Zhan Qin
长聘副教授
Works on AI security and data security and privacy protection.
Zhan Qin's lab at Zhejiang works on trustworthy & safe ML. 89 papers since 2023, 42 at top venues, mostly CCS and USENIX Security. Applications close .
At a glance
- papers, 2023–2026
- 23/ year
- at T1 venues
- 47%
- PhD students
- —
- MS students
- —
- alumni listed
- —
Papers by yearfrom DBLP, 2023–2026
- 30 papers2026 · T1 14 · collecting
- 28 papers2025 · T1 12
- 20 papers2024 · T1 9
- 11 papers2023 · T1 7
T1 venuesOtherVenues: CCS, USENIX Security, WWW, NDSS, NeurIPS
Research focuspaper titles that use each topic's words
- Trustworthy & safe ML1 paper
- security1 paper
- protection1 paper
- data security0 papers
- privacy protection0 papers
Paper list
From DBLP.
202630 papers
- TKDE (T1)A Survey on Medical Large Language Models: Technology, Application, Trustworthiness, and Future Directions (opens in a new tab)
- Appl. Soft Comput.A systematic analysis of LLM backdoor-integrated cyberattacks: Feasibility, impact factors, and realistic case studies in agent systems (opens in a new tab)
- ICPRAC2-Fuse: Syntax-Preserving Canonicalization and Cross-Model Curvature for Detecting LLM-Generated Code (opens in a new tab)
- ECML-PKDDAdaptive and Explicit tt : Triggering Latent Safety Awareness in Large Reasoning Models (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Approx-PSI: Efficient Differentially Private Set Intersection-Based Analysis (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.AttMark: Attention Based Model Watermarking Against Stealing Attacks (opens in a new tab)
- Pattern RecognitionBoosting illuminant estimation in deep color constancy through brightness robustness enhancement (opens in a new tab)
- WWW (T1)Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework (opens in a new tab)
- SIGMOD (T1)Defense against Poisoning Attacks under Shuffle-DP (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Differentially Private Zeroth-Order Methods for Scalable Large Language Model Fine-Tuning (opens in a new tab)
- KDD (T1)DMind Benchmark: Toward a Holistic Assessment of LLM Capabilities across the Web3 Domain (opens in a new tab)
- SPDREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling (opens in a new tab)
202528 papers
- CCS (T1)Combating Concept Drift with Explanatory Detection and Adaptation for Android Malware Classification (opens in a new tab)
- VLDB (T1)ContextCache: Context-Aware Semantic Cache for Multi-Turn Queries in Large Language Models (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Defending Data Inference Attacks Against Machine Learning Models by Mitigating Prediction Distinguishability (opens in a new tab)
- NDSS (T1)Delay-allowed Differentially Private Data Stream Release (opens in a new tab)
- Findings of ACLDELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing (opens in a new tab)
- IEEE AccessDesign of Wearable Intelligent Pulse Detection System Based on Flexible Sensors (opens in a new tab)
- Findings of ACLDon't Say No: Jailbreaking LLM by Suppressing Refusal (opens in a new tab)
- NDSS (T1)Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.FDINet: Protecting Against DNN Model Extraction Using Feature Distortion Index (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.FedGhost: Data-Free Model Poisoning Enhancement in Federated Learning (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model (opens in a new tab)
- USENIX Security (T1)From Purity to Peril: Backdooring Merged Models From "Harmless" Benign Components (opens in a new tab)
202420 papers
- CCS (T1)A Causal Explainable Guardrails for Large Language Models (opens in a new tab)
- Findings of EMNLPCross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models (opens in a new tab)
- SPDPI: Ensuring Strict Differential Privacy for Infinite Data Streaming (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Effectively Improving Data Diversity of Substitute Training for Data-Free Black-Box Attack (opens in a new tab)
- CCS (T1)ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Label-Free Poisoning Attack Against Deep Unsupervised Domain Adaptation (opens in a new tab)
- SIGMOD (T1)Local Differentially Private Heavy Hitter Detection in Data Streams with Bounded Memory (opens in a new tab)
- USENIX Security (T1)MicGuard: A Comprehensive Detection System against Out-of-band Injection Attacks for Different Level Microphone-based Devices (opens in a new tab)
- SPNeed for Speed: Taming Backdoor Attacks with Speed and Precision (opens in a new tab)
- ICASSP (T1)PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Privacy Enhancement Via Dummy Points in the Shuffle Model (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.PrivacyAsst: Safeguarding User Privacy in Tool-Using Large Language Model Agents (opens in a new tab)
202311 papers
- ICASSP (T1)A Large-Scale Pretrained Deep Model for Phishing URL Detection (opens in a new tab)
- NeurIPS (T1)Certified Minimax Unlearning with Generalization Rates and Deletion Capacity (opens in a new tab)
- ISSTADeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.DivTheft: An Ensemble Model Stealing Attack by Divide-and-Conquer (opens in a new tab)
- VLDB (T1)Equitable Data Valuation Meets the Right to Be Forgotten in Model Markets (opens in a new tab)
- CCS (T1)FINER: Enhancing State-of-the-art Classifiers with Feature Attribution to Facilitate Security Analysis (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.MsDroid: Identifying Malicious Snippets for Android Malware Detection (opens in a new tab)
- ICCV (T1)MUter: Machine Unlearning on Adversarially Trained Models (opens in a new tab)
- WWW (T1)Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding (opens in a new tab)
- KDD (T1)ShapleyFL: Robust Federated Learning Based on Shapley Value (opens in a new tab)
- ACM Comput. Surv.Threats to Training: A Survey of Poisoning Attacks and Defenses on Machine Learning Systems (opens in a new tab)
Where alumni went
Alumni are not listed on the lab homepage.
Apply to ZhejiangFall 2027
Computer Science PhD (international applicants)
- Round
- Self-funded
- Opens
- —
- GRE
- See program page
- English
- Per ZJU language requirements
- Fee
- RMB 800
Not yet confirmed for this intake.
Similar labsnearest by research summary
- SGNUS
Xavier Bresson
- Learning theory & optimization
- GBEdinburgh
Henry Gouk
- Trustworthy & safe ML
- USUW
Jerry Li
- Learning theory & optimization
- CNTsinghua
Jingzhao Zhang
- Learning theory & optimization
- DETUM
Franziska Boenisch
- Trustworthy & safe ML
- USUSC
Phebe Vayanos
- Trustworthy & safe ML
Your notes
Save this lab to keep notes.
Data
Some numbers could not be verified:
- The member list could not be found on the lab site.
- The alumni list could not be found on the lab site.
- The lab site and the paper record do not agree.
- Collected
- Verified
- Papers
- DBLP
- Members
- Not collected
- Alumni
- Not collected
Tiers are venue classifications, not lab rankings.
Zhejiangcloses