Shengzhi Zhang

• AI security
• IoT security
• Automobile Security
• Mobile Security
• System Security

MET CS 544 – Foundations of Analytics and Data Visualization

MET CS 595 – Cybersecurity Fundamentals

MET CS 674 – Database Security

MET CS 690 – Network and Cloud Security

MET CS 787 – AI and Cybersecurity

MET CS 793 – Special Topics in Computer Science

Book Chapters

Xuejing Yuan, Yuxuan Chen, Kai Chen, Shengzhi Zhang, and XiaoFeng Wang. “Adversarial Attacks Against Deep Learning-Based Speech Recognition Systems.” Chapter in Cyber Security Meets Machine Learning, edited by S. Jajodia, Xiaofeng Chen, Willy Susilo, and Elisa Bertino (Springer 2021). ISBN: 978-981-33-6726-5

Peng Liu, Xiaoqi Jia, Shengzhi Zhang, Xi Xiong, Yoon-chan Jhi, Kun Bai, and Jason H. Li. “Cross-Layer Damage Assessment for Cyber Situational Awareness.” In Cyber Situational Awareness: Issues and Research, edited by S. Jajodia, P. Liu, V. Swarup, and C. Wang (Springer International Series on Advances in Information Security, November 2009). ISBN: 98-1-4419-0139-2

Refereed Journal Articles

Qianyun, Yang, Peizhuo Lv, Yingjiu Li, Shengzhi Zhang, Yuxuan, Chen, Zhiwei Chen, Zixu Li, and Yupeng Hu. “ERASE: Bypassing Collaborative Detection of AI Counterfeit via Comprehensive Artifacts Elimination.” IEEE Transactions on Dependable and Secure Computing (accepted with major revision).

Mengjie Sun, Peizhuo Lv, Shengzhi Zhanng, Jianshuo Liu, Kai Chen, Hong Li, Zhi Li, Qinhong, Jiang, and Limin Sun. “EMI Backdoor: An Electromagnetic-Interference-based Backdoor Attack Against Computer Vision System.” Journal of Computer Security (accepted).

Congyi Li, Peizhuo Lv, Yuan Gao, Xuejing Yuan, Shengzhi Zhang, Kai Chen, Yingjun Zhang, and Yingjiu Li. “FedWM: Data-Free Watermarking for Model Ownership Protection in Federated Learning.” IEEE Transactions on Dependable and Secure Computing (accepted).

Zhou Qihang, Cao Wenzhuo, Jia Xiaoqi, Xu Shaowen, Chen Jiayun, Jiang Nan, Zhang Zhicong, Song Zhenyu, Du Haichao, Xie Yamin, Song Chen, Tang Jing, Yin Peijie, Zhang Shengzhi, and Liu Peng. “FlexClave: An Extensible and Secure Trusted Execution Environment Framework.” IEEE Transactions on Computers 75, no. 4 (2026). https://doi.org/10.1109/TC.2026.3654947

Hong Zhu, Shengzhi Zhang, and Kai Chen. “AI-Shielder: Exploiting Backdoors to Defend against Adversarial Attacks.” IEEE Transactions on Dependable and Secure Computing 23, no. 1 (2025). https://doi.org/10.1109/TDSC.2025.3612270

Yun He, Xiaoqi Jia, Shengzhi Zhang, and Lou Chitkushev. “SeFS: A Secure and Efficient File Sharing Framework based on the Trusted Execution Environment.” EAI Endorsed Transactions on Security and Safety 9, no. 1 (2025). https://doi.org/10.4108/eetss.v9i1.2854

Qihang Zhou, Wenzhuo Cao, Xiaoqi Jia, Shengzhi Zhang, Jiayun Chen, Nan Jiang, Weijuan Zhang, Haichao Du, Zhenyu Song, and Qingjia Huang. “HClave: An isolated execution environment design for hypervisor runtime security.” Computers & Security Vol. 144 (2024). https://doi.org/10.1016/j.cose.2024.103923

Hong Zhu, Yue Zhao, Shengzhi Zhang, and Kai Chen. “NeuralSanitizer: Detecting Backdoors in Neural Networks.” IEEE Transactions on Information Forensics & Security vol. 19 (2024): 4970–4985. https://doi.org/10.1109/TIFS.2024.3390599

