72 papers on AI safety, deepfakes and media forensics, adversarial machine learning, misinformation, and privacy. Citation counts are on Google Scholar.

2027

  1. WACV 2027

    SafeGrad: A Severity-Graded Benchmark for Safety Evaluation, Defense, and Attack of Text-to-Image Models

    M.-D. Vo, J. Li, H. H. Nguyen, P. Kavumba, and K. Wataoka

    Winter Conference on Applications of Computer Vision (WACV) 2027

2026

  1. AACL-IJCNLP 2026

    The Guardrail Trinity: Procedural Safety Schemas, Reasoning Chain Decomposition, and Dual-Mode Inference for LLM Guardrails

    H. H. Nguyen, P. Kavumba, J. Li, M.-D. Vo, and K. Wataoka

    Asia-Pacific Chapter of the Association for Computational Linguistics and International Joint Conference on Natural Language Processing (AACL-IJCNLP) 2026, Main

  2. AACL-IJCNLP Findings 2026

    GCoTD: A Non-Intrusive Diagnostic Pipeline for Black-Box LLM Backdoor Detection via Graph Chain-of-Thought

    C. Jia, A. P. MaungMaung, H. H. Nguyen, I. Echizen, and J. Chen

    Findings of the Asia-Pacific Chapter of the Association for Computational Linguistics and International Joint Conference on Natural Language Processing (AACL-IJCNLP) 2026

  3. EMNLP 2026

    Do VLMs Share Safety Neurons Across Modalities?

    J. Li, J. Zhang, M.-D. Vo, H. H. Nguyen, P. Kavumba, and K. Wataoka

    Empirical Methods in Natural Language Processing (EMNLP) 2026, Main Track

  4. ICPR 2026

    Beyond Standard Benchmarks: A Systematic Audit of Vision-Language Model's Robustness to Natural Semantic Variation Across Diverse Tasks

    C. Jia, A. P. MaungMaung, H. H. Nguyen, J. Chen, and I. Echizen

    International Conference on Pattern Recognition (ICPR) 2026, pp. 96–110

2025

  1. APSIPA Trans. SIP 2025 Journal

    3D Morphable Master Face: Towards Controllable Wolf Attacks against 2D and 3D Face Recognition Systems

    S. Liang, H. H. Nguyen, S. Ikehata, J. Yamagishi, I. Echizen

    APSIPA Transactions on Signal and Information Processing, vol. 14, no. 3 (2025)

  2. IEEE Access 2025 Journal

    LookupForensics: A Large-Scale Multi-Task Dataset for Multi-Phase Image-Based Fact Verification

    S. Cui, H. H. Nguyen, T.-N. Le, C.-S. Lu and I. Echizen

    IEEE Access, vol. 13, pp. 136505–136523 (2025)

  3. IEEE Access 2025 Journal

    3DDGD: 3D Deepfake Generation and Detection Using 3D Face Meshes

    H. Felouat, H. H. Nguyen, J. Yamagishi and I. Echizen

    IEEE Access, vol. 13, pp. 107429–107441 (2025)

  4. APSIPA ASC 2025 Best Perspective Paper Award

    Foundation Models as Guardrails: LLM- and VLM-Based Approaches to Safety and Alignment

    H. H. Nguyen, P. Kavumba, T. Kurosawa, and K. Wataoka

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2025, pp. 2564–2569

  5. ICMI 2025

    A Multilingual, Multimodal Dataset for Disinformation and Out-of-Context Analysis with Rich Supportive Information

    S. Cui, P. Navas, H. Wang, C.-C. Chang, H. H. Nguyen, I. Echizen

    International Conference on Multimodal Interaction (ICMI) 2025

  6. IJCNN 2025

    Measuring Human Involvement in AI-Generated Text: A Case Study on Academic Writing

    Y. Guo, Z. Dou, H. H. Nguyen, C.-C. Chang, S. Sugawara, and I. Echizen

    International Joint Conference on Neural Networks (IJCNN) 2025

  7. IJCB 2025

    A Controllable 3D Deepfake Generation Framework with Gaussian Splatting

    W. Liu, S. Liang, H. H. Nguyen, and I. Echizen

    International Joint Conference on Biometrics (IJCB) 2025

  8. WACV-W 2025 Workshop

    Zero-Shot Warning Generation for Misinformative Multimodal Content

    G. Delvecchio, H. H. Nguyen, and I. Echizen

    Workshop on Artificial Intelligence for Multimedia Forensics and Disinformation Detection (AI4MFDD) at Winter Conference on Applications of Computer Vision (WACV-W) 2025

