Publications

The full list of publications can be found on Google Scholar.

2026

  1. ICML’26
    STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack
    Xutao Mao, Liangjie Zhao, Tao Liu, Xiang Zheng†, Hongying Zan, and Cong Wang†
    In International Conference on Machine Learning (ICML), 2026
    arXiv
  2. ICML’26
    Just Ask: Curious Code Agents Reveal System Prompts in Frontier LLMs
    Xiang Zheng, Yutao Wu, Hanxun Huang, Yige Li, Xingjun Ma†, Bo Li, Yu-Gang Jiang, and Cong Wang†
    In International Conference on Machine Learning (ICML), 2026
    arXiv Demo GitHub Website
  3. PR
    Defense-to-attack: Bypassing weak defenses enables stronger jailbreaks in Vision-Language Models
    Yunhan Zhao, Xiang Zheng, Yige Li, and Xingjun Ma†
    Pattern Recognition, 2026
    DOI arXiv
  4. Preprint
    Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses
    Xiao Li*, Xiang Zheng*, Yifeng Gao, Xinyu Xia, Yixu Wang, Xin Wang, Ye Sun, Yunhan Zhao, Ming Wen, Jiayu Li, Zixing Chen, Xun Gong, Yi Liu, Yige Li, Yutao Wu, Cong Wang, Jun Sun, Yixin Cao, Zhineng Chen, Jingjing Chen, Tao Gui, Qi Zhang, Zuxuan Wu, Xipeng Qiu, Xuanjing Huang, Tiehua Zhang, Zhipeng Wei, Kun Wang, Xinfeng Li, Hanxun Huang, Sarah Erfani, James Bailey, Jianping Wang, Chaowei Xiao, Ran He, Bo Li, Xingjun Ma†, and Yu-Gang Jiang†
    arXiv preprint, 2026
    arXiv GitHub Website
  5. TSC
    Adapting Large Language Models for Encrypted Traffic Analysis Services: An Efficient Realization with Mixture of LoRA Experts
    Yi Liu, Xiang Zheng, Chengjun Cai, Xingliang Yuan, and Cong Wang†
    IEEE Transactions on Services Computing, 2026
    DOI
  6. FCS
    OpenRedRL: A Light-Weight Benchmark for Reinforcement Learning-Based Red Teaming
    Xiang Zheng, Xingjun Ma, Wei-Bin Lee, and Cong Wang†
    Frontiers of Computer Science, 2026
    DOI arXiv
  7. CVPR’26
    GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models
    Zilong Wang, Xiang Zheng†, Xiaosen Wang, Bo Wang, Xingjun Ma†, and Yu-Gang Jiang
    In IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2026
    arXiv
  8. Preprint
    OptiLeak: Efficient Prompt Reconstruction via Reinforcement Learning in Multi-tenant LLM Services
    Longxiang Wang, Xiang Zheng†, Xuhao Zhang, Yao Zhang, Ye Wu, and Cong Wang†
    arXiv preprint, 2026
    Submitted to ESORICS’26
    arXiv
  9. FnT P&S
    Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety
    Xingjun Ma, Yifeng Gao, Yixu Wang, Ruofan Wang, Xin Wang, Ye Sun, Yifan Ding, Hengyuan Xu, Yunhao Chen, Yunhan Zhao, Hanxun Huang, Yige Li, Yutao Wu, Jiaming Zhang, Xiang Zheng, Yang Bai, Zuxuan Wu, Xipeng Qiu, Jingfeng Zhang, Yiming Li, Xudong Han, Haonan Li, Jun Sun, Cong Wang, Jindong Gu, Baoyuan Wu, Siheng Chen, Tianwei Zhang, Yang Liu, Mingming Gong, Tongliang Liu, Shirui Pan, Cihang Xie, Tianyu Pang, Yinpeng Dong, Ruoxi Jia, Yang Zhang, Shiqing Ma, Xiangyu Zhang, Neil Gong, Chaowei Xiao, Sarah Erfani, Tim Baldwin, Bo Li, Masashi Sugiyama, Dacheng Tao, James Bailey, and Yu-Gang Jiang
    Foundations and Trends in Privacy and Security, 2026
    arXiv
  10. Preprint
    HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
    Zixing Chen, Yifeng Gao, Li Wang, Yunhan Zhao, Yi Liu, Jiayu Li, Xiang Zheng, Zuxuan Wu, Cong Wang, Xingjun Ma, and Yu-Gang Jiang
    arXiv preprint, 2026
    arXiv
  11. IROS’26
    DropVLA: An Action-Level Backdoor Attack on Vision-Language-Action Models
    Zonghuan Xu, Jiayu Li, Yunhan Zhao, Xiang Zheng†, Xingjun Ma†, and Yu-Gang Jiang
    In IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), 2026
    arXiv

