I am currently a Research Fellow at NTU. I completed my Ph.D. with honors at Zhejiang University. Previously, I obtained my B.Eng with honors also from Zhejiang University.

My research is broadly in the fields of (1) Trustworthy AI and LLM & Agent Safety, with a special focus on the safety and privacy of multimodal and agentic AI systems, and (2) Responsible AI for Intelligent System Dependability, particularly for ensuring robustness and reliability in critical IoT, communication, and software systems.

In AI-oriented contexts, I focus on developing trustworthy intelligent audio and vision models, safeguarding user privacy, and fortifying generative models against various leaks and attacks. I also regulate AI behavior to ensure alignment with societal responsibilities, especially in the context of large language models such as Stable Diffusion and GPT-4.

In system-oriented contexts, I work toward developing dependable and secure machine learning (ML) systems and am committed to their application for deployment in critical infrastructures and consumer electronics, e.g., in the domain of audio/vision-interface IoT devices, carrier networks, and software systems.

If you are seeking any form of academic cooperation, please feel free to email me at xinfeng.li(at)ntu.edu.sg or lxfmakeit(at)gmail.com.

I have published over 20 papers in top-tier international security, AI, and mobile sensing conferences and journals, such as IEEE S&P, ACM CCS, USENIX Security, NDSS, NeurIPS, ICLR, KDD, TDSC, TIFS, ICCV.

News

• 2026.03:  GIFT has been accepted to IEEE S&P 2026. Congrats to Lixu and all collaborators.
• 2025.11:  EmoRAG has been accepted to SIGKDD 2026. It’s great working with Xinyun to investigate RAG robustness.
• 2025.10:  WebCloak, EnchTable have been accepted to S&P 2026. Congratulations to Jialin and all collaborators.
• 2025.09:  AgentAuditor has been accepted to NeurIPS 2025. Congratulations to Hanjun and Shenyu.
• 2025.06:  AudioTrust has been accepted to ICLR’26! We hope this can serve as a solid foundation for academia and industry for safe audio-based LLM system development. [Github] (Media Coverage: [量子位])
• 2025.06:  Neural Invisibility Cloak has been accepted to USENIX Security’25. Congratulations to Wenjun.
• 2025.04:  Lead/Contributed to 3 (Trustworthy) LLM Agent survey papers are now released: (1) TrustAgent: A survey on trustworthy LLM agents: Threats and countermeasures [Paper (accepted to KDD’25)]; (2) Advances and challenges in foundation agents: From brain-inspired intelligence to evolutionary, collaborative, and safe systems [Paper Github] [HuggingFace] (Media Coverage, e.g., [SANER, 机器之心]); (3) A Comprehensive Survey in LLM (-Agent) Full Stack Safety: Data, Training, and Deployment.
• 2024.11:  LightAntenna has been accepted to NDSS 2025.
• 2024.08:  Raconteur has been accepted to NDSS 2025 [website].
• 2024.08:  Legilimens has been accepted to CCS 2024.
• 2024.05:  SafeGen has been accepted to CCS 2024! More information is on [code][pretrained model].
• 2024.05:  SafeEar has been accepted to CCS 2024! More information is on [website][code].
• 2023.08:  VRifle has been accepted to NDSS 2024.
• 2023.08:  I attended the USENIX Security 2023 Symposium and presented our work NormDetect in person.
• 2023.07:  SMA has been accepted to ACM MM 2023.
• 2022.09:  Tuner and UltraBD were accepted to IoT-J 2023 and ICPADS 2022.
• 2022.07:  NormDetect has been accepted to USENIX Security 2023.
• 2021.07:  PROLE Score has been accepted to USENIX Security 2022.
• 2020.12:  EarArray has been accepted to NDSS 2021.

📝 Selected Research

(*: Equal Contribution, ^: Corresponding Author)

