Highlights of my publications are listed below. For a complete list, please refer to my Google Scholar.

• Trustworthy Machine Learning
  • Machine Unlearning
    • [NDSS’27] LLM Unlearning
    • [CCS’22a] Graph unlearning
    • [CCS’21] Unlearning jeopardizes privacy
  • Data Ownership Auditing
    • [CCS’26a] Dataset copyright auditing benchmark
    • [CCS’26b] Multi-bit watermarking for dataset usage auditing
    • [Oakland’25] SoK: Dataset copyright auditing
    • [WWW’25] Data auditing for text to image models
    • [NDSS’24a] Data auditing for reinforcement learning models
    • [Security’23a] Data auditing for facial recognition systems
  • Attacks and Defenses
    • [CCS’26c] Stealthy poisoning attacks against RAG
    • [CCS’26d] Safety of Mixture-of-Experts models
    • [ASIACCS’24] Poisoning attacks against recommender systems
    • [NDSS’24b] Backdoor attacks against prompt-tuning
    • [CCS’23] DPMLBench: Holistic evaluation of DPML
    • [USENIX’23b] PrivGraph: Graph data synthesis under DP
    • [ICC’23] Watermarking GNNs against model extraction
    • [USENIX’22] Inference attacks against GNNs
    • [CCS’22b] Reconstruction attacks against GNNs

2027

Bit Accuracy is not Enough: Revisiting User Capacity of Multi-bit Watermarks

Xiao Ren, Zhikun Zhang, Linkang Du, Yunjun Gao, Min Chen

To appear in IEEE S&P 2027

KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models

Ce Fang, Zhikun Zhang, Min Chen, Qing Liu, Lu Zhou, Zhe Liu, Yunjun Gao

To appear in NDSS 2027 [PDF] [Code]

2026

SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment

Qingyu Meng, Yiwei Zha, Jiahuan Pei, Koen Hindriks, Herbert Bos, Min Chen

To appear in ACM CCS 2026 [PDF] [Code]

InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation

Jiachang Zhang, Min Chen, Xiao Ren, Zhenyong Zhang, Yuanchao Shu, Yunjun Gao, Zhikun Zhang

To appear in ACM CCS 2026 [PDF] [Code]

NotaryMark: Multi-Bit Watermarking for Black-Box Dataset Usage Auditing in Text-to-Image Diffusion Models

Xinyi Yu, Linkang Du, Zhou Su, Min Chen, Yuntao Wang, Zhikun Zhang

To appear in ACM CCS 2026 [PDF] [Code]

DWBench: Holistic Evaluation of Watermark for Dataset Copyright Auditing

Xiao Ren, Xinyi Yu, Linkang Du, Min Chen, Yuanchao Shu, Zhou Su, Yunjun Gao, Zhikun Zhang

To appear in ACM CCS 2026 [PDF] [Code]

StoryMI: Steerable Multi-Agent Therapeutic Dialogue Generation

Qingyu Meng, Min Chen, Dingming Liu, Yifan Mo, Yue Su, Xin Sun, Koen Hindriks, Jiahuan Pei

In ACL 2026 [PDF] [Code]

Efficient Poisoning Attacks Against Reinforcement Learning-based Recommender Systems

Quan Yuan, Linkang Du, Min Chen, Mingyang Sun, Yunjun Gao, Peng Cheng, Shibo He, Jiming Chen, Zhikun Zhang

In IEEE Transactions on Knowledge and Data Engineering [PDF] [Code]

VICTOR: Dataset Copyright Auditing in Video Recognition Systems

Quan Yuan, Zhikun Zhang, Linkang Du, Min Chen, Mingyang Sun, Yunjun Gao, Shibo He, Jiming Chen

In NDSS 2026 [PDF] [Code]

PrivATE: Differentially Private Average Treatment Effect Estimation for Observational Data

Quan Yuan, Xiaochen Li, Linkang Du, Min Chen, Mingyang Sun, Yunjun Gao, Shibo He, Jiming Chen, Zhikun Zhang

In NDSS 2026 [PDF] [Code]

2025

SoK: Dataset Copyright Auditing in Machine Learning Systems

Linkang Du, Xuanru Zhou, Min Chen, Chusong Zhang, Zhou Su, Peng Cheng, Jiming Chen, Zhikun Zhang

In IEEE S&P 2025 [PDF] [Code]

