I am an Associate Professor at Southeast University, China. Previously, I received my Ph.D. degree in January 2026 under the supervision of Prof.Hu Haibo and subsequently worked as a Postdoctoral Fellow in the ASTAPLE Lab at The Hong Kong Polytechnic University.

My research interests include trustworthy machine learning and privacy protection, with a focus on privacy and security attacks. Feel free to reach out to me at libai@seu.edu.cn.

📝 Publications

  • On the Adversarial Robustness of Large Vision-Language Models under Visual Token Compression.
    Xinwei_Zhang, Hangcheng Liu, Li Bai, Hao Wang, Qingqing Ye, Tianwei Zhang, Haibo Hu. ICML, 2026.
    [Paper]

  • United We Defend: Collaborative Membership Inference Defenses in Federated Learning.
    Li Bai, Junxu Liu, Sen Zhang, Xinwei Zhang, Qingqing Ye, and Haibo Hu. USENIX Security, 2026.
    [Paper] [Code]

  • Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts.
    Li Bai, Qingqing Ye, Xinwei Zhang, Sen Zhang, Zi Liang, Jianliang Xu, Haibo Hu. The Thirty-Ninth Annual Conference on Neural Information Processing Systems (NeurIPS), 2025.
    [Paper] [Code]

  • ProVFL: Property inference attacks against vertical federated learning.
    Li Bai, Xinwei Zhang, Sen Zhang, Qingqing Ye,Haibo Hu. IEEE Transactions Information Forensics and Security (TIFS), 2025.
    [Paper] [Code]

  • RMR: A relative membership risk measure for machine learning models.
    Li Bai, Haibo Hu, Qingqing Ye, Jianliang Xu, Jin Li, Chengfang Fang, Jie Shi. IEEE Transactions on Dependable and Secure Computing (TDSC), 2025.
    [Paper] [Code]

  • Auditing MLaaS Inference Service Quality without Ground Truth via Mutual Information.
    Zhu Jiang, Haibo Hu, Qingqing Ye, Li Bai. IEEE Transactions Information Forensics and Security (TIFS), 2025.
    [Paper]

  • MER-Inspector: Assessing model extraction risks from an attack-agnostic perspective.
    Xinwei Zhang, Haibo Hu, Qingqing Ye, Li Bai, Huadi Zheng. Proceedings of the ACM on Web Conference (WWW), 2025.
    [Paper] [Code]

  • A sample-level evaluation and generative framework for model inversion attacks.
    Haoyang Li, Li Bai, Qingqing Ye, Haibo Hu, Yaxin Xiao, Huadi Zheng, Jianliang Xu. Proceedings of the Thirty-Ninth AAAI Conference on Artificial Intelligence (AAAI), 2025.
    [Paper]

  • Membership inference attacks and defenses in federated learning: A survey.
    Li Bai, Haibo Hu, Qingqing Ye, Haoyang Li, Leixia Wang, Jianliang Xu. ACM Computing Surveys, 2024.
    [Paper]

📖 Education

  • 2022.09 - 2026.01, The Hong Kong Polytechnic University, PhD in Electronic and Information Engineering.
  • 2016.09 - 2019.06, Chinese Academy of Sciences, Institute of Information Engineering, Master in Cyberspace Security.
  • 2012.09 - 2016.06, Jilin University, Bachelor in Information and Network Security.

🎖 Honors and Awards

  • 2026.08, USENIX Security Symposium, Student Travel Grant.

💻 Experience

  • 2026.07 - Present, Associate Professor, Southeast University, China
  • 2026.02 - 2026.06, Postdoc, The Hong Kong Polytechnic University, Hong Kong.

📋 Services

Journal Reviewer

  • IEEE Transactions on Information Forensics and Security
  • IEEE Transactions on Dependable and Secure Computing
  • IEEE Transactions on Computational Social Systems

Conference Reviewer

AAAI, NeurIPS, ACL.