Selected Papers

The full list can be found from my google scholar

Hardware/System Security

• _{[2026] TimeGaps Channels: Exploiting CPU Halted Time for Fun and Profit
  Yusi Feng, Xin Zhang, Sioli O’Connell, Liangwei Qiu, Chitchanok Chuengsatiansup, Daniel Genkin, Yuval Yarom, Yinqian Zhang, Zhi Zhang (corresponding author)
  International Symposium on Computer Architecture}
  

• _{[2026] Towards Practical Interrupt Side Channel Attacks on macOS for Apple Silicon
  Xin Zhang, Chang Liu, Jiajun Zou, Yi Yang, Qingni Shen, Zhi Zhang (co-corresponding author), Trevor E. Carlson
  International Symposium on Computer Architecture}
  

• _{[2026] GeForge: Hammering GDDR Memory to Forge GPU Page Tables for Fun and Profit
  Junpeng Wan, Yanan Guo, Zhi Zhang, Zhuo Li, Dave (Jing) Tian, Zhenkai Zhang
  IEEE Symposium on Security and Privacy}
  

• _{[2026] UncoreBleed: AEX-Free, High-Resolution, and Low-Noise Side-Channel Attacks on SGX Enclaved Execution
  Decheng Chen, Zhi Zhang (co-first author), Zhenkai Zhang, Xin Zhang, Yansong Gao, Yi Zou
  USENIX Security}
  

• _{[2025] Fish and Chips: on the Root Causes of Co-located Website-Fingerprinting Attacks
  Yusi Feng, Sioli O’Connel, Xin Zhang, Chitchanok Chuengsatiansup, Daniel Genkin, Yuval Yarom, Yinqian Zhang, Zhi Zhang
  IEEE Transactions on Dependable and Secure Computing}
  

• _{[2025] Fantastic Interrupts and Where to Find Them: Exploiting Non-movable Interrupts on x86
  Xin Zhang, Qingni Shen, Zhi Zhang (co-corresponding author), Yansong Gao, Jiajun Zou, Yi Yang, Zhonghai Wu
  IEEE Transactions on Information Forensics and Security}
  

• _{[2025] MUXLeak: Exploiting Multiplexers as A Power Side Channel against Multi-tenant FPGAs
  Xin Zhang, Jiajun Zou, Zhi Zhang (corresponding author), Qingni Shen, Yansong Gao, Jinhua Cui, Yusi Feng, Zhonghai Wu, Derek Abbott
  IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems}
  

• _{[2025] Practical Opcode-based Fault Attack on AES-NI
  Xue Gong, Xin Zhang, Qianmei Wu, Fan Zhang, Junge Xu, Qingni Shen, Zhi Zhang
  Transactions on Cryptographic Hardware and Embedded Systems}
  

• _{[2025] HyperHammer: Breaking Free from KVM-Enforced Isolation
  Wei Chen, Zhi Zhang (corresponding author), Xin Zhang, Qingni Shen, Yuval Yarom, Daniel Genkin, Chen Yan, Zhe Wang
  ACM International Conference on Architectural Support for Programming Languages and Operating Systems}
  

• _{[2025] AmpereBleed: Exploiting On-chip Current Sensors for Circuit-Free Attacks on ARM-FPGA SoCs
  Xin Zhang, Yi Yang, Jiajun Zou, Qingni Shen, Zhi Zhang (co-corresponding author), Yansong Gao, Zhonghai Wu, Trevor Carlson
  ACM/IEEE Design Automation Conference}
  

• _{[2025] LeakyDSP: Exploiting Digital Signal Processing Blocks to Sense Voltage Fluctuations in FPGAs
  Xin Zhang, Jiajun Zou, Yi Yang, Qingni Shen, Zhi Zhang (co-corresponding author), Yansong Gao, Zhonghai Wu, Trevor Carlson
  ACM/IEEE Design Automation Conference}
  

• _{[2025] TAPAS: An Efficient Online APT Detection with Task-guided Process Provenance Graph Segmentation and Analysis
  Bo Zhang, Yansong Gao, Changlong Yu, Boyu Kuang, Zhi Zhang, Hyoungshick Kim, Anmin Fu
  USENIX Security}
  

• _{[2025] Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via Rowhammer
  Junkai Liang, Zhi Zhang (co-first author), Xin Zhang, Qingni Shen, Yansong Gao, Xingliang Yuan, Haiyang Xue, Pengfei Wu, Zhonghai Wu.
  USENIX Security
  Honorable Mention Paper Award}
  

• _{[2024] SoK: Rowhammer on Commodity Operating Systems
  Zhi Zhang, Decheng Chen, Jiahao Qi, Yueqiang Cheng, Shijie Jiang, Yiyang Lin, Yansong Gao, Surya Nepal, Yi Zou, Jiliang Zhang, Yang Xiang
  ACM ASIA Conference on Computer and Communications Security (AR: 19%)}
  