Lv, Qianwei, Luo, He, Wang, Guoqiang, Tai, Jianwei, and Zhang, Shengzhi. “PEDI-GAN: Power Equipment Data Imputation based on Generative Adversarial Networks with Auxiliary Encoder.” Journal of Supercomputing vol. 80 (2024): 11893–11922. https://doi.org/10.1007/s11227-024-05891-7

Peizhuo Lv, Pan Li, Shengzhi Zhang, Kai Chen, Ruigang Liang, Hualong Ma, Yue Zhao, and Yingjiu Li. “A Robustness-Assured White-Box Watermark in Neural Networks.” IEEE Transactions on Dependable and Secure Computing 20, no. 6 (2023): 5214–5229. https://doi.org/10.1109/TDSC.2023.3242737

Juan Wang, Wenzhe Yi, Mengda Yang, Jiaci Ma, Shengzhi Zhang, and Shirong Hao. “Enhance the trust between IoT devices, mobile apps, and the cloud based on blockchain.” Journal of Network and Computer Application 218, article 103718 (September 2023). https://doi.org/10.1016/j.jnca.2023.103718

Yuxuan Chen, Jiangshan Zhang, Xuejing Yuan, Shengzhi Zhang, Kai Chen, Xiaofeng Wang, and Shanqing Guo. “SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systems.” ACM Transactions on Privacy and Security 25, no. 3 (August 2022).

Yuxuan Chen, Xuejing Yuan, Aohui Wang, Kai Chen, Shengzhi Zhang, and Heqing Huang. “Manipulating Users’ Trust on Amazon Echo: Compromising Smart Home from Outside.” EAI Endorsed Trans. Security Safety 6, no. 22 (April 2020).

Le Guan, Chen Cao, Peng Liu, Xinyu Xing, Xinyang Ge, Shengzhi Zhang, Meng Yu, and Trent Jaeger. “Building a Trustworthy Execution Environment to Defeat Exploits from both Cyber Space and Physical Space for ARM.” IEEE Transactions on Dependable and Secure Computing 16, no. 3 (2019): 438–453.

Shengzhi Zhang, Xiaoqi Jia, and Peng Liu. “Towards service continuity for transactional applications via diverse device drivers.” International Journal of Information and Computer Security 8, no. 4 (2016): 382–400.

Shengzhi Zhang, Wenjie Wang, Haishan Wu, Athanasios V. Vasilakos, and Peng Liu. “Towards transparent and distributed workload management for large scale web servers.” Future Generation Computer Systems 29, no. 4 (2013): 913–925.

Xiaoqi Jia, Rui Wang, Jun Jiang, Shengzhi Zhang, and Peng Liu. “Defending return-oriented programming based on virtualization techniques.” Security and Communication Networks 6, no. 10 (2013): 1236­–1249.

Shengzhi Zhang and Sang-Jo Yoo. “Hidden node collision recovery protocol for low rate wireless personal area networks.” Wireless Communications and Mobile Computing 12, no. 15 (2012): 1351–1362.

Shengzhi Zhang, Xiaoqi Jia, Peng Liu, and Jiwu Jing. “PEDA: Comprehensive Damage Assessment for Production Environment Server Systems.” IEEE Transactions on Information Forensics and Security 6, no. 4 (2011): 1323­–1334.

Refereed Conference and Workshop Papers

Xuejing Yuan, Jiangshan Zhang, Feng Guo, Kai Chen, XiaoFeng Wang, Shengzhi Zhang, Yuxuan Chen, Dun Liu, Pan Li, Zihao Wang, and Runnan Zhu. “EvilHarmony: Stealthy Adversarial Attacks against Black-box Speech Recognition Systems.” IEEE Symposium on Security and Privacy (SP), 2025.

Peizhuo Lv, Mengjie Sun, Hao Wang, Xiaofeng Wang, Shengzhi Zhang, Yuxuan Chen, Kai Chen, and Limin Sun. “RAG-WM: An Efficient Black-Box Watermarking Approach for Retrieval-Augmented Generation of Large Language Models.” ACM Conference on Computer and Communications Security (CCS), 2025.

Li Pan, Peizhuo Lv, Kai Chen, Shengzhi Zhang, Cai Yuling, and Xiang Fan. “A Model Stealing Attack against Multi-exit Networks.” IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), 2025.

