for Tabular Datasets (opens in a new tab)
202479 papers
- IEEE Trans. Dependable Secur. Comput.${\sf FederBoost}$: Private Federated Learning for GBDT (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.$\mathsf {monoCash}$monoCash: A Channel-Free Payment Network via Trusted Monotonic Counters (opens in a new tab)
- CCS (T1)A Causal Explainable Guardrails for Large Language Models (opens in a new tab)
- IEEE Trans. Mob. Comput.A Resilience Evaluation Framework on Ultrasonic Microphone Jammers (opens in a new tab)
- NDSS (T1)ActiveDaemon: Unconscious DNN Dormancy and Waking Up via User-specific Invisible Token (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.AdvReverb: Rethinking the Stealthiness of Audio Adversarial Examples to Human Perception (opens in a new tab)
- SPALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Ambush From All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines (opens in a new tab)
- IEEE/ACM Trans. Netw.An Imperceptible Eavesdropping Attack on WiFi Sensing Systems (opens in a new tab)
- INFOCOM (T1)Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning (opens in a new tab)
- IACR Cryptol. ePrint Arch.Byzantine Consensus in Wireless Networks (opens in a new tab)
- DAC (T1)CDS: An Anti-Aging Calibratable Digital Sensor for Detecting Multiple Types of Fault Injection Attacks (opens in a new tab)
202373 papers
- IEEE Trans. Software Eng.A Comprehensive Study on ARM Disassembly Tools (opens in a new tab)
- ICASSP (T1)A Large-Scale Pretrained Deep Model for Phishing URL Detection (opens in a new tab)
- IACR Cryptol. ePrint Arch.A Scalable Coercion-resistant Blockchain Decision-making Scheme (opens in a new tab)
- IJCAI (T1)Action Recognition with Multi-stream Motion Modeling and Mutual Information Maximization (opens in a new tab)
- IACR Cryptol. ePrint Arch.Aegis: A Lightning Fast Privacy-preserving Machine Learning Platform against Malicious Adversaries (opens in a new tab)
- CVPR (T1)ANetQA: A Large-scale Benchmark for Fine-grained Compositional Reasoning over Untrimmed Videos (opens in a new tab)
- IACR Cryptol. ePrint Arch.Aurora: Leaderless State-Machine Replication with High Throughput (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Automatic Permission Check Analysis for Linux Kernel (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.AVoiD-DF: Audio-Visual Joint Learning for Detecting Deepfake (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Behavior Privacy Preserving in RF Sensing (opens in a new tab)
- NSDI (T1)Boomerang: Metadata-Private Messaging under Hardware Trust (opens in a new tab)
- MSNBypTalker: An Adaptive Adversarial Example Attack to Bypass Prefilter-enabled Speaker Recognition (opens in a new tab)
Where alumni went23 listed, 100% to industry
Industry 3Academia 0
Most often to
- Meta
- Qualcomm
- Waymo
Apply to ZhejiangFall 2027
Computer Science PhD (international applicants)
- Round
- Self-funded
- Opens
- —
- GRE
- See program page
- English
- Per ZJU language requirements
- Fee
- RMB 800
Not yet confirmed for this intake.
Similar labsnearest by research summary
- CNSJTU
Junchi Yan
- Learning theory & optimization
- USStanford
Gregory Valiant
- Learning theory & optimization
- CNTsinghua
Jun Zhu
- Learning theory & optimization
- USUT Austin
Adam Klivans
- Learning theory & optimization
- GBEdinburgh
Maithilee Kunda
- Reasoning & agents
- USUT Austin
Zhangyang Wang
- Trustworthy & safe ML
Your notes
Save this lab to keep notes.
Data
Checked against the lab homepage.
- Collected
- Verified
- Papers
- DBLP
- Members
- Lab homepage
- Alumni
- Lab homepage
Tiers are venue classifications, not lab rankings.
Zhejiangcloses