• _{[2024] ThermalScope: A Practical Interrupt Side Channel Attack Based on Thermal Event Interrupts
  Xin Zhang, Zhi Zhang (co-first author), Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang and Zhonghai Wu
  ACM/IEEE Design Automation Conference (AR: 23%)}
  

• _{[2024] SegScope: Probing Fine-grained Interrupts via Architectural Footprints
  Xin Zhang, Zhi Zhang (co-first author), Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Zhang Jiliang
  IEEE International Symposium on High-Performance Computer Architecture (AR: 18%)}
  

• _{[2023] WhistleBlower: A System-level Empirical Study on RowHammer
  Wei He, Zhi Zhang (co-first author), Yueqiang Cheng, Wenhao Wang, Wei Song, Yansong Gao, Qifei Zhang, Kang Li, Dongxi Liu, Surya Nepal
  IEEE Transactions on Computers}
  

• _{[2022] Implicit Hammer : Cross-Privilege-Boundary Rowhammer through Implicit Accesses
  Zhi Zhang, Wei He, Yueqiang Cheng, Wenhao Wang, Yansong Gao, Dongxi Liu, Kang Li, Surya Nepal, Anmin Fu, Yi Zou
  IEEE Transactions on Dependable and Secure Computing}
  

• _{[2022] Meltdown-type attacks are still feasible in the wall of kernel page-Table isolation
  Yueqiang Cheng, Zhi Zhang (co-first author), Yansong Gao, Zhaofeng Chen, Shengjian Guo, Qifei Zhang, Rui Mei, Surya Nepal, Yang Xiang
  Computers & Security}
  

• _{[2022] SoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only Target Row Refresh
  Zhi Zhang, Yueqiang Cheng, Minghua Wang, Wei He, Wenhao Wang, Surya Nepal, Yansong Gao, Kang Li, Zhe Wang, Chenggang Wu
  USENIX Annual Technical Conference (AR: 16.2%)}
  

• _{[2021] BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability
  Zhi Zhang, Wei He, Yueqiang Cheng, Wenhao Wang, Yansong Gao, Minghua Wang, Kang Li, Surya Nepal, Yang Xiang
  IEEE Transactions on Information Forensics and Security}
  

• _{[2020] PThammer: Cross-user-kernel-boundary rowhammer through implicit accesses
  Zhi Zhang, Yueqiang Cheng, Dongxi Liu, Surya Nepal, Zhi Wang, Yuval Yarom
  IEEE/ACM International Symposium on Microarchitecture (AR: 19.3%)}
  

• _{[2020] DRAMDig: A knowledge-assisted tool to uncover dram address mapping
  Minghua Wang, Zhi Zhang (co-first author), Yueqiang Cheng, Surya Nepal
  ACM/IEEE Design Automation Conference (AR: 23%)}
  

• _{[2020] Detecting hardware-assisted virtualization with inconspicuous features
  Zhi Zhang, Yueqiang Cheng, Yansong Gao, Surya Nepal, Dongxi Liu, Yi Zou
  IEEE Transactions on Information Forensics and Security}
  

• _{[2019] CATTmew: Defeating software-only physical kernel isolation
  Yueqiang Cheng, Zhi Zhang (co-first author), Surya Nepal, Zhi Wang
  IEEE Transactions on Dependable and Secure Computing}
  

• _{[2018] KASR: a reliable and practical approach to attack surface reduction of commodity OS kernels
  Zhi Zhang, Yueqiang Cheng, Surya Nepal, Dongxi Liu, Qingni Shen, Fethi Rabhi
  International Symposium on Research in Attacks, Intrusions, and Defenses (AR: 22.0%)}
  

Hardware/System Security for AI

• _{[2024] Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection
  Shaofeng Li, Xinyu Wang, Minhui Xue, Haojin Zhu, Zhi Zhang (co-corresponding author), Yansong Gao, Wen Wu, Xuemin Shen
  USENIX Security (AR: 18.3%)
  Distinguished Paper Award}
  

• _{[2024] DeepTheft: Stealing DNN Model Architectures through Power Side Channel
  Yansong Gao, Huming Qiu, Zhi Zhang (corresponding author), Binghui Wang, Hua Ma, Alsharif Abuadbba, Minhui Xue, Anmin Fu, Surya Nepal
  IEEE Symposium on Security and Privacy (AR: 17.8%)}
  

AI Security

• _{[2025] TruVRF: Towards Triple-Granularity Verification on Machine Unlearning
  Chunyi Zhou, Yansong Gao, Anmin Fu, Kai Chen, Zhi Zhang, Minhui Xue, Zhiyang Dai, Shouling Ji, Yuqing Zhang
  IEEE Transactions on Information Forensics and Security}
  