Qihang Zhou, Wenzhuo Cao, Xiaoqi Jia, Peng Liu, Shengzhi Zhang, Jiayun Chen, Shaowen Xu, and Zhenyu Song. “RContainer: A Secure Container Architecture through Extending ARM CCA Hardware Primitives.” Network and Distributed System Security Symposium (NDSS), 2025.

Xiangji Chen, Jingqi Wu, Shengzhi Zhang, and Wu Zhou. “Reflections on the Security of In-Vehicle Connectivity.” EAI International Conference on Intelligent Transport Systems (INTSYS), 2025.

Benyamin Tafreshian and Shengzhi Zhang. “A Defensive Framework Against Adversarial Attacks on Machine Learning-Based Network Intrusion Detection Systems.” International Workshop on AI-Driven Trust, Security and Privacy in Computer Networks, 2024.

Jun Li, Yuting Zhang, Wu Zhou, and Shenzhi Zhang. “Exploring Permission Control Flaws in Mini-apps.” International Workshop on AI-Driven Trust, Security and Privacy in Computer Networks, 2024.

Yang Chen, Shengzhi Zhang, Xiaoqi Jia, Qihang Zhou, Heqing Huang, Shaowen Xu, and Haochao Du. “SEDSpec: Securing Emulated Devices by Enforcing Execution Specification.” IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2024.

Peizhuo Lv, Hualong Ma, Kai Chen, Jiachen Zhou, Shengzhi Zhang, Ruigang Liang, Shenchen Zhu, Pan Li, and Yingjun Zhang. “MEA-Defender: A Robust Watermark against Model Extraction Attack.” IEEE Symposium on Security and Privacy (SP), 2024.

Peizhuo Lv, Pan Li, Shenchen Zhu, Shengzhi Zhang, Kai Chen, Ruigang Liang, Chang Yue, Fang Xiang, Yuling Cai, Hualong Ma, Yingjun Zhang, and Guozhu Meng. “SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-Supervised Learning.” Network and Distributed System Security Symposium (NDSS), 2024.

Peizhuo Lv, Chang Yue, Ruigang Liang, Yunfei Yang, Shengzhi Zhang, Hualong Ma, and Kai Chen. “A Data-free Backdoor Injection Approach in Neural Networks.” USENIX Security, 2023.

Hong Zhu, Shengzhi Zhang, and Kai Chen. “AI-Guardian: Defeating Adversarial Attacks using Backdoors.” IEEE Symposium on Security and Privacy (SP), 2023.

Peizhuo Lv, Hualong Ma, Jiachen Zhou, Ruigang Liang, Kai Chen, Shengzhi Zhang, and Yunfei Yang. “DBIA: Data-Free Backdoor Attack Against Transformer Networks.” IEEE International Conference on Multimedia & Expo (ICME), 2023.

Qihang Zhou, Xiaoqi Jia, Shengzhi Zhang, Nan Jiang, Jiayun Chen, and Weijuan Zhang. “SecFortress: Securing Hypervisor using Cross-layer Isolation.” IEEE International Parallel and Distributed Processing Symposium (IPDPS), 2022.

Yue Yu, Xiaoqi Jia, Xun An, and Shengzhi Zhang. “An Efficient Use-after-Free Mitigation Approach via Static Dangling Pointer Nullification.” International Federation for Information Processing Conference on ICT Systems Security and Privacy Protection (IFIP SEC), 2022.

Yuxiao Luo, Jianwei Tai, Xiaoqi Jia, and Shengzhi Zhang. “Practical Backdoor Attack Against Speaker Recognition System.” International Symposium on Photonics and Electronics Convergence (ISPEC), 2022.

Yun He, Xiaoqi Jia, Shengzhi Zhang, and Lou Chitkushev. “EnShare: Sharing Files Securely and Efficiently in the Cloud Using Enclave.” IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2022.

Yue Zhao, Hong Zhu, Kai Chen, and Shengzhi Zhang. “AI-Lancet: Locating Error-inducing Neurons to Optimize Neural Networks.” ACM Conference on Computer and Communications Security (CCS), 2021.

Yuxuan Chen, Xuejing Yuan, Jiangshan Zhang, Yue Zhao, Shengzhi Zhang, Kai Chen, and Xiaofeng Wang. “Devil’s Whisper: A General Approach for Physical Adversarial Attacks against Commercial Black-box Speech Recognition Devices.” USENIX Security Symposium, 2020.