2024

  1. EURASIP JIS 2024 Journal

    Reversible Anonymization for Privacy of Facial Biometrics Via Cyclic Learning

    C. C. Chang, S. Xu, H. H. Nguyen, and I. Echizen

    EURASIP Journal on Information Security, no. 1, art. 24 (2024)

  2. IEEE Access 2024 Journal

    eKYC-DF: A Large-Scale Deepfake Dataset for Developing and Evaluating eKYC Systems

    H. Felouat, H. H. Nguyen, T.-N. Le, J. Yamagishi, and I. Echizen

    IEEE Access, vol. 12, pp. 30876–30892 (2024)

    Paper
  3. IEEE Access 2024 Journal

    Analysis of Fine-Grained Counting Methods for Masked Face Counting: A Comparative Study

    K.-D. Nguyen, H. H. Nguyen, T.-N. Le, J. Yamagishi, and I. Echizen

    IEEE Access, vol. 12, pp. 27426–27443 (2024)

    Paper
  4. ACCV-W 2024 Workshop

    Mitigating Backdoor Attacks using Activation-Guided Model Editing

    F. Hsieh, H. H. Nguyen, A. P. MaungMaung, D. Usynin, and I. Echizen

    Large Vision – Language Model Learning and Applications Workshop, Asian Conference on Computer Vision (ACCV-W) 2024, pp. 302–318

  5. APSIPA ASC 2024

    Transfer-Based Adversarial Attack Against Multimodal Models by Exploiting Perturbed Attention Region

    R. Disabato, A. P. MaungMaung, H. H. Nguyen, I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2024, pp. 1–6

  6. IJCB 2024

    Exploring Self-Supervised Vision Transformers for Deepfake Detection: A Comparative Analysis

    H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Joint Conference on Biometrics (IJCB) 2024, pp. 1–10

  7. IJCB 2024

    Generalized Deepfakes Detection with Reconstructed-Blended Images and Multi-scale Feature Reconstruction Network

    Y. Sun, H. H. Nguyen, C.-S. Lu, Z. Zhang, L. Sun, and I. Echizen

    International Joint Conference on Biometrics (IJCB) 2024, pp. 1–11

  8. IJCB 2024

    Analysis of Backdoor Attacks on Deepfake Detection

    Y. Qiu, H. H. Nguyen, Q. Liao, C.-S. Lu, and I. Echizen

    International Joint Conference on Biometrics (IJCB) 2024, pp. 1–9

  9. BIOSIG 2024

    Exploring Active Data Selection Strategies for Continuous Training in Deepfake Detection

    Y. Furuhashi, X. Wang, J. Yamagishi, H. H. Nguyen, and I. Echizen

    International Conference of the Biometrics Special Interest Group (BIOSIG) 2024, pp. 1–5

  10. ICIP 2024

    Fine-Tuning Text-To-Image Diffusion Models for Class-Wise Spurious Feature Generation

    A. P. MaungMaung, H. H. Nguyen, H. Kiya, and I. Echizen

    International Conference on Image Processing (ICIP) 2024, pp. 3910–3916

    arXiv
  11. ICIP 2024

    Defending Against Physical Adversarial Patch Attacks on Infrared Human Detection

    L. Strack, F. Waseda, H. H. Nguyen, Y. Zheng, and I. Echizen

    International Conference on Image Processing (ICIP) 2024, pp. 3896–3902

    arXiv
  12. ICASSP 2024

    Cross-Attention Watermarking of Large Language Models

    F. B. Baldassini, H. H. Nguyen, C. C. Chang, and I. Echizen

    International Conference on Acoustics, Speech and Signal Processing (ICASSP) 2024, pp. 4625–4629

    Code
  13. AINA 2024

    Leveraging Chat-Based Large Vision-Language Models for Multimodal Out-of-Context Detection

    F. Shalabi, H. Felouat, H. H. Nguyen, and I. Echizen

    International Conference on Advanced Information Networking and Applications (AINA) 2024, pp. 86–98

  14. AINA 2024

    Enhancing Robustness of LLM-Synthetic Text Detectors for Academic Writing: A Comprehensive Analysis

    Z. Dou, Y. Guo, H. H. Nguyen, C. C. Chang, and I. Echizen

    International Conference on Advanced Information Networking and Applications (AINA) 2024, pp. 266–277

    arXiv

2023

  1. IEEE Access 2023 Journal

    Cyber Vaccine for Deepfake Immunity

    C. C. Chang, H. H. Nguyen, J. Yamagishi, and I. Echizen.

    IEEE Access, vol. 11, pp. 105027–105039 (2023)