2025

  1. Preprint
    AttackVLA: Benchmarking Adversarial and Backdoor Attacks on Vision-Language-Action Models
    Jiayu Li, Yunhan Zhao, Xiang Zheng, Zonghuan Xu, Yige Li, Xingjun Ma, and Yu-Gang Jiang
    arXiv preprint, 2025
    arXiv
  2. Preprint
    ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking
    Yutao Wu, Xiao Liu, Yinghui Li, Yifeng Gao, Yifan Ding, Jiale Ding, Xiang Zheng, and Xingjun Ma
    arXiv preprint, 2025
    arXiv
  3. Preprint
    RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models
    Jiale Ding, Xiang Zheng†, Yutao Wu, Cong Wang, Wei-Bin Lee, Ling Pan, Xingjun Ma†, and Yu-Gang Jiang
    arXiv preprint, 2025
    Submitted to TDSC
    arXiv
  4. Preprint
    RedDiffuser: Red Teaming Vision-Language Models for Toxic Continuation via Reinforced Stable Diffusion
    Ruofan Wang, Xiang Zheng, Xiaosen Wang, Cong Wang, and Xingjun Ma
    arXiv preprint, 2025
    arXiv
  5. ICLR’25
    BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks
    Yunhan Zhao, Xiang Zheng†, Lin Luo, Yige Li, Xingjun Ma†, and Yu-Gang Jiang
    In International Conference on Learning Representations (ICLR), 2025
    arXiv GitHub
  6. AAAI’25
    CALM: Curiosity-Driven Auditing for Large Language Models
    Xiang Zheng, Longxiang Wang, Yi Liu, Xingjun Ma, Chao Shen, and Cong Wang†
    In AAAI Conference on Artificial Intelligence (AAAI), 2025
    arXiv GitHub

2024

  1. IJCAI’24
    Constrained intrinsic motivation for reinforcement learning
    Xiang Zheng, Xingjun Ma, Chao Shen, and Cong Wang†
    In International Joint Conference on Artificial Intelligence (IJCAI), 2024
    arXiv GitHub
  2. DSN’24
    Toward evaluating robustness of reinforcement learning with adversarial policy
    Xiang Zheng, Xingjun Ma, Shengjie Wang, Xinyu Wang, Chao Shen, and Cong Wang†
    In Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2024
    arXiv GitHub

2023

  1. CoRL’23
    A policy optimization method towards optimal-time stability
    Shengjie Wang, Fengbo Lan, Xiang Zheng, Yuxue Cao, Oluwatosin Oseni, Haotian Xu, Tao Zhang, and Yang Gao
    In Conference on Robot Learning (CoRL), 2023
    arXiv
  2. Preprint
    A Learning-based Adaptive Compliance Method for Symmetric Bi-manual Manipulation
    Yuxue Cao, Wenhao Zhao, Shengjie Wang, Xiang Zheng, Wenke Ma, Ziwei Wang, and Tao Zhang
    arXiv preprint, 2023
    arXiv
  3. AST
    Reinforcement learning with prior policy guidance for motion planning of dual-arm free-floating space robot
    Yuxue Cao, Shengjie Wang, Xiang Zheng, Wenke Ma, Xinru Xie, and Lei Liu
    Aerospace Science and Technology (AST), 2023

2022

  1. AST
    A learning system for motion planning of free-float dual-arm space manipulator towards non-cooperative object
    Shengjie Wang, Yuxue Cao, Xiang Zheng, and Tao Zhang
    Aerospace Science and Technology (AST), 2022
  2. RA-L
    Collision-free trajectory planning for a 6-DoF free-floating space robot via hierarchical decoupling optimization
    Shengjie Wang, Yuxue Cao, Xiang Zheng, and Tao Zhang
    IEEE Robotics and Automation Letters (RA-L), 2022

2021

  1. IROS’21
    A multi-target trajectory planning of a 6-DoF free-floating space robot via reinforcement learning
    Shengjie Wang, Xiang Zheng, Yuxue Cao, and Tao Zhang
    In IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), 2021
  2. CCC’21
    An end-to-end trajectory planning strategy for free-floating space robots
    Shengjie Wang, Yuxue Cao, Xiang Zheng, and Tao Zhang
    In Chinese Control Conference (CCC), 2021

2020

  1. CVPR’20
    Clean-label backdoor attacks on video recognition models
    Shihao Zhao, Xingjun Ma, Xiang Zheng, James Bailey, Jingjing Chen, and Yu-Gang Jiang
    In IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2020

2017

  1. ROBIO’17
    Robust finite-time attitude tracking control for nonlinear quadrotor with uncertainties and delays
    Xiang Zheng, Ziwei Wang, and Tao Zhang
    In IEEE International Conference on Robotics and Biomimetics (ROBIO), 2017