Jianwei Tai, Xiaoqi Jia, Qingjia Huang, Weijuan Zhang, Haichao Du, and Shengzhi Zhang. “SEEF-ALDR: A Speaker Embedding Enhancement Framework via Adversarial Learning based Disentangled Representation.” IEEE Annual Computer Security Applications Conference (ACSAC), 2020.

Yun He, Yihua Xu, Xiaoqi Jia, Shengzhi Zhang, Peng Liu, and Shuai Chang. “EnclavePDP: A General Framework to Verify Data Integrity in Cloud Using Intel SGX.” International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2020.

Jianagqi Li, Wang Juan, Jun Song, and Shenzhi Zhang. “IoT-Portrait: Combining Active and Passive Identification of IoT Devices via Deep Learning.” IEEE International Conference on Internet of Things, 2020.

Yue Zhao, Hong Zhu, Ruigang Liang, Qintao Shen, Shengzhi Zhang, and Kai Chen. “Seeing isn’t Believing: Towards More Robust Adversarial Attack Against Real World Object Detectors.” ACM Conference on Computer and Communications Security (CCS), 2019.

Xuejing Yuan, Yuxuan Chen, Yue Zhao, Yunhui Long, Xiaokang Liu, Kai Chen, Shengzhi Zhang, Heqing Huang, Xiaofeng Wang, and Carl A. Gunter. “CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition.” USENIX Security Symposium, 2018.

Weijuan Zhang, Xiaoqi Jia, Shengzhi Zhang, Rui Wang, and Peng Liu. “Running OS Kernel in Separate Domains: A New Architecture for Applications and OS Services Quarantine.” Asia-Pacific Software Engineering Conference (APSEC), 2018.

Xuejing Yuan, Yuxuan Chen, Aohui Wang, Kai Chen, Shengzhi Zhang, Heqing Huang, and Ian Molloy. “All Your Alexa Are Belong to Us: A Remote Voice Control Attack against Echo.” IEEE Global Communications Conference (GLOBECOM), 2018.

Shengzhi Zhang, Omar Makke, Oleg Yu Gusikhin, Ayush Shah, and Athanasios Vasilakos. “A security model for dependable vehicle middleware and mobile applications connection.” In VEHITS 2018: Proceedings of the 4th International Conference on Vehicle Technology and Intelligent Transport Systems, edited by Gusikhin, O. and Helfert, M. (2018): 379–386.

Xuejing Yuan, Yuxuan Chen, Yue Zhao, Yunhui Long, Kai Chen, Shengzhi Zhang, Heqing Huang, and Xiaofeng Wang. “CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition.” In Proceedings of the 27^th Usenix Security Symposium, Baltimore, Maryland (2018): 40–64.

Le Guan, Peng Liu, Xinyu Xing, Xinyang Ge, Shengzhi Zhang, Meng Yu, and Trent Jaeger. “Trust-Shadow: Secure Execution of Unmodified Applications with ARM TrustZone.” The 15^th ACM International Conference on Mobile Systems, Applications, and Services (Mobisys 2017).

Shengzhi Zhang, Xiaoqi Jia, and Weijuan Zhang. “Towards Comprehensive Protection for Open Flow Controllers.” The 19^th Asia-Pacific Network Operations and Management Symposium (APNOMS 2017). (Best paper award)

Sultan Aldossary, William Allen, and Shengzhi Zhang. “Mathematical Model for Using Moving Target Defense to Mitigate Memory Randomization Weaknesses.” The 4^th Annual Conference on Computational Science and Computational Intelligence (2017).

Weijuan Zhang, Xiaoqi Jia, Chang Wang, Shengzhi Zhang, Qingjia Huang, Mingsheng Wang, and Peng Liu. “A Comprehensive Study of Co-residence Threat in Multi-tenant Public PaaS Clouds.” The 18^th IEEE International Conference on Information and Communications Security (ICICS 2016).

Zimin Lin, Rui Wang, Xiaoqi Jia, Shengzhi Zhang, and Chuankun Wu. “Classifying Android Malware with Dynamic Behavior Dependency Graphs.” The 15^th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TRUSTCOM 2016).

Zimin Lin, RuiWang, Xiaoqi Jia, Shengzhi Zhang, and Chuankun Wu. “Analyzing Android Repackaged Malware by Decoupling Their Event Behaviors.” International Workshop on Security (IWSEC 2016). (Award paper.)

