Zhikun Zhang
Assistant Professor
Researches trustworthy AI and data privacy, including machine unlearning for graphs and language models and membership inference attacks.
Zhikun Zhang's lab at Zhejiang works on trustworthy & safe ML, efficient training & inference and large language models. 44 papers since 2023, 25 at top venues, mostly USENIX Security and NDSS. Applications close .
At a glance
- papers, 2023–2026
- 11/ year
- at T1 venues
- 57%
- PhD students
- —
- MS students
- —
- alumni listed
- —
Papers by yearfrom DBLP, 2023–2026
- 12 papers2026 · T1 6 · collecting
- 13 papers2025 · T1 6
- 9 papers2024 · T1 6
- 10 papers2023 · T1 7
T1 venuesOtherVenues: USENIX Security, NDSS, CCS, TKDE, ICDE
Research focuspaper titles that use each topic's words
- Efficient training & inference5 papers
- Large language models5 papers
- membership1 paper
- Trustworthy & safe ML0 papers
- machine unlearning0 papers
Paper list
From DBLP.
202612 papers
- IEEE Trans. Dependable Secur. Comput.A2E: Black-Box Anti-Adversarial Example Based Watermarking to Verify Federated Unlearning (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.CIBPU: A Conflict-Invisible Secure Branch Prediction Unit (opens in a new tab)
- SPConsistent Estimation of Numerical Distributions Under Local Differential Privacy by Wavelet Expansion (opens in a new tab)
- IEEE Trans. Netw. Sci. Eng.Decision Boundary Drift: A Security, Privacy, and Trust Risk of Continual Learning for Agentic AI in Edge Networks (opens in a new tab)
- TKDE (T1)Efficient Poisoning Attacks Against Reinforcement Learning-Based Recommender Systems (opens in a new tab)
- TKDE (T1)Horizontal Multi-Party Data Publishing Under Differential Privacy via Weight-Aware Bidirectional Generative Adversarial Networks (opens in a new tab)
- TKDE (T1)Locally Differentially Private Truth Discovery for Sparse Crowdsensing (opens in a new tab)
- IEEE Trans. Mob. Comput.Locally Differentially Private Truth Discovery Over Data Streams (opens in a new tab)
- NDSS (T1)PrivATE: Differentially Private Average Treatment Effect Estimation for Observational Data (opens in a new tab)
- VLDB (T1)PrivSTD: Differentially Private Spatio-temporal Trajectory Density Data Publication (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Revealing the Risk of Hyper-Parameter Leakage in Deep Reinforcement Learning Models (opens in a new tab)
- NDSS (T1)VICTOR: Dataset Copyright Auditing in Video Recognition Systems (opens in a new tab)
202513 papers
- SPAn Attack-Agnostic Defense Framework Against Manipulation Attacks Under Local Differential Privacy (opens in a new tab)
- WWW (T1)ArtistAuditor: Auditing Artist Style Pirate in Text-to-Image Generation Models (opens in a new tab)
- ICLR (T1)Enhancing Learning with Label Differential Privacy by Vector Approximation (opens in a new tab)
- USENIX Security (T1)GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors (opens in a new tab)
- Inf. FusionHorizontal multi-party data publishing via discriminator regularization and adaptive noise under differential privacy (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.InferDPT: Privacy-Preserving Inference for Closed-Box Large Language Models (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Maximizing Area Coverage in Privacy-Preserving Worker Recruitment: A Prior Knowledge-Enhanced Geo-Indistinguishable Approach (opens in a new tab)
- IEEE Trans. Ind. InformaticsPrivacy-Preserving Recommendations With Mixture Model-Based Matrix Factorization Under Local Differential Privacy (opens in a new tab)
- ICDE (T1)Privacy-Preserving Triangle Counting in Directed Graphs (opens in a new tab)
- SIGMOD (T1)PrivAGS: Differentially Private Attributed Graph Synthesis (opens in a new tab)
- SPRigging the Foundation: Manipulating Pre-training for Advanced Membership Inference Attacks (opens in a new tab)
- USENIX Security (T1)Sharpness-Aware Initialization: Improving Differentially Private Machine Learning from First Principles (opens in a new tab)
20249 papers
- USENIX Security (T1)DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training (opens in a new tab)
- AsiaCCSFAKEPCD: Fake Point Cloud Detection via Source Attribution (opens in a new tab)
- NDSS (T1)LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors (opens in a new tab)
- NDSS (T1)ORL-AUDITOR: Dataset Auditing in Offline Deep Reinforcement Learning (opens in a new tab)
- AsiaCCSPARL: Poisoning Attacks Against Reinforcement Learning-based Recommender Systems (opens in a new tab)
- ICDE (T1)Real-Time Trajectory Synthesis with Local Differential Privacy (opens in a new tab)
- CCS (T1)S2NeRF: Privacy-preserving Training Framework for NeRF (opens in a new tab)
- IEEE Trans. Ind. InformaticsStealthy Black-Box Attack With Dynamic Threshold Against MARL-Based Traffic Signal Control System (opens in a new tab)
- CCS (T1)The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Risks (opens in a new tab)
202310 papers
- Peer Peer Netw. Appl.Backdoor attacks against deep reinforcement learning based traffic signal control systems (opens in a new tab)
- KDD (T1)CampER: An Effective Framework for Privacy-Aware Deep Entity Resolution (opens in a new tab)
- ACSACDifferentially Private Resource Allocation (opens in a new tab)
- CCS (T1)DPMLBench: Holistic Evaluation of Differentially Private Machine Learning (opens in a new tab)
- USENIX Security (T1)FACE-AUDITOR: Data Auditing in Facial Recognition Systems (opens in a new tab)
- ICML (T1)Generated Graph Detection (opens in a new tab)
- VLDB (T1)LDPTrace: Locally Differentially Private Trajectory Synthesis (opens in a new tab)
- ICCMaking Watermark Survive Model Extraction Attacks in Graph Neural Networks (opens in a new tab)
- USENIX Security (T1)PrivGraph: Differentially Private Graph Data Publication by Exploiting Community Information (opens in a new tab)
- USENIX Security (T1)PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Models (opens in a new tab)
Where alumni went
Alumni are not listed on the lab homepage.
Apply to ZhejiangFall 2027
Computer Science PhD (international applicants)
- Round
- Self-funded
- Opens
- —
- GRE
- See program page
- English
- Per ZJU language requirements
- Fee
- RMB 800
Not yet confirmed for this intake.
Similar labsnearest by research summary
- USUT Austin
Inderjit Dhillon
- Recognition, detection & segmentation
- USCMU
Giulia Fanti
- Trustworthy & safe ML
- USMIT
Dylan Hadfield-Menell
- Trustworthy & safe ML
- SGNUS
Reza Shokri
- Trustworthy & safe ML
- SGNTU
Chai Quek
- Computational neuroscience & cognition
- GBImperial
Eleonora Giunchiglia
- Reasoning & neuro-symbolic AI
Your notes
Save this lab to keep notes.
Data
Some numbers could not be verified:
- The member list could not be found on the lab site.
- The alumni list could not be found on the lab site.
- The lab site and the paper record do not agree.
- Collected
- Verified
- Papers
- DBLP
- Members
- Not collected
- Alumni
- Not collected
Tiers are venue classifications, not lab rankings.
Zhejiangcloses