    Paper
  2. IEEE OJSP 2023 Journal

    Purifying Adversarial Images Using Adversarial Autoencoder with Conditional Normalizing Flows

    Y. Ji, T.-N. Le, H. H. Nguyen, and I. Echizen

    IEEE Open Journal of Signal Processing, pp. 267–274 (2023)

    Paper
  3. IWDW 2023

    From Deconstruction to Reconstruction: A Plug-in Module for Diffusion-Based Purification of Adversarial Examples

    E. Bao, C. C. Chang, H. H. Nguyen, and I. Echizen

    International Workshops on Digital-forensics and Watermarking (IWDW) 2023, pp. 48–62

  4. APSEC 2023

    Quality Assurance of A GPT-based Sentiment Analysis System: Adversarial Review Data Generation and Detection

    T. Ouyang, H.-Q. Nguyen-Son, H. H. Nguyen*, I. Echizen, Y. Seo

    Asia-Pacific Software Engineering Conference (APSEC) 2023, pp. 450–457

  5. APSIPA ASC 2023

    Image-Text Out-Of-Context Detection Using Synthetic Multimodal Misinformation

    F. Shalabi*, H. H. Nguyen*, H. Felouat, C. C. Chang, and I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2023, pp. 605–612

  6. MM 2023

    Physics-Based Adversarial Attack on Near-Infrared Human Detector for Nighttime Surveillance Camera Systems

    M. Niu, Z. Li, Y. Zhan, H. H. Nguyen, I. Echizen, and Y. Zheng

    ACM Multimedia (MM) 2023, pp. 8799–8807

    DOI Code
  7. IJCB 2023

    How Close are Other Computer Vision Tasks to Deepfake Detection?

    H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Joint Conference on Biometrics (IJCB) 2023, pp. 229–238

    arXiv
  8. WACV 2023

    Analysis of Master Vein Attacks on Finger Vein Recognition Systems

    H. H. Nguyen, T.-N. Le, J. Yamagishi, and I. Echizen

    Winter Conference on Applications of Computer Vision (WACV) 2023, pp. 1900–1908

    arXiv
  9. WACV 2023

    Closer Look at the Transferability of Adversarial Examples: How They Fool Different Models Differently

    F. Waseda, S. Nishikawa, T.-N. Le, H. H. Nguyen, and I. Echizen

    Winter Conference on Applications of Computer Vision (WACV) 2023, pp. 1360–1368

    arXiv
  10. WACV-W 2023 Workshop

    Face Forgery Detection Based on Facial Region Displacement Trajectory Series

    Y. Sun, Z. Zhang, I. Echizen, H. H. Nguyen, C. Qiu, and S. Lu

    Winter Conference on Applications of Computer Vision Workshop (WACV-W) 2023, pp. 633–642

2022

  1. IEEE T-BIOM 2022 Journal

    Master Face Attacks on Face Recognition Systems

    H. H. Nguyen, S. Marcel, J. Yamagishi, and I. Echizen

    IEEE Transactions on Biometrics, Behavior, and Identity Science, pp. 398–411 (2022)

    Paper arXiv
  2. IEICE Trans. Inf. & Syst. 2022 Journal Excellent paper award

    Effects of Image Processing Operations on Adversarial Noise and Their Use in Detecting and Correcting Adversarial Images

    H. H. Nguyen, M. Kuribayashi, J. Yamagishi, and I. Echizen

    IEICE Transactions on Information and Systems, pp. 65–77 (2022)

  3. SN Comput. Sci. 2022 Journal

    Potential Attacks of DeepFake on eKYC Systems and Remedy for eKYC with DeepFake Detection Using Two-Stream Network of Facial Appearance and Motion Features

    T.-L. Do, M.-K. Tran, H. H. Nguyen, M.-T. Tran

    SN Computer Science, vol. 3, no. 6, art. 464 (2022)

  4. WIFS 2022

    Rethinking Adversarial Examples for Location Privacy Protection

    T.-N. Le*, T. Gu*, H. H. Nguyen*, and I. Echizen

    International Workshop on Information Forensics and Security (WIFS) 2022, pp. 1–6

    arXiv
  5. Book chapter Book chapter

    Capsule-Forensics Networks for Deepfake Detection

    H. H. Nguyen, J. Yamagishi, and I. Echizen

    Handbook of Digital Face Manipulation and Detection – From DeepFakes to Morphing Attacks, pp. 275–301 (2022)

