Li Lu
特聘研究员
Works on intelligent voice security, autonomous-driving security, IoT security and pervasive computing.
Li Lu's lab at Zhejiang works on speech synthesis & voice and embodied & active vision. 47 papers since 2023, 13 at top venues, mostly USENIX Security and AAAI. Applications close .
At a glance
- papers, 2023–2026
- 12/ year
- at T1 venues
- 28%
- PhD students
- —
- MS students
- —
- alumni listed
- —
Papers by yearfrom DBLP, 2023–2026
- 8 papers2026 · T1 1 · collecting
- 12 papers2025 · T1 1
- 17 papers2024 · T1 6
- 10 papers2023 · T1 5
T1 venuesOtherVenues: USENIX Security, AAAI, SenSys, CCS, DAC
Research focuspaper titles that use each topic's words
- Speech synthesis & voice9 papers
- voice5 papers
- Embodied & active vision0 papers
- security0 papers
- pervasive0 papers
Paper list
From DBLP.
20268 papers
- IEEE Trans. Dependable Secur. Comput.A Passive Defense Against Out-of-Band Injection Threats to Microphone-Based Devices (opens in a new tab)
- IEEE Trans. Mob. Comput.AE-IPP: Adversarial Example Enabled Identity Privacy Preserving With mmWave Signals (opens in a new tab)
- AAAI (T1)Beyond Content: A Comprehensive Speech Toxicity Dataset and Detection Framework Incorporating Paralinguistic Cues (opens in a new tab)
- IWQoSCANListener: A Lightweight and Adaptive Intrusion Detection System for In-vehicle CAN Bus (opens in a new tab)
- J. Syst. Archit.EF-IDS: An efficient intrusion detection system with enriched features for CAN bus in modern vehicles (opens in a new tab)
- IEEE Trans. ComputersFBRE: Fuzzing Based Bit-Level Reverse Engineering of Vehicular CAN Bus (opens in a new tab)
- SPHijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection (opens in a new tab)
- IEEE Commun. Surv. TutorialsIntrusion Detection and Prevention for Intra- and Inter-Vehicle Networks: A Comprehensive Survey (opens in a new tab)
202512 papers
- IEEE Trans. Dependable Secur. Comput.ACL: Account Linking in Online Social Networks With Robust Camera Fingerprint Matching (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.DroneAudioID: A Lightweight Acoustic Fingerprint-Based Drone Authentication System for Secure Drone Delivery (opens in a new tab)
- IJCNNEvaluating Robustness of Voice Conversion Systems under Multi-source Channel Interference (opens in a new tab)
- SPFrom One Stolen Utterance: Assessing the Risks of Voice Cloning in the AIGC Era (opens in a new tab)
- ICCGFuzz4CAN: A Generative Model-based Fuzzing Method for In-vehicle Controller Area Network (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Liquid Crystal Mimics Your Heart: A Physical Spoofing Attack Against PPG-Based Systems (opens in a new tab)
- J. Syst. Archit.LUFT-CAN: A lightweight unsupervised learning based intrusion detection system with frequency-time analysis for vehicular CAN bus (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.MagShadow: Physical Adversarial Example Attacks via Electromagnetic Injection (opens in a new tab)
- IEEE Trans. Mob. Comput.mmZeAR: Zero-Effort Cross-Category Action Recognition With mmWave Radar (opens in a new tab)
- DAC (T1)On Bit-level Reverse Engineering of Vehicular CAN Bus (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Phoneme-Based Proactive Anti-Eavesdropping With Controlled Recording Privilege (opens in a new tab)
- MobiSysSecHeadset: A Practical Privacy Protection System for Real-time Voice Communication (opens in a new tab)
202417 papers
- IEEE Trans. Mob. Comput.A Resilience Evaluation Framework on Ultrasonic Microphone Jammers (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.AdvReverb: Rethinking the Stealthiness of Audio Adversarial Examples to Human Perception (opens in a new tab)
- SPALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features (opens in a new tab)
- IEEE/ACM Trans. Netw.An Imperceptible Eavesdropping Attack on WiFi Sensing Systems (opens in a new tab)
- IUIConan's Bow Tie: A Streaming Voice Conversion for Real-Time VTuber Livestreaming (opens in a new tab)
- USENIX Security (T1)Devil in the Room: Triggering Audio Backdoors in the Physical World (opens in a new tab)
- SenSys (T1)EMTrig: Physical Adversarial Examples Triggered by Electromagnetic Injection towards LiDAR Perception (opens in a new tab)
- AAAI (T1)Exposing the Deception: Uncovering More Forgery Clues for Deepfake Detection (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.FLTracer: Accurate Poisoning Attack Provenance in Federated Learning (opens in a new tab)
- USENIX Security (T1)FraudWhistler: A Resilient, Robust and Plug-and-play Adversarial Example Detection Method for Speaker Recognition (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.High-Quality Speech Recovery Through Soundproof Protections via mmWave Sensing (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Indelible "Footprints" of Inaudible Command Injection (opens in a new tab)
202310 papers
- MSNBypTalker: An Adaptive Adversarial Example Attack to Bypass Prefilter-enabled Speaker Recognition (opens in a new tab)
- SenSys (T1)FingerFaker: Spoofing Attack on COTS Fingerprint Recognition Without Victim's Knowledge (opens in a new tab)
- CCS (T1)FITS: Matching Camera Fingerprints Subject to Software Noise Pollution (opens in a new tab)
- NDSS (T1)InfoMasker: Preventing Eavesdropping Using Phoneme-Based Noise (opens in a new tab)
- SPMagBackdoor: Beware of Your Loudspeaker as A Backdoor For Magnetic Injection Attacks (opens in a new tab)
- ICASSP (T1)Shift to Your Device: Data Augmentation for Device-Independent Speaker Verification Anti-Spoofing (opens in a new tab)
- IEEE/ACM Trans. Netw.Toward Multi-User Authentication Using WiFi Signals (opens in a new tab)
- WWW (T1)Transferring Audio Deepfake Detection Capability across Languages (opens in a new tab)
- Proc. ACM Interact. Mob. Wearable Ubiquitous Technol.VoiceCloak: Adversarial Example Enabled Voice De-Identification with Balanced Privacy and Utility (opens in a new tab)
- Proc. ACM Interact. Mob. Wearable Ubiquitous Technol.VoiceListener: A Training-free and Universal Eavesdropping Attack on Built-in Speakers of Mobile Devices (opens in a new tab)
Where alumni went
Alumni are not listed on the lab homepage.
Apply to ZhejiangFall 2027
Computer Science PhD (international applicants)
- Round
- Self-funded
- Opens
- —
- GRE
- See program page
- English
- Per ZJU language requirements
- Fee
- RMB 800
Not yet confirmed for this intake.
Similar labsnearest by research summary
- CNTsinghua
Weiqiang Zhang
- Speech recognition & spoken language
- USUMD
Carol Espy-Wilson
- Speech recognition & spoken language
- CNSJTU
Mengyue Wu
- Speech recognition & spoken language
- CNSJTU
Yanmin Qian
- Speech recognition & spoken language
- GBUCL
Ifat Yasin
- Speech recognition & spoken language
- USUSC
Shrikanth Narayanan
- Speech recognition & spoken language
Your notes
Save this lab to keep notes.
Data
Some numbers could not be verified:
- The member list could not be found on the lab site.
- The alumni list could not be found on the lab site.
- The lab site and the paper record do not agree.
- Collected
- Verified
- Papers
- DBLP
- Members
- Not collected
- Alumni
- Not collected
Tiers are venue classifications, not lab rankings.
Zhejiangcloses