Hongbin Liu
{first_name}{last_name}@google.com

Hi! I am a Ph.D. student at Duke University, where I am fortunate to be supervised by Prof. Neil Gong. My research focuses on security and safety of generative AI, especially multimodal large language models. Priorly, I earned a B.Eng. from the University of Science and Technology of China in 2020. I worked with Prof. Tong Zhang at HKUST in Summer 2019.

2025

• Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities
  Gemini Team, Google.
  Technical Report.


• Differentially Private Parameter-Efficient Fine-tuning for Large ASR Models
  Hongbin Liu, Lun Wang, Om Thakkar, Abhradeep Thakurta, Arun Narayanan.
  Conference of the International Speech Communication Association (Interspeech).


• Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment
  Zedian Shao*, Hongbin Liu*, Jaden Mu, Neil Zhenqiang Gong.
  ACM Workshop on Artificial Intelligence and Security (AISec).

2024

• AudioMarkBench: Benchmarking Robustness of Audio Watermarking
  Hongbin Liu*, Moyang Guo*, Zhengyuan Jiang, Lun Wang, Neil Zhenqiang Gong.
  Datasets and Benchmarks Track in Conference on Neural Information Processing Systems (NeurIPS).


• Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models
  Hongbin Liu, Michael K Reiter, Neil Zhenqiang Gong.
  USENIX Security Symposium.


• Visual Hallucinations of Multi-modal Large Language Models
  Wen Huang*, Hongbin Liu*, Minxin Guo, Neil Zhenqiang Gong.
  Findings of the Association for Computational Linguistics (ACL)


• Differentially Private Parameter-Efficient Fine-tuning for Large ASR Models
  Hongbin Liu, Lun Wang, Om Thakkar, Abhradeep Guha Thakurta, and Arun Narayanan.
  DLSP @ IEEE Symposium on Security and Privacy.


• Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning
  Hongbin Liu*, Wenjie Qu*, Jinyuan Jia, Neil Zhenqiang Gong.
  Security Architectures for Generative Artificial Intelligence (SAGAI) @ IEEE Symposium on Security and Privacy.


• CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning
  Jinghuai Zhang, Hongbin Liu, Jinyuan Jia, Neil Zhenqiang Gong.
  IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR).


• 10 Security and Privacy Problems in Large Foundation Models
  Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong.
  Book Chapter @ AI Embedded Assurance for Cyber Systems.

2023

• Generation-based fuzzing? Don’t build a new generator, reuse!
  Chengbin Pang, Hongbin Liu, Yifan Wang, Neil Zhenqiang Gong, Bing Mao, and Jun Xu.
  Computers & Security


• PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees
  Jinghuai Zhang, Jinyuan Jia, Hongbin Liu, and Neil Zhenqiang Gong.
  IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

2022

• PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning
  Hongbin Liu, Jinyuan Jia, and Neil Zhenqiang Gong.
  USENIX Security Symposium.


• Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning
  Xinlei He, Hongbin Liu, Neil Zhenqiang Gong, and Yang Zhang.
  European Conference on Computer Vision (ECCV).


• StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning
  Yupei Liu, Jinyuan Jia, Hongbin Liu, Neil Zhenqiang Gong.
  ACM Conference on Computer and Communications Security (CCS).


• Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations
  Jinyuan Jia, Binghui Wang, Xiaoyu Cao, Hongbin Liu and Neil Zhenqiang Gong.
  International Conference on Learning Representations (ICLR).

2021

• EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning
  Hongbin Liu*, Jinyuan Jia*, Wenjie Qu and Neil Zhenqiang Gong.
  ACM Conference on Computer and Communications Security (CCS)


• PointGuard: Provably Robust 3D Point Cloud Classification
  Hongbin Liu*, Jinyuan Jia* and Neil Zhenqiang Gong.
  IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)


• On the Intrinsic Differential Privacy of Bagging
  Hongbin Liu, Jinyuan Jia and Neil Zhenqiang Gong.
  International Joint Conference on Artificial Intelligence (IJCAI)

2025

Nov. 2024 - Now: Research Scientist, Google Deepmind.

May 2024 - Aug. 2024: Research Intern, Google AI.

June 2023 - Jan. 2024: Student Researcher, Google AI.

Jan. 2021 - Apr. 2021: Research Intern, Alibaba Group.

Jul. 2019 - Sep. 2019: Research Intern, HKUST.

Conference Program Committee: CCS (2025), ICML (2025), ICCV (2025, 2023), ICLR (2025), ECCV (2024), ACCV (2024), AACD (2024).

Journal Program Committee: TOIT (2025), Computer (2025), TIFS (2025), TOPS (2025).