    Book Code
  6. Book chapter Book chapter

    Robust Deepfake on Unrestricted Media: Generation and Detection

    T.-N. Le, H. H. Nguyen, J. Yamagishi, and I. Echizen

    Frontiers in Fake Media Generation and Detection, pp. 81–107 (2022)

    Book
  7. ITE Journal 2022 Book chapter Telecom Interdisciplinary Research Award

    インフォデミック時代のAIとサイバーセキュリティ

    越前功, 馬場口登, 笹原和俊, Trung-Nghia Le, Huy H. Nguyen, 山岸順一, Canasai Kruengkrai, 中島悠太, 李良知, 王博文, 宮崎邦洋, 小林正啓

    映像情報メディア学会誌76(4), pp. 10–15 (2022)

2021

  1. IEICE Trans. Inf. & Syst. 2021 Journal IEICE-ISS Excellent Paper Award

    Preventing Fake Information Generation Against Media Clone Attacks

    N. Babaguchi, I. Echizen, J. Yamagishi, N. Nitta, Y. Nakashima, K. Nakamura, K. Kono, F. Fang, S. Myojin, Z. Kuang, H. H. Nguyen, N. T. Tieu

    IEICE Transactions on Information and Systems, pp. 2–11 (2021)

  2. IEICE Trans. Inf. & Syst. 2021 Journal IEICE-ISS Excellent Paper Award

    Generation and detection of Media Clones

    I. Echizen, N. Babaguchi, J. Yamagishi, N. Nitta, Y. Nakashima, K. Nakamura, K. Kono, F. Fang, S. Myojin, Z. Kuang, H. H. Nguyen, N. T. Tieu

    IEICE Transactions on Information and Systems, pp. 12–23 (2021)

  3. ICCV 2021

    OpenForensics: Large-Scale Challenging Dataset for Multi-Face Forgery Detection and Segmentation In-The-Wild

    T.-N. Le, H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Conference on Computer Vision (ICCV) 2021, pp. 10117–10127

  4. CVPR-W 2021 Workshop

    Fashion-Guided Adversarial Attack on Person Segmentation

    M. Treu*, T.-N. Le*, H. H. Nguyen*, J. Yamagishi, and I. Echizen

    Conference on Computer Vision and Pattern Recognition Workshop (CVPR-W) 2021, pp. 943–952

    PDF
  5. COVID-19 Workshop 2021 Workshop

    Effectiveness of Detection-based and Regression-based Approaches for Estimating Mask-Wearing Ratio

    K.-D. Nguyen, T.-N. Le, H. H. Nguyen, J. Yamagishi, and I. Echizen

    Workshop on Face and Gesture Analysis for COVID-19 2021, pp. 1–8

  6. APSIPA ASC 2021

    Feature Extraction Based on Denoising AutoEncoder for Classification of Adversarial Examples

    Y. Yamasaki, M. Kuribayashi, N. Funabiki, H. H. Nguyen, I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2021, pp. 1815–1820

  7. FDSE 2021

    Potential Threat of Face Swapping to eKYC with Face Registration and Augmented Solution with DeepFake Detection

    T.-L. Do, M.-K. Tran, H. H. Nguyen, M.-T. Tran

    International Conference on Future Data and Security Engineering (FDSE) 2021, pp. 293–307

  8. IEICE Tech. Rep. 2021 Other 2020年度 第6回EMM研究会 優秀学生発表賞

    複数のフィルタ強度によるCNN画像分類器の応答特性を用いた敵対的事例の検出法

    東亮憲, 栗林稔, 舩曵信生, Nguyen Hong Huy, 越前功

    信学技報, EMM 3月 2021

2020

  1. APSIPA ASC 2020

    A Method for Identifying Origin of Digital Images Using a Convolution Neural Network

    R. Huang, F. Fang, H. H. Nguyen, J. Yamagishi, and I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2020, pp. 1293–1299

  2. APSIPA ASC 2020

    Detection of Adversarial Examples Based on Sensitivities to Noise Removal Filter

    A. Higashi, M. Kuribayashi, N. Funabiki, H. H. Nguyen, and I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2020, pp. 1386–1391

  3. EMNLP-W 2020 Workshop

    Viable Threat on News Reading: Generating Biased News Using Natural Language Models

    S. Gupta, H. H. Nguyen, J. Yamagishi, and I. Echizen

    NLP+CSS workshop at Empirical Methods in Natural Language Processing (EMNLP-W) 2020, pp. 55–65

  4. ICIP 2020

    Security of Facial Forensics Models Against Adversarial Attacks

    R. Huang, F. Fang, H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Conference on Image Processing (ICIP) 2020, pp. 2236–2240