ArtistAuditor: Auditing Artist Style Pirate in Text-to-image Generation Models

Linkang Du, Zheng Zhu, Min Chen, Zhou Su, Shouling Ji, Peng Cheng, Jiming Chen, Zhikun Zhang

In WWW 2025 [PDF] [Code]

Revealing the Risk of Hyper-parameter Leakage in Deep Reinforcement Learning Models

Linkang Du, Zhikun Zhang, Min Chen, Mingyang Sun, Shouling Ji, Peng Cheng, Jiming Chen, Michael Backes, Yang Zhang

In IEEE TDSC [PDF] [Code]

GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors

Wenlong Meng, Shuguo Fan, Chengkun Wei, Min Chen, Yuwei Li, Yuanchao Zhang, Zhikun Zhang, Wenzhi Chen

In USENIX Security 2025 [PDF] [Code]

2024

ORL-Auditor: Dataset Auditing in Offline Deep Reinforcement Learning

Linkang Du, Min Chen, Mingyang Sun, Shouling Ji, Peng Cheng, Jiming Chen, Zhikun Zhang

In NDSS 2024 [PDF] [Code]

Auditing Artist Style Pirate in Text-to-image Generation Models

Linkang Du, Zheng Zhu, Min Chen, Shouling Ji, Peng Cheng, Jiming Chen, Zhikun Zhang

In NDSS-AISCC [PDF] [Code]

LMSanitator: Defending Task-agnostic Backdoors Against Prompt-tuning

Chengkun Wei, Wenlong Meng, Zhikun Zhang, Min Chen, Minghu Zhao, Wenjing Fang, Lei Wang, Zihui Zhang, Wenzhi Chen

In NDSS 2024 [PDF] [Code] [2024 Distinguished Paper Award Winners](https://www.ndss-symposium.org/ndss2024/)

PARL: Poisoning Attacks Against Reinforcement Learning-based Recommender Systems

Linkang Du, Quan Yuan, Min Chen, Mingyang Sun, Peng Cheng, Jiming Chen, Zhikun Zhang

In ASIACCS 2024 [PDF] [Code]

2023

DPMLBench: Holistic Evaluation of Differentially Private Machine Learning

Chengkun Wei, Minghu Zhao, Zhikun Zhang, Min Chen, Wenlong Meng, Bo Liu, Yuan Fan, Wenzhi Chen

In ACM CCS 2023 [PDF] [Code]

FACE-AUDITOR: Data Auditing in Facial Recognition Systems

Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Yang Zhang

In USENIX Security 2023 [PDF] [Code]

PrivGraph: Differentially Private Graph Data Publication by Exploiting Community Information

Quan Yuan, Zhikun Zhang, Linkang Du, Min Chen, Peng Cheng, Mingyang Sun

In USENIX Security 2023 [PDF] [Code]

Making Watermark Survive Model Extraction Attacks in Graph Neural Networks

Haiming Wang, Zhikun Zhang, Min Chen, Shibo He

In IEEE ICC 2023 [PDF] [Code]

2022

Graph Unlearning

Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Mathias Humbert, Yang Zhang

In ACM SIGSAC Conference on Computer and Communications Security (CCS 2022) [PDF] [Code]

Finding MNEMON: Reviving Memories of Node Embeddings

Yun Shen, Yufei Han, Zhikun Zhang, Min Chen, Ting Yu, Michael Backes, Yang Zhang, Gianluca Stringhini

In ACM SIGSAC Conference on Computer and Communications Security (CCS 2022) [PDF] [Code]

Inference Attacks Against Graph Neural Networks

Zhikun Zhang, Min Chen, Michael Backes, Yun Shen, Yang Zhang

In USENIX Security Symposium (USENIX Security 2022). [PDF] [Code]

2021

When Machine Unlearning Jeopardizes Privacy

Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Mathias Humbert, Yang Zhang

In ACM SIGSAC Conference on Computer and Communications Security (CCS 2021) [PDF] [Code]

Graph Unlearning

Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Mathias Humbert, Yang Zhang

Tecnnical report [PDF]

2015

RF-Based Charger Placement for Duty Cycle Guarantee in Battery-Free Sensor Networks

Yanjun Li, Lingkun Fu, Min Chen, Kaikai Chi, Yi-hua Zhu

IEEE Communications Letters [PDF]

Ultra-low power consumption passive structure health monitoring system and method

Zhiguo Shi, Min Chen(Leading Author), Jiming Chen

[Patent]