• Assistant Professor, Computer Science & Engineering
Zhiyuan Yu

Educational Background

  • Ph.D., Computer Science, Washington University in St. Louis — 2025
  • B.S., Electrical Engineering, Huazhong University of Science and Technology — 2019

Research Interests

    • Trustworthy machine learning systems
    • AI-enabled cyber-physical systems
    • Multimodal generative AI 
    • Usable and human-centric security
    • Intelligent healthcare systems

Awards & Honors

  • Top Reviewer, 32nd ACM Conference on Computer and Communications Security (CCS) - 2025
  • Machine Learning and Systems Rising Star, NVIDIA Headquarters - 2024
  • Distinguished Paper Award, 33rd USENIX Security Symposium - 2024
  • Distinguished Artifact Award, 32nd USENIX Security Symposium - 2023

Selected Publications

  • Yu, Zhiyuan, Xiaogeng Liu, Shunning Liang, Zach Cameron, Chaowei Xiao, and Ning Zhang. 2024. "Don't listen to me: Understanding and exploring jailbreak prompts of large language models." In 33rd USENIX Security Symposium (USENIX Security 24), pp. 4675-4692.
  • Yu, Zhiyuan, Ao Li, Ruoyao Wen, Yijia Chen, and Ning Zhang. 2024. "Physense: Defending physically realizable attacks for autonomous systems via consistency reasoning." In Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, pp. 3853-3867.
  • Yu, Zhiyuan, Shixuan Zhai, and Ning Zhang. 2023. "Antifake: Using adversarial audio to prevent unauthorized speech synthesis." In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, pp. 460-474.
  • Yu, Zhiyuan, Yuanhaur Chang, Shixuan Zhai, Nicholas Deily, Tao Ju, XiaoFeng Wang, Uday Jammalamadaka, and Ning Zhang. 2023. "XCheck: Verifying integrity of 3d printed Patient-Specific devices via computing tomography." In 32nd USENIX Security Symposium (USENIX Security 23), pp. 2815-2832.
  • Yu, Zhiyuan, Yuanhaur Chang, Ning Zhang, and Chaowei Xiao. 2023. "SMACK: Semantically meaningful adversarial audio attack." In 32nd USENIX security symposium (USENIX security 23), pp. 3799-3816.