Publications

You can also find my articles on my Google Scholar.

2026

• [MLSys’26] Jianming Tong, Hanshen Xiao, Krishna Kumar Nair, Hao Kang, Ashish Sirasao, Ziqi Zhang, G. Edward Suh, Tushar Krishna “Privatar: Scalable Privacy-preserving Multi-user VR via Secure Offloading”

• [S&P’26] Shaofei Li, Xiao Han, Ziqi Zhang, Zhenkai Liang, Yao Guo, Xiangqun Chen, Ding Li, Shuli Gao, Minyao Hua. “PromoGuardian: Detecting Promotion Abuse Fraud with Multi-Relation Fused Graph Neural Networks” (12.75%)

2025

• [NeurIPS’25a] Hwiwon Lee, Ziqi Zhang, Hanxiao Lu, Lingming Zhang. “SEC-bench: Automated Benchmarking of LLM Agents on Real-World Software Security Tasks” (24.52%)

• [NeurIPS’25b] Che Wang, Ziqi Zhang, Yinggui Wang, Tiantong Wang, Yurong Hao, Jianbo Gao, Tao Wei, Yang Cao, Zhong Chen, Wei Yang Bryan Lim. “AegisGuard: RL-Guided Adapter Tuning for TEE-Based Efficient & Secure On-Device Inference” (24.52%)

• [EMNLP’25] Ziqi Zhang, Ali Shahin Shamsabadi, Hanxiao Lu, Yifeng Cai, Hamed Haddadi. “Membership and Memorization in LLM Knowledge Distillation” (22.16%).

• [USENIX Security’25] Yifeng Cai, Ziqi Zhang, Mengyu Yao, Junlin Liu, Xiaoke Zhao, Xinyi Fu, Ruoyu Li, Zhe Li, Ding Li, Yao Guo, Xiangqun Chen. “I Can Tell Your Secrets: Inferring Privacy Attributes from Mini-app Interaction History in Super-apps”.

• [USENIX Security’25] Pengli Wang, Bingyou Dong, Yifeng Cai, Zheng Zhang, Junlin Liu, Huanran Xue, Ye Wu, Yao Zhang, and Ziqi Zhang. “Game of Arrows: On the (In-)Security of Weight Obfuscation for On-Device TEE-Shielded LLM Partition Algorithms”. [paper]

• [Ubicomp’25] Yifeng Cai, Ziqi Zhang, Ding Li, Yao Guo, and Xiangqun Chen. “MOSS: Proxy Model-based Full-Weight Aggregation in Federated Learning with Heterogeneous Models” In ACM on Interactive, Mobile, Wearable, and Ubiquitous Technologies.

• [S&P’25] Shaofei Li, Ziqi Zhang, Haoming Jia, Yao Guo, Xiangqun Chen, Ding Li. “Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks”

• [TOSEM’25] Ding Li, Ziqi Zhang, Mengyu Yao, Yifeng Cai, Yao Guo, and Xiangqun Chen. “TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models”. [paper]

2024

• [USENIX Security’24] Yifeng Cai, Ziqi Zhang, Jiaping Gui, Bingyan Liu, Xiaoke Zhao, Ruoyu Li, Zhe Li, Ding Li. “FAMOS: Robust Privacy-Preserving Authentication on Payment Apps via Federated Multi-Modal Contrastive Learning”

• [ICML’24] Zheng Zhang, Na Wang, Ziqi Zhang, Tianyi Zhang, Jianwei Liu, Yao Zhang, Ye Wu. “GroupCover: A Secure, Efficient and Scalable Inference Framework for On-device Model Protection based on TEEs” (2609/9653=27.03%).

• [S&P’24] Ziqi Zhang, Chen Gong, Yuanyuan Yuan, Yifeng Cai, Bingyan Liu, Ding Li, Yao Guo, Xiangqun Chen. “No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition Defenses”. [paper] [artifact] [tool]

2023

• [CCS’23a] Yuanpeng Wang, Ziqi Zhang, Ningyu He, Zhineng Zhong, Shengjian Guo, Qinkun Bao, Ding Li, Yao Guo, and Xiangqun Chen. “SymGX: Detecting Cross-boundary Pointer Vulnerabilities of SGX Applications via Static Symbolic Execution” (158/795=19.87%).

• [CCS’23b] Hanwen Lei, Ziqi Zhang, Shaokun Zhang, Peng Jiang, Zhineng Zhong, Ningyu He, Ding Li, Yao Guo, and Xiangqun Chen. “Put Your Memory in Order: Efficient Domain-based Memory Isolation for WASM Applications” (158/795=19.87%).

• [WWW’23] Bingyan Liu, Yifeng Cai, Hongzhe Bi, Ziqi Zhang, Ding Li, Yao Guo, Xiangqun Chen. “Beyond Fine-Tuning: Efficient and Effective Fed-Tuning for Mobile/Web Users” (365/1900=19.2%)

• [ISSRE’23] Shaokun Zhang, Wu Linna, Yuanchun Li, Ziqi Zhang, Hanwei Lei, Ding Li, Yao Guo, and Xiangqun Chen. “ReSPlay: Improving Cross-Platform Record-and-Replay with GUI Sequence Matching” In IEEE International Symposium on Software Reliability Engineering. (Accepted)

• [ICSE’23] Ziqi Zhang, Yuanchun Li, Bingyan Liu, Yifeng Cai, Ding Li, Yao Guo, Xiangqun Chen. “FedSlice: Protecting Federated Learning Models from Malicious Participants with Model Slicing”. [paper] [code]

Before 2023

• [ISSTA’22W] Ziqi Zhang, Lucien K. L. Ng, Yifeng Cai, Yao Guo, Bingyan Liu, Ding Li, and Xiangqun Chen. “TEESlice: Slicing DNN Models for Secure and Efficient Deployment inside TEEs”.

• [Ubicomp’22] Bingyan Liu, Yifeng Cai, Ziqi Zhang, Yuanchun Li, Leye Wang, Ding Li, Yao Guo, Xiangqun Chen. “DistFL: Distribution-aware Federated Learning for Mobile Scenarios” In ACM on Interactive, Mobile, Wearable, and Ubiquitous Technologies.

• [ICSE’22] Ziqi Zhang, Yuanchun Li, Jindong Wang, Bingyan Liu, Ding Li, Xiangqun Chen, Yao Guo, Yunxin Liu. “ReMoS: Reducing Defect Inheritance in Transfer Learning via Relevant Model Slicing”. [paper] [code]

• [ISSTA’21] Yuanchun Li, Ziqi Zhang, Bingyan Liu, Ziyue Yang, Yunxin Liu. “ModelDiff: Testing-based DNN Similarity Comparison for Model Reuse Detection” The ACM SIGSOFT International Symposium on Software Testing and Analysis. (51/233=21.9%)

• [ESEC/FSE’20] Ziqi Zhang, Yuanchun Li, Yao Guo, Xiangqun Chen, Yunxin Liu. “Dynamic Slicing for Deep Neural Networks.” [paper]