Zhongjie Ba
百人计划研究员
Works on deepfake synthesis and detection, AIGC security, IoT security and privacy protection.
Zhongjie Ba's lab at Zhejiang works on recognition, detection & segmentation and speech synthesis & voice. 59 papers since 2023, 21 at top venues, mostly USENIX Security and CCS. Applications close .
At a glance
- papers, 2023–2026
- 15/ year
- at T1 venues
- 36%
- PhD students
- —
- MS students
- —
- alumni listed
- —
Papers by yearfrom DBLP, 2023–2026
- 8 papers2026 · T1 2 · collecting
- 15 papers2025 · T1 5
- 22 papers2024 · T1 8
- 14 papers2023 · T1 6
T1 venuesOtherVenues: USENIX Security, CCS, AAAI, ACM MM, CVPR
Research focuspaper titles that use each topic's words
- Recognition, detection & segmentation14 papers
- Speech synthesis & voice8 papers
- deepfake7 papers
- security2 papers
- iot security0 papers
Paper list
From DBLP.
20268 papers
- IEEE Trans. Dependable Secur. Comput.A Passive Defense Against Out-of-Band Injection Threats to Microphone-Based Devices (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.A User Threat-Driven Multi-Objective Adaptive VM Allocation Framework for Cloud Security (opens in a new tab)
- ICLR (T1)Attack-Resistant Watermarking for AIGC Image Forensics via Diffusion-based Semantic Deflection (opens in a new tab)
- AAAI (T1)Beyond Content: A Comprehensive Speech Toxicity Dataset and Detection Framework Incorporating Paralinguistic Cues (opens in a new tab)
- Knowl. Based Syst.Multi-feature wavelet attention network for audio deepfake detection (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.R2BD: A Reconstruction-Based Method for Generalizable and Efficient Detection of Fake Images (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.RedAgent: An Autonomous Agent for Context-Aware Red Teaming of LLM Jailbreaks (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Unified Attribute-Based Data Access Control With Hiding Attribute Value Under PINet (opens in a new tab)
202515 papers
- IEEE Trans. Dependable Secur. Comput.ACL: Account Linking in Online Social Networks With Robust Camera Fingerprint Matching (opens in a new tab)
- IEEE Trans. Serv. Comput.An Active Defense Adjudication Method Based on Adaptive Anomaly Sensing for Mimic IoT (opens in a new tab)
- WIFSCovert Communication in Sanitized Online Social Networks (opens in a new tab)
- SPFrom One Stolen Utterance: Assessing the Risks of Voice Cloning in the AIGC Era (opens in a new tab)
- CVPR (T1)FSFM: A Generalizable Face Security Foundation Model via Self-Supervised Facial Representation Learning (opens in a new tab)
- CVPR (T1)Harnessing Frequency Spectrum Insights for Image Copyright Protection Against Diffusion Models (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.Liquid Crystal Mimics Your Heart: A Physical Spoofing Attack Against PPG-Based Systems (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.MagShadow: Physical Adversarial Example Attacks via Electromagnetic Injection (opens in a new tab)
- ICMEModel Discrepancy Learning: Synthetic Faces Detection Based on Multi-Reconstruction (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Phoneme-Based Proactive Anti-Eavesdropping With Controlled Recording Privilege (opens in a new tab)
- ICLR (T1)Robust Representation Consistency Model via Contrastive Denoising (opens in a new tab)
- MobiSysSecHeadset: A Practical Privacy Protection System for Real-time Voice Communication (opens in a new tab)
202422 papers
- IEEE Trans. Inf. Forensics Secur.AdvReverb: Rethinking the Stealthiness of Audio Adversarial Examples to Human Perception (opens in a new tab)
- SPALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features (opens in a new tab)
