I’m always happy to explore new collaborations. If you’re interested in working together, feel free to reach out at ayyj.jun@gmail.com — I’d love to connect!

News

• 🕘 2025-11-15 Multi-Faceted Attack: Exposing Cross-Model Vulnerabilities in Defense-Equipped Vision-Language Models has been accepted to AAAI2026 CCF-A Oral 👏
• 🕘 2025-11-15 CloudFort: Enhancing Robustness of 3D Point Cloud Classification Against Backdoor Attacks via Spatial Partitioning and Ensemble Prediction has been published in IET Computer Vision CCF-C 😃 Congrats Wenhao! 👏
• 🕘 2024-09-26 GuardT2I: Defending Text-to-Image Models from Adversarial Prompts has been accepted to NeurIPS2024 CCF-A 😃
• 🕘 2024-05-27 I passed my Ph.D oral defense! 👏🌻🌹
• 🕘 2024-05 Be Your Own Neighborhood: Detecting Adversarial Examples by the Neighborhood Relations Built on Self-Supervised Learning has been accepted to ICML2024 CCF-A 👏
• 🕘 2024-02 MMA-Diffusion: MultiModal Attack on Diffusion Models has been accepted to CVPR2024 CCF-A 👏

Publications

📚 Publications

• Multi-Faceted Attack: Exposing Cross-Model Vulnerabilities in Defense-Equipped Vision-Language Models
  
  Yijun Yang#*, Lichao Wang*, Jianping Zhang, Chi Harold Liu, Lanqing Hong, Qiang Xu#
  
  AAAI Conference on Artificial Intelligence (AAAI 2026 Oral)

• MMA-Diffusion: MultiModal Attack on Diffusion Models
  
  Yijun Yang, Ruiyuan Gao, Xiaosen Wang, Tsung-Yi Ho, Nan Xu, Qiang Xu
  
  IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR 2024)

• GuardT2I: Defending Text-to-Image Models from Adversarial Prompts
  
  Yijun Yang, Ruiyuan Gao, Xiao Yang, Jianyuan Zhong, Qiang Xu
  
  Conference on Neural Information Processing Systems (NeurIPS 2024)

• Be Your Own Neighborhood: Detecting Adversarial Examples by the Neighborhood Relations Built on Self-Supervised Learning
  
  Zhiyuan He*, Yijun Yang*, Pin-yu Chen, Qiang Xu, and Tsung-Yi Ho.
  
  International Conference on Machine Learning (ICML 2024)

• CloudFort: Enhancing Robustness of 3D Point Cloud Classification Against Backdoor Attacks via Spatial Partitioning and Ensemble Prediction
  
  Wenhao Lan, Yijun Yang#, Haihua Shen, Shan Li
  
  IET Computer Vision (IET CV)

• Out-of-Distribution Detection with Semantic Mismatch under Masking
  
  Yijun Yang, Ruiyuan Gao, Qiang Xu
  
  European Conference on Computer Vision (ECCV 2022)
  
  code

• Be Your Own Neighborhood: Detecting Adversarial Example by the Neighborhood Relations Built on Self-Supervised Learning
  
  Zhiyuan He*, Yijun Yang*, Pin-Yu Chen, Qiang Xu, Tsung-Yi Ho
  
  European Conference on Computer Vision Workshop (ECCV AWOR 2022)

• What You See in Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction
  
  Yijun Yang, Ruiyuan Gao, Yu Li, Qiuxia Lai, Qiang Xu
  
  Network and Distributed System Security Symposium (NDSS 2022)
  code

• MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis
  
  Yijun Yang, Ruiyuan Gao, Yu Li, Qiuxia Lai, Qiang Xu
  
  The 48th International Symposium on Computer Architecture (ISCA 2021), Secure and Private Systems for Machine Learning Workshop

Services

I serve as a reviewer of conferences/journals: CVPR, NeurIPS, ICLR, ICML, Neurocomputing.

Selected Awards and Honors

🏆 Full Postgraduate Studentship, The Chinese University of Hong Kong.
🏆 Outstanding Master Graduate, Tsinghua University (Top 2%).
🏆 Outstanding Thesis Award, Tsinghua University (Top 3%).
🏆 Guanghua Scholarship for Advancement in Academic Work, Tsinghua University (Top 5%).
🏆 Lam Scholarship for Advancement in Academic Work, Tsinghua University (Top 5%).