Bio

I am currently a Research Group Leader at CISPA Helmholtz Center for Information Security and Visiting Assistant Professor at Stanford University. Prior to that, I was a PostDoc at CISPA supervised by Prof. Michael Backes. I obtained my Ph.D. degree from Zhejiang University, China, on Sept. 2019 (co-supervised by Prof. Jiming Chen and Prof. Shibo He). From Oct. 2017 to May 2019, I was a visiting scholar at Purdue University under the supervision of Prof. Ninghui Li.

If you are interested in working with me, please feel free to drop me an email with your CV.

Research Areas

• Machine Learning Privacy and Security

  • Language models: NDSS’24b
  • Graph neural networks: ICML’23, Security’22b, CCS’22b, CCS’22a
  • Reinforcement learning: NDSS’24a
  • Machine unlearning: CCS’22b, CCS’21c
  • Federated learning: KDD’23
  • Facial recognition systems: Security’23c
  • Neural architecture search: CCS’22c

• Differential Privacy

  • Private training of machine learning models: CCS’23
  • Synthetic dataset generation: Security’23b, Security’23a, VLDB’23, Security’21, JPC’21
  • Local differential privacy: CCS’21a, CCS’18, TIFS’18
  • Stream data analysis: CCS’21b

News

• [September 2023] I will join the TPC of USENIX Security 2024!
• [August 2023] I will join the TPC of WWW 2024!
• [June 2023] One paper titled “LMSanitator: Defending Task-agnostic Backdoors Against Prompt-tuning” got accepted in NDSS 2024!
• [June 2023] One paper titled “ORL-Auditor: Dataset Auditing in Offline Deep Reinforcement Learning” got accepted in NDSS 2024!
• [May 2023] One paper titled “CampER: An Effective Framework for Privacy-Aware Deep Entity Resolution” got accepted in KDD 2023!
• [April 2023] One paper titled “Generated Graph Detection” got accepted in ICML 2023!
• [April 2023] One paper titled “DPMLBench: Holistic Evaluation of Differentially Private Machine Learning” got accepted in ACM CCS 2023!
• [March 2023] One paper titled “FACE-AUDITOR: Data Auditing in Facial Recognition Systems” got accepted in USENIX Security 2023!
• [March 2023] I will join the TPC of NDSS 2024!
• [March 2023] One paper titled “LDPTrace: Locally Differentially Private Trajectory Synthesis” got accepted in VLDB 2023!
• [March 2023] One paper titled “PrivGraph: Differentially Private Graph Data Publication by Exploiting Community Information” got accepted in USENIX Security 2023!
• [March 2023] I will join the TPC of PoPETS 2024!
• [December 2022] I will join the TPC of KDD 2023!
• [December 2022] I will join the TPC of CCS 2023!
• [October 2022] I joined Stanford as a visiting assistant professor!
• [September 2022] One paper titled “PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Model” got accepted in USENIX Security 2023!
• [August 2022] One paper titled “On the Privacy Risks of Cell-Based NAS Architectures” got accepted in ACM CCS 2022!
• [April 2022] One paper titled “Graph Unlearning” got accepted in ACM CCS 2022!
• [April 2022] One paper titled “Finding MNEMON: Reviving Memories of Node Embeddings” got accepted in ACM CCS 2022!
• [March 2022] I will join the TPC of PoPETS 2023!
• [January 2022] I will join the TPC of ESORICS 2022!
• [November 2021] I won the Nomination Award for Outstanding Doctoral Thesis of Zhejiang Province! [Link]
• [September 2021] One paper titled “ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models” got accepted in USENIX Security 2022!
• [August 2021] One paper titled “When Machine Unlearning Jeopardize Privacy” got accepted in CCS 2021!
• [July 2021] One paper titled “Continuous Release of Data Streams under both Centralized and Local Differential Privacy” got accepted in CCS 2021!
• [July 2021] One paper titled “Inference Attacks Against Graph Neural Networks” got accepted in USENIX Security 2022!
• [July 2021] I won the Nomination Award for Outstanding Doctoral Thesis of Zhejiang University! [Link]
• [June 2021] One paper titled “DPSyn: Experiences in the NIST Differential Privacy Data Synthesis Challenges” got accepted in JPC!
• [May 2021] One paper titled “AHEAD: Adaptive Hierarchical Decomposition for Range Query under Local Differential Privacy” got accepted in CCS 2021!
• [April 2021] I will join the TPC of PoPETS 2022!
• [December 2020] One paper titled “PrivSyn: Differentially Private Data Synthesis” got accepted in USENIX Security 2021!
• [November 2019] I joined CISPA as a PostDoc!
• [September 2019] I obtained my Ph.D. degree!
• [May 2019] We won the second prize of the Differentially Private Synthetic Dataset Challenge hosted by NIST!