• WebCloak: Characterizing and Mitigating the Threats of LLM-Driven Web Agents as Intelligent Scrapers IEEE S&P 2026 [Website]
  Xinfeng Li, Tianze Qiu, Yingbin Jin, Lixu Wang, Hanqing Guo, Xiaojun Jia, Xiaofeng Wang, Wei Dong.
• The Person Behind the Sound: Demystifying Audio Private Attribute Profiling via Multimodal Large Language Models IEEE S&P 2026
  Lixu Wang, Kaixiang Yao, Xinfeng Li^, Dong Yang, Haoyang Li, Xiaofeng Wang, Wei Dong^.
• EnchTable: Unified Safety Alignment Transfer in Fine-tuned Large Language Models IEEE S&P 2026
  Jialin Wu, Kecen Li, Zhicong Huang, Xinfeng Li, Xiaofeng Wang, Cheng Hong.
• EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations KDD 2026
  Xinyun Zhou*, Xinfeng Li*, Yinan Peng, Ming Xu, Xuanwang Zhang, Miao Yu, Yidong Wang, Xiaojun Jia, Kun Wang, Qingsong Wen, Xiaofeng Wang, Wei Dong.
• AudioTrust: Benchmarking the Multifaceted Trustworthiness of Audio Large Language Models ICLR 2026
  K. Li, C. Shen, Y. Liu, J. Han, K. Zheng, X. Zou, Z. Wang, S. Zhang, X. Du, H. Luo, Y. Jin, X. Xing, Z. Ma, Y. Liu, Y. Zhang, J. Fang, K. Wang, Y. Yan, G. Deng, H. Li, Y. Li, X. Zhuang, T. Chen, Q. Wen, T. Zhang, Y. Liu, H. Hu, Z. Wu, X. Hu, E. Chng, W. Xu, X. Wang, W. Dong, Xinfeng Li^.
• Critical Information Only: A Content Privacy-Preserving Framework for Detecting Audio Deepfakes TDSC 2026
  Xinfeng Li, Yifan Zheng, Chen Yan, Kai Li, Chang Zeng, Xiaoyu Ji, Wenyuan Xu.

• RACONTEUR: A Knowledgeable, Insightful, and Portable LLM-Powered Shell Command Explainer NDSS 2025 [Website]
  Jiangyi Deng*, Xinfeng Li*, Yanjiao Chen, Yijie Bai, Haiqin Weng, Yan Liu, Tao Wei, Wenyuan Xu.
• Neural Invisibility Cloak: Concealing Adversary in Images via Compromised AI-driven Image Signal Processing USENIX Security 2025
  Wenjun Zhu, Xiaoyu Ji, Xinfeng Li, Qihang Chen, Kun Wang, Xinyu Li, Ruoyan Xu, Wenyuan Xu.
• LightAntenna: Characterizing the Limits of Fluorescent Lamp-Induced Electromagnetic Interference NDSS 2025
  Fengchen Yang, Wenze Cui, Xinfeng Li, Chen Yan, Xiaoyu Ji, Wenyuan Xu.
• AgentAuditor: Human-level Safety and Security Evaluation for LLM Agents NeurIPS 2025
  Hanjun Luo, Shenyu Dai, Chiming Ni, Xinfeng Li^, Guibin Zhang, Kun Wang, Tongliang Liu, Hanan Salam.
• A Survey on Trustworthy LLM Agents: Threats and Countermeasures KDD 2025
  Miao Yu, Fanci Meng, Xinyun Zhou, Shilong Wang, Junyuan Mao, Linsey Pang, Tianlong Chen, Kun Wang, Xinfeng Li^, Yongfeng Zhang, Bo An, Qingsong Wen.
• Patronus: Safeguarding Text-to-Image Models against White-Box Adversaries
  Xinfeng Li*, Shengyuan Pang*, Jialin Wu, Jiangyi Deng, Huanlong Zhong, Yanjiao Chen, Jie Zhang, Wenyuan Xu
• A Vision for Access Control in LLM-based Agent Systems
  Xinfeng Li, Dong Huang, Jie Li, Hongyi Cai, Zhenhong Zhou, Wei Dong, Xiaofeng Wang, Yang Liu.