Mark Fioravanti, Ayush Shah, and Shengzhi Zhang. “A Study of Network Domains Used in Android Applications.” The 9^th International Conference on Network and System Security (NSS 2015).

Craig Sanders, Ayush Shah, and Shengzhi Zhang. “Comprehensive Analysis of the Google Play’s Auto-Update Policy.” The 11^th International Conference on Information Security Practice and Experience (ISPEC 2015).

Rui Wang, Xiaoqi Jia, Qinlei Li, and Shengzhi Zhang. “Machine Learning based Cross-site Scripting Detection in Online Social Network.” The 6^th International Symposium on Cyberspace Safety and Security (CSS 2014).

Shengzhi Zhang and Peng Liu. “Assessing the Trustworthiness of Drivers.” The 15^th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2012).

Shengzhi Zhang and Peng Liu. “Letting Applications Operate through Attacks Launched from Compromised Device Drivers.” ACM Conference on Data and Application Security and Privacy (ASIACCS 2012).

Jun Jiang, Xiaoqi Jia, Dengguo Feng, Shengzhi Zhang, and Peng Liu. “HyperCrop: A Hypervisor-based Countermeasure for Return Oriented Programming.” In Proceedings of the 13^th International Conference on Information and Communications Security (ICICS 2011), November 2011.

Shengzhi Zhang, Haishan Wu, Wenjie Wang, Bo Yang, Peng Liu, and Athanasios V. Vasilakos. “Distributed Workload and Response Time Management for Web Applications.” In Proceedings of the 7^th International Conference on Network and Service Management (CNSM 2011), October 2011.

Junfeng Yu, Shengzhi Zhang, Peng Liu, and Zhitang Li. “LeakProber: A Framework for Profiling Sensitive Data Leakage Path.” In Proceedings of the first ACM Conference on Data and Application Security and Privacy (CODASPY ’11), February 2011: 75–84.

Shengzhi Zhang, Xiaoqi Jia, Peng Liu, and Jiwu Jing. “Cross-Layer Comprehensive Intrusion Harm Analysis for Availability-Critical Server Systems.” In Proceedings of the 26^th Annual Computer Security Applications Conference (ACSAC ’10), December 2010: 297–306.

Shengzhi Zhang, Xi Xiong, and Peng Liu. “Challenges in Improving the Survivability of Data Centers.” In Proceedings of Workshop on Survivability in Cyberspace, April 2010. (Invited paper.)

Shengzhi Zhang, Xi Xiong, Xiaoqi Jia, and Peng Liu. “Availability-Sensitive Intrusion Recovery.” In Proceedings of the 2^nd ACM workshop on Virtual machine security (VMSec ’09), November 2009: 43–48. (Position paper.)

Xiaoqi Jia, Shengzhi Zhang, Jiwu Jing, and Peng Liu. “Using Virtual Machines to Do Cross-Layer Damage Assessment.” In Proceedings of the 1^st ACM Workshop on Virtual Machine Security (VMSec ’08), October 2008: 29–38.

Shengzhi Zhang and Sang-Jo Yoo. “Fast Recovery from Hidden Node Collision for IEEE 802.15.4 LR-WPANs.” In Proceedings of the 7th IEEE International Conference on Computer and Information Technology (CIT 2007), November 2007: 393–398.

Technical Report

Shengzhi Zhang, Srivatsan Varadarajan, and Allalaghatta Pavan. “Non-Interference Verification of Zeroization.” Technical Report in Platform Systems Group, Honeywell Aerospace.

Posters

Hong Zhu, Shengzhi Zhang, and Kai Chen. “AI-Guardian: Defeating Adversarial Attacks Using Backdoors.” NCAE-C Research Symposium, 2023.

Shengzhi Zhang, Xiaoqi Jia, and Peng Liu. “Rupi’s Dance: Cross-Layer Comprehensive Infection Diagnosis for Availability-Critical Server Systems.” In poster section of the 5^th ACM SIGOPS EuroSys Conference (Eurosys 2010).

Inventions and Patents

Sang-Jo Yoo, Shengzhi Zhang, and Ju-hyun Lee. “Adaptive Hidden Node Collision Recovery Protocol for IEEE 802.15.4 LR-WPANs.” Patent NO. 10-0896986, filed with Korean Intellectual Property Office on May 4, 2009.