I am a professor in the Department of Electrical Engineering and Computer Science at the University of Kansas. I lead the KU Privacy and Security (KUPS) Lab, which is part of the High Assurance and Secure System Center at the Institute for Information Sciences. I'm also the director of the Midwest VICEROY Institute (MVI), and the point-of-contact of the CAE-CD and CAE-R Centers at the University of Kansas.
[short bio]

Department of Electrical Engineering and Computer Science

2018 Eaton Hall, 1520 West 15th Street, Lawrence, KS 66045

Institute for Information Sciences

235 Nichols Hall, 2335 Irving Hill Rd, Lawrence, KS 66045

My research spans a broad spectrum of topics related to the security and privacy of computers, networks, and information systems, including Internet and Web security, smart grid and IoT security, online social network analysis, etc. Currently, my research interests are focused in two main areas:

• AI security and privacy: adversarial ML attacks and defenses, privacy-preserving federated learning, robustnedss and fairnessof AI systems;
• Cyber-physical system security and privacy, and cross-layer attacks

More information about my research: my publications, Google Scholar, and DBLP

• General Co-Chair: SecureComm 2022
• Organizing Committee Member: CCS 2024, CCS 2020, IEEE ISI 2018, DBSec 2017
• Steering Committee Chair/Member of the Central Area Networking and Security Workshop
• Area Chair: The Web Conference 2024
• TPC Member: IEEE/IFIP DSN 2022-2024, IEEE ICDCS 2022-2024, ACSAC 2019-2023, IEEE TrustCom 2019-2022, IEEE MASS 2018-2021

