- Assistant Professor, Computer Science & Engineering
- Phone: 979-845-5464
- Email: zhiyuanyu@tamu.edu
- Office: PETR 323
- Website: Research Website
- Linkedin: Zhiyuan Yu
Educational Background
- Ph.D., Computer Science, Washington University in St. Louis — 2025
- B.S., Electrical Engineering, Huazhong University of Science and Technology — 2019
Research Interests
-
- Trustworthy machine learning systems
- AI-enabled cyber-physical systems
- Multimodal generative AI
- Usable and human-centric security
- Intelligent healthcare systems
Awards & Honors
- Top Reviewer, 32nd ACM Conference on Computer and Communications Security (CCS) - 2025
- Machine Learning and Systems Rising Star, NVIDIA Headquarters - 2024
- Distinguished Paper Award, 33rd USENIX Security Symposium - 2024
- Distinguished Artifact Award, 32nd USENIX Security Symposium - 2023
Selected Publications
- Yu, Zhiyuan, Xiaogeng Liu, Shunning Liang, Zach Cameron, Chaowei Xiao, and Ning Zhang. 2024. "Don't listen to me: Understanding and exploring jailbreak prompts of large language models." In 33rd USENIX Security Symposium (USENIX Security 24), pp. 4675-4692.
- Yu, Zhiyuan, Ao Li, Ruoyao Wen, Yijia Chen, and Ning Zhang. 2024. "Physense: Defending physically realizable attacks for autonomous systems via consistency reasoning." In Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, pp. 3853-3867.
- Yu, Zhiyuan, Shixuan Zhai, and Ning Zhang. 2023. "Antifake: Using adversarial audio to prevent unauthorized speech synthesis." In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, pp. 460-474.
- Yu, Zhiyuan, Yuanhaur Chang, Shixuan Zhai, Nicholas Deily, Tao Ju, XiaoFeng Wang, Uday Jammalamadaka, and Ning Zhang. 2023. "XCheck: Verifying integrity of 3d printed Patient-Specific devices via computing tomography." In 32nd USENIX Security Symposium (USENIX Security 23), pp. 2815-2832.
- Yu, Zhiyuan, Yuanhaur Chang, Ning Zhang, and Chaowei Xiao. 2023. "SMACK: Semantically meaningful adversarial audio attack." In 32nd USENIX security symposium (USENIX security 23), pp. 3799-3816.