• The Eye of Sherlock Holmes: Uncovering User Private Attribute Profiling via Vision-Language Model Agentic Framework MM 2025
  Feiran Liu, Yuzhe Zhang, Xinyi Huang, Yinan Peng, Xinfeng Li^, Lixu Wang, Yutong Shen, Ranjie Duan, Simeng Qin, Xiaojun Jia, Qingsong Wen, Wei Dong.
• SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models ACM CCS 2024 [Code][Weights]
  Xinfeng Li, Yuchen Yang, Jiangyi Deng, Chen Yan, Yanjiao Chen, Xiaoyu Ji, Wenyuan Xu.
• SafeEar: Content Privacy-Preserving Audio Deepfake Detection ACM CCS 2024 [Website][Dataset][Code]
  Xinfeng Li, Kai Li, Yifan Zheng, Chen Yan, Xiaoyu Ji, Wenyuan Xu.
• Legilimens: Practical and Unified Content Moderation for Large Language Model Services ACM CCS 2024 [Code]
  Jialin Wu, Jiangyi Deng, Shengyuan Pang, Yanjiao Chen, Jiayang Xu, Xinfeng Li, Wenyuan Xu.
• Inaudible Adversarial Perturbation: Manipulating the Recognition of User Speech in Real Time NDSS 2024 [Website1][Website2][Code]
  Xinfeng Li, Chen Yan, Xuancun Lu, Zihan Zeng, Xiaoyu Ji, Wenyuan Xu.
• Learning Normality is Enough: A Software-Based Mitigation Against Inaudible Voice Attacks USENIX Security 2023 [Website]
  Xinfeng Li, Xiaoyu Ji, Chen Yan, Chaohao Li, Yichen Li, Zhenning Zhang, Wenyuan Xu.
• Scoring Metrics of Assessing Voiceprint Distinctiveness based on Speech Content and Rate IEEE TDSC 2024
  Ruiwen He, Yushi Cheng, Junning Ze, Xinfeng Li, Xiaoyu Ji, Wenyuan Xu.
• Detecting Inaudible Voice Commands via Acoustic Attenuation by Multi-channel Microphones IEEE TDSC 2024
  Xiaoyu Ji, Guoming Zhang, Xinfeng Li, Gang Qu, Xiuzhen Cheng, Wenyuan Xu.
• Enrollment-Stage Backdoor Attacks on Speaker Recognition Systems via Adversarial Ultrasound IEEE IoT-J 2023
  Xinfeng Li, Junning Ze, Chen Yan, Yushi Cheng, Xiaoyu Ji, Wenyuan Xu.
• Toward Pitch-Insensitive Speaker Verification via Soundfield IEEE IoT-J 2023
  Xinfeng Li, Zhicong Zheng, Chen Yan, Chaohao Li, Xiaoyu Ji, Wenyuan Xu.
• The Silent Manipulator: A Practical and Inaudible Backdoor Attack against Speech Recognition Systems ACM MM 2023
  Zhicong Zheng, Xinfeng Li, Chen Yan, Xiaoyu Ji, Wenyuan Xu.
• "OK, Siri" or "Hey, Google": Evaluating Voiceprint Distinctiveness Via Content-based PROLE Score USENIX Security 2022 [Website]
  Ruiwen He, Xiaoyu Ji, Xinfeng Li, Yushi Cheng, Wenyuan Xu.
• EarArray: Defending against DolphinAttack via Acoustic Attenuation NDSS 2021
  Guoming Zhang, Xiaoyu Ji, Xinfeng Li, Gang Qu, Wenyuan Xu.

📚 Professional Services

I actively contribute to the academic community through program organization and peer review for leading conferences and journals in security, AI, and systems.

Program Organization

• KDD 2025: Tutorial Organizer

Conference

• ICLR: Area Chair (2026)
• PC Member: AsiaCCS’27, CCS’26, SaTML’26, AAAI’26
• Reviewer: ICML’26, CVPR’26
• S&P: External Reviewer (2019, 2020)
• CCS: External Reviewer (2021, 2022, 2023, 2024)
• USENIX Security: External Reviewer (2019, 2020, 2021, 2024)
• NDSS: External Reviewer (2020, 2022, 2023, 2024)

Journal

• IEEE Transactions on Information Forensics and Security (TIFS)
• IEEE Transactions on Dependable and Secure Computing (TDSC)
• IEEE Transactions on Neural Networks and Learning Systems (TNNLS)
• ACM Transactions on Software Engineering and Methodology (TOSEM)
• IEEE Internet of Things Journal (IoT-J)
• ACM Transactions on Privacy and Security
• ACM Transactions on Internet Technology (TOIT)
• IEEE Transactions on Cognitive Communications and Networking (TCCN)

🎖 Honors and Awards

• ACM SIGSAC China Doctoral Dissertation Award (1st), 2025
• CCS 2024 Student Grant, 2024
• NDSS 2024 Student Grant, 2024
• WANG G.S. PhD Research Excellence Award, 2023
• Best Security Partner Award (OPPO Inc.), 2022
• Edison Honors Class@ZJU, Outstanding Graduate Award, 2019
• EE@ZJU Top-10 Scholars Award, 2018
• National Scholarship, 2018

📖 Educations

• 2019.06 - 2024.06, Ph.D., Zhejiang University, Hangzhou.
• 2015.09 - 2019.06, Undergraduate, College of Electrical Engineering, Zhejiang University, Hangzhou.

💬 Invited Talks

• 2024.10, ACM CCS 2024 at Salt Lake City, USA.
• 2024.02, NDSS 2024 at San Diego, California, USA. | [Paper] | [Code]
• 2023.08, USENIX Security Symposium 2023 at Anaheim, California, USA. | [Slides]

🗺️ Visitor Map