• [PETS 2025] Zhaohui Wang, Bo Luo, and Fengjun Li. PrivacyGuard: Exploring Hidden Cross-App Privacy Leakage Threats In IoT Apps. In the 25th Privacy Enhancing Technologies Symposium (PETS), Washington D.C., USA, July 2025. (accepted)
• [CCS 2024] Ye Wang, Zeyan Liu, Bo Luo, Rongqing Hui, and Fengjun Li. The Invisible Polyjuice Potion: an Effective Physical Adversarial Attack against Face Recognition. In ACM Conference on Computer and Communications Security (CCS), October 2024.
• [CCS 2024] Zeyan Liu, Zijun Yao, Fengjun Li, and Bo Luo. On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writing. In ACM Conference on Computer and Communications Security (CCS), October 2024.
• [ESORICS 2024] Yuying Li, Zeyan Liu, Junyi Zhao, Liangqin Ren, Fengjun Li, Jiebo Luo, and Bo Luo. The Adversarial AI-Art: Understanding, Generation, Detection, and Benchmarking. In European Symposium on Research in Computer Security (ESORICS), September 2024.
• [ESORICS 2024] Prashanthi Mallojula, Fengjun Li, Xiaojiang Du, and Bo Luo. Companion Apps or Backdoors? on the Security of Automotive Companion Apps. In European Symposium on Research in Computer Security (ESORICS), September 2024.
• [PETS 2024] Liangqin Ren, Zeyan Liu, Fengjun Li, Kaitai Liang, Zhu Li, and Bo Luo. PrivDNN: A Secure Multi-Party Computation Framework for Deep Learning using Partial DNN Encryption. In the 24th Privacy Enhancing Technologies Symposium (PETS), Bristol, UK, July 2024.
• [NDSS 2024] Aozhuo Sun, Jingqiang Lin, Wei Wang, Zeyan Liu, Bingyu Li, Shushang Wen, Qiongxiao Wang, Fengjun Li. Certificate Transparency Revisited: The Public Inspections on Third-party Monitors. Network and Distributed System Security (NDSS) Symposium, February 2024.
• [CCS 2022] Zeyan Liu, Fengjun Li, Zhu Li, and Bo Luo. LoneNeuron: a Highly-effective Feature-domain Neural Trojan using Invisible and Polymorphic Watermarks. In ACM SIGSAC Conference on Computer and Communications Security (CCS), Los Angeles, CA, USA, 2022.
• [ESORICS 2022] Zeyan Liu, Fengjun Li, Jingqiang Lin, Zhu Li, and Bo Luo. Hide and Seek: on the Stealthiness of Attacks against Deep Learning Systems. In European Symposium on Research in Computer Security (ESORICS), Copenhagen, Denmark, 2022.
• [ESORICS 2022] Javaria Ahmad, Fengjun Li, and Bo Luo. IoTPrivComp: A Measurement Study of Privacy Compliance in IoT Apps. In European Symposium on Research in Computer Security (ESORICS), Copenhagen, Denmark, 2022.
• [ICPR 2022] Krushi Patel, Andrews A. Bur, Fengjun Li, and Guanghui Wang. Aggregating global features into local vision Transformer. In the 26th International Conference on Pattern Recognition (ICPR), Montreal, Quebec, Canada, August 2022. (Best Student Paper Award)
• [ICSE 2022] Wenqiang Li, Jiameng Shi, Fengjun Li, Jingqiang Lin, Wei Wang, Le Guan, uAFL: Non-intrusive Feedback-driven Fuzzing for Microcontroller Firmware, in the 44th IEEE/ACM International Conference on Software Engineering (ICSE), May 21-29, 2022.
• [TON 2022] Bingyu Li, Jingqiang Lin, Fengjun Li, Qiongxiao Wang, Wei Wang, Qi Li, Guangshen Cheng, Jiwu Jing, and Congli Wang, The Invisible Side of Certificate Transparency: Exploring the Reliability of Monitors in the Wild, in IEEE/ACM Transactions on Networking, 30(2): 749-765, 2022.
• [ACSAC 2021] Sohaib Kiani, Sana Awan, Chao Lan, Fengjun Li, and Bo Luo. Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency. In the 2021 Annual Computer Security Applications Conference (ACSAC), 2021. (Distinguished Paper Award)
• [ESORICS 2021] Sana Awan, Bo Luo, and Fengjun Li. CONTRA: Defending against Poisoning Attacks in Federated Learning. In European Symposium on Research in Computer Security (ESORICS), 2021.
• [NDSS 2021] Wenqiang Li, Le Guan, Jingqiang Lin, Jiameng Shi, and Fengjun Li. From Library Portability to Para-rehosting: Natively Executing Microcontroller Software on Commodity Hardware. In the Network and Distributed System Security Symposium (NDSS) 2021.
• [ESORICS 2020] Abdulmalik Humayed, Fengjun Li, Jingqiang Lin, and Bo Luo. CANSentry: Securing CAN- Based Cyber-Physical Systems against Denial and Spoofing Attacks. In European Symposium on Research in Computer Security (ESORICS), 2020.
• [CCS 2019] Bingyu Li, Jingqiang Lin, Fengjun Li, Qiongxiao Wang, Qi Li, Jiwu Jin and Congli Wang. Certificate Transparency in the Wild: Exploring the Reliability of Monitor. In ACM Computer and Communications Security (CCS), London, UK, Nov 11-15, 2019.
• [PETS 2019] Qiaozhi Wang, Hao Xue, Fengjun Li, Dongwon Lee, and Bo Luo. #DontTweetThis: Scoring Private Information in Social Networks. In the 19th Privacy Enhancing Technologies Symposium (PETS), 2019.
• [JDIQ 2019] Hao Xue, Qiaozhi Wang, Bo Luo, Hyunjin Seo, and Fengjun Li, \Content-Aware Trust Prop- agation Towards Online Review Spam Detection," in ACM Journal of Data and Information Quality - Special Issue on Combating Digital Misinformation and Disinformation, Volume 11, Issue 3, July 2019.
• [ESORICS 2018] Lei Yang, Chris Seasholtz, Bo Luo, and Fengjun Li. Hide Your Hackable Smart Home From Remote Attacks: The Multipath Onion IoT Gateways. In European Symposium on Research in Computer Security (ESORICS), Barcelona, Spain, 2018.
• [IOTJ 2017] Abdulmalik Humayed, Jingqiang Lin, Fengjun Li, and Bo Luo. Cyber-Physical Systems Security -- A Survey. In IEEE Internet of Things Journal - Special Issue on Security and Privacy in Cyber-Physical Systems, Volume: 4 Issue: 6, 2017.
• [ACSAC 2016] Lei Yang, Humayed Abudulmalik, and Fengjun Li, A Multi-Cloud based Privacy-Preserving Data Publishing Scheme for the Internet of Things, in Annual Computer Security Applications Conference (ACSAC), Los Angeles, CA, December 2016.
• [SecureComm 2015] Lei Yang and Fengjun Li, Enhancing Traffic Analysis Resistance for Tor Hidden Services with Multipath Routing, in the 11th EAI International Conference on Security and Privacy in Communication Networks (SecureComm), Dallas, USA, October, 2015. (Best Paper Award)
• [TIFS 2013] Fengjun Li, Bo Luo, Peng Liu, Dongwon Lee, and Chao-Hsien Chu. Enforcing Secure and Privacy-Preserving Information Brokering in Distributed Information Sharing. In IEEE Transactions on Information Forensics & Security, vol 8, no 6, pp. 888-900, June 2013.
• [BMC Bioinformatics 2011] Fengjun Li, Xukai Zhou, Peng Liu, and Jake Y. Chen. New Threats to Health Data Privacy. In BMC Bioinformatics, 12(Suppl 12):S7, 2011.
• [SSDBM 2011] Fengjun Li, Yuxin Chen, Bo Luo, Dongwon Lee, and Peng Liu. Privacy Preserving Group Linkage. In the 23rd Scientific and Statistical Database Management Conference (SSDBM), Portland, OR, July 2011. (acceptance rate 12.1%)
• [INFOCOM 2010] Fengjun Li, Bo Luo, Peng Liu, and Chao-Hsien Chu, A Node-failure-resilient Anonymous Communication Protocol through Commutative Path Hopping, in Proceedings of the 29th IEEE Conference on Computer Communications (INFOCOM), San Diego, CA, March 2010.
• [CCS 2007] Fengjun Li, Bo Luo, Peng Liu, Dongwon Lee, Chao-Hsien Chu, Automaton Segmentation: A New Approach to Preserve Privacy in XML Information Brokering, in Proceedings of the 14th ACM Conference on Computer and Communication Security (CCS), Alexandria, VA, October 2007.