  5. AINA 2020

    Generating Sentiment-Preserving Fake Online Reviews Using Neural Language Models and Their Human- and Machine-based Detection

    D. I. Adelani, H. Mai, F. Fang, H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Conference on Advanced Information Networking and Applications (AINA) 2020, pp. 1341–1354

  6. IJCB 2020

    Generating Master Faces for Use in Performing Wolf Attacks on Face Recognition Systems

    H. H. Nguyen, J. Yamagishi, I. Echizen, and S. Marcel

    International Joint Conference on Biometrics (IJCB) 2020, pp. 1–10

    Paper arXiv

2019

  1. JISA 2019 Journal

    Spatio-temporal generative adversarial network for gait anonymization

    N.-D. Tieu, H. H. Nguyen, H.-Q. Nguyen-Son, J. Yamagishi, and I. Echizen

    Journal of Information Security and Applications, pp. 307–319 (2019)

  2. BTAS 2019 BTAS/IJCB 5-Year Highest Impact Award

    Multi-task Learning for Detecting and Segmenting Manipulated Facial Images and Videos

    H. H. Nguyen, F. Fang, J. Yamagishi, and I. Echizen

    International Conference on Biometrics: Theory, Applications and Systems (BTAS) 2019, pp. 1–8

  3. ICASSP 2019

    Capsule-Forensics: Using Capsule Networks to Detect Forged Images and Videos

    H. H. Nguyen, J. Yamagishi, and I. Echizen

    International Conference on Acoustics, Speech, and Signal Processing (ICASSP) 2019, pp. 2307–2311

  4. APSIPA ASC 2019

    An RGB Gait Anonymization Model for Low Quality Silhouette

    N.-D. Tieu, H. H. Nguyen, F. Fang, J. Yamagishi, and I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2019, pp. 1686–1693

  5. CSS 2019 PWS2019学生論文賞受賞

    JPEG圧縮による画像分類器の識別結果の変動解析に基づく敵対的事例の検知法

    東亮憲, 栗林稔, 舩曵信生, Nguyen Hong Huy, 越前功

    コンピュータセキュリティシンポジウム (CSS2019) 2019

2018

  1. PACLIC 2018

    Identifying Computer-Translated Paragraphs using Coherence Features

    H.-Q. Nguyen-Son, H. H. Nguyen, N.-D. Tieu, J. Yamagishi, and I. Echizen

    Pacific Asia Conference on Language, Information and Computation (PACLIC) 2018, pp. 486–494

  2. ARES 2018

    Modular Convolutional Neural Network for Discriminating between Computer-Generated Images and Photographic Images

    H. H. Nguyen, T. N.-D. Tieu, H.-Q. Nguyen-Son, V. Nozick, J. Yamagishi, and I. Echizen

    International Conference on Availability, Reliability and Security (ARES) 2018, pp. 1–10

  3. ICME 2018

    Transformation on Computer-Generated Facial Image to Avoid Detection by Spoofing Detector

    H. H. Nguyen, T. N.-D. Tieu, H.-Q. Nguyen-Son, J. Yamagishi, and I. Echizen

    International Conference on Multimedia and Expo (ICME) 2018, pp. 1–6

2017

  1. WIFS 2017 Best Paper Award

    An Approach for Gait Anonymization using Deep Learning

    T. N.-D. Tieu, H. H. Nguyen, H. Nguyen-Son, J. Yamagishi, and I. Echizen

    International Workshop on Information Forensics and Security (WIFS) 2017, pp. 1–6

  2. APSIPA ASC 2017

    Identifying computer-generated text using statistical analysis

    H.-Q. Nguyen-Son, N.-D. Tieu, H. H. Nguyen, J. Yamagishi, and I. Echizen

    Asia-Pacific Signal and Information Processing Association Annual Summit and Conference (APSIPA ASC) 2017, pp. 1504–1511

2015

  1. IWDW 2015

    Discriminating between computer-generated facial images and natural ones using smoothness property and local entropy

    H. H. Nguyen, H. Nguyen-Son, and I. Echizen

    International Workshop on Digital Watermarking (IWDW) 2015, pp. 39–50

  2. ICETE 2015

    A Generalized Authentication Scheme for Mobile Phones Using Gait Signals

    H. Nguyen, H. H. Nguyen, T. Hoang, D. Choi, and T. D. Nguyen

    International Conference on E-Business and Telecommunications 2015, pp. 386–407

* Equal contribution or corresponding author, as marked in the paper.