- IEEE/ACM Trans. Netw.An Imperceptible Eavesdropping Attack on WiFi Sensing Systems (opens in a new tab)
- CCS (T1)Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence (opens in a new tab)
- IUIConan's Bow Tie: A Streaming Voice Conversion for Real-Time VTuber Livestreaming (opens in a new tab)
- USENIX Security (T1)Devil in the Room: Triggering Audio Backdoors in the Physical World (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Do as I Do: Pose Guided Human Motion Copy (opens in a new tab)
- AAAI (T1)Exposing the Deception: Uncovering More Forgery Clues for Deepfake Detection (opens in a new tab)
- USENIX Security (T1)FaceObfuscator: Defending Deep Learning-based Privacy Attacks with Gradient Descent-resistant Features in Face Recognition (opens in a new tab)
- IEEE Trans. Inf. Forensics Secur.FLTracer: Accurate Poisoning Attack Provenance in Federated Learning (opens in a new tab)
- USENIX Security (T1)FraudWhistler: A Resilient, Robust and Plug-and-play Adversarial Example Detection Method for Speaker Recognition (opens in a new tab)
- IEEE ACM Trans. Audio Speech Lang. Process.FTDKD: Frequency-Time Domain Knowledge Distillation for Low-Quality Compressed Audio Deepfake Detection (opens in a new tab)
202314 papers
- IEEE Trans. Inf. Forensics Secur.AVoiD-DF: Audio-Visual Joint Learning for Detecting Deepfake (opens in a new tab)
- MSNBypTalker: An Adaptive Adversarial Example Attack to Bypass Prefilter-enabled Speaker Recognition (opens in a new tab)
- IEEE Trans. Dependable Secur. Comput.Device-Independent Smartphone Eavesdropping Jointly Using Accelerometer and Gyroscope (opens in a new tab)
- ACM MMDFIL: Deepfake Incremental Learning by Exploiting Domain-invariant Forgery Clues (opens in a new tab)
- SenSys (T1)FingerFaker: Spoofing Attack on COTS Fingerprint Recognition Without Victim's Knowledge (opens in a new tab)
- CCS (T1)FITS: Matching Camera Fingerprints Subject to Software Noise Pollution (opens in a new tab)
- NDSS (T1)InfoMasker: Preventing Eavesdropping Using Phoneme-Based Noise (opens in a new tab)
- ICCV (T1)Is Imitation All You Need? Generalized Decision-Making with Dual-Phase Training (opens in a new tab)
- ACM MMLocate and Verify: A Two-Stream Network for Improved Deepfake Detection (opens in a new tab)
- SPMagBackdoor: Beware of Your Loudspeaker as A Backdoor For Magnetic Injection Attacks (opens in a new tab)
- ICASSP (T1)Shift to Your Device: Data Augmentation for Device-Independent Speaker Verification Anti-Spoofing (opens in a new tab)
- WWW (T1)Transferring Audio Deepfake Detection Capability across Languages (opens in a new tab)
Where alumni went
Alumni are not listed on the lab homepage.
Apply to ZhejiangFall 2027
Computer Science PhD (international applicants)
- Round
- Self-funded
- Opens
- —
- GRE
- See program page
- English
- Per ZJU language requirements
- Fee
- RMB 800
Not yet confirmed for this intake.
Similar labsnearest by research summary
- CNPeking
Xiaoqing Lv
- Recognition, detection & segmentation
- CNSJTU
Weixia Zhang
- Computational imaging & photography
- CNPeking
Wenxin Li
- Recognition, detection & segmentation
- SGNUS
Terence Sim
- Recognition, detection & segmentation
- CNTsinghua
Yong-Jin Liu
- Recognition, detection & segmentation
- CNPeking
Liangcai Gao
- Recognition, detection & segmentation
Your notes
Save this lab to keep notes.
Data
Some numbers could not be verified:
- The member list could not be found on the lab site.
- The alumni list could not be found on the lab site.
- The lab site and the paper record do not agree.
- Collected
- Verified
- Papers
- DBLP
- Members
- Not collected
- Alumni
- Not collected
Tiers are venue classifications, not lab rankings.
Zhejiangcloses