@article{zhang2026intent,
  title={{INTENT-AS-A-TOOL} Makes it Easy to Track Agentic Misalignment},
  author={Zhang, Yutong and Dong, Jianshuo and Xu, Peng and Wang, Long and Zhang, Jie and Zhang, Tianwei and Zhang, Xiaoping and Qiu, Han},
  journal={arXiv preprint arXiv:2608.27348},
  year={2026},
  url={https://arxiv.org/abs/2608.27348}
}

@article{dong2026agentic,
  title={Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States},
  author={Dong, Jianshuo and Liu, Yiming and Zhang, Maosen and Deng, Nan and Xu, Peng and Zhang, Xiaoping and Zhang, Tianwei and Zhang, Jie and Qiu, Han},
  journal={arXiv preprint arXiv:2608.02657},
  year={2026},
  url={https://arxiv.org/abs/2608.02657}
}

@inproceedings{dong2026safesearch,
  title={SafeSearch: Automated Red-Teaming of LLM-Based Search Agents},
  author={Dong, Jianshuo and Guo, Sheng and Wang, Hao and Chen, Xun and Liu, Zhuotao and Zhang, Tianwei and Xu, Ke and Huang, Minlie and Qiu, Han},
  booktitle={Proceedings of the 43rd International Conference on Machine Learning},
  month=jul,
  year={2026},
  address={Seoul, South Korea},
  url={https://icml.cc/virtual/2026/poster/65893}
}

@inproceedings{dong-etal-2026-revisiting,
  title={Revisiting the Reliability of Language Models in Instruction-Following},
  author={Dong, Jianshuo and Zhang, Yutong and Liu, Yan and Zhong, Zhenyu and Wei, Tao and Zhang, Chao and Qiu, Han},
  booktitle={Proceedings of the 64th Annual Meeting of the {A}ssociation for {C}omputational {L}inguistics (Volume 1: Long Papers)},
  month=jul,
  year={2026},
  address={San Diego, California, United States},
  publisher={Association for Computational Linguistics},
  url={https://aclanthology.org/2026.acl-long.354/},
  doi={10.18653/v1/2026.acl-long.354},
  pages={7784--7812}
}

@article{dong2026cognitive,
  title={Towards Understanding the Cognitive Habits of Large Reasoning Models},
  author={Dong, Jianshuo and Fu, Yujia and Hu, Chuanrui and Zhang, Chao and Qiu, Han},
  journal={Machine Intelligence Research},
  volume={23},
  number={4},
  pages={873--886},
  year={2026},
  doi={10.1007/s11633-026-1654-9}
}

@inproceedings{dong-etal-2025-ive,
  title = "``{I}{'}ve Decided to Leak'': Probing Internals Behind Prompt Leakage Intents",
  author = "Dong, Jianshuo and Zhang, Yutong and Liu, Yan and Zhong, Zhenyu and Wei, Tao and Xu, Ke and Huang, Minlie and Zhang, Chao and Qiu, Han",
  booktitle = "Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing",
  month = nov,
  year = "2025",
  address = "Suzhou, China",
  publisher = "Association for Computational Linguistics",
  url = "https://aclanthology.org/2025.emnlp-main.1082/",
  doi = "10.18653/v1/2025.emnlp-main.1082",
  pages = "21318--21348"
}

@article{dong2025cellular,
  title={Can Large Language Models Automate the Refinement of Cellular Network Specifications?},
  author={Dong, Jianshuo and Li, Yuanjie and Liu, Jun and Li, Hewu and Qiu, Han},
  journal={arXiv preprint arXiv:2507.04214},
  year={2025},
  url={https://arxiv.org/abs/2507.04214}
}

@inproceedings{dong2025engorgio,
  title={An Engorgio Prompt Makes Large Language Model Babble on},
  author={Jianshuo Dong and Ziyuan Zhang and Qingjie Zhang and Tianwei Zhang and Hao Wang and Hewu Li and Qi Li and Chao Zhang and Ke Xu and Han Qiu},
  booktitle={The Thirteenth International Conference on Learning Representations},
  year={2025},
  url={https://openreview.net/forum?id=m4eXBo0VNc}
}

@inproceedings{dong2023onebit,
  title={One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training},
  author={Dong, Jianshuo and Qiu, Han and Li, Yiming and Zhang, Tianwei and Li, Yuanjie and Lai, Zeqi and Zhang, Chao and Xia, Shu-Tao},
  booktitle={ICCV},
  year={2023}
}