• _{[2025] Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects
  Na Li, Chunyi Zhou, Yansong Gao, Hui Chen, Anmin Fu, Zhi Zhang, Yu Shui
  IEEE Transactions on Neural Networks and Learning Systems}
  

• _{[2025] Decaf: Data Distribution Decompose Attack Against Federated Learning
  Zhiyang Dai, Yansong Gao, Chunyi Zhou, Anmin Fu, Zhi Zhang, Minhui Xue, Yifeng Zheng, Yuqing Zhang
  IEEE Transactions on Information Forensics and Security}
  

• _{[2025] THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models
  Yujin Huang, Zhi Zhang (corresponding author), Qingchuan Zhao, Xingliang Yuan, Chunyang Chen.
  USENIX Security}
  

• _{[2025] Try to Poison My Deep Learning Data? Nowhere to Hide Your Trajectory Spectrum!
  Yansong Gao, Huaibing Peng, Hua Ma, Zhi Zhang (corresponding author), Shuo Wang, Rayne Holland, Anmin Fu, Minhui Xue, and Derek Abbott.
  The Network and Distributed System Security Symposium}
  

• _{[2024] Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense
  Hua Ma, Shang Wang, Yansong Gao, Zhi Zhang, Huming Qiu, Minhui Xue, Alsharif Abuadbba, Anmin Fu, Surya Nepal, Derek Abbott
  ACM Conference on Computer and Communications Security (AR: 16.9%)}
  

• _{[2023] Towards a critical evaluation of robustness for deep learning backdoor countermeasures
  Huming Qiu, Hua Ma, Zhi Zhang, Alsharif Abuadbba, Wei Kang, Anmin Fu, Yansong Gao
  IEEE Transactions on Information Forensics and Security}
  

• _{[2023] NTD: Non-Transferability enabled Deep Learning Backdoor Detection
  Yinshan Li, Hua Ma, Zhi Zhang, Yansong Gao, Alsharif Abuadbba, Minhui Xue, Anmin Fu, Yifeng Zheng, Said F Al-Sarawi, Derek Abbott
  IEEE Transactions on Information Forensics and Security}
  

• _{[2023] MACAB: Model-Agnostic Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World
  Hua Ma, Yinshan Li, Yansong Gao, Zhi Zhang, Alsharif Abuadbba, Anmin Fu, Said F Al-Sarawi, Nepal Surya, Derek Abbott
  International Symposium on Reliable Distributed Systems}
  

• _{[2023] Quantization backdoors to deep learning commercial frameworks
  Hua Ma, Huming Qiu, Yansong Gao, Zhi Zhang, Alsharif Abuadbba, Minhui Xue, Anmin Fu, Zhang Jiliang, Said Al-Sarawi, Derek Abbott
  IEEE Transactions on Dependable and Secure Computing}
  

• _{[2023] APMSA: Adversarial Perturbation against Model Stealing Attacks
  Jiliang Zhang, Shuang Peng, Yansong Gao, Zhi Zhang, Qinghui Hong
  IEEE Transactions on Information Forensics and Security}
  

• _{[2022] CASSOCK: Viable Backdoor Attacks against DNN in the Wall of Source-Specific Backdoor Defenses (Distinguished Paper Award)
  Shang Wang, Yansong Gao, Anmin Fu, Zhi Zhang, Yuqing Zhang, Willy Susilo, Dongxi Liu
  ACM ASIA Conference on Computer and Communications Security (AR: 17%)
  Distinguished Paper Award}
  

• _{[2022] PPA: Preference Profiling Attack Against Federated Learning
  Chunyi Zhou, Yansong Gao, Anmin Fu, Kai Chen, Zhiyang Dai, Zhi Zhang, Minhui Xue, Yuqing Zhang
  The Network and Distributed System Security Symposium (AR: 16.2%)}
  

• _{[2022] RBNN: Memory-Efficient Reconfigurable Deep Binary Neural Network with IP Protection for Internet of Things
  Huming Qiu, Hua Ma, Zhi Zhang, Yansong Gao, Yifeng Zheng, Anmin Fu, Pan Zhou, Derek Abbott, Said F. Al-Sarawi
  IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems}
  

• _{[2021] Evaluation and optimization of distributed machine learning techniques for internet of things
  Yansong Gao, Minki Kim, Chandra Thapa, Sharif Abuadbba, Zhi Zhang (corresponding author), Seyit Camtepe, Hyoungshick Kim, Surya Nepal
  IEEE Transactions on Computers}
  

• _{[2021] Design and evaluation of a multi-domain trojan detection method on deep neural networks
  Yansong Gao, Yeonjae Kim, Bao Gia Doan, Zhi Zhang (corresponding author), Gongxuan Zhang, Surya Nepal, Damith Ranasinghe, Hyoungshick Kim
  IEEE Transactions on Dependable and Secure Computing}