Hongwei Yao

Joined

March 2022

Names

Hongwei Yao (Preferred)

Emails

****@zju.edu.cn (Confirmed)

****@cityu.edu.hk (Confirmed)

Personal Links

Homepage

Google Scholar

DBLP

Career & Education History

Postdoc

City University of Hong Kong (cityu.edu.hk)

2024 – 2025

PhD student

Zhejiang University (zju.edu.cn)

2020 – 2024

Advisors, Relations & Conflicts

PhD Advisor

Zhan Qin

2020 – 2024

PhD Advisor

Kui Ren

2020 – 2024

Expertise

LLM Security and Safety

2022 – 2024

Trustworthy AI

2020 – 2024

Publications

Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw
Hongwei Yao, Yiming Liu, Yiling He, Bingrun Yang
- ICML 2026 AIWILD
- Readers: Everyone
SecMCP: Quantifying Conversation Drift in MCP via Latent Polytope
Haoran Shi, Hongwei Yao, Shuo Shao, Shaopeng Jiao, Zhan Qin, Cong Wang
- Submitted to ICLR 2026
- Readers: Everyone
BadReward: Clean-Label Poisoning of Reward Models in Text-to-Image RLHF
Kaiwen Duan, Hongwei Yao, Yufei Chen, Ziyun Li, Tong Qiao, Zhan Qin, Cong Wang
- ICLR 2026 Conference Withdrawn Submission
- Readers: Everyone
Black-Box Guardrail Reverse-engineering Attack
Hongwei Yao, Yun Xia, Shuo Shao, Haoran Shi, Tong Qiao, Cong Wang
- ICLR 2026 Conference Withdrawn Submission
- Readers: Everyone
Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint
Shuo Shao, Haozhe Zhu, Hongwei Yao, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren
- Submitted to ICLR 2025
- Readers: Everyone
RemovalNet: DNN Fingerprint Removal Attacks
Hongwei Yao, Zheng Li, Kunzhe Huang, Jian Lou, Zhan Qin, Kui Ren
- IEEE Trans. Dependable Secur. Comput. 2024
- Readers: Everyone
PromptCARE: Prompt Copyright Protection by Watermark Injection and Verification
Hongwei Yao, Jian Lou, Zhan Qin, Kui Ren
- SP 2024
- Readers: Everyone
TAPI: Towards Target-Specific and Adversarial Prompt Injection against Code LLMs
Yuchen Yang, Hongwei Yao, Bingrun Yang, Yiling He, Yiming Li, Tianwei Zhang, Zhan Qin, Kui Ren
- CoRR 2024
- Readers: Everyone
Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution
Shuo Shao, Yiming Li, Hongwei Yao, Yiling He, Zhan Qin, Kui Ren
- CoRR 2024
- Readers: Everyone
PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models
Hongwei Yao, Jian Lou, Zhan Qin
- ICASSP 2024
- Readers: Everyone

View all 22 publications

Co-Authors